last executing test programs: 1m31.138646113s ago: executing program 2 (id=6231): ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x44) (async) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01"], 0x1c}}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000001200)=0xe085, 0x4) (async) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) 1m31.107463863s ago: executing program 1 (id=6233): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000640)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) socket$kcm(0x1e, 0x4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x129, 0x0, 0x1, [@generic="5a5d82cf"]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0xfffffffb, r3}, 0x38) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0x1000, r3}, 0x38) preadv(r1, &(0x7f0000001ec0)=[{&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/120, 0x78}], 0x3, 0x0, 0x5) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m30.602859955s ago: executing program 2 (id=6237): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x6, &(0x7f0000000600)="66d73eb083f3ed177d30db02bdbd7da31f43d937851235e72cb36fe0956b11435d8cd38997654761ecb161a77ec49361a8f57a81e39662b0336e3a6f494ffaa6c88daf47f04569371679ad420b1e7df466760fc78062f7e7835acd2d2495f061dd5a103efa596c3da2aaf9ca62c1bc71e7d33b09417306503923d0d858a0988caf2ebc8f44f93d1bd7d0") ioctl(r1, 0x89e1, &(0x7f00000006c0)='lapb0') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000002c0)={0xfe1b, {{0xa, 0x4e20, 0x6, @loopback, 0xfffffffc}}}, 0x88) write$cgroup_int(r4, &(0x7f00000000c0)=0x1, 0x12) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x10) bind$inet(r6, &(0x7f00000005c0)={0x2, 0x4e22, @empty}, 0x67) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100007000000008000000000ff020000000000000000000000000001e00000020000000000000000000000004e2000000000000000000000020000006ac8a2f54633046eab8cf50ed18aea3f62826556ededafd9fe94f84ba75a3ecadeeed7b9bf06f8b6656dd04811baa9a4dc94215113fadb6cfd49239f36008f19453a16aa5d12183a08c1addaaf80d93c61853057c02b2e9f58dda49492eed0ab20d7f4abdc", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) 1m30.374093678s ago: executing program 2 (id=6238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a, 0x0, 0x2}, 0x28) close(0x3) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b70000000000000095000a0000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1m30.341525267s ago: executing program 4 (id=6241): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0xc) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) setsockopt(r0, 0x107, 0x1, &(0x7f0000000180)="110000000000060000071a80010061cc", 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 1m30.285303986s ago: executing program 3 (id=6242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="080005000e0000001400040074756e6c3000"/28], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x749}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x4b, 0x0, 0x6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050028bd7000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="08007d8004009785"], 0x24}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x8, 0x5, 0x6, 0xf, 0x6}) 1m30.186457453s ago: executing program 2 (id=6243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004881}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48880) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004881}, 0x24000840) (async) 1m30.186170225s ago: executing program 1 (id=6244): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @broadcast, 0x4e23, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000300)={{0x84, @dev={0xac, 0x14, 0x14, 0x37}, 0x4e23, 0x3, 'fo\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x5, 0xffffffff, 0x36}}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000380)="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") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r5, {0xe, 0x1}}}, 0x24}}, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000046000901feffffff00000000047c00000c000180"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40f2ffff0f004b0400000000feffffff7a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c0002800500170001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000880) 1m30.053564616s ago: executing program 2 (id=6246): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x4e20, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x7, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x3, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4080804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000009c0)={@cgroup, 0xffffffffffffffff, 0x32, 0x10}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet6(0xa, 0x2, 0x3a) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x60, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000a40)=0x6088, 0x4) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf255c00000008000300", @ANYRES32=r5], 0x24}}, 0x44) syz_emit_ethernet(0x3aa, &(0x7f0000000a80)={@random="dd75812e5168", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @udp={0x1, 0x6, "6921df", 0x374, 0x11, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x2b, 0x12, 0x1, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @private0, @loopback, @private2, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00']}, @routing={0x2b, 0xc, 0x2, 0xe6, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x3c, 0x10, 0x4, 0x8, 0x81, 0x0, 0x5, [@dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x17}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @loopback]}, @srh={0x88, 0xa, 0x4, 0x5, 0x45, 0x50, 0x7, [@remote, @remote, @private1, @loopback, @dev={0xfe, 0x80, '\x00', 0x28}]}, @routing={0x0, 0x4, 0x1, 0xd4, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x16, 0x6, 0x2, 0x1, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @srh={0x73, 0x6, 0x4, 0x3, 0x6, 0x0, 0x100, [@mcast2, @empty, @remote]}, @hopopts={0x73, 0xa, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x1, 0x6, [0x50497de4, 0x2, 0xfffffffffffffffe, 0x8, 0x401, 0x5]}}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x200}]}], {0x4e24, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "c37fbd2f83058c8b6589c1fd5e7fd1be4a5c12cfbfe8b8304640427128ba4014", "ec4411be288a056c4dd7e6a7e21443cf26441958cc94cfa41ef3694349e694b555ece4e783d15ccb3079752e680a228c", "d1c07d6012289c8bc66c9da186975facb9a518b238c7fe555c9ce1a1", {"4a97d3d5b921c34c53edf57bad3cdf83", "ad4b56b8a947a7c05230223ead4d1f45"}}}}}}}}, &(0x7f0000001640)={0x2, 0x3, [0x7f5, 0x674, 0x45d, 0x8e]}) 1m29.951145705s ago: executing program 3 (id=6247): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='vlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e1e, @remote}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x8, 0x3d, 0x0, 0x8, 0x6}, @const={0xe}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0x3, 0x1}, {0xa, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x6f, 0x66116c3e629493f4]}}, &(0x7f0000000200)=""/39, 0x7b, 0x27, 0x0, 0x10}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d00000000009548bcd3cf17cb94e2a9b41ed314b6ea98f78c1f5f8415dda821919cbfbce9af87199edce1b166f5f6763ad6184fb4bdbdfcdff2c563e04103e4ce71ee7fe8dde0d4fcdd918f5cecaa2163142cdc65f63a8f3b7f143b529dc7edc653f2505c91a7d35493a26bfdaf16bb2c55727a2852b10608feff2639f97e96eb6b3d12cabb000064d17a073a86234b808303ef30c040cf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x98) 1m29.884457289s ago: executing program 4 (id=6248): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1955, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000480)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x4076cbba9945d516, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x25d01, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6794d2a3ae9edd4c}, 0x4000020) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x10) 1m29.628627822s ago: executing program 3 (id=6249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'dvmrp1\x00', 0x200}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@generic={0x201, "c240b9088222a911870beee49ef27cb99f1dc2d2a758a289f7011685e34e5a9b304c1c89c744a80f9c3ecf613f1fcf33692658b4e8ca5486f12fffc5fca7eb2fad191ebd6ff548773c3273457783e13bbe3b78a15ac7fa63e4b9e82cd685160e433f8e5cabdfcef83fa269e403f8236e052b35dd0c110c2a8f1e6725c601b53bdcd7c4aa470d2bdd5ccfdb9bb45d338edb1db33d0b05020f6efc4735687d64d81a854813512f03b6bea644a0b7d64ee1ff055ffa78d74eba4c4516a8c2a7e3fc610de5a4c8c259037f632223b9d1f7ba88a5976b37174782a30bccadd2dd746232ab632eb73ec9b1a9"}}}}, 0xfb) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @local, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1}}}}}, 0x0) 1m29.562786219s ago: executing program 1 (id=6250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x44b, 0x20000000, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x18, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)=0x8) 1m29.410492227s ago: executing program 4 (id=6251): syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000003c0), 0x4000000000001f2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000020603000000000000000000070000000c000780080012400000ffff05002ff9391c0000050005000200004117019cd747446d00050004"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x44881) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000400)='hsr0\x00'}) 1m29.225344337s ago: executing program 1 (id=6253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a, 0x0, 0x2}, 0x28) close(0x3) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b70000000000000095000c0000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1m29.107672863s ago: executing program 0 (id=6255): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000180)='FROZEN\x00', 0x7) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80800) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f00000001c0)={'pimreg0\x00', 0x2, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) mkdirat$cgroup(r4, &(0x7f0000000100)='syz1\x00', 0x1ff) 1m29.102369746s ago: executing program 4 (id=6256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="e566fce1fdb0e719b2e09a2a73ba5bdeb50043ed0b3881e1164cb3f1ca9f19c37a19dc", @ANYRES16=r1, @ANYBLOB="270525bd7000fddbdf2501000000100002800c000180080001001700000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000814) vmsplice(r3, &(0x7f00000007c0)=[{&(0x7f0000000580)="eaec967a33b114887a16f2b7b4b9c297f14ec0e34106ee33d3c34ad4d32f52825715dfe1942ae6d4acbfbba082e130bde8703c0c40c0171efff822e945679927f65e14e2628e9bb8882b46712fa74a6224da6bd99fe53c82e718d93054a11d3795f03cfc1600db2800b918b98c133e7f", 0x70}, {&(0x7f0000000600)="7fc7321841dfde3475652b0eb324eac99ad933f66f7dafff9e94da1fb8afd9ed44262cddecfe2235f08b976fa6e696be1742781638f7f308ab5f9cb0d56b", 0x3e}, {&(0x7f0000000640)="a6ea3a0c5c91c67e50e127d36f28c8b60a8477cfaa086870876382b2d8", 0x1d}, {&(0x7f0000000680)="1e213c5909833dddae89", 0xa}, {&(0x7f00000006c0)="4cc1aa5a589727b6cd8b78b7dd571f160c580c0a5f80b770d5099a7e9600b0b912493a6bfbe270e54ffc14c58f71fdabb611a1fa454b5cf7848164d649a4b6b0ca4d51b58b49", 0x46}, {&(0x7f0000000740)="dfcf1cbf3cd0bcf14ba2bd54121ded5ef41e1ef390ded2d301bf987d3d2c9520e09080e1c8bf8e3416672569d9a77b8706635a9718da9be2168a2bdee1596feb15097ebe19fad466fef44c6a022a57644b7874d6783c13c6e48d2c126e5c8bd323e94ae145f8ba30f6798a0a38f1a22349e93a69e273a7fa70a7a036c574", 0x7e}], 0x6, 0x2) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000040)={&(0x7f0000000080)={0x2d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24004880}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@delchain={0x3c, 0x65, 0x10, 0x70bd2d, 0xcfda, {0x0, 0x0, 0x0, r8, {0x4, 0xfff2}, {0xa, 0xfff1}, {0xc, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x14, 0xd8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000a40)={@multicast1, @dev, 0x0}, &(0x7f0000000a80)=0xc) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r12, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) getpeername$packet(r5, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000d80)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000dc0)={'vxcan1\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000e00)={'bridge0\x00', 0x0}) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c000fb79a23001200"/20, @ANYRES32=r16, @ANYBLOB="8000b200"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001040)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000001100)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="000225bd7000fddbdf25190000002c0001801400020076657468305f746f5f687372000000001400020076657468305f766c616e000000000000240001800800030001000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1c0001800800030003000000080003000000000008000100", @ANYRES32=r9, @ANYBLOB="1800018014000200636169663000000000000000000000005800018008000100", @ANYBLOB="3d909f12b24113fe90bf3d3a1fd56e430e5b8ecfe6faf4f8a291dcd38a9253b72a16201bd451491e90d64e0eb489dd9481c26455fb3ecb48a0806b927431a4affbd0f1a33b008f43be1aadee6108d0ef9aba40c01417d6e75333cde7f5739616a9a553f22c51da98a90b94d7dd3ddbf6c299f110f7eed75925bab5ca14dc3ed39e", @ANYBLOB="080043000000000008000100", @ANYRES32=0x0, @ANYRES16, @ANYRES32=r13, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=r14, @ANYBLOB="140002000000000000000000000000000000000008000300020000000c00018008000100", @ANYRES32=r16, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000002000000800000000000005000d00230000000800020001000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x48011}, 0x0) 1m28.982545682s ago: executing program 3 (id=6257): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001cc0)={0x0}) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000600)={r5, 0x4}) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$XFS_IOC_FSINUMBERS(r4, 0xc0205867, &(0x7f0000001c80)={&(0x7f0000001600)=0xf0d3, 0x3ff, &(0x7f0000001640)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001c40)}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) (async, rerun: 64) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x7df08000) (rerun: 64) 1m28.981995897s ago: executing program 0 (id=6258): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="074276dcbab2f8bfcc63bbe613121e61166d140ee803db361f1191780779f0c0c5f2abe65020c6483e47d1f0e1bbcb4faffb4adf71a1cdddf0092fb473d2cc352c90615d0e9993292c6f7b33fcdf96e85de55411791d49c9fadff29fc2e2877ed97d0c53ab30e5b17ed180fd46cefe4f2fdcfddab3750ed6dd752bd3320f422949c344fee4ebb7166c838f56b7acaa14fed4621fde2a81ea6212eb923b9b906832a9c5ad020d8c55757f35b2b242b5b6bc9d37b72ff87a6b0b1801ab3809bb8867", 0xc1}], 0x1}, 0x8891) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f00000003c0)=""/4127, &(0x7f0000001400)=0x101f) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x800000}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000280)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x37, 0x0, 0x0, @binary="1b"}]}, 0x28}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x109, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) 1m28.981691555s ago: executing program 1 (id=6259): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="fb6bba8839", 0x5}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1}, 0x40fd) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000001500)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYBLOB="1400000010000100000000000000c51404887cb2ae3800001100017000000000200000000000000ae8e015a64ed9d441e2649efe6b545630ac1fca180a6df0616f4c51997d4e8c178b2d3064c96cc4a9b06205e97169866e8c4147"], 0x28}}, 0x0) sendto$inet6(r5, &(0x7f0000001600), 0x3000, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000ac0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r3) sendmmsg$sock(r2, &(0x7f0000001000)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @private=0xa010102, 0x3}, 0x80, &(0x7f0000000940)=[{&(0x7f00000002c0)="8e00d44a97e53ff6903a621cca52bbc822fbbd9419a7eac7ac256c52186d9fecc7a47c52e6a7facdd01c22294ffa8817a0852ce57190971fd92fc604f228233776cda9a9427ff681d0562475087ceb4e8485e4715457171f5b5f0245ab3895e7399a9b26424b01b0327dcc55976a8f838a22ed245dd03736581adb25c20697a542e0a250586e13c50dc73b15cecc09f6a856a28bbec71c1782da5cc0343a80bd409d917409abf1f4e3e10852f9c946bdaaac6e7a0b37c0893476c13f7a804c49b31d3eaddfd5edd95f", 0xc9}, {&(0x7f0000000440)="5c0a598981eba7c48b94476897bd76a53259dcca5457a20f5fa99a78a9da28b84e2c9279c8ab27df7c752657f9985cb59c5f4bd509538356b80ae7b3273368636b80aedb84ef91ef4f114aa865576afcad2d050cd2cb83a1a6cee1b03e68e7fa1ba7", 0x62}, {&(0x7f00000004c0)="b9cc1a676bd670ed97b36b2b37d177ae8ea7aec533b6850d6da27dad9a311b0d56eea018792d71815ce074ff0a673e821837fe9dba40c5da7748a231ffa4e33390eb3ea7558da3dff5737f622259bbff8cb73cb9c353609463e851fd71d55e5984a6182fb93b1c5e1abeb795155caf2ad21633304ce25d208e6933ccf4c01b07e803f9df783304d91d4e15dd89e71f56eb553241a8059e0266bb73", 0x9b}, {&(0x7f0000000580)="8fc3d393b966e16874cbbbd83149ed5fc52e7f75eb3705e363947ea157f1fe5084b7bb963e3d1957fd5fb9d520c48a4db55d2a925b3032bbf1cecc4599e53d49dbf2109cc6d5159eec24e739166d87d873c2ed8bfad865051682c9df9e313ef87ba5a5c9b621c17862b9c953e3eac0a74704f8d602061fb2d58d543aae584f", 0x7f}, {&(0x7f0000000600)="851b4a51d39e2364153610654563bf1be1a086855870beace379aac7bad28a3a3fad51a68782edea46c9610fd0eb6c87b0e2d2e5a2225ec0021fc27aea39fa402c7228cd51e22d905b67da7920a94c2b022de998253b0b728290c7338064e1350e446b8b476b3ebc22d3146c62dcf9b5a30f4644e1286581a672e67f6d0c71424410b20379de5db8de8b7d7a4089c2706524eb2879a6753c06d0a6fe53e4071bd10b34b2531d663df13ed59171bb91224930a0e92e0e3adf670cceea0b48f762cca59d92f0bbf068900cc01a3186fcf930bd7b9cc3effd1ee2499620c611595f69b1178f20cd9cd3f96f11f70e08", 0xee}, {&(0x7f0000000700)="b5295fbc39213ce282a1107c3a6ff22cd752782c77ac6eea0ad70da425519b72dcd3553986c657cc79a1901421e7afacd1f097d000d51517e026d8ccc7a555bee054208738c056", 0x47}, {&(0x7f0000000780)="083061862554ca4a3dbb1210f5736d4afa4b62e888e8da375c83d7f09a32d91574ab3bb6a21aa34562c596bc6852f790d19bbee6fa6d0de125cc0d46b505c4051410450f8aa1e1b79bd284085bf525d408d8290cfef980c97657d973c0a02f88ef4f9fe346167d53a563960590fbbd65bc5b030eda32043b8095b03df4a7250bc9528dc27a26420f181c32e8582e7cea58d12a9fe3b7ffe646988fbe572304b4a499c149d08cea235d0438bab9f61493847f8c40d9d454e81c7283621b7551600f4892c0076985f243b7ba98db1202462c5d32979a84870885341e4678b483ef1457801861", 0xe5}, {&(0x7f0000000880)="e9f325abad90e2e6296887e3d53ba7aa559de6839ff4b51164d0476c4a1f74021598e9f18aa9b62ba6af77657efc57d16af091a0653021c69a4294516ea3332c0afba73b05d1433f5bd76b579843a0289ed28342a0e1fdbe4aa425f926a7beb469a7b9f78c7f66d3d6ff7ccdbf6d74c65abd31450a7bb79fbf42d26a3870214e1b588469cf287aa9a9989ccbe573001578e06e088721c2f0e6213c381d1e9e9083ecd36d5fc8bb916da64c4266896c87f041", 0xb2}], 0x8}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)="64436ce3f36a025f25f6479ce2a17ef52d5b31aff477129d047a74c0899d12e66887a711e408073b39d9c053594ae3d2cad9b50938096e2052f29a00e8e0ed52755594643f221af9412586d685749d219b5479481eb4d575", 0x58}, {&(0x7f0000000a40)="8df72702ad3ac2e64c875236ca2239ba7c0e05ac1f6c1d1ab30048d4be4eba26d40c4bc6a7e01f6a92564ed0fee19cff8a6f082f6bbf9330c44a77886591c1fe077e73d3", 0x44}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="3438f99ea899598007d58b11497bb706fbde3ca1680fcace656f043886a2218ab7b2816cce26b878c5b2eb222b5a5213a87dd1f2481e9ca83eef55e54f3fe589b863db0e9dd75b7fb1938ba50737a52b00c35d9032887224ced0a1b2b6d6e447410759754adeaab39f1d", 0x6a}, {&(0x7f0000000b80)="426664bde0593999b7e8cc6b90ce9410a1482c481d7534090b707def5a6dea7662da1620899cec76ce67786414355f8d53db4b47228b533a4ac87cd339bf7c14384b632669b388ff7caada3a1937e2e52406334211daad92aa3ba28aab82397a9bbba1706ea94e84552fcd6f15f4b12c25", 0x71}, {&(0x7f0000000c00)="8b8b79e79638d7537724d978baef1a5fd4041c2715b30e5f1c86ebd8f469fdfc607c8b3d6f8fea659c3cda5f9556ab1489d5df21478e0e916ca6d37d949a2c0911772593f2b980f90b1f7c9e059e795c22a2120d3357da3e60f47f7399fe853fb278792e4ef0dfe799c7c03ce78285b256355f513db8593efb38b19e2dde64df696b1688bf08d9f8a5cf1e807643590d9bc58aba555961535f60a7eba9b387b3d938dea368e0637614296a5ff6144842c0fde43c902c326ed67baa22948078a6a4756f59d6962309d2ba82a2f3dd47d237630e08c815dc792b9e03e9f82cb666868ea9d09c5f4b582f46921494197d46e016", 0xf2}], 0x6, &(0x7f0000000d80)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9b62}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}}, {{&(0x7f0000000e00)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e80)="da6520131ed272386dcfcb66b6ed12d7fec1ac1ca8e2dfac0f999e5594bbb0d8c4ed3194e200c75f314c67ff0447a1eb3fe6305ced495a043e1297a25f09a92087b038e4750da4443a7736cd63b33a1586db4051b6beabf5ddf8abbdc02fc90d812c5634da431b0ad426528d6d49fcdd56c0a200fb0b8f0794b172cd1f143e818b023ebc5b0584cc81fd3f101e52cbf978a94480cdac1dcf9bbb9810ddc6fa7b83e1c8bf813c0334a7f8ccfb64f3ab857058873b1e4f2cac", 0xb8}], 0x1, &(0x7f0000000f80)=[@txtime={{0x18, 0x1, 0x3d, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x60}}], 0x3, 0x4c804) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) 1m28.836595577s ago: executing program 2 (id=6260): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000000000003"], 0x0, 0x41}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000b80)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10, 0xa}, {0x0, 0xfff3}, {0xe, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048098}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000580)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000005c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000006c0)={0x41424344, 0x41424344}, 0xfffffff7, 0x177) syz_extract_tcp_res$synack(&(0x7f0000000700)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000740)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1b71, &(0x7f0000000d40)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[{0x1}, {0x9, 0x0, 0x1}, {0x6}], @ipv6=@esp={0x5, 0x6, "c3ae2e", 0x1b2f, 0x32, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, {[@fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x9, 0x65}, @hopopts={0x0, 0x10, '\x00', [@ra={0x5, 0x2, 0x10}, @ra={0x5, 0x2, 0x1}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0xe, 0x8, [0xaa, 0x7fffffff, 0x9]}}, @ra={0x5, 0x2, 0x6e65}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x48, {0x1, 0x10, 0xd7, 0x101, [0x6, 0xaf3c, 0x9, 0xd, 0xc, 0xf, 0x7fffffff, 0x7]}}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}]}], {0x4d6, 0x8, @cc={0x1, 0x0, 0x5, 0x4, 0x401, 0x18, 0x54, [@ipv6=@udp={0x7, 0x6, "9aa646", 0x13c, 0x11, 0xff, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[@routing={0x3b, 0x14, 0x2, 0x1, 0x0, [@mcast1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, @empty, @private1, @private0={0xfc, 0x0, '\x00', 0x1}]}], {0x4e21, 0x4e24, 0x94, 0x0, @gue={{0x2, 0x0, 0x2, 0x3}, "f4fe4199e1e082f0fb17bc107a62e53f70a929f5d337f9269f011f32c86238a2c69fb80456d061dbfad594a18782c2ed87e0822403af7011f0a1b2c2fdf26613b4cb5870e7334726a53b68d356d40993b6a0a0b361a8009108d97c282ab7226bad40e677c874b3f382f371b9ac0c5de8ea48eccd3cbb33db5761d1d8c9ba4dbff7c230b7"}}}}, @ipv6=@icmpv6={0x3, 0x6, 'sK\'', 0x36c, 0x3a, 0xff, @remote, @private2, {[@dstopts={0x6, 0x21, '\x00', [@generic={0xfb, 0xef, "d8730d2135f552bb716d65545e6a712bcf7d5b287e8001b4615e880fbe31fd6018c5f436d46594b4c160d09bb332740188611eec8dd1824cd7eb6db8a90ebbd2de530156459d27ac7fe056cf7c16478a71890ae3d2fd6749152ef7c0ab816e3b150360bda13a410acda3a7e7b53ce33054a34c6c10af6fd230b63cd45c35d446719e6f4232065cf8b81c085268e1b631f3c4237ffbb8e02c184e159537a9914f5bbe3fb2d88f129ea91d6b2e22b1885cef7664bfb8db07cc24901147b0a35d6cb2f5fc1e8e9c49fcb38b420add52efd0c6ccdc5b2583b882b4d110c7f59d74f78297465c5929e02fd00b90c585d94c"}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim, @hao={0xc9, 0x10, @mcast2}]}, @fragment={0x29, 0x0, 0x8, 0x1, 0x0, 0x6, 0x68}, @fragment={0x3a, 0x0, 0x28, 0x1, 0x0, 0x8, 0x64}, @srh={0x1d, 0xa, 0x4, 0x5, 0x46, 0x20, 0x40, [@dev={0xfe, 0x80, '\x00', 0x3a}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty]}, @fragment={0x0, 0x0, 0x9, 0x1, 0x0, 0x17, 0x67}, @hopopts={0x62, 0xd, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x5, 0x1, [0xf, 0x200, 0x4, 0x8, 0x5, 0x1, 0x401, 0xa, 0x1b9800]}}, @padn={0x1, 0x1, [0x0]}, @jumbo]}], @mlv2_report={0x8f, 0x0, 0x0, 0xfff8, 0x4, [{0x4, 0x7, 0x2, @remote, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], [0xffffffff, 0x81, 0x9, 0x3, 0xf0d6, 0x5, 0x8]}, {0x3, 0x5, 0x5, @remote, [@dev={0xfe, 0x80, '\x00', 0x36}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2], [0x6, 0x9, 0x400, 0x7, 0x3]}, {0x7, 0x5, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [@private1, @local, @remote], [0x1, 0x80, 0x4, 0x48c, 0x67f1]}, {0x4, 0x4, 0x2, @remote, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1], [0x7, 0x20, 0x1, 0x1b]}]}}}, @ipv6=@gre_packet={0x0, 0x6, "4e9ea3", 0x28f, 0x2f, 0xff, @empty, @loopback, {[@routing={0x2, 0xc, 0x2, 0x2, 0x0, [@private2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @empty, @empty]}, @routing={0x19, 0x12, 0x1, 0x2f, 0x0, [@mcast1, @mcast1, @private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private2, @dev={0xfe, 0x80, '\x00', 0x1b}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x32, 0x0, 0x9, 0x1, 0x0, 0xf, 0x67}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1a, 0x1, [], "2023aabd53c181afb4485c1c29aa4f36610a3b90bf8fe324b789"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x100, 0x1fc2, 0x8], "7027eb1a34aa7d14cab6300e94b343d31f4e10d8"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "864cbf01d141fe1934bd1850defb682a997edd96d3f627d6331d827269f6c66b7ab845c494815858c5dbfebce21bad6b826bf604c76486b19e8f80d540e702a6033863ee7514eac1d0e7f291eaa15aa07a6675409306"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x8, 0x2, 0x1, 0x1, 0x2, 0xd}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0xa, 0x2, 0x11, 0x2, 0x0, 0x0, 0x7, 0xa}, 0x2, {0xa, 0x8, 0x0, 0x2, 0x1, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "c0722be0632e718045d66dec37d6eae39a54c9a9ddbffc72b583c5ec48aef6e71f4846e813a0c7990fb51cb5a126fe354f754168926cb729f87e97abd6ecaee6ecaa9c5eee99dd566c26851ed0e6d76a4537fe07848e756ed199d69b71a70eca278b9547888c4e25415144a6cd43f6476ca102d0c27b5532336442f58ebff9d2079aa9cae27f2a96a4043985e71fb2b637bdcab9dbf7862f62bac49d63f3860203af6083e33bcfd4b91388265bfbfdcf05c52fda291583a8bd"}}}}, @ipv6=@tcp={0x7, 0x6, "3d1756", 0x1164, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, {[@routing={0x1, 0x4, 0x2, 0x4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty]}, @routing={0x1faed3bc7712717c, 0x8, 0x2, 0xc, 0x0, [@local, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @loopback]}, @hopopts={0x84, 0x6, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0xa, 0x6, [0x4, 0x8, 0x6a3, 0x6]}}, @jumbo={0xc2, 0x4, 0x2}]}, @dstopts={0x3a, 0x208, '\x00', [@pad1, @pad1, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0xe, 0x2, [0x4, 0x657]}}, @generic={0x1, 0x1000, "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"}, @calipso={0x7, 0x10, {0x1, 0x2, 0xa, 0x2, [0x7]}}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x2}]}], {{0x4e24, 0x4e21, 0x41424344, r11, 0x0, 0x0, 0xa, 0x80, 0x8, 0x0, 0x9, {[@fastopen={0x22, 0x12, "420f9a12997a38a732e19603db64f0ae"}]}}, {"196bb7a03c36054befad6abd38f091e8017096728bc0d4aaec0ff656fb7c4e84848bcd103dfc15a98c164a52731fcd5459723c4ed5ce854f4b9d0fae"}}}}, @ipv4=@tcp={{0x17, 0x4, 0x2, 0x25, 0x137, 0x66, 0x0, 0xcf, 0x6, 0x0, @multicast1, @local, {[@cipso={0x86, 0x47, 0x3, [{0x1, 0x6, "0793c208"}, {0x1, 0x2}, {0x2, 0xa, "ee5f6900b989cba2"}, {0x1, 0xf, "7091198ca38e112d9e65f460f8"}, {0x7, 0xf, "165a39382a2be4ffefe3a2ff03"}, {0x2, 0xf, "1b61e85b2b8dd09db8200a7680"}, {0x7, 0x2}]}]}}, {{0x4e24, 0x4e23, r12, r13, 0x1, 0x0, 0xd, 0xc2, 0xfffe, 0x0, 0x1, {[@nop, @sack_perm={0x4, 0x2}, @eol, @fastopen={0x22, 0x10, "cf8753461773b3f47c565250ce8c"}, @mss={0x2, 0x4, 0xa5}, @exp_smc={0xfe, 0x6}]}}, {"ab0ac70898a782ba4a2d68f88582c5369fa3ff881df924ee41b01af1a50ff234707d1b75f566d3472ff53e49ff6c64d7bbf00e8c9ece2617d40a7fc34411aa5a6d024a519989dc2dca9c41edfd7eb0f67ec04f473cacbbe40c7a8e847a6c9c6bcc3ac300339313a03fede705e92bb2b948cbaae28ecf80486cb3c24c94a5042f4e7e2cc535759fb8cb1c80b499142d287a1c3f3399252bb56c5257d7e9295a5db8e3c435176d19"}}}]}, "bc2268", 0x3}}}}}}}, &(0x7f00000028c0)={0x0, 0x3, [0x760, 0x8e5, 0xcd9, 0xfa9]}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000640)="f4efe043044442", 0x7, 0x0, &(0x7f0000000680)={0x11, 0x4, r14, 0x1, 0xff, 0x6, @remote}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) 1m28.743508183s ago: executing program 3 (id=6261): r0 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000280)='--:$-\xee*\\,[}\\(}\x00', 0x494002, &(0x7f00000002c0)={@_ha_fsid={[0x500, 0x4]}, {0xc, 0x40, 0x4, 0x4}}, 0xfffffffe, &(0x7f0000000300), &(0x7f0000000340)=0x1}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='bridge0\x00', 0x8001, &(0x7f0000000400)={@_ha_fsid={[0xe80, 0xffffffff]}, {0x9, 0x7, 0x6, 0x2}}, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x6}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x29, 0xf5, 0xbb, 0x8, 0x1a, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast1, 0x20, 0x8050, 0x80, 0x7ff}}) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x9, &(0x7f0000000b00)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001800009f6703000020000000bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000c40)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x1b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x4, 0x1, 0x9, 0x0, 0xa, 0xffffffffffffffba, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0xc, 0x1, 0x5, 0xffffffffffffffc0, 0x10}, @call={0x85, 0x0, 0x0, 0x33}, @generic={0xff, 0x4, 0x9, 0xfffb, 0xffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x6, 0xe0, &(0x7f0000000700)=""/224, 0x41000, 0x29, '\x00', r3, 0x1c, r4, 0x8, &(0x7f0000000980)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x21ea, r6, 0xa, &(0x7f0000000c80)=[0xffffffffffffffff], &(0x7f0000000cc0)=[{0x0, 0x4, 0x1, 0x7}, {0x2, 0x4, 0x2, 0x2}, {0x3, 0xfffffffb, 0x0, 0x5}, {0x5, 0x2, 0xa, 0x9}, {0x0, 0x2, 0x1, 0x8}, {0x3, 0x3, 0xa, 0x5}, {0x0, 0x5, 0xd, 0x2}, {0x1, 0x5, 0x1, 0xa}, {0x4, 0x1, 0x5, 0x8}, {0x4, 0x5, 0x3, 0x6}], 0x10, 0x8cb}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$FS_IOC_RESVSP(r9, 0x800442d4, 0x0) (async) r10 = socket$unix(0x1, 0x2, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r13, &(0x7f0000000e40)=[{{&(0x7f0000000e80)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000f00)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r13, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r13, 0x84, 0x76, &(0x7f0000000f40), 0x8) (async) setsockopt$inet6_tcp_int(r12, 0x6, 0x2, &(0x7f0000000040)=0x7ff, 0x4) (async) bind$inet6(r12, &(0x7f0000000080)={0xa, 0x8000002, 0x2004}, 0x1c) (async) sendto$inet6(r12, 0x0, 0x0, 0x220080c1, &(0x7f00000000c0)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) (async) sendto$inet6(r12, &(0x7f0000000100)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r12, 0x0, r11, 0x0, 0x406f413, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000900)={'bridge0\x00', &(0x7f0000000940)=@ethtool_rxfh={0x1}}) 1m28.650283527s ago: executing program 0 (id=6262): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8}, 0x94) 1m28.649936271s ago: executing program 1 (id=6263): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x11) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x801, 0x100000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000340)=0x200, 0x4) setsockopt(r3, 0x11b, 0x9, 0x0, 0x4) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000012115000000008000300aeb50000000000000000000000000f00"/39], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1m28.574630469s ago: executing program 0 (id=6264): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000300)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x9, 0x4) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000440)={r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000780)='syzkaller\x00', 0x2}, 0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x18, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b800006521e2d3000000001000000000e00000020000000000000000080000000000000004000000000000000000000000000000000000000a0000008700000075925e6340c8106538d4ccc84d93e5dc0c24cc9a2debb130d25796369adea0dca037c6c52b586323aabd3d2071f143bfeff22336fc05fac5edd36df23f26f1adefd65028d82a453d95ecb1dd8d275b05ff22298e9e66383ed14af6d9452b31483b068b21d5a6b86bc5db57ac9017993852611ab2717f74038e624290d70256260cb62811c0a32bf693a46043cabea5ffdc4da10e6e985fb22052a45511178079adea8e88f2b0317da3c598d0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000150001000000000000010000e000000200000000000000000000000000000000000000001d0000000000000000000006000000000a"], 0xb8}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r4}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="185c06e8766532d4009bca4128330000001c000701fefffffffce0dbdf25017c000004004547abf9ca6bd058063e157204f26e7c1cfe9a6fad0dd1858bfc812ffa970233ba54c2718446e38e83e307719527d307d6f17c59770584dcf5727703a080a01ef29a59e148bc533c919c6c5a8a47e9d4e22eae4271c046519cc0d7ffe50bac42f096"], 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0xc000) 1m28.49975888s ago: executing program 4 (id=6265): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) close(r2) 1m28.328153297s ago: executing program 4 (id=6266): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'bbc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', 0x1}) sendmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)="89baa9997e725f0d61e9fd3ae64533b57981979fd4de81d14a539382a77ee3e794902c42bc7cc0dd54800cc1ae9a33046dd30937e92285a11f08de45e7b4f4e4557772602cc66a7f013897a9f35aabc01e7ca9b60e0f75566e2eb98b764101767e5f6262", 0x64}], 0x1}, 0x80) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r6, 0x3a, 0x0, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) write$tun(r2, &(0x7f00000005c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1m28.302338033s ago: executing program 0 (id=6267): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 1m28.294766164s ago: executing program 0 (id=6268): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) close(0x4) 1m24.476913133s ago: executing program 3 (id=6269): r0 = socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0xae0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0xa10, 0x2e0, 0x2e0, 0xa10, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x888, 0x8d0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x4, 0x1}, {0x0, 0x1}, {0x7ff}, {0x80000001, 0x3}, {0x6, 0x3}, {0x4, 0x1}, {0x7}, {0x4}, {0x5, 0x1}, {0x8ae, 0x3}, {0x6, 0x2}], [{0x23}, {0x4, 0x5}, {0x6, 0xb}, {0x2, 0x1}, {0x5, 0x749}, {0x9, 0xc}, {0x0, 0x10001}, {0x40, 0xe03}, {0x1, 0x800}, {0xd482, 0x9}, {0x80000001, 0xf68}], 0xb, 0xc0}, {[{0x93, 0x1}, {0x3}, {0x9, 0x2}, {0x9}, {0x60d2, 0x1}, {0x6}, {0x7}, {0x24, 0x3}, {0x10, 0x3}, {0xd024, 0x3}, {0x6, 0x1}], [{0x8, 0x1}, {0x7, 0x1ff}, {0x4f4, 0x3d}, {0x10001, 0x1ff}, {0x2, 0x3}, {0x81, 0x81}, {}, {0x78, 0x7}, {0x2, 0x2}, {0xfffffffa, 0x3}, {0xffffff7f, 0x10001}], 0x3, 0x2}, {[{0x3, 0x3}, {0x10001, 0x3}, {0xfffffff8, 0x3}, {0x3, 0x3}, {0x200}, {0x7f, 0x2}, {0x7, 0x3}, {0x5, 0x3}, {0x3, 0x2}, {0x54d}, {0x3, 0x1}], [{0x5, 0x6}, {0x3}, {0x10000, 0x4}, {0x5, 0xa}, {0x7, 0xdc}, {0x4, 0x6}, {0xe, 0x1}, {0x2, 0x4}, {0x5, 0x6}, {0x3, 0x80}, {0x100, 0x2}], 0xa, 0x3}, {[{0x8, 0x1}, {0x614, 0x3}, {0xfff, 0x2}, {0x57c, 0x1}, {0x0, 0x1}, {0x80000001, 0xd4bed4ac53d2e8f0}, {0x4, 0x1}, {0xffff, 0x3}, {0x6, 0x2}, {0x7, 0x2}, {0x26, 0x1}], [{0x9, 0x8}, {0x81, 0x1}, {0xfffffff0, 0x5c}, {0x2, 0x3b9}, {0x1, 0x1}, {0x7, 0x1}, {0xffffff42, 0x101}, {0x6, 0x3}, {0x0, 0x4}, {0x8, 0x81}, {0xfffffff9, 0x1}], 0x4, 0x7}, {[{0x800, 0x1}, {0x0, 0x2}, {0x9, 0x3}, {0xc, 0x1}, {0x2, 0x3}, {}, {0x8, 0x2}, {0x1, 0x2}, {0x8, 0x1}, {0x9852, 0x3}, {0x6}], [{0x7, 0x5}, {0x7, 0x10}, {0x8001, 0x20000}, {0x37, 0x2}, {0x9, 0x6}, {0x61570ff9, 0x6}, {0x4f6, 0xa}, {0xb, 0x8}, {0x2}, {0x2, 0xc}, {0x6af, 0x3921bf0d}], 0x7}, {[{0x8001}, {0x40, 0x2}, {0xe181, 0x3}, {0x64c4, 0x3}, {0x2, 0x1}, {0x2, 0x2}, {0xc64, 0x3}, {0x8000, 0x2}, {0x3, 0x2}, {0x10000, 0x2}, {0x2}], [{0x5, 0x3}, {0x8, 0x3}, {0x2, 0x7b0}, {0x3, 0xffffffff}, {0x8, 0x400}, {0x80000001, 0x5ffd}, {0x81}, {0xb, 0x7}, {0xee, 0xf46}, {0x3, 0x7f}, {0x22, 0x4}], 0x6, 0x3}, {[{0x5, 0x1}, {0x2, 0x3}, {}, {0xaef, 0x3}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x2fe, 0x2}, {0xa46, 0x2}, {0x9, 0x2}, {0x9, 0x3}], [{0x9f3f}, {0x6, 0xf}, {0x4, 0x5}, {0xab0, 0x5}, {0x6, 0x3}, {0x2, 0x7817}, {0xf1f, 0x5}, {0x5, 0x3}, {0x80, 0x401}, {0x8, 0xfffffffd}, {0x5, 0xffffffff}], 0xa, 0xb}, {[{0x0, 0xb8298168b614d019}, {0x1, 0x1}, {0x7}, {0x7}, {0x7f}, {0x9}, {0xfffffff7, 0x2}, {0x0, 0x1}, {0xfffffffc}, {0x9, 0x1}, {0x4, 0x2}], [{0x7fff, 0x2db79115}, {0x7, 0x17}, {0x1, 0x7}, {0x9, 0x8}, {0x2, 0x9}, {0x5, 0xffffff6b}, {0x7b}, {0xef06, 0x55d}, {0x61, 0x1c4d}, {0xb, 0x7}, {0x8, 0x4}], 0x7, 0x2}, {[{0x0, 0x1}, {0x1, 0x2}, {0xfffffffd}, {0x400, 0x1}, {0x9, 0x2}, {0x3, 0x2}, {0x8, 0x2}, {0x8, 0x2}, {0x2}], [{0x0, 0xfffffff9}, {0xd, 0x7}, {0x80, 0xb00}, {0x6, 0xa}, {0x7fffffff, 0x10000}, {0x4d}, {0x43, 0x2}, {0x0, 0x1}, {0x4, 0xffffffff}, {0xa0000000, 0x4ba}, {0x5, 0x500}], 0x7, 0xb}, {[{0x9, 0x1}, {0x3ff}, {0x4, 0x2}, {0x7, 0x2}, {0x5}, {}, {0x10001, 0x3}, {0xfffffffa, 0x1}, {0x5, 0x2}, {0xffff, 0x1}, {0x81, 0x2}], [{0x3, 0x8}, {0x8001, 0x2b637473}, {0x4, 0x80000000}, {0xfffffffd, 0x2}, {0x101, 0x1391}, {0x9, 0x8}, {0x6, 0x8}, {0x100, 0x9}, {0x5, 0x2}, {0xb, 0x401}, {0x200, 0x3}], 0x0, 0x4}, {[{0x1, 0x1}, {0x7, 0x1}, {0x7}, {0xff, 0x1}, {0xf, 0x3}, {0x2}, {0x8, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x5}], [{0x98b, 0xae}, {0x1, 0x9}, {0x0, 0x1}, {0x4ef7, 0x3}, {0x5, 0x1ff}, {0x2a16, 0xa4}, {0xffffffff, 0x60da6c1a}, {0x5, 0x2}, {0x101, 0xc6}, {0x5, 0x8}, {0xfffffff6, 0x6}], 0x1, 0x5}], 0xb, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x10000, 0x5aa9e1b7, 0x81}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 0s ago: executing program 32 (id=6268): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) close(0x4) kernel console output (not intermixed with test programs): nk: 4 bytes leftover after parsing attributes in process `syz.4.5130'. [ 779.507480][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5133'. [ 779.585393][T26882] netlink: 'syz.2.5135': attribute type 4 has an invalid length. [ 779.607625][T26880] netlink: 'syz.2.5135': attribute type 4 has an invalid length. [ 779.761204][T26888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5137'. [ 779.761240][T26888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5137'. [ 780.010537][T26909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5143'. [ 781.413727][T26965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5159'. [ 781.523022][T26965] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5159'. [ 781.929563][T26993] sctp: [Deprecated]: syz.4.5165 (pid 26993) Use of int in max_burst socket option. [ 781.929563][T26993] Use struct sctp_assoc_value instead [ 782.020579][T26996] tipc: Failed to remove unknown binding: 66,1,1/11578026:3066958074/3066958076 [ 782.020618][T26996] tipc: Failed to remove unknown binding: 66,1,1/11578026:3066958074/3066958076 [ 782.300986][T27015] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 782.316810][T27016] netlink: 'syz.4.5172': attribute type 1 has an invalid length. [ 782.740426][T27040] ip_tables: iptables: counters copy to user failed while replacing table [ 782.761283][T27040] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20003 [ 785.044082][T27053] veth6: entered promiscuous mode [ 785.044101][T27053] veth6: entered allmulticast mode [ 785.061062][T27064] team0: No ports can be present during mode change [ 785.246500][T27073] __nla_validate_parse: 4 callbacks suppressed [ 785.246523][T27073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5184'. [ 785.246549][T27073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5184'. [ 785.301642][T27073] geneve2: entered promiscuous mode [ 785.301666][T27073] geneve2: entered allmulticast mode [ 785.303585][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5184'. [ 785.303616][T27081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5184'. [ 785.391546][T27089] syzkaller0: entered promiscuous mode [ 785.391569][T27089] syzkaller0: entered allmulticast mode [ 785.430394][T22126] Bluetooth: hci2: unexpected event 0x04 length: 17 > 10 [ 785.430436][T22126] Bluetooth: unknown link type 128 [ 785.482985][T27096] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5189'. [ 785.483671][T27096] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5189'. [ 785.820539][T27115] netlink: 'syz.3.5194': attribute type 3 has an invalid length. [ 786.012201][T27127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5196'. [ 786.012242][T27127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5196'. [ 786.217625][T27131] netlink: 'syz.0.5200': attribute type 3 has an invalid length. [ 786.231474][T27131] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5200'. [ 786.252178][T27133] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 786.303455][T27135] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 786.444519][T27138] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 786.444641][T27138] syzkaller1: linktype set to 823 [ 786.486296][T27142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5204'. [ 787.085392][T27179] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20001 [ 787.106393][T27179] IPVS: length: 118 != 8 [ 787.262704][T27186] 0: reclassify loop, rule prio 0, protocol 03 [ 787.281522][T27186] mac80211_hwsim hwsim32 ÿ: renamed from wlan1 (while UP) [ 787.489902][T22126] Bluetooth: hci2: command 0x0406 tx timeout [ 787.493550][T27201] xt_TCPMSS: Only works on TCP SYN packets [ 787.592204][T27197] netlink: 'syz.4.5222': attribute type 8 has an invalid length. [ 787.667680][T27209] ip_tables: iptables: counters copy to user failed while replacing table [ 787.910535][T27225] netlink: 'syz.3.5230': attribute type 11 has an invalid length. [ 788.719055][T27263] netlink: 'syz.3.5239': attribute type 4 has an invalid length. [ 788.723997][T27266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.819999][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.819999][T27264] Use struct sctp_assoc_value instead [ 788.820113][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.820113][T27264] Use struct sctp_assoc_value instead [ 788.820158][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.820158][T27264] Use struct sctp_assoc_value instead [ 788.820202][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.820202][T27264] Use struct sctp_assoc_value instead [ 788.820286][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.820286][T27264] Use struct sctp_assoc_value instead [ 788.820332][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.820332][T27264] Use struct sctp_assoc_value instead [ 788.820377][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.820377][T27264] Use struct sctp_assoc_value instead [ 788.820421][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.820421][T27264] Use struct sctp_assoc_value instead [ 788.820466][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.820466][T27264] Use struct sctp_assoc_value instead [ 788.820509][T27264] sctp: [Deprecated]: syz.3.5239 (pid 27264) Use of int in maxseg socket option. [ 788.820509][T27264] Use struct sctp_assoc_value instead [ 788.851983][T27272] netlink: 'syz.2.5240': attribute type 5 has an invalid length. [ 789.134145][T27283] bond8: option fail_over_mac: invalid value (16) [ 789.157297][T27283] bond8 (unregistering): Released all slaves [ 789.175119][T27288] netlink: 'syz.2.5243': attribute type 6 has an invalid length. [ 790.526174][T27344] netlink: 'syz.0.5261': attribute type 1 has an invalid length. [ 790.683800][T27353] __nla_validate_parse: 78 callbacks suppressed [ 790.683815][T27353] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5261'. [ 790.712403][T27344] 8021q: adding VLAN 0 to HW filter on device bond6 [ 790.793248][T27352] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5261'. [ 790.911544][T27364] xt_hashlimit: max too large, truncated to 1048576 [ 790.911796][T27364] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 790.916324][T27345] bond6: (slave veth0_to_bond): making interface the new active one [ 790.918676][T27364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5261'. [ 790.918700][T27364] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5261'. [ 790.918715][T27364] netlink: 'syz.0.5261': attribute type 5 has an invalid length. [ 790.918728][T27364] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5261'. [ 790.933920][T27345] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 791.012314][T27344] bond6: entered promiscuous mode [ 791.012340][T27344] veth0_to_bond: entered promiscuous mode [ 791.012694][T27344] bond6: entered allmulticast mode [ 791.012711][T27344] veth0_to_bond: entered allmulticast mode [ 791.929426][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5277'. [ 791.929646][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5277'. [ 791.929878][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5277'. [ 791.940855][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5277'. [ 791.941086][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5277'. [ 792.500571][T27445] netlink: 'syz.3.5285': attribute type 1 has an invalid length. [ 792.528547][T22126] Bluetooth: hci4: command 0x0405 tx timeout [ 792.534382][T27446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 792.621444][T27445] 8021q: adding VLAN 0 to HW filter on device bond10 [ 793.932759][T27518] netlink: 'syz.4.5302': attribute type 1 has an invalid length. [ 794.040764][T27530] netlink: 'syz.4.5302': attribute type 10 has an invalid length. [ 794.043564][T27518] bond8: option mode: invalid value (11) [ 794.047864][T27518] bond8 (unregistering): Released all slaves [ 794.079501][T27531] xt_TPROXY: Can be used only with -p tcp or -p udp [ 794.100433][T27530] dummy0: entered promiscuous mode [ 794.454804][T27545] vlan4: entered allmulticast mode [ 794.454830][T27545] erspan0: entered allmulticast mode [ 794.527885][T27555] netlink: 'syz.2.5308': attribute type 3 has an invalid length. [ 794.535226][T27548] netlink: 'syz.2.5308': attribute type 3 has an invalid length. [ 795.427553][T27602] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 795.501158][T27610] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 796.092748][T27620] __nla_validate_parse: 75 callbacks suppressed [ 796.092771][T27620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5329'. [ 797.056609][T27639] ipt_ah: unknown flags FF [ 797.311232][T27650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5336'. [ 797.432964][T27654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5338'. [ 797.548604][T27666] netlink: 'syz.0.5340': attribute type 1 has an invalid length. [ 797.550524][T27666] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 797.553870][T27666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'. [ 797.554005][T27666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'. [ 797.848469][T27683] pim6reg: left allmulticast mode [ 797.905209][T27685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5343'. [ 798.015536][T27689] 8021q: adding VLAN 0 to HW filter on device bond11 [ 798.072314][T27694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5347'. [ 798.072349][T27694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5347'. [ 798.255078][T27699] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 798.522445][T27713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5352'. [ 798.524423][T27714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5352'. [ 800.581269][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b1c400: rx timeout, send abort [ 800.581436][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030b1c400: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 837.078327][T27770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 837.081665][T27769] __nla_validate_parse: 1 callbacks suppressed [ 837.081687][T27769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5367'. [ 837.082369][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5368'. [ 837.082390][T27770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5368'. [ 837.151734][T27769] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.176287][T27786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5366'. [ 837.477470][T27803] ip_tables: iptables: counters copy to user failed while replacing table [ 837.500118][T27803] mac80211_hwsim hwsim24 syzkaller1: entered promiscuous mode [ 837.500147][T27803] mac80211_hwsim hwsim24 syzkaller1: entered allmulticast mode [ 837.682601][T27809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5373'. [ 837.876829][T27823] netlink: 'syz.4.5379': attribute type 10 has an invalid length. [ 837.877063][T27823] dummy0: left promiscuous mode [ 837.893641][T27823] team0: Port device dummy0 added [ 837.900401][T27823] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 837.916523][T27823] bridge0: port 1(vlan2) entered blocking state [ 837.916727][T27823] bridge0: port 1(vlan2) entered disabled state [ 837.916878][T27823] vlan2: entered allmulticast mode [ 837.916895][T27823] bridge_slave_0: entered allmulticast mode [ 837.923930][T27823] vlan2: entered promiscuous mode [ 837.923949][T27823] bridge_slave_0: entered promiscuous mode [ 838.013911][T27823] team0: Port device dummy0 removed [ 838.076674][T27834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5381'. [ 838.104514][T27823] team0: Port device team_slave_0 removed [ 838.121577][T27823] team0: Port device team_slave_1 removed [ 838.122576][T27823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.122599][T27823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.126189][T27823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.126212][T27823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.172761][T27823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 838.214393][T27842] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5382'. [ 838.224826][T27825] vlan2: entered allmulticast mode [ 838.224849][T27825] veth0_vlan: entered allmulticast mode [ 838.455419][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5382'. [ 838.456223][T27858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5382'. [ 838.487128][T27842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.506023][T27842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.520773][T27842] bond0 (unregistering): Released all slaves [ 838.774998][T27866] netlink: 'syz.4.5386': attribute type 1 has an invalid length. [ 838.834095][T27866] 8021q: adding VLAN 0 to HW filter on device bond8 [ 838.859513][T27874] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 838.863800][T27874] bond8: entered allmulticast mode [ 838.891509][T27875] ip6t_rpfilter: unknown options [ 838.947656][T27875] mac80211_hwsim hwsim24 syzkaller1: left promiscuous mode [ 838.947684][T27875] mac80211_hwsim hwsim24 syzkaller1: left allmulticast mode [ 838.965218][T27879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5390'. [ 839.125124][T27887] 8021q: VLANs not supported on ip_vti0 [ 839.129580][T27887] netlink: 'syz.3.5392': attribute type 3 has an invalid length. [ 839.129830][T27887] netlink: 'syz.3.5392': attribute type 3 has an invalid length. [ 839.140592][T27888] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 839.229747][T27888] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 839.397553][T27901] netlink: 'syz.0.5397': attribute type 1 has an invalid length. [ 839.547486][T27903] TC_ACT_REPEAT abuse ? [ 840.451299][T27944] netlink: 'syz.4.5407': attribute type 1 has an invalid length. [ 840.451330][T27944] nbd: couldn't find device at index 767 [ 840.707236][T27954] netlink: 'syz.4.5410': attribute type 4 has an invalid length. [ 840.849937][T27960] netlink: 'syz.1.5412': attribute type 1 has an invalid length. [ 840.899852][T27960] 8021q: adding VLAN 0 to HW filter on device bond10 [ 841.173242][T27968] bond10: (slave bridge2): making interface the new active one [ 841.176652][T27968] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 841.240651][T27985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.241155][T27985] syzkaller0: left promiscuous mode [ 841.241175][T27985] syzkaller0: left allmulticast mode [ 842.143744][T28037] syzkaller0: entered promiscuous mode [ 842.143770][T28037] syzkaller0: entered allmulticast mode [ 842.209907][T28041] __nla_validate_parse: 16 callbacks suppressed [ 842.209930][T28041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5431'. [ 842.403415][T28048] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.5432'. [ 842.486198][T28057] nicvf0: left promiscuous mode [ 842.742683][T28068] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5439'. [ 843.280498][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5444'. [ 843.477249][T28104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5446'. [ 843.930897][T28131] netlink: 'syz.2.5455': attribute type 1 has an invalid length. [ 843.930923][T28131] netlink: 'syz.2.5455': attribute type 3 has an invalid length. [ 843.930936][T28131] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5455'. [ 844.060382][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5457'. [ 844.975125][T28161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5465'. [ 844.975154][T28161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5465'. [ 845.005769][T28161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5465'. [ 845.274672][T28182] tipc: Started in network mode [ 845.274707][T28182] tipc: Node identity cef63f993ca9, cluster identity 4711 [ 845.274987][T28182] tipc: Enabled bearer , priority 0 [ 845.636348][T28185] syzkaller0: entered promiscuous mode [ 845.636375][T28185] syzkaller0: entered allmulticast mode [ 845.643178][T28185] tipc: Resetting bearer [ 845.827620][ T7183] tipc: Resetting bearer [ 845.862669][T28178] tipc: Resetting bearer [ 846.261683][T28219] Unsupported ieee802154 address type: 0 [ 848.055638][T28178] tipc: Disabling bearer [ 848.067378][T18405] tipc: Node number set to 4066328473 [ 848.278285][T28232] netlink: 'syz.0.5481': attribute type 12 has an invalid length. [ 848.278322][T28232] netlink: 'syz.0.5481': attribute type 29 has an invalid length. [ 848.278335][T28232] __nla_validate_parse: 7 callbacks suppressed [ 848.278346][T28232] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5481'. [ 848.278364][T28232] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5481'. [ 848.336294][T28240] netlink: 'syz.0.5481': attribute type 12 has an invalid length. [ 848.336316][T28240] netlink: 'syz.0.5481': attribute type 29 has an invalid length. [ 848.336328][T28240] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5481'. [ 848.336345][T28240] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5481'. [ 848.337364][T28236] TC_ACT_REPEAT abuse ? [ 848.341747][T28236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5485'. [ 848.423945][T28247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5485'. [ 848.441610][T28236] 8021q: adding VLAN 0 to HW filter on device bond9 [ 848.469970][T28247] macvlan2: entered promiscuous mode [ 848.469996][T28247] macvlan2: entered allmulticast mode [ 848.555411][T28254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5489'. [ 848.804744][T28266] netlink: 'syz.0.5492': attribute type 1 has an invalid length. [ 848.876269][T28266] 8021q: adding VLAN 0 to HW filter on device bond8 [ 848.914620][T28277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5494'. [ 848.914649][T28277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5494'. [ 849.009757][T28276] bond8: (slave veth7): Enslaving as an active interface with a down link [ 849.087283][T28266] netlink: 'syz.0.5492': attribute type 10 has an invalid length. [ 849.087309][T28266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5492'. [ 849.087829][T28266] v: entered promiscuous mode [ 849.447320][T28306] ip_tables: iptables: counters copy to user failed while replacing table [ 849.783995][T28328] netlink: 'syz.1.5505': attribute type 10 has an invalid length. [ 849.821273][T28328] tunl0: entered promiscuous mode [ 849.827728][T28328] netlink: 'syz.1.5505': attribute type 3 has an invalid length. [ 850.731379][T28374] netlink: 'syz.0.5520': attribute type 8 has an invalid length. [ 850.990687][T28388] tap0: tun_chr_ioctl cmd 2148553947 [ 851.181502][T28404] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 851.295626][T28403] block nbd2: Unsupported socket: should be TCP or UNIX. [ 851.382423][T28406] x_tables: duplicate underflow at hook 2 [ 851.482023][T28414] ip6t_rpfilter: unknown options [ 851.482145][T28414] ip6t_rpfilter: unknown options [ 851.482252][T28414] ip6t_rpfilter: unknown options [ 851.482359][T28414] ip6t_rpfilter: unknown options [ 851.482486][T28414] ip6t_rpfilter: unknown options [ 851.482593][T28414] ip6t_rpfilter: unknown options [ 851.482699][T28414] ip6t_rpfilter: unknown options [ 851.482804][T28414] ip6t_rpfilter: unknown options [ 851.483417][T28414] ip6t_rpfilter: unknown options [ 851.483543][T28414] ip6t_rpfilter: unknown options [ 851.915528][T28434] ip_tables: iptables: counters copy to user failed while replacing table [ 854.833246][T28433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 855.045792][T28476] __nla_validate_parse: 13 callbacks suppressed [ 855.045815][T28476] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5548'. [ 855.150247][T28483] xt_limit: Overflow, try lower: 536871034/127 [ 855.151339][T28483] xt_ecn: cannot match TCP bits for non-tcp packets [ 855.156490][T28483] macvlan0: entered promiscuous mode [ 855.816849][T28525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5561'. [ 855.983173][T28530] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 856.297942][T28550] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 856.490250][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5575'. [ 856.677471][T28577] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5576'. [ 857.207176][T28595] netlink: 'syz.1.5582': attribute type 1 has an invalid length. [ 857.218447][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5582'. [ 857.474459][T28614] ip_tables: iptables: counters copy to user failed while replacing table [ 857.569449][T28618] netlink: 'syz.3.5589': attribute type 1 has an invalid length. [ 857.613452][T28618] 8021q: adding VLAN 0 to HW filter on device bond12 [ 857.702863][T28627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5588'. [ 857.713644][T28628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5588'. [ 857.753911][T28618] bond12: (slave ip6erspan0): making interface the new active one [ 857.767089][T28618] bond12: (slave ip6erspan0): Enslaving as an active interface with an up link [ 857.783422][T28632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5591'. [ 857.968965][T28643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5594'. [ 858.064872][T28649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5597'. [ 858.307913][T28666] pim6reg527: entered allmulticast mode [ 859.185174][T28727] openvswitch: netlink: Flow actions attr not present in new flow. [ 860.185253][T28771] __nla_validate_parse: 69 callbacks suppressed [ 860.185277][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5627'. [ 860.197926][T28776] netlink: 'syz.4.5628': attribute type 12 has an invalid length. [ 860.457618][T28792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5631'. [ 860.651169][T28803] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5632'. [ 860.791996][T28810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5634'. [ 860.921673][T28821] sctp_setsockopt_maxseg: 23 callbacks suppressed [ 860.921781][T28821] sctp: [Deprecated]: syz.4.5636 (pid 28821) Use of int in maxseg socket option. [ 860.921781][T28821] Use struct sctp_assoc_value instead [ 860.931635][ T4950] Bluetooth: hci4: command 0x0405 tx timeout [ 861.349704][T28837] tipc: Enabling of bearer rejected, failed to enable media [ 861.474398][T28846] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5642'. [ 861.474987][T28846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5642'. [ 861.494557][T28845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5641'. [ 861.796892][T28856] bond11: option packets_per_slave: invalid value (18446744073709551615) [ 861.796923][T28856] bond11: option packets_per_slave: allowed values 0 - 65535 [ 861.831282][T28856] bond11 (unregistering): Released all slaves [ 862.558916][T28894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5659'. [ 862.648891][T28907] netlink: 'syz.0.5660': attribute type 1 has an invalid length. [ 862.788361][T28914] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 862.788586][T28914] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 862.788785][T28914] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 862.788987][T28914] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 862.789198][T28914] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 862.789411][T28914] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 862.789630][T28914] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 862.791891][T28914] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 862.792135][T28914] netlink: 'syz.2.5662': attribute type 2 has an invalid length. [ 862.953241][T28925] netlink: 150 bytes leftover after parsing attributes in process `syz.0.5663'. [ 863.263180][T28935] ip6erspan0: entered promiscuous mode [ 863.446284][T28946] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5671'. [ 864.065408][T28971] xt_CT: No such helper "snmp_trap" [ 864.277086][T28994] : (slave bond_slave_0): Releasing backup interface [ 864.300206][T28994] : (slave bond_slave_1): Releasing backup interface [ 864.336618][T28994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 864.502946][T28999] block nbd2: server does not support multiple connections per device. [ 864.506545][T28999] block nbd2: shutting down sockets [ 864.984041][ T4950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 864.996494][ T5635] Bluetooth: hci4: link tx timeout [ 864.996517][ T5635] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.004985][ T4950] Bluetooth: hci4: link tx timeout [ 865.005007][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.005039][ T4950] Bluetooth: hci4: link tx timeout [ 865.005067][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.005095][ T4950] Bluetooth: hci4: link tx timeout [ 865.005106][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.005197][ T4950] Bluetooth: hci4: link tx timeout [ 865.005208][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.006420][ T4950] Bluetooth: hci4: link tx timeout [ 865.006434][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.014477][ T4950] Bluetooth: hci4: link tx timeout [ 865.014496][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.018199][ T4950] Bluetooth: hci4: link tx timeout [ 865.018216][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.018926][ T4950] Bluetooth: hci4: link tx timeout [ 865.018953][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.021297][ T4950] Bluetooth: hci4: link tx timeout [ 865.021311][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.021415][ T4950] Bluetooth: hci4: link tx timeout [ 865.021426][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.021523][ T4950] Bluetooth: hci4: link tx timeout [ 865.021533][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.021628][ T4950] Bluetooth: hci4: link tx timeout [ 865.021638][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.021758][ T4950] Bluetooth: hci4: link tx timeout [ 865.021769][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.021867][ T4950] Bluetooth: hci4: link tx timeout [ 865.021878][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.021972][ T4950] Bluetooth: hci4: link tx timeout [ 865.021982][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.022130][ T4950] Bluetooth: hci4: link tx timeout [ 865.022141][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.022237][ T4950] Bluetooth: hci4: link tx timeout [ 865.022247][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.022405][ T4950] Bluetooth: hci4: link tx timeout [ 865.022416][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.022560][ T4950] Bluetooth: hci4: link tx timeout [ 865.022571][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.024603][ T4950] Bluetooth: hci4: link tx timeout [ 865.024617][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.024750][ T4950] Bluetooth: hci4: link tx timeout [ 865.024761][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.024916][ T4950] Bluetooth: hci4: link tx timeout [ 865.024927][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.025084][ T4950] Bluetooth: hci4: link tx timeout [ 865.025095][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.025196][ T4950] Bluetooth: hci4: link tx timeout [ 865.025207][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.025304][ T4950] Bluetooth: hci4: link tx timeout [ 865.025315][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.025424][ T4950] Bluetooth: hci4: link tx timeout [ 865.025434][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.026311][ T4950] Bluetooth: hci4: link tx timeout [ 865.026323][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.026454][ T4950] Bluetooth: hci4: link tx timeout [ 865.026465][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.027886][ T4950] Bluetooth: hci4: link tx timeout [ 865.027898][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.044420][ T4950] Bluetooth: hci4: link tx timeout [ 865.044441][ T4950] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 865.064808][ T4950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 865.077449][ T4950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 865.111482][ T4950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 865.113562][ T4950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 865.217657][T29019] __nla_validate_parse: 4 callbacks suppressed [ 865.217678][T29019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5691'. [ 865.507673][T29028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5692'. [ 865.939061][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5696'. [ 865.939124][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5696'. [ 866.015598][T29049] syzkaller0: entered promiscuous mode [ 866.015624][T29049] syzkaller0: entered allmulticast mode [ 866.094343][T29052] bond0: Removing last ns target with arp_interval on [ 866.114901][T29055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'. [ 866.115452][T29055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'. [ 866.116048][T29055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'. [ 866.116398][T29055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'. [ 866.116790][T29055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'. [ 866.117088][T29055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'. [ 866.612325][T29016] rxe_eth0 speed is unknown, defaulting to 1000 [ 867.008631][T22126] Bluetooth: hci4: command 0x0405 tx timeout [ 867.168300][ T5635] Bluetooth: hci1: command tx timeout [ 867.272515][T29016] wlan1 speed is unknown, defaulting to 1000 [ 867.284822][T29016] virt_wifi0 speed is unknown, defaulting to 1000 [ 867.291261][T29016] lo speed is unknown, defaulting to 1000 [ 867.351490][T29114] nbd: must specify an index to disconnect [ 867.354865][T29111] nbd: nbd1 already in use [ 867.637592][T29109] syzkaller0: entered promiscuous mode [ 867.637915][T29109] syzkaller0: entered allmulticast mode [ 869.254223][ T5635] Bluetooth: hci1: command tx timeout [ 869.712697][T29131] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 869.858716][T29140] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 870.020978][T29150] validate_nla: 28 callbacks suppressed [ 870.021045][T29150] netlink: 'syz.2.5723': attribute type 1 has an invalid length. [ 870.196521][T29155] rxe_eth0 speed is unknown, defaulting to 1000 [ 870.261926][T29154] __nla_validate_parse: 32 callbacks suppressed [ 870.261949][T29154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5723'. [ 870.341575][T29150] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 870.367400][T28655] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 870.387495][T29154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 870.508140][T28655] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 870.645590][T29184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5729'. [ 871.021021][T29209] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5730'. [ 871.021054][T29209] openvswitch: netlink: Missing key (keys=40, expected=80) [ 871.281428][T29194] team0 (unregistering): Port device team_slave_0 removed [ 871.310266][T29194] team0 (unregistering): Port device team_slave_1 removed [ 871.338538][ T5635] Bluetooth: hci1: command tx timeout [ 871.438588][T29247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5731'. [ 871.514714][T29016] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.516133][T29016] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.516281][T29016] bridge_slave_0: entered allmulticast mode [ 871.521915][T29016] bridge_slave_0: entered promiscuous mode [ 871.531651][T29016] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.531758][T29016] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.531887][T29016] bridge_slave_1: entered allmulticast mode [ 871.537282][T29016] bridge_slave_1: entered promiscuous mode [ 871.693218][T29016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.703765][T29016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.773133][T29016] team0: Port device team_slave_0 added [ 871.784694][T29016] team0: Port device team_slave_1 added [ 871.895308][T29016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.895328][T29016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.895354][T29016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.897701][T29016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.897716][T29016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.897743][T29016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.272680][T29016] hsr_slave_0: entered promiscuous mode [ 872.273909][T29016] hsr_slave_1: entered promiscuous mode [ 872.279493][T29016] debugfs: 'hsr0' already exists in 'hsr' [ 872.279515][T29016] Cannot create hsr debugfs directory [ 873.071282][T29016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.071322][T29016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.071348][T29016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 873.262328][T29328] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 873.418492][ T5635] Bluetooth: hci1: command tx timeout [ 873.626789][T29328] bond9: entered promiscuous mode [ 873.627535][T29328] 8021q: adding VLAN 0 to HW filter on device bond9 [ 873.637768][T29328] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 873.680614][T29334] bond9: (slave bridge12): making interface the new active one [ 873.680640][T29334] bridge12: entered promiscuous mode [ 873.682062][T29334] bond9: (slave bridge12): Enslaving as an active interface with an up link [ 873.733818][T29328] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 873.734066][T29328] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 873.734298][T29328] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 873.737429][T29328] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 873.770801][T29339] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.770936][T29339] bridge0: port 1(bridge_slave_0) entered listening state [ 873.803833][T29334] bond9: (slave bridge13): Enslaving as a backup interface with an up link [ 873.836393][T29334] bond9: (slave bridge14): Enslaving as a backup interface with an up link [ 873.861156][T29328] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 873.861347][T29328] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 873.861751][T29328] netlink: 'syz.0.5745': attribute type 1 has an invalid length. [ 873.950166][T29346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5750'. [ 873.988362][T29016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.988401][T29016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.988427][T29016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 874.069175][T29334] bond9: (slave bridge15): Enslaving as a backup interface with an up link [ 874.148134][T29016] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 874.150054][T29016] bridge0: port 4(netdevsim1) entered disabled state [ 874.171476][T29016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.171512][T29016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.171535][T29016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 874.197169][T29356] x_tables: duplicate underflow at hook 2 [ 874.230424][T29346] macvtap0: entered promiscuous mode [ 874.230441][T29346] hsr0: entered promiscuous mode [ 874.230762][T29346] macvtap0: entered allmulticast mode [ 874.230775][T29346] hsr0: entered allmulticast mode [ 874.230782][T29346] hsr_slave_0: entered allmulticast mode [ 874.230792][T29346] hsr_slave_1: entered allmulticast mode [ 874.297512][T29016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.297534][T29016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.297546][T29016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 874.473658][T29363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5753'. [ 874.478769][T29363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5753'. [ 874.533751][T29348] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 874.533782][T29348] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 874.562759][T29361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5752'. [ 874.790798][T29348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 874.790826][T29348] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 874.944295][T29348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 874.944323][T29348] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 875.078576][T29016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 875.102817][T29016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 875.125984][T29387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5756'. [ 875.139420][T29016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 875.152787][T29016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 875.155521][T29016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 875.182261][T29016] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 875.188154][T29016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 875.202565][T29016] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 875.283054][T29348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 875.283081][T29348] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 875.472283][T29016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.505402][T29016] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.527916][T28654] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.528121][T28654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.557116][T28654] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.557271][T28654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.818964][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 875.885024][T29420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5763'. [ 876.336182][T29429] netlink: 193 bytes leftover after parsing attributes in process `syz.2.5764'. [ 876.337309][T29429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5764'. [ 876.466775][T29438] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5766'. [ 876.668667][T29448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5768'. [ 876.735706][T29447] validate_nla: 2 callbacks suppressed [ 876.735731][T29447] netlink: 'syz.2.5767': attribute type 1 has an invalid length. [ 876.937199][T29452] bond2: (slave geneve3): making interface the new active one [ 876.954669][T29452] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 877.095382][T29464] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 877.111098][T28659] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 877.111478][T28659] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 877.111521][T28659] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 877.111557][T28659] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 877.184309][T29461] TC_ACT_REPEAT abuse ? [ 877.314541][T29475] netlink: ct family unspecified [ 877.376698][T29016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.572567][T29016] veth0_vlan: entered promiscuous mode [ 877.603581][T29016] veth1_vlan: entered promiscuous mode [ 877.791239][T29502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5782'. [ 877.802331][T29016] veth0_macvtap: entered promiscuous mode [ 877.816388][T29016] veth1_macvtap: entered promiscuous mode [ 877.877837][T29016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.898189][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.898216][ C1] bridge0: topology change detected, propagating [ 877.903402][T29016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.999997][ T1173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.021682][T28655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.030401][T28659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.088226][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.090097][T29510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5785'. [ 878.347587][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5786'. [ 878.542994][T28654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.543016][T28654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.675888][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.675912][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.713161][T29534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5790'. [ 878.718619][T29536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5791'. [ 878.720888][T29536] ip_tables: iptables: counters copy to user failed while replacing table [ 878.721592][T29536] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 879.717197][T29580] xfrm1: entered promiscuous mode [ 879.718895][T29580] xfrm1: entered allmulticast mode [ 879.762675][T22126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 879.782167][T22126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 879.791633][T22126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 879.801953][T22126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 879.804554][T22126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 880.996302][T29636] tipc: Started in network mode [ 880.996338][T29636] tipc: Node identity ac14140f, cluster identity 4711 [ 880.997119][T29636] tipc: New replicast peer: 255.255.255.255 [ 881.000885][T29636] tipc: Enabled bearer , priority 10 [ 881.230487][T29584] rxe_eth0 speed is unknown, defaulting to 1000 [ 881.515339][T29652] __nla_validate_parse: 9 callbacks suppressed [ 881.515364][T29652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5816'. [ 881.839382][T29584] wlan1 speed is unknown, defaulting to 1000 [ 881.841315][T29584] virt_wifi0 speed is unknown, defaulting to 1000 [ 881.843402][T29584] lo speed is unknown, defaulting to 1000 [ 881.888764][ T5635] Bluetooth: hci2: command tx timeout [ 881.999990][ T24] tipc: Node number set to 2886997007 [ 882.170700][T29677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5822'. [ 882.227410][T29682] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 882.365197][T29688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5825'. [ 882.847735][T29584] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.851250][T29584] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.851407][T29584] bridge_slave_0: entered allmulticast mode [ 882.856463][T29584] bridge_slave_0: entered promiscuous mode [ 882.891370][T29584] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.893167][T29584] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.893333][T29584] bridge_slave_1: entered allmulticast mode [ 882.897193][T29584] bridge_slave_1: entered promiscuous mode [ 883.013782][T29584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.035290][T29584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.105808][T29584] team0: Port device team_slave_0 added [ 883.116593][T29584] team0: Port device team_slave_1 added [ 883.159670][T29584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.159691][T29584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.159717][T29584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.166361][T29584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.166379][T29584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.166404][T29584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.419074][T29584] hsr_slave_0: entered promiscuous mode [ 883.420461][T29584] hsr_slave_1: entered promiscuous mode [ 883.421365][T29584] debugfs: 'hsr0' already exists in 'hsr' [ 883.421385][T29584] Cannot create hsr debugfs directory [ 883.611903][T29743] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.613954][T29743] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.969363][ T5635] Bluetooth: hci2: command tx timeout [ 884.256160][T29584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.256199][T29584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.256225][T29584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 57610 - 0 [ 884.256285][T29584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 884.690485][T29791] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5845'. [ 884.702755][T29584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.702790][T29584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.702814][T29584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57610 - 0 [ 884.702838][T29584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 884.734085][T29794] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.5846'. [ 884.849264][T29584] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 884.850819][T29584] bridge0: port 4(netdevsim1) entered disabled state [ 884.887299][T29584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.887339][T29584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.887366][T29584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57610 - 0 [ 884.887393][T29584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 885.096822][T29584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.096862][T29584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.096889][T29584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57610 - 0 [ 885.096915][T29584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 885.609032][T29819] IPVS: length: 36 != 24 [ 885.806938][T29584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 885.827665][T29584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.838695][T29584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 885.854461][T29584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.873029][T29584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 885.896381][T29584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.906207][T29584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 885.926652][T29584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 886.049142][ T5635] Bluetooth: hci2: command tx timeout [ 886.140289][T29584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.161694][T29853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5861'. [ 886.233547][T29584] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.271411][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.271562][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.318297][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.318422][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.511648][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 886.516098][T29862] Bluetooth: hci0: unsupported parameter 5135 [ 886.516130][T29862] Bluetooth: hci0: unsupported parameter 8192 [ 886.516143][T29862] Bluetooth: hci0: unsupported parameter 5135 [ 886.516156][T29862] Bluetooth: hci0: unsupported parameter 8192 [ 886.536653][T29584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 886.536676][T29584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 886.550047][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 886.725302][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 886.753226][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 886.869795][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 886.870168][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 887.022830][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 887.023412][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 887.235071][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 887.235439][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 887.394733][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5865'. [ 888.128375][ T5635] Bluetooth: hci2: command tx timeout [ 888.526013][T29904] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 888.535567][T29584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.885862][T29584] veth0_vlan: entered promiscuous mode [ 888.917796][T29584] veth1_vlan: entered promiscuous mode [ 889.015588][T29584] veth0_macvtap: entered promiscuous mode [ 889.048004][T29584] veth1_macvtap: entered promiscuous mode [ 889.135176][T29918] netlink: 'syz.1.5873': attribute type 11 has an invalid length. [ 889.148468][T29584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.180291][T29584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.260275][T28655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.319900][T28654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.336145][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.336647][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.571982][T28655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.572006][T28655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.862968][ T7180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.863017][ T7180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.021008][T29945] syzkaller1: entered promiscuous mode [ 890.021031][T29945] syzkaller1: entered allmulticast mode [ 890.446910][T29959] netlink: 'syz.3.5879': attribute type 3 has an invalid length. [ 890.913355][T29972] netlink: 'syz.1.5880': attribute type 1 has an invalid length. [ 891.002309][T29972] 8021q: adding VLAN 0 to HW filter on device bond11 [ 891.154828][T29972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 891.424888][T29980] bond11: (slave bridge4): making interface the new active one [ 891.436874][T29980] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 891.459719][T29988] syzkaller0: entered promiscuous mode [ 891.459745][T29988] syzkaller0: entered allmulticast mode [ 891.530749][ T1173] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.630376][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.631945][ T7180] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.632013][ T7180] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.890190][T30001] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 891.890215][T30001] __nla_validate_parse: 25 callbacks suppressed [ 891.890228][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.890248][T30001] nbd: couldn't find device at index 767 [ 891.890409][T30001] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 891.890423][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.890440][T30001] nbd: couldn't find device at index 767 [ 891.890614][T30001] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 891.890628][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.890644][T30001] nbd: couldn't find device at index 767 [ 891.896267][T30001] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 891.896288][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.896307][T30001] nbd: couldn't find device at index 767 [ 891.896472][T30001] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 891.896486][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.896500][T30001] nbd: couldn't find device at index 767 [ 891.896651][T30001] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 891.896665][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.896681][T30001] nbd: couldn't find device at index 767 [ 891.896834][T30001] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 891.896848][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.896863][T30001] nbd: couldn't find device at index 767 [ 891.897077][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.897095][T30001] nbd: couldn't find device at index 767 [ 891.897245][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.897263][T30001] nbd: couldn't find device at index 767 [ 891.897413][T30001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 891.897430][T30001] nbd: couldn't find device at index 767 [ 891.897596][T30001] nbd: couldn't find device at index 767 [ 891.912594][T29999] vlan2: entered allmulticast mode [ 891.912617][T29999] bond0: entered allmulticast mode [ 891.912631][T29999] bond_slave_0: entered allmulticast mode [ 891.912649][T29999] bond_slave_1: entered allmulticast mode [ 891.922025][T30001] nbd: couldn't find device at index 767 [ 891.922195][T30001] nbd: couldn't find device at index 767 [ 891.922333][T30001] nbd: couldn't find device at index 767 [ 891.922471][T30001] nbd: couldn't find device at index 767 [ 891.922607][T30001] nbd: couldn't find device at index 767 [ 891.922742][T30001] nbd: couldn't find device at index 767 [ 891.922912][T30001] nbd: couldn't find device at index 767 [ 891.923095][T30001] nbd: couldn't find device at index 767 [ 891.923266][T30001] nbd: couldn't find device at index 767 [ 891.923423][T30001] nbd: couldn't find device at index 767 [ 891.924805][T30001] nbd: couldn't find device at index 767 [ 891.924960][T30001] nbd: couldn't find device at index 767 [ 891.925099][T30001] nbd: couldn't find device at index 767 [ 891.925234][T30001] nbd: couldn't find device at index 767 [ 891.925369][T30001] nbd: couldn't find device at index 767 [ 891.925523][T30001] nbd: couldn't find device at index 767 [ 891.925660][T30001] nbd: couldn't find device at index 767 [ 891.925830][T30001] nbd: couldn't find device at index 767 [ 891.925974][T30001] nbd: couldn't find device at index 767 [ 891.926109][T30001] nbd: couldn't find device at index 767 [ 891.926272][T30001] nbd: couldn't find device at index 767 [ 891.934610][T30001] nbd: couldn't find device at index 767 [ 894.132071][T30065] xt_hashlimit: size too large, truncated to 1048576 [ 894.603986][T30072] macvtap1: entered promiscuous mode [ 894.604015][T30072] vlan0: entered promiscuous mode [ 894.605325][T30072] macvtap1: entered allmulticast mode [ 894.605343][T30072] vlan0: entered allmulticast mode [ 894.605355][T30072] veth0_vlan: entered allmulticast mode [ 894.662358][T30084] veth0: entered promiscuous mode [ 894.673085][T30084] vlan3: entered allmulticast mode [ 894.673106][T30084] veth0: entered allmulticast mode [ 894.674348][T30084] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 894.987035][T30098] team0 (unregistering): Port device team_slave_0 removed [ 895.041435][T30098] team0 (unregistering): Port device team_slave_1 removed [ 895.535389][T30123] syzkaller1: entered promiscuous mode [ 895.535412][T30123] syzkaller1: entered allmulticast mode [ 898.044195][T30101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.185512][T30147] __nla_validate_parse: 94 callbacks suppressed [ 898.185536][T30147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5925'. [ 898.376430][T30156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5927'. [ 898.376456][T30156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5927'. [ 898.541806][T30170] validate_nla: 26 callbacks suppressed [ 898.541830][T30170] netlink: 'syz.0.5932': attribute type 2 has an invalid length. [ 898.566008][T30170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.645384][T30172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5933'. [ 899.281268][T30204] netlink: 'syz.4.5943': attribute type 18 has an invalid length. [ 899.281298][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5943'. [ 899.294363][T30204] netlink: 'syz.4.5943': attribute type 18 has an invalid length. [ 899.294384][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5943'. [ 899.386431][T30212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5942'. [ 899.387464][T30208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5944'. [ 899.411051][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.412460][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.412553][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.412587][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.603883][T30217] netlink: 'syz.4.5945': attribute type 1 has an invalid length. [ 899.603906][T30217] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5945'. [ 899.665614][T30224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5946'. [ 899.665749][T30224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.716391][T30224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.019589][T30244] x_tables: unsorted entry at hook 1 [ 900.464241][T30266] netlink: 'syz.3.5955': attribute type 10 has an invalid length. [ 900.485515][T30266] team0: Port device dummy0 added [ 900.487515][T30262] syzkaller0: entered promiscuous mode [ 900.487535][T30262] syzkaller0: entered allmulticast mode [ 900.512704][T30262] tipc: Enabled bearer , priority 0 [ 900.549484][T30261] tipc: Resetting bearer [ 900.603509][T30261] tipc: Disabling bearer [ 900.687709][T30266] bridge0: port 3(vlan2) entered blocking state [ 900.689843][T30266] bridge0: port 3(vlan2) entered disabled state [ 900.693050][T30266] vlan2: entered allmulticast mode [ 900.700723][T30266] vlan2: entered promiscuous mode [ 900.763791][T30277] team0: Port device dummy0 removed [ 900.774688][T30277] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.776363][T30283] netlink: 'syz.4.5958': attribute type 10 has an invalid length. [ 900.815161][T30277] bridge_slave_1: left promiscuous mode [ 900.815456][T30277] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.843751][T30277] bond0: (slave bond_slave_0): Releasing backup interface [ 900.855830][T30277] bond0: (slave bond_slave_1): Releasing backup interface [ 900.876307][T30277] team0: Port device team_slave_0 removed [ 900.886507][T30277] team0: Port device team_slave_1 removed [ 900.887631][T30277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.887655][T30277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.899686][T30277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.899707][T30277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.904367][T30277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 900.950760][T30283] team0: Device wg2 is of different type [ 901.001811][T30286] vlan2: entered promiscuous mode [ 901.001835][T30286] hsr0: entered promiscuous mode [ 901.065487][T30287] hsr_slave_0: left promiscuous mode [ 901.077774][T30287] hsr_slave_1: left promiscuous mode [ 901.444051][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444252][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444292][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444331][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444378][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444417][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444454][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444492][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444532][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444569][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444608][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444648][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444687][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444727][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444767][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444803][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444839][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444875][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444913][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.444951][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445017][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445058][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445125][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445162][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445200][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445239][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445281][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445320][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445364][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445401][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.445437][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.517583][T30325] ip_tables: iptables: counters copy to user failed while replacing table [ 901.610943][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.610991][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.611028][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.611063][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.611098][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.611133][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.611172][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.611207][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612501][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612542][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612576][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612625][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612660][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612695][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612729][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612762][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612797][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612830][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612874][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612907][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612939][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.612973][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.613006][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.613038][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.613071][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.613105][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.613139][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.613171][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.613204][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.613237][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.644477][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.645006][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.645043][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.645078][ T12] nci: nci_rx_work: unknown MT 0x1 [ 901.877865][T30331] bond12: option all_slaves_active: invalid value (179) [ 901.890755][T30335] openvswitch: netlink: Missing valid actions attribute. [ 901.890793][T30335] openvswitch: netlink: Actions may not be safe on all matching packets [ 901.893145][T30331] bond12 (unregistering): Released all slaves [ 903.002151][T30366] bridge: RTM_NEWNEIGH with invalid ether address [ 903.211147][T30375] __nla_validate_parse: 6 callbacks suppressed [ 903.211162][T30375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5979'. [ 903.215081][T30375] vlan4: entered allmulticast mode [ 903.215093][T30375] veth1_virt_wifi: entered allmulticast mode [ 904.396472][T30315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 904.407335][T30377] netlink: 'syz.2.5980': attribute type 1 has an invalid length. [ 904.407359][T30377] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5980'. [ 904.407389][T30377] block nbd0: NBD_DISCONNECT [ 904.407413][T30377] block nbd0: Send disconnect failed -32 [ 904.407433][T30377] block nbd0: Send disconnect failed -32 [ 904.407451][T30377] block nbd0: shutting down sockets [ 904.619461][T30379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 904.622347][T30379] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5982'. [ 904.623013][T30379] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5982'. [ 904.623265][T30379] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5982'. [ 904.623478][T30379] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5982'. [ 904.625906][T30379] x_tables: duplicate underflow at hook 1 [ 904.665267][T30381] netlink: 'syz.3.5981': attribute type 6 has an invalid length. [ 904.834171][T30389] syzkaller0: entered promiscuous mode [ 904.834197][T30389] syzkaller0: entered allmulticast mode [ 904.846243][T30392] syzkaller0: entered promiscuous mode [ 904.846265][T30392] syzkaller0: entered allmulticast mode [ 904.861859][T30389] tipc: Enabled bearer , priority 0 [ 904.871677][T30388] tipc: Resetting bearer [ 904.883194][T30392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.898309][T30392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5988'. [ 904.900374][T30394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5988'. [ 904.904088][T30388] tipc: Disabling bearer [ 904.904381][T30398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 904.945026][T30399] netlink: 'syz.0.5989': attribute type 29 has an invalid length. [ 904.945051][T30399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5989'. [ 905.039410][T30402] ip_tables: iptables: counters copy to user failed while replacing table [ 905.283264][T30415] ipvlan2: entered allmulticast mode [ 905.283291][T30415] virt_wifi0: entered allmulticast mode [ 905.325471][T30417] bridge0: port 1(syz_tun) entered blocking state [ 905.325739][T30417] bridge0: port 1(syz_tun) entered disabled state [ 905.325912][T30417] syz_tun: entered allmulticast mode [ 905.331750][T30417] syz_tun: entered promiscuous mode [ 905.332838][T30417] bridge0: port 1(syz_tun) entered blocking state [ 905.332946][T30417] bridge0: port 1(syz_tun) entered forwarding state [ 905.349535][T30418] ipvlan2: entered allmulticast mode [ 906.240482][T30466] sctp: [Deprecated]: syz.0.6009 (pid 30466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 906.240482][T30466] Use struct sctp_sack_info instead [ 906.347317][T30472] veth0: entered promiscuous mode [ 907.282637][T30470] veth0: left promiscuous mode [ 907.353256][T30505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 908.083475][T30542] netlink: 'syz.0.6029': attribute type 2 has an invalid length. [ 908.390363][T30559] __nla_validate_parse: 7 callbacks suppressed [ 908.390388][T30559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6034'. [ 908.390414][T30559] block nbd0: not configured, cannot reconfigure [ 908.711439][T30572] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6038'. [ 909.127237][T30624] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 909.151404][T30616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6045'. [ 909.265308][T30644] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 909.384016][T30668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6047'. [ 909.679412][T30587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.951708][T30777] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 910.990580][T30782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6058'. [ 911.215564][T30793] netlink: 'syz.4.6059': attribute type 8 has an invalid length. [ 911.529983][T30808] ip_tables: iptables: counters copy to user failed while replacing table [ 911.537134][T30808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6061'. [ 911.537165][T30808] netlink: 87 bytes leftover after parsing attributes in process `syz.0.6061'. [ 911.582088][T30810] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 911.584309][T30810] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 911.641137][T30813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6063'. [ 911.696054][T30815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6063'. [ 912.023502][T30826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6064'. [ 914.756635][T30808] netlink: 'syz.0.6061': attribute type 4 has an invalid length. [ 914.785189][T30826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6064'. [ 914.957638][T30839] tipc: Enabling of bearer rejected, failed to enable media [ 915.002468][T30843] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6067'. [ 915.318441][T30862] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.6076'. [ 915.321242][T30865] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.6076'. [ 915.755842][T30888] netlink: 'syz.4.6078': attribute type 1 has an invalid length. [ 915.755872][T30888] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6078'. [ 915.778412][T30888] ip_tables: iptables: counters copy to user failed while replacing table [ 916.154351][T30900] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6084'. [ 916.272659][T22126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 916.277924][T22126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 916.295311][T22126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 916.307265][T22126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 916.319068][T22126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 916.510754][T18477] bridge0: port 1(syz_tun) entered disabled state [ 916.565254][T18477] syz_tun (unregistering): left allmulticast mode [ 916.565285][T18477] syz_tun (unregistering): left promiscuous mode [ 916.565382][T18477] bridge0: port 1(syz_tun) entered disabled state [ 916.836097][T30934] ipt_REJECT: TCP_RESET invalid for non-tcp [ 916.878870][T30928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 916.879322][T30928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6090'. [ 916.953332][T30935] netlink: 'syz.0.6092': attribute type 30 has an invalid length. [ 917.002829][T30931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6089'. [ 917.549754][T30954] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6093'. [ 917.603766][T30904] rxe_eth0 speed is unknown, defaulting to 1000 [ 917.701242][T30971] syzkaller0: entered promiscuous mode [ 917.701268][T30971] syzkaller0: entered allmulticast mode [ 917.865433][T30904] wlan1 speed is unknown, defaulting to 1000 [ 917.867327][T30904] virt_wifi0 speed is unknown, defaulting to 1000 [ 917.880813][T30904] lo speed is unknown, defaulting to 1000 [ 917.934640][T30976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6098'. [ 918.369555][ T5635] Bluetooth: hci5: command tx timeout [ 918.445810][T30997] netlink: 'syz.2.6103': attribute type 5 has an invalid length. [ 918.445828][T30997] netlink: 'syz.2.6103': attribute type 9 has an invalid length. [ 918.538941][T30904] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.539100][T30904] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.539348][T30904] bridge_slave_0: entered allmulticast mode [ 918.540566][T30904] bridge_slave_0: entered promiscuous mode [ 918.543529][T30904] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.543692][T30904] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.543840][T30904] bridge_slave_1: entered allmulticast mode [ 918.545465][T30904] bridge_slave_1: entered promiscuous mode [ 918.582754][T30904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.586152][T30904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.627904][T30904] team0: Port device team_slave_0 added [ 918.631704][T30904] team0: Port device team_slave_1 added [ 918.655010][T30904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.655027][T30904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.655048][T30904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.656217][T30904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.656229][T30904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.656250][T30904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.706717][T30904] hsr_slave_0: entered promiscuous mode [ 918.707861][T30904] hsr_slave_1: entered promiscuous mode [ 918.711690][T30904] debugfs: 'hsr0' already exists in 'hsr' [ 918.711712][T30904] Cannot create hsr debugfs directory [ 918.876776][T30904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.876798][T30904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.970378][T30904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.970402][T30904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.042366][T30904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.042400][T30904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.458789][ T5635] Bluetooth: hci5: command tx timeout [ 920.473794][T30963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.478162][T30993] netlink: 'syz.2.6103': attribute type 9 has an invalid length. [ 920.492445][T30904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 920.525274][T30904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 920.533789][T30904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 920.567349][T30904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 920.579867][T30904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 920.586052][T30904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 920.651885][T30904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 920.670238][T30904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 920.700299][T31019] ip_tables: iptables: counters copy to user failed while replacing table [ 920.741973][T31019] sit0: entered allmulticast mode [ 920.766044][ T5635] Bluetooth: hci2: ISO packet for unknown connection handle 2723 [ 920.969524][T31036] tap0: tun_chr_ioctl cmd 2148553947 [ 921.145368][T30904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.192046][T30904] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.211417][T28654] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.211469][T28654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.252427][T28652] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.252481][T28652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.736246][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.183517][T30904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.275310][T30904] veth0_vlan: entered promiscuous mode [ 922.313689][T31102] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 922.314454][T31102] team0: Device ipvlan2 is already an upper device of the team interface [ 922.357710][T30904] veth1_vlan: entered promiscuous mode [ 922.456717][T30904] veth0_macvtap: entered promiscuous mode [ 922.475689][T30904] veth1_macvtap: entered promiscuous mode [ 922.503451][T30904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.521496][T30904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.528797][ T5635] Bluetooth: hci5: command tx timeout [ 922.648242][T28655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.648296][T28655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.648332][T28655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.648368][T28655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.769603][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.813561][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.369686][T29276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.395722][T31055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 924.580065][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.580091][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.609373][ T5635] Bluetooth: hci5: command tx timeout [ 924.684173][T31129] __nla_validate_parse: 1 callbacks suppressed [ 924.684195][T31129] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6128'. [ 924.711680][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.711715][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.854378][T18405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.993663][T31143] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20001 [ 925.056220][T31144] batman_adv: batadv0: Adding interface: syzkaller0 [ 925.056242][T31144] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.056276][T31144] batman_adv: batadv0: Interface activated: syzkaller0 [ 925.100326][T31142] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 925.152699][T31142] batman_adv: batadv0: Removing interface: syzkaller0 [ 925.397856][T31174] netlink: 95 bytes leftover after parsing attributes in process `syz.3.6139'. [ 925.557555][T31183] Bluetooth: hci0: unsupported parameter 5161 [ 925.557583][T31183] Bluetooth: hci0: unsupported parameter 8192 [ 925.557596][T31183] Bluetooth: hci0: unsupported parameter 5161 [ 925.557610][T31183] Bluetooth: hci0: unsupported parameter 8192 [ 925.590525][T31183] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6145'. [ 925.889364][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.928525][T18405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.418431][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.899530][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.969525][T18405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.252179][T31159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 928.252786][T31170] netlink: 'syz.3.6139': attribute type 2 has an invalid length. [ 928.513028][T31195] ip_tables: iptables: counters copy to user failed while replacing table [ 928.583251][T31195] bond1: option resend_igmp: invalid value (32767) [ 928.583279][T31195] bond1: option resend_igmp: allowed values 0 - 255 [ 928.603934][ T5635] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 928.614498][T31195] bond1 (unregistering): Released all slaves [ 928.656661][T31199] netlink: 'syz.2.6150': attribute type 3 has an invalid length. [ 928.687653][T31203] lo: entered allmulticast mode [ 928.746471][T31203] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6151'. [ 928.753410][T31205] netlink: 'syz.0.6153': attribute type 15 has an invalid length. [ 928.765700][T31203] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6151'. [ 928.783738][T31200] lo: left allmulticast mode [ 929.009084][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.136902][T31227] netlink: 'syz.1.6161': attribute type 1 has an invalid length. [ 929.365035][T31241] tipc: Enabling of bearer rejected, failed to enable media [ 929.602755][T18405] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 929.604180][T31248] macsec0: entered promiscuous mode [ 929.604366][T31248] macsec0: entered allmulticast mode [ 929.604386][T31248] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 929.646258][T31248] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 929.666543][T31248] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 929.699224][T18405] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 930.052212][T18405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.450066][T29275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.472291][T31287] x_tables: duplicate underflow at hook 1 [ 931.089903][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.115758][T31307] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6183'. [ 931.285089][T31311] ip_tables: iptables: counters copy to user failed while replacing table [ 931.299934][T31309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6184'. [ 931.484184][T31309] dummy0: entered allmulticast mode [ 931.491864][T31309] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 931.590859][T31312] syzkaller1: entered promiscuous mode [ 931.590918][T31312] syzkaller1: entered allmulticast mode [ 931.967865][ T12] IPVS: starting estimator thread 0... [ 932.063234][T31347] IPVS: using max 28 ests per chain, 67200 per kthread [ 932.128526][T18405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.211593][T31352] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 932.799767][T31380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6199'. [ 933.171819][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.279330][T31394] netlink: 'syz.3.6204': attribute type 11 has an invalid length. [ 933.369553][T31406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.375356][T31406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.386860][T31406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.387813][T31406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.392554][T31406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.395509][T31406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.448413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.448580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.516894][T31398] sctp: [Deprecated]: syz.1.6205 (pid 31398) Use of int in maxseg socket option. [ 933.516894][T31398] Use struct sctp_assoc_value instead [ 933.746638][T31412] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.6207'. [ 934.123879][T31417] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6208'. [ 934.152314][T31417] xt_hashlimit: invalid interval [ 934.227719][T31420] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6209'. [ 934.250790][T31423] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6211'. [ 934.336653][T31423] vlan3: entered promiscuous mode [ 934.336679][T31423] bridge0: entered promiscuous mode [ 934.336884][T31423] vlan3: entered allmulticast mode [ 934.336900][T31423] bridge0: entered allmulticast mode [ 934.342630][T31420] syzkaller1: entered promiscuous mode [ 934.342655][T31420] syzkaller1: entered allmulticast mode [ 934.483743][T31431] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 934.561034][T31431] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 934.561467][T31439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6213'. [ 935.482352][T31478] netlink: 'syz.2.6223': attribute type 83 has an invalid length. [ 935.516103][T31479] netlink: 'syz.4.6222': attribute type 11 has an invalid length. [ 935.541060][T31447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 935.541088][T31447] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 935.762249][T31447] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 935.762275][T31447] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 935.963405][T31489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6228'. [ 935.963440][T31489] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6228'. [ 936.089315][T31496] netlink: 'syz.3.6230': attribute type 1 has an invalid length. [ 936.143913][T31496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.320000][T31498] bond1: (slave veth3): Enslaving as an active interface with a down link [ 936.362681][T31496] bond1: (slave dummy0): making interface the new active one [ 936.363840][T31496] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 936.571103][T31519] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 936.720099][T31528] netlink: 'syz.3.6236': attribute type 11 has an invalid length. [ 936.723404][T31529] netlink: 'syz.3.6236': attribute type 11 has an invalid length. [ 936.734478][T31526] __nla_validate_parse: 1 callbacks suppressed [ 936.734497][T31526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6237'. [ 936.735823][T31526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6237'. [ 936.764825][T31528] netlink: 'syz.3.6236': attribute type 29 has an invalid length. [ 936.939456][T31533] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6241'. [ 937.170738][T31549] netlink: 'syz.0.6245': attribute type 1 has an invalid length. [ 937.214256][T31549] syzkaller0: entered promiscuous mode [ 937.214281][T31549] syzkaller0: entered allmulticast mode [ 937.261922][T31558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6246'. [ 937.297390][T31561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6244'. [ 937.332508][ T1210] net_ratelimit: 21 callbacks suppressed [ 937.332532][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.334609][T31561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.395383][T31561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.519419][T31569] netlink: 'syz.4.6248': attribute type 21 has an invalid length. [ 937.521950][T31555] netlink: 'syz.1.6244': attribute type 1 has an invalid length. [ 937.549254][T31568] erspan1: entered promiscuous mode [ 937.611323][T31569] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 937.621311][T31569] bond11 (unregistering): Released all slaves [ 937.760258][T31575] netlink: 'syz.1.6250': attribute type 8 has an invalid length. [ 937.903355][T31580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6251'. [ 937.926783][T31558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6246'. [ 937.988735][T31585] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6252'. [ 938.362243][T31601] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 938.380163][T18405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.405218][T31601] bridge0: port 3(veth1_to_bridge) entered blocking state [ 938.407235][T31601] bridge0: port 3(veth1_to_bridge) entered disabled state [ 938.407422][T31601] veth1_to_bridge: entered allmulticast mode [ 938.424223][T31601] veth1_to_bridge: entered promiscuous mode [ 938.424381][T31601] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 938.432103][T31601] bridge0: port 3(veth1_to_bridge) entered blocking state [ 938.432229][T31601] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 938.658723][T31610] syzkaller0: entered promiscuous mode [ 938.658749][T31610] syzkaller0: entered allmulticast mode [ 938.718256][T31617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.745044][T31626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.745274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.768778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.792765][T31624] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6264'. [ 938.811783][T31616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 938.812603][T31616] bridge0: port 1(bond2) entered blocking state [ 938.812807][T31616] bridge0: port 1(bond2) entered disabled state [ 938.812930][T31616] bond2: entered allmulticast mode [ 938.818711][T31616] bond2: entered promiscuous mode [ 938.820572][T31616] bridge0: port 1(bond2) entered blocking state [ 938.820852][T31616] bridge0: port 1(bond2) entered forwarding state [ 938.957451][T31637] ip_tables: iptables: counters copy to user failed while replacing table [ 938.961463][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.962561][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.338313][ C0] net_ratelimit: 13828 callbacks suppressed [ 942.338342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.338344][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 942.338776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 942.338789][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.339214][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 942.339244][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.339640][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 942.339754][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.340074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 942.340249][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.416472][ C1] sched: DL replenish lagged too much [ 946.946283][T28659] bridge0: port 1(bond2) entered disabled state [ 947.348122][ C1] net_ratelimit: 20519 callbacks suppressed [ 947.348134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.348148][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 947.348626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 947.348639][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.349096][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 947.349176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.349566][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 947.349665][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.350033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 947.350188][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.358304][ C0] net_ratelimit: 20799 callbacks suppressed [ 952.358332][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.358382][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 952.358767][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.358855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 952.359312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 952.359337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.359792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.359803][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 952.360270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 952.360282][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.368221][ C1] net_ratelimit: 17705 callbacks suppressed [ 957.368251][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 957.368330][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.368722][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 957.369002][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.369579][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.370215][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.370265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 957.370771][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 957.370866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.371239][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 962.378155][ C1] net_ratelimit: 16592 callbacks suppressed [ 962.378176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.378182][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 962.378628][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 962.378703][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.379074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 962.379204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.379497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 962.379741][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.380223][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.380733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.387974][ C0] net_ratelimit: 17033 callbacks suppressed [ 967.388000][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.388050][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 967.388497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.389016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.389463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 967.389485][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.389915][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.389950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 967.390431][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.390869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.398324][ C0] net_ratelimit: 16879 callbacks suppressed [ 972.398353][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.398833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.399291][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.399707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.400138][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.400275][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 972.400579][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.400732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 972.401081][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.401185][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 977.408002][ C1] net_ratelimit: 17084 callbacks suppressed [ 977.408030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 977.408250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.408562][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 977.408742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.409250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.409718][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.409967][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 977.410345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.410419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 977.410848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 982.418108][ C1] net_ratelimit: 17640 callbacks suppressed [ 982.418123][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.418136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 982.418626][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 982.418629][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.419088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 982.419126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.419573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 982.419604][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.420031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 982.420081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.428160][ C0] net_ratelimit: 17584 callbacks suppressed [ 987.428187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.428407][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 987.428681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.428972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 987.429194][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.429550][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 987.429680][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.430207][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.430698][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 987.430711][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.438385][ C0] net_ratelimit: 17062 callbacks suppressed [ 992.438412][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.438834][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.439308][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.439741][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.439896][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 992.440211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.440687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.440866][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 992.441173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.441309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 997.448074][ C0] net_ratelimit: 16617 callbacks suppressed [ 997.448100][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.448152][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 997.448575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.449084][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.449602][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.450120][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 997.450149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.450666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.451088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 997.451184][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.458042][ C1] net_ratelimit: 16607 callbacks suppressed [ 1002.458069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1002.458280][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.458504][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1002.458734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.458933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1002.459181][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.459618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.460093][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.460550][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.460943][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1007.468149][ C1] net_ratelimit: 16465 callbacks suppressed [ 1007.468176][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1007.468183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.468668][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.469079][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1007.469135][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.469523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1007.469691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.469941][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1007.470251][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.470388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1012.478324][ C0] net_ratelimit: 16432 callbacks suppressed [ 1012.478330][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1012.478350][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.478767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1012.478825][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.479188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1012.479410][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.479863][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.481156][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.481689][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1012.482197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.488228][ C0] net_ratelimit: 16000 callbacks suppressed [ 1017.488257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.488699][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.489179][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.489449][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1017.489636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.489984][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1017.490159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.490627][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.491161][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.491651][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.498140][ C1] net_ratelimit: 16337 callbacks suppressed [ 1022.498168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1022.498326][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.498589][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1022.498775][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.499281][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.499724][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.500249][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.500488][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1022.500709][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.501212][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.508284][ C0] net_ratelimit: 15898 callbacks suppressed [ 1027.508313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.508838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.509357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.509486][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1027.509949][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.510410][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.510891][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.511377][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.511885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.512385][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.518178][ C0] net_ratelimit: 15043 callbacks suppressed [ 1032.518207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.518667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1032.518762][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.519193][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1032.519301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.520703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1032.520841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.521186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1032.521397][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1032.521654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1037.528002][ C0] net_ratelimit: 15171 callbacks suppressed [ 1037.528030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.528338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1037.528528][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.528779][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1037.529095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.529611][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.530133][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.530325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1037.530745][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1037.531185][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1042.538001][ C1] net_ratelimit: 15673 callbacks suppressed [ 1042.538026][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1042.538189][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1042.538620][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1042.539077][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1042.539554][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1042.539930][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1042.540349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1042.540997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1042.541114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1042.541451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1047.548326][ C0] net_ratelimit: 15704 callbacks suppressed [ 1047.548354][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1047.548473][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1047.548821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1047.548915][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1047.549286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1047.549756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1047.550197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1047.550380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1047.550620][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1047.550852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1050.577897][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1050.584891][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31639/1:b..l.. [ 1050.594441][ C0] rcu: (detected by 0, t=10503 jiffies, g=176261, q=2836 ncpus=2) [ 1050.602373][ C0] task:syz.0.6268 state:R running task stack:26712 pid:31639 tgid:31638 ppid:18862 task_flags:0x40054c flags:0x00080000 [ 1050.615925][ C0] Call Trace: [ 1050.619680][ C0] [ 1050.622657][ C0] __schedule+0x17dd/0x5830 [ 1050.627228][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1050.632471][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1050.637785][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1050.643025][ C0] ? __pfx___schedule+0x10/0x10 [ 1050.647910][ C0] ? __lock_acquire+0x747/0x2de0 [ 1050.652903][ C0] preempt_schedule_irq+0x4b/0x90 [ 1050.658396][ C0] irqentry_exit+0x14f/0x9b0 [ 1050.663041][ C0] ? trace_irq_disable+0x3b/0x140 [ 1050.668109][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1050.674132][ C0] RIP: 0010:rcu_is_watching+0x6e/0xb0 [ 1050.679567][ C0] Code: 00 48 c7 c3 98 4d c1 94 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 35 8b 03 65 48 ff 0d d7 9b 12 13 74 11 83 e0 04 e8 02 5b 41 5e 41 5f e9 15 55 58 0a cc e8 cf f1 85 ff eb e8 48 [ 1050.699199][ C0] RSP: 0018:ffffc90005e07228 EFLAGS: 00000202 [ 1050.705305][ C0] RAX: 0000000000000004 RBX: ffff8880b8333d98 RCX: 8000000000000001 [ 1050.713302][ C0] RDX: ffffc90005e07301 RSI: ffffffff8c8e8c60 RDI: ffffffff8c8e8c20 [ 1050.721308][ C0] RBP: 1ffffffff246ad01 R08: ffffc90005e073d0 R09: 0000000000000000 [ 1050.729304][ C0] R10: ffffc90005e07398 R11: fffff52000bc0e75 R12: ffffc90005e00000 [ 1050.737302][ C0] R13: ffffffff817879cf R14: ffffffff8e9777d8 R15: dffffc0000000000 [ 1050.745302][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1050.750486][ C0] ? rcu_is_watching+0x16/0xb0 [ 1050.755285][ C0] unwind_next_frame+0x1b66/0x2550 [ 1050.760443][ C0] ? arch_stack_walk+0xe3/0x150 [ 1050.765346][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1050.770498][ C0] __unwind_start+0x514/0x660 [ 1050.775189][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1050.781349][ C0] arch_stack_walk+0xe3/0x150 [ 1050.786040][ C0] ? stack_trace_save+0xa9/0x100 [ 1050.790999][ C0] stack_trace_save+0xa9/0x100 [ 1050.795765][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1050.801149][ C0] kasan_save_track+0x3e/0x80 [ 1050.805962][ C0] ? rcu_is_watching+0x16/0xb0 [ 1050.810769][ C0] __kasan_kmalloc+0x93/0xb0 [ 1050.815362][ C0] __kmalloc_cache_noprof+0x31c/0x600 [ 1050.820735][ C0] ? __kmalloc_cache_noprof+0x148/0x600 [ 1050.826278][ C0] ? kmem_cache_free+0x156/0x650 [ 1050.831200][ C0] ? kmem_cache_free+0x156/0x650 [ 1050.836134][ C0] ? tear_down_vmas+0x31f/0x530 [ 1050.840985][ C0] kmem_cache_free+0x156/0x650 [ 1050.845772][ C0] tear_down_vmas+0x31f/0x530 [ 1050.850454][ C0] exit_mmap+0x4ca/0xa40 [ 1050.854741][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1050.859524][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1050.864261][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 1050.869465][ C0] __mmput+0x118/0x420 [ 1050.873530][ C0] exit_mm+0x18e/0x240 [ 1050.877591][ C0] do_exit+0x6a8/0x2360 [ 1050.881741][ C0] ? __pfx_do_exit+0x10/0x10 [ 1050.886319][ C0] ? cgroup1_freezing+0x20/0x350 [ 1050.891261][ C0] ? cgroup1_freezing+0x20/0x350 [ 1050.896195][ C0] do_group_exit+0x22d/0x2f0 [ 1050.900774][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1050.905967][ C0] get_signal+0x1216/0x12c0 [ 1050.910476][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1050.916016][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1050.922162][ C0] ? fput_close_sync+0x11f/0x240 [ 1050.927103][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1050.932466][ C0] ? rcu_is_watching+0x16/0xb0 [ 1050.937227][ C0] do_syscall_64+0x328/0x520 [ 1050.941806][ C0] ? trace_irq_disable+0x3b/0x140 [ 1050.946825][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.952900][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1050.957572][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.963452][ C0] RIP: 0033:0x7fd549f9fb19 [ 1050.967882][ C0] RSP: 002b:00007fd54aed00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1050.976285][ C0] RAX: 0000000000000001 RBX: 00007fd54a225fa8 RCX: 00007fd549f9fb19 [ 1050.984250][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd54a225fac [ 1050.992209][ C0] RBP: 00007fd54a225fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1051.000168][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.008123][ C0] R13: 00007fd54a226038 R14: 00007ffd487619f0 R15: 00007ffd48761ad8 [ 1051.016092][ C0] [ 1052.557954][ C0] net_ratelimit: 14331 callbacks suppressed [ 1052.557981][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1052.558181][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1052.558972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1052.559320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1052.559931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1052.560284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1052.560474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1052.560708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1052.561089][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1052.561678][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1057.567993][ C0] net_ratelimit: 14863 callbacks suppressed [ 1057.568022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1057.568534][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1057.568607][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1057.568990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1057.569216][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1057.569453][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1057.569843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1057.569936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:e9:9c:29:07:45, vlan:0) [ 1057.570393][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1057.571096][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)