last executing test programs: 12m23.550842565s ago: executing program 3 (id=4560): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6017010000202b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa060004000000510000000000001890780400000000000000000000000000000055c75cbb7e8a32783ad3e3"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="1400030076657468315f746f5fb0e7e13ed58465"], 0x2c}}, 0x0) 12m23.287871373s ago: executing program 3 (id=4563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000002090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c6963793000086002000000000a081c03000000001e", 0x68}], 0x1}, 0x4080) 12m23.002380373s ago: executing program 3 (id=4565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a07000000000000000000020000000900010073797a300000000040000000030a01020000000000000000020000000900010073797a30000000000900030073797a30f5ffffff140004800800014000000003080002400000000080000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000005400048010000180090001006d617371"], 0x108}}, 0x0) 12m22.674580143s ago: executing program 3 (id=4569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0xb3e, 0x1, {{0x8, 0x4, 0x0, 0x9, 0x20, 0x68, 0x0, 0xf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x6, [{@multicast1, 0x8e6}]}]}}}}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000380)={@local, @broadcast, r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) getsockname$packet(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delqdisc={0x24, 0x26, 0x309, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffe0, 0xb}, {0x4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000d0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={0x24, r10, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000003c0)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m22.511095018s ago: executing program 3 (id=4572): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x640, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x134, 0x2, [@TCA_BPF_ACT={0x130, 0x1, [@m_simple={0x12c, 0x1, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'matchall\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x91, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896011eaa09"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4d0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1e0, 0x2, [@m_connmark={0x1dc, 0xa, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x71c, 0x6, 0x6, 0x41, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f02efa3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x2c4, 0x2, [@m_csum={0x188, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400000, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x40, 0x0, 0xffffffff, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xe9, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970adc90d26a46a602356397bad1f3b4f5cae0b262f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x138, 0x15, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x40, 0x6, 0x2, 0xf}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x25a, 0x0, 0x80000001, 0x800}, 0x2}}]}, {0xd2, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd0099ddaaf047e8176c59ee4ad3dd6c16189178332362837467598d104a879c0c3e38990b7dbb96fafdf130365f21370f37f14adeb5658a62010e4723c701"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x640}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 12m22.409421486s ago: executing program 3 (id=4574): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='b\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_hwaddr=@broadcast}) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='b\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) (async) socket$inet(0x2, 0x3, 0x33) (async) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_hwaddr=@broadcast}) (async) 12m6.88926425s ago: executing program 32 (id=4574): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='b\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_hwaddr=@broadcast}) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='b\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) (async) socket$inet(0x2, 0x3, 0x33) (async) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_hwaddr=@broadcast}) (async) 45.967555819s ago: executing program 4 (id=9865): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="010001"]) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) 45.71130336s ago: executing program 4 (id=9869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff69, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="030080002700090028bd7000fbdbdf251200000008000100", @ANYRES32=r0, @ANYBLOB], 0x1c}}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20044800}, 0x24000840) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000001c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e1200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000840)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfec2}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000d40), &(0x7f0000000740)=0x4) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000600)=0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) recvmsg$unix(r5, &(0x7f0000000c00)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000900)=""/199, 0xc7}, {&(0x7f0000000a00)=""/116, 0x74}, {&(0x7f0000000a80)=""/18, 0x12}, {&(0x7f0000000ac0)=""/99, 0x63}], 0x5, &(0x7f0000000bc0)}, 0x2120) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000009500"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r9, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00400020234000200060001a109000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_tcp_buf(r10, 0x6, 0xd, 0x0, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000c40)={'ip_vti0\x00', 0x0, 0x8000, 0x40, 0x3, 0x6, {{0x2b, 0x4, 0x2, 0x36, 0xac, 0x64, 0x0, 0x88, 0x29, 0x0, @multicast2, @private=0xa010100, {[@timestamp_prespec={0x44, 0xfffffffffffffef9, 0x72, 0x3, 0x3, [{@remote, 0xfffff1c3}]}, @rr={0x7, 0x13, 0xf1, [@dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0x4f, 0x3, 0x8, [{@loopback, 0x100}, {@multicast2, 0x9}, {@private=0xa010101, 0x2}, {@rand_addr=0x64010103}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x9}, {@loopback, 0x200}, {@loopback, 0x7f}, {@empty, 0x7}]}, @rr={0x7, 0x1f, 0x79, [@dev={0xac, 0x14, 0x14, 0x15}, @local, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0xc, 0x3, 0xe, [{@broadcast, 0x6}, {@multicast2, 0x2}]}, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 44.768820643s ago: executing program 4 (id=9881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5001000010001304ffffffffffdbdf25fe8000000000000000000000000000aaffffffff000000000000000000000000fffd00004e2300030200002002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000002032000000640101010000000000000000000000000000000000000000070000000000000000000000000000000400000000000000060000000000000004000000000000000a0000000002001e010000000000000001000000010000000a00000000000000cc000000000000000800000000000000f80000000000000001000000fdffffff063500000200000100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000060"], 0x150}}, 0x844) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bf1600000000000085000000bc000000180200000a0000010000000000000000180200000a0000020000000040000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000cd000000850000004500000095"], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="0011223344070011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x4, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x6}, {0x7, 0x0, 0x2}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x7, 0x3}]}}, 0x0, 0x26}, 0x20) (async) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x26}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ac", 0x1}], 0x1}, 0x8804) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 44.731633345s ago: executing program 2 (id=9883): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) 44.474343398s ago: executing program 2 (id=9885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r0], 0x1000f) 44.382708841s ago: executing program 0 (id=9887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x2de89ed507d52c2, 0xe, 0x0, 0xfffffffb}, 0xc) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 43.389919984s ago: executing program 2 (id=9890): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) 36.067657547s ago: executing program 4 (id=9893): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x1000000, 0x0, 0x448d3}, 0x400c000) 35.960265578s ago: executing program 4 (id=9894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @empty}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) 35.828829901s ago: executing program 0 (id=9895): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 35.819603911s ago: executing program 2 (id=9896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@multicast1, @multicast2, 0x0}, &(0x7f0000000740)=0xc) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x68, 0x25, 0x808, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xb, 0x5}, {0x6, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x9, 0x21}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x2, 0xffff0695, 0x0, 0xffff, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0x1]}}]}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048084}, 0x20000000) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x7, 0x8000, 0x1, 0x4, {{0xf, 0x4, 0x2, 0x9, 0x3c, 0x67, 0x0, 0xc, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xf}, {[@lsrr={0x83, 0xf, 0xef, [@empty, @rand_addr=0x64010100, @local]}, @timestamp_addr={0x44, 0xc, 0x4e, 0x1, 0x5, [{@multicast2, 0x8000}]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x7, 0x1c, [@multicast1]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010dbdf250000000092fbbf3d281aeb1fd5616268e92bd7be7edca4b8b79ee214c52c974f55b352ded28bc5586f99d04bc61b022ad43d4cec105c61227122434bd547222bf39140628163ea92d8fabba9599785d1de56c9044c547d14d0dd6057d4eb35d7bbae17db80846184c9bc89e0ee83ae11835642b61aa89906032abc6d45920f549e3f296f62f526c22e959e3d6e8bdab24432cf3585d86295353cbc2396dcea36799c245dacdbe0b18d411c7aa41fd9c3295b57985c266be9a7ba6d28496b46a1245bb831b5", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r15, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x4, 0xb, 0xf, 0x10001, 0x41, @private2, @empty, 0x1, 0x40, 0x6, 0x4}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000980)=0x0, &(0x7f00000009c0)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e0010000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf251900000078000180080003000200000014000200766c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d616376746170000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="5000018008000300000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000200001801400020067656e6576653100000000000000000008000300030000004800018008000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e30000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030002000000080003000300000008000100", @ANYRES32=r8, @ANYBLOB="2c000180080003000000000008000100", @ANYRES32=r11, @ANYBLOB="080003000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1800018014000200626174616476300000000000000000001c00018008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="08000300010000003c000180140002006d61637365633000000000000000000008000100", @ANYRES32=r17, @ANYBLOB="089f00000140000014000200626f6e643000000000089c395b2d2f43"], 0x1e0}}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25020000050a000900000000000000000008000300c5cf1316def6dadccd833210e312c24187d5607c819e521a472334c5c52d8be384", @ANYRES32=r18, @ANYBLOB="08000b00e8030000"], 0x30}}, 0x0) 35.762438548s ago: executing program 5 (id=9897): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004f600"/24, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004f600"/24, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r2, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)=""/51, 0x33}], 0x1}, 0x8}], 0x1, 0x20, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x6}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x4800) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) (async) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x1, 0x2, "3aad72", 0xd, 0x4}) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000580)={"ddaffe78e4b6516f95860d19d9a9d85a", 0x0, 0x0, {0x7, 0x6}, {0xc, 0x9}, 0x10001, [0x8, 0x22e7, 0xa6, 0x930, 0x4, 0xb, 0x2, 0x100000001, 0x0, 0x2, 0x1, 0x55c5, 0x1ff, 0x75, 0x3, 0x7]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000580)={"ddaffe78e4b6516f95860d19d9a9d85a", 0x0, 0x0, {0x7, 0x6}, {0xc, 0x9}, 0x10001, [0x8, 0x22e7, 0xa6, 0x930, 0x4, 0xb, 0x2, 0x100000001, 0x0, 0x2, 0x1, 0x55c5, 0x1ff, 0x75, 0x3, 0x7]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000680)={"3e299741bc79f259eee3f228c5f30d83", r4, r5, {0xffffffffffff0001}, {0x94c1, 0x4}, 0x45, [0x40, 0x9, 0x9b3, 0x5, 0x15a, 0x0, 0x2400000000000000, 0x9b, 0x8, 0x7, 0x1, 0x8, 0x3, 0x7f, 0x8000000000000001, 0x7]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x4000}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x4000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x402000, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x402000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet(0x2, 0x4, 0x6) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000100)) 35.551277531s ago: executing program 4 (id=9899): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt(r0, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d682000"/42, 0x2a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 35.28850401s ago: executing program 0 (id=9900): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r0], 0x1000f) 34.497522881s ago: executing program 1 (id=9901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x5}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'pimreg1\x00', {0x1}, 0x7}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) 34.451517566s ago: executing program 5 (id=9902): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0) 34.224596516s ago: executing program 2 (id=9903): r0 = epoll_create(0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x54, '\x00', 0x2, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0x8, 0x8, 0xb, 0x8, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8000}, @alu={0x4, 0x0, 0x5, 0x4, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x7c, &(0x7f0000000180)=""/124, 0xc1000, 0x10, '\x00', r2, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xa, 0x3, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000340)=[{0x5, 0x4, 0x9, 0xb}, {0x4, 0x5, 0x10, 0x3}, {0x5, 0x2, 0x8, 0xa}, {0x5, 0x5, 0x7, 0x3}, {0x2, 0x4, 0x0, 0x8}, {0x3, 0x1, 0x0, 0x5}, {0x3, 0x3, 0xc, 0xa}, {0x5, 0x2, 0x3, 0x8}, {0x2, 0x4, 0xa, 0x8}], 0x10, 0x8001}, 0x94) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x4a7e, &(0x7f0000000080)={[0x8]}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) 34.116237469s ago: executing program 1 (id=9904): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086ff0000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003020000"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1000}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3e, 0x5}}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xaf9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 34.015526717s ago: executing program 0 (id=9905): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000000117a29649f47e68f18fe3697e1b21be8201012bbdf000fedbdf2592"], 0x10}}, 0x40004) recvmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.83620097s ago: executing program 5 (id=9906): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) 33.702652869s ago: executing program 1 (id=9907): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff00000000800000000000feff", @ANYRES32=0x0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) 33.341853445s ago: executing program 5 (id=9908): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) (async) 33.143999031s ago: executing program 2 (id=9909): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, 0x0}, 0x0) unshare(0x60000600) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800dd8d00000000000000000200000400000006"], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x20000090) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000000a200200000000000000000000000000000706000009f0000073797a300000000014"], 0x48}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2000c804) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaa8aaaaaabb86dd6000000000140640fe800000000000000000000000116ee1448000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="5038100090780000"], 0x0) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYRES8=r13, @ANYRES16=r13, @ANYRES32=r9, @ANYRES64=r11, @ANYBLOB='h', @ANYRES8, @ANYRESOCT=r12], 0x48}}, 0x20000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 33.049940687s ago: executing program 0 (id=9910): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0xc3, 0x5, 0x178000, 0x5, 0xffffff81}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff7}]}}}]}, 0x58}}, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5, './file0/file0/..\x00'}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x37, 0xd, 0xffffffff, 0x0, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x0, 0x3b2e, 0x344f2dc6}}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000380)={r5, 0x1, 0x6}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a80)=@newtaction={0x48, 0x30, 0x400, 0x0, 0x8000, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5000000000, r3, &(0x7f0000000140)=0xfffffffffffffffb, 0x3, 0x8) syz_emit_ethernet(0x2f2, &(0x7f00000006c0)={@multicast, @multicast, @void, {@ipv4={0x800, @gre={{0xf, 0x4, 0x2, 0x2a, 0x2e4, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x12, "a838c1da608d7686d09d1f3343c2e03f"}, @lsrr={0x83, 0xf, 0xfd, [@dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x86, 0x0, [], "a775ffc0080250e37146c42a085ebca8b835ae1acba8e1b353a9f0a27f03c1bf56d07ae314e82b6cbd6bfdf290e9b59cdf93421feed47d2a17221501de232215c89fa19699d2b0c50f1c9e9e62c063a5ed28591ba3dc5c9c32cfeeebc0f33ef9c4fd56bbf643eda6239d1f7b5cddfa2714b0727890bf2c5974991792d96f825f5ad012e2e67c"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x200, 0x7c4, 0x7], "bfa57cf8718e7f4ba9c23d282f51"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3ff, 0x3], "228b1e56f933bce975b5d599ab9d7af5cd4edf1efb52f2648d4bd2f074e5343ad3c8af7fb8caf689c1acdf2536d8e13f66eac1a73f2bb4d852e3dcb093ec201a65ac0fb947b4e4d30871681ec049e73b34de40a19ed2767bffb468835301838a48db03cd0049c451f7894482d203c137f4dce6d9074228a97b3c338fa2f943b6206ba513e691dbcea4a836b55ae17b471330fe2e9d9472b114c8f162a76ed5e28912fe57af8cbc72c4f73a0f0a85395c6e64bc1a7d8e758fa0fe1b186e9fb7e5663345e42d039101d98fb2f6f4d7e5d7fc27cbddc45233025999567b2775365943e789501016e336d5c84998477ab200d66495320f0cba58bf8d8e0e2d4451ce068648bc70d12e2429ec555c5c0b22"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x80, 0x3, 0x1, 0x2, 0x4, 0x2}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x1, 0x2, 0x1, 0x0, 0x6, 0x7}, 0x2, {0x101, 0x6, 0x2, 0x9, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "d117a5b492066fa285b1966d18f585860e6a47d6ef9eb6cfeec95e6e6821132416c457ac946df6ab9974c3a31e14472a395ee82644e623f83171a8625f076c628dd0148bd1d3bdbbd9c10017d873c841fd4811c4b949e9725bf384e3f574a6d8d13551ab37a7350f38b909ea00ada02c9c2e18f2778be2ee568f37fb8ea310c74ba38aebbb2c14815f0039e34566214ad18b1aea29816dd025c117185327e8db112d738dbdc1810fa3ab0434774b25f95ba941acba3044"}}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="346871d92d7a62f5444f181848320b21580067acd8338fbcd83e3d6f3c9b53cf291e85995b5a5a388d86bab79738c023d34fd135e9f5748b28c4178e4581b213d10b9d12d037a6ba638f522fd98971760bf283ac5a0c0b17197fafc8a80f9febaffec2e6859d53670cdc44aa8e3c88ad0b5e71c5fd54afd4f39a019e63e949a998815ef867f7af66be29f7e3da2c5eb4d0455ca4f5ef6259e9e45eebe6abfcf80760409a7883ff54916a85f6503684c41c30a1556c3e5d9eec9803c68022344a73db5dc8ea33c9561b", 0xc9, 0x4000, 0x0, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x2, 0x7, "de6b334d4ad9517c58c28ce916a9c17bbc773f1982ce7f9c1bd39c83b0fb24e39e0d791bcc59e7edd771bd1246e1a4b914181059b9789cfcf80b0302ba6b00", 0x10003f}, 0x60, &(0x7f0000000580)=[{&(0x7f0000000200)="1789048417924392eeb711aefc8b38", 0xf}, {&(0x7f0000000540)="dc342d8065d963d572bf06a73b6973c0ea3f43da2b83fb1133023f248999e2f2de726f647447", 0x26}], 0x2, &(0x7f00000004c0)={0x30, 0x3a, 0x3e, "f1a8f54d5370dfc4facc2b46d51684ccf1fc7f8e59737f9e2f1be141fad7fbac"}, 0x30, 0x4}, 0x20008000) 32.988678822s ago: executing program 1 (id=9911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 32.928280476s ago: executing program 5 (id=9912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x7af8}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) 32.471380652s ago: executing program 5 (id=9913): writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x24044015) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000a40)={0x0, &(0x7f0000000a00)}) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, 0x6, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2) 32.17183207s ago: executing program 0 (id=9914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2b, 0x25dfcbbf, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x480d1}, 0x4c044) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001375196d1770000000000000000000500000a44000000090a010400000000000097000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001301400000011000100000000000000000001f1ab0a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 31.934322699s ago: executing program 1 (id=9915): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r0], 0x1000f) 31.441018967s ago: executing program 1 (id=9916): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x4, 0x0, 0xec0}}, 0x14}, 0x1, 0x1000000, 0x0, 0x448d3}, 0x400c000) 0s ago: executing program 33 (id=9914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2b, 0x25dfcbbf, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x480d1}, 0x4c044) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001375196d1770000000000000000000500000a44000000090a010400000000000097000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001301400000011000100000000000000000001f1ab0a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) kernel console output (not intermixed with test programs): 701] hsr_slave_0: entered promiscuous mode [ 1109.715662][ T4701] hsr_slave_1: entered promiscuous mode [ 1109.719329][ T4701] debugfs: 'hsr0' already exists in 'hsr' [ 1109.719353][ T4701] Cannot create hsr debugfs directory [ 1110.061543][ T4840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9074'. [ 1110.061583][ T4840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9074'. [ 1110.514490][ T4854] netlink: 'syz.1.9078': attribute type 1 has an invalid length. [ 1110.592225][ T1447] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1110.990898][ T4854] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1111.020968][ T4855] bond29: (slave veth0_to_bond): making interface the new active one [ 1111.037149][ T4855] bond29: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1111.037715][ T4852] sit0: entered promiscuous mode [ 1111.090741][ T4852] netlink: 'syz.2.9076': attribute type 1 has an invalid length. [ 1111.090771][ T4852] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9076'. [ 1111.148841][ T4856] macvlan5: entered promiscuous mode [ 1111.148873][ T4856] macvlan5: entered allmulticast mode [ 1111.150226][ T4856] bond29: entered promiscuous mode [ 1111.168155][ T4856] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1111.195728][ T4856] bond29: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1111.208096][ T4856] bond29: left promiscuous mode [ 1111.289328][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9082'. [ 1111.542448][T23564] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 1111.755706][ T4886] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9086'. [ 1111.783107][ T5640] Bluetooth: hci4: command tx timeout [ 1111.980061][ T4701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1111.980104][ T4701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1111.980130][ T4701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.980156][ T4701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1112.511204][ T4701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1112.511245][ T4701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1112.511272][ T4701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.557671][ T4701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1112.752551][ T4701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1112.752590][ T4701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1112.752616][ T4701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.752639][ T4701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1113.066201][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9093'. [ 1113.066536][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9093'. [ 1113.066815][ T4701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1113.066847][ T4701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1113.066884][ T4701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.066907][ T4701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1113.137646][ T4932] netlink: 'syz.4.9093': attribute type 1 has an invalid length. [ 1113.137670][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9093'. [ 1113.193106][T23568] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1113.535873][ T4942] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9095'. [ 1113.776937][ T4701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1113.806739][ T4701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1113.810048][ T4701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1113.852088][ T5640] Bluetooth: hci4: command tx timeout [ 1113.855407][ T4701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1113.858619][ T4701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1113.926075][ T4701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1113.944985][ T4701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1113.977194][ T4701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1114.779294][ T4701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.880194][ T4701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.909188][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9104'. [ 1114.971137][ T4978] vlan4: entered allmulticast mode [ 1114.971163][ T4978] veth1_virt_wifi: entered allmulticast mode [ 1115.048207][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.048344][ T1447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.164157][ T4990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.235928][ T4985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9105'. [ 1115.275057][ T4989] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9105'. [ 1115.335362][T23565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.335488][T23565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.697916][ T5000] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9107'. [ 1116.091339][ T5005] netlink: 'syz.2.9110': attribute type 39 has an invalid length. [ 1116.167682][ T5640] Bluetooth: hci1: unexpected event 0x04 length: 17 > 10 [ 1116.167713][ T5640] Bluetooth: unknown link type 128 [ 1116.358337][ T5007] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1116.690258][ T5022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9115'. [ 1116.690288][ T5022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9115'. [ 1116.690304][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9115'. [ 1116.748650][ T5027] netlink: 'syz.5.9117': attribute type 1 has an invalid length. [ 1116.848395][ T5026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9117'. [ 1116.926999][ T5027] bond4: entered promiscuous mode [ 1116.927530][ T5027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1117.105648][ T5029] bond4: (slave bridge2): making interface the new active one [ 1117.105675][ T5029] bridge2: entered promiscuous mode [ 1117.165234][ T5029] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1117.343466][ T5042] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 1117.689248][ T5640] Bluetooth: hci1: unexpected event 0x04 length: 17 > 10 [ 1117.689277][ T5640] Bluetooth: unknown link type 128 [ 1117.779113][ T5068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9124'. [ 1117.876338][ T5071] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1118.115980][ T4701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.173516][ T5640] Bluetooth: hci1: command tx timeout [ 1118.285962][ T5081] netlink: 232 bytes leftover after parsing attributes in process `syz.5.9130'. [ 1118.546939][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9132'. [ 1118.808970][ T4701] veth0_vlan: entered promiscuous mode [ 1118.874480][ T4701] veth1_vlan: entered promiscuous mode [ 1118.894082][T19512] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1119.110706][ T4701] veth0_macvtap: entered promiscuous mode [ 1119.138337][ T5105] netlink: 'syz.1.9137': attribute type 1 has an invalid length. [ 1119.175846][ T4701] veth1_macvtap: entered promiscuous mode [ 1119.206972][ T5640] Bluetooth: hci1: unexpected event 0x04 length: 17 > 10 [ 1119.207005][ T5640] Bluetooth: unknown link type 128 [ 1119.446802][ T5107] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1119.543845][T23565] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1119.718171][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.809302][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.032093][T23568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.032206][T23568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.066576][T23568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.067167][T23568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.255718][ T5640] Bluetooth: hci1: command tx timeout [ 1120.554440][ T5129] x_tables: duplicate underflow at hook 1 [ 1120.570312][T19511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.570368][T19511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.765310][T19512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.765335][T19512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.176633][ T5152] __nla_validate_parse: 5 callbacks suppressed [ 1121.176658][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1121.748017][ T5640] Bluetooth: hci4: unexpected event 0x04 length: 17 > 10 [ 1121.748049][ T5640] Bluetooth: unknown link type 128 [ 1121.943358][ T5173] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1122.012473][ T5177] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9155'. [ 1122.032690][ T5169] ip6t_rpfilter: unknown options [ 1122.213179][ T5175] netlink: 'syz.1.9155': attribute type 29 has an invalid length. [ 1122.214948][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9155'. [ 1122.338522][ T5640] Bluetooth: hci1: command tx timeout [ 1122.399208][ T5185] netlink: 'syz.1.9160': attribute type 3 has an invalid length. [ 1122.399235][ T5185] netlink: 'syz.1.9160': attribute type 2 has an invalid length. [ 1122.447766][ T5187] netlink: ct family unspecified [ 1122.524206][ T5191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9162'. [ 1123.043744][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9165'. [ 1123.069643][ T5208] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1123.427181][ T5223] netlink: 676 bytes leftover after parsing attributes in process `syz.5.9169'. [ 1123.513818][ T5223] netlink: 676 bytes leftover after parsing attributes in process `syz.5.9169'. [ 1123.713551][ T5220] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1123.717471][ T5220] ip6t_rpfilter: unknown options [ 1123.760076][ T5236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9173'. [ 1123.771712][ T5640] Bluetooth: hci4: command tx timeout [ 1124.013040][T23565] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1124.919734][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9179'. [ 1125.198954][ T5281] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1125.665654][ T5293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9186'. [ 1125.770861][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1125.785814][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1125.787908][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1125.791033][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1125.799584][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1126.122166][ T5640] Bluetooth: hci4: unexpected event 0x04 length: 17 > 10 [ 1126.122201][ T5640] Bluetooth: unknown link type 128 [ 1126.597682][ T5314] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1126.622837][ T5308] ip6t_rpfilter: unknown options [ 1126.725872][ T5325] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 1126.745356][ T5325] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9192'. [ 1127.130317][ T5335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9195'. [ 1127.473971][ T5347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9199'. [ 1127.721741][ T5358] netlink: 'syz.0.9202': attribute type 30 has an invalid length. [ 1127.835459][ T5358] bond1: option arp_missed_max: invalid value (0) [ 1127.835486][ T5358] bond1: option arp_missed_max: allowed values 1 - 255 [ 1127.841031][ T5358] bond1 (unregistering): Released all slaves [ 1127.951385][ T5640] Bluetooth: hci3: command tx timeout [ 1128.169792][ T5377] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 1128.170009][ T5377] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 1128.182078][ T5640] Bluetooth: hci4: command tx timeout [ 1128.261026][ T5640] Bluetooth: hci2: unexpected event 0x04 length: 17 > 10 [ 1128.261057][ T5640] Bluetooth: unknown link type 128 [ 1128.487034][ T5385] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 1128.529341][ T5378] ip6t_rpfilter: unknown options [ 1128.953608][ T5395] openvswitch: netlink: Flow key attr not present in new flow. [ 1129.213195][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.213402][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.213572][ T5299] bridge_slave_0: entered allmulticast mode [ 1129.217524][ T5299] bridge_slave_0: entered promiscuous mode [ 1129.257549][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.257742][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.257938][ T5299] bridge_slave_1: entered allmulticast mode [ 1129.286584][ T5299] bridge_slave_1: entered promiscuous mode [ 1129.439371][ T5299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.464817][ T5299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.640886][ T5417] openvswitch: netlink: IPv4 tun info is not correct [ 1129.774416][T23563] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1129.825635][ T5299] team0: Port device team_slave_0 added [ 1129.917685][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9216'. [ 1129.940092][ T5299] team0: Port device team_slave_1 added [ 1130.021426][ T5640] Bluetooth: hci3: command tx timeout [ 1130.311270][ T5429] bond6: entered promiscuous mode [ 1130.311909][ T5429] bond6: entered allmulticast mode [ 1130.341697][ T5640] Bluetooth: hci2: command 0x0405 tx timeout [ 1130.368470][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.368490][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.368517][ T5299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.437771][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.437794][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.437823][ T5299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.666592][ T5299] hsr_slave_0: entered promiscuous mode [ 1130.667809][ T5299] hsr_slave_1: entered promiscuous mode [ 1130.668619][ T5299] debugfs: 'hsr0' already exists in 'hsr' [ 1130.668640][ T5299] Cannot create hsr debugfs directory [ 1131.364967][ T5299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.365008][ T5299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1131.365035][ T5299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.660710][ T5299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.660748][ T5299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1131.660774][ T5299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.850873][ T5299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.850914][ T5299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1131.850940][ T5299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.871932][ T5473] netlink: 'syz.2.9225': attribute type 1 has an invalid length. [ 1131.873002][ T5474] netlink: 'syz.2.9225': attribute type 1 has an invalid length. [ 1132.002462][ T5299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.002501][ T5299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1132.002561][ T5299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.092019][ T5640] Bluetooth: hci3: command tx timeout [ 1133.815480][ T5439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1133.869579][ T5299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1133.941001][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1133.949826][ T5299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1133.998380][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1134.000323][ T5299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1134.065675][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1134.067132][ T5299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1134.095731][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1134.174694][ T5640] Bluetooth: hci3: command tx timeout [ 1134.340735][ T5481] netlink: 13803 bytes leftover after parsing attributes in process `syz.2.9230'. [ 1135.036474][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9233'. [ 1135.037600][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9233'. [ 1135.167198][ T5299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.275868][ T5299] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.421162][T23566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.421278][T23566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.494878][T23566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.494997][T23566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.534228][T23568] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1135.654852][ T5525] netlink: 316 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1135.654881][ T5525] netlink: 316 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1136.563581][ T5548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1136.948063][ T5299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.068061][ T5299] veth0_vlan: entered promiscuous mode [ 1137.088095][ T5299] veth1_vlan: entered promiscuous mode [ 1137.199499][ T5299] veth0_macvtap: entered promiscuous mode [ 1137.221128][ T5299] veth1_macvtap: entered promiscuous mode [ 1137.262062][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.267389][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.351727][T23568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.351780][T23568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.479810][T23559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.490961][T23563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.562597][ T5560] netlink: 'syz.0.9243': attribute type 12 has an invalid length. [ 1137.564189][ T5560] xt_SECMARK: invalid mode: 9 [ 1137.619149][ T5561] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 1137.632242][ T5561] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9243'. [ 1138.173924][ T5560] geneve2: entered promiscuous mode [ 1138.557859][ T5527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1138.732705][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1139.003754][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9246'. [ 1139.537882][T23568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.537907][T23568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.047402][T23559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.047426][T23559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.165998][ T5593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1140.298754][ T5609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1140.606016][T23563] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1141.285638][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1141.303060][T23568] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1141.305879][ T2914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1141.340134][ T2914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1141.358532][ T2914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1141.373614][ T2914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1142.581106][T19512] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1142.790578][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.790775][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.790921][ T5626] bridge_slave_0: entered allmulticast mode [ 1142.794038][ T5626] bridge_slave_0: entered promiscuous mode [ 1142.797566][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.797761][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.798270][ T5626] bridge_slave_1: entered allmulticast mode [ 1142.800537][ T5626] bridge_slave_1: entered promiscuous mode [ 1142.860741][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.865667][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.913387][ T5626] team0: Port device team_slave_0 added [ 1142.917079][ T5626] team0: Port device team_slave_1 added [ 1142.965269][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.965291][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.965317][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.967910][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.967925][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.967952][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.044689][ T5626] hsr_slave_0: entered promiscuous mode [ 1143.046001][ T5626] hsr_slave_1: entered promiscuous mode [ 1143.046956][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 1143.046976][ T5626] Cannot create hsr debugfs directory [ 1143.117832][ T5595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1143.469896][ T5640] Bluetooth: hci0: command tx timeout [ 1144.253957][ T5626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.253997][ T5626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.438458][ T5692] xt_NETMAP: bad MAP_IPS. [ 1144.749500][ T5626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.749540][ T5626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.068081][T23568] IPVS: starting estimator thread 0... [ 1145.151855][ T5712] IPVS: using max 26 ests per chain, 62400 per kthread [ 1145.541490][ T5640] Bluetooth: hci0: command tx timeout [ 1145.724517][ T5706] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1145.728491][ T5706] bond1 (unregistering): Released all slaves [ 1145.782715][T23560] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1146.069291][ T5626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.069333][ T5626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.354132][ T5626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.354171][ T5626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.490682][ T5751] netlink: 'syz.0.9281': attribute type 5 has an invalid length. [ 1146.498167][ T5750] ip_tables: iptables: counters copy to user failed while replacing table [ 1146.535493][ T5748] ip_tables: iptables: counters copy to user failed while replacing table [ 1147.612596][ T5640] Bluetooth: hci0: command tx timeout [ 1148.457763][ T5718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1148.538274][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1148.559244][ T5760] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9283'. [ 1148.654687][ T5760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9283'. [ 1148.655024][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1148.656504][ T5760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9283'. [ 1148.658827][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1148.708401][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1148.708533][ T5760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9283'. [ 1148.710071][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1148.760701][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1148.799374][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1148.871235][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1149.432057][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.572236][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.597778][T19512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.597901][T19512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.697971][ T5640] Bluetooth: hci0: command tx timeout [ 1149.877833][T23565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.877980][T23565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.126414][ T5795] netlink: 'syz.4.9291': attribute type 10 has an invalid length. [ 1150.200825][ T5795] veth0_vlan: entered allmulticast mode [ 1150.273504][ T5795] team0: Device veth0_vlan failed to register rx_handler [ 1150.737921][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9294'. [ 1150.755152][ T5815] netlink: 228 bytes leftover after parsing attributes in process `syz.5.9294'. [ 1151.546274][T23563] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1151.546604][T23563] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1151.771847][ T5640] Bluetooth: hci0: command tx timeout [ 1151.807893][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.914226][ T5626] veth0_vlan: entered promiscuous mode [ 1151.936641][ T5626] veth1_vlan: entered promiscuous mode [ 1151.987492][ T5626] veth0_macvtap: entered promiscuous mode [ 1152.009563][ T5626] veth1_macvtap: entered promiscuous mode [ 1152.040123][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.072081][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.139005][T23568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.152675][T23565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.154726][T19512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.271956][T19512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.418743][ T5806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1153.433939][ T5814] netlink: 'syz.4.9295': attribute type 3 has an invalid length. [ 1153.433966][ T5814] netlink: 'syz.4.9295': attribute type 1 has an invalid length. [ 1153.433981][ T5814] netlink: 204 bytes leftover after parsing attributes in process `syz.4.9295'. [ 1153.617732][T23566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.617759][T23566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.816842][T23566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.816876][T23566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.087283][ T5851] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9303'. [ 1154.276370][ T5857] Cannot find add_set index 4 as target [ 1154.937379][ T5872] tipc: Enabling of bearer rejected, failed to enable media [ 1154.937677][ T5873] Bluetooth: MGMT ver 1.23 [ 1155.479652][ T5890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9314'. [ 1155.479690][ T5890] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1155.508910][ T5868] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1156.664189][ T5640] Bluetooth: hci0: command 0x0401 tx timeout [ 1157.294518][T23565] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1157.907885][ T5875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1157.911367][ T5906] netlink: 'syz.5.9319': attribute type 2 has an invalid length. [ 1158.698259][ T5935] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1158.772949][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1159.006912][ T5939] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1160.308907][ T5973] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 1162.617922][ T5958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1163.056307][T23560] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1163.709960][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9355'. [ 1163.745841][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9355'. [ 1163.902210][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1163.999487][ T6052] Bluetooth: MGMT ver 1.23 [ 1164.479672][ T6060] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9360'. [ 1164.479700][ T6060] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9360'. [ 1164.479716][ T6060] netlink: 'syz.0.9360': attribute type 6 has an invalid length. [ 1164.479729][ T6060] netlink: 'syz.0.9360': attribute type 5 has an invalid length. [ 1164.479742][ T6060] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9360'. [ 1166.300430][ T6032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1166.609358][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9363'. [ 1166.689535][ T6075] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9362'. [ 1167.369638][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9373'. [ 1167.695582][ T6073] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1168.168227][ T6122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1168.731800][ T2914] Bluetooth: hci0: command 0x0401 tx timeout [ 1168.815193][T23566] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1170.261746][ T2914] Bluetooth: hci2: command 0x0405 tx timeout [ 1170.339614][ T6094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1170.380266][ T6124] smc: net device lo erased user defined pnetid SYZ0 [ 1170.380409][ T6124] smc: smcd device lo erased user defined pnetid SYZ0 [ 1170.697861][ T6133] netlink: 'syz.4.9387': attribute type 1 has an invalid length. [ 1170.697886][ T6133] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1170.697903][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1170.936248][ T6128] bond0: (slave dummy0): Releasing backup interface [ 1170.975101][ T6128] bridge_slave_0: left allmulticast mode [ 1170.975134][ T6128] bridge_slave_0: left promiscuous mode [ 1170.975356][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.146129][ T6128] bridge_slave_1: left allmulticast mode [ 1171.146159][ T6128] bridge_slave_1: left promiscuous mode [ 1171.149769][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.216956][ T6128] bond0: (slave bond_slave_0): Releasing backup interface [ 1171.272574][ T6128] bond0: (slave bond_slave_1): Releasing backup interface [ 1171.353618][ T6128] team0: Port device team_slave_0 removed [ 1171.404680][ T6128] team0: Port device team_slave_1 removed [ 1171.437476][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.437506][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.475806][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.475835][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.501186][ T6128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1171.545322][ T6147] team0: Port device xfrm0 added [ 1171.546281][ T6129] geneve0: entered allmulticast mode [ 1171.724661][ T6168] netlink: 'syz.0.9395': attribute type 323 has an invalid length. [ 1173.299111][ T6219] syz_tun: entered allmulticast mode [ 1173.305522][ T6215] syz_tun: left allmulticast mode [ 1173.311720][ T6223] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9421'. [ 1173.324667][T23560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1174.585832][T23565] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1174.960342][ T6266] netlink: 'syz.5.9441': attribute type 9 has an invalid length. [ 1174.960370][ T6266] netlink: 'syz.5.9441': attribute type 7 has an invalid length. [ 1174.960383][ T6266] netlink: 'syz.5.9441': attribute type 8 has an invalid length. [ 1175.240411][T23563] IPVS: starting estimator thread 0... [ 1175.275657][ T6277] tc_dump_action: action bad kind [ 1175.321554][ T6276] IPVS: using max 27 ests per chain, 64800 per kthread [ 1175.864996][T23565] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1176.192283][ T6296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1176.303427][ T6302] netlink: 'syz.2.9457': attribute type 1 has an invalid length. [ 1176.392970][ T6302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1176.452228][ T6304] bond1: (slave geneve2): making interface the new active one [ 1176.454263][ T6304] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1176.549462][ T6308] netlink: 'syz.5.9456': attribute type 8 has an invalid length. [ 1176.963423][ T6312] syzkaller0: entered promiscuous mode [ 1176.963659][ T6312] syzkaller0: entered allmulticast mode [ 1176.975529][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9464'. [ 1178.058335][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9475'. [ 1178.737043][T23564] pim6reg: left allmulticast mode [ 1179.750541][ T6393] ref_ctr_offset mismatch. inode: 0x1ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 1180.457658][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9489'. [ 1180.591890][T23564] team0: Port device xfrm0 removed [ 1180.699328][T23564] bond25 (unregistering): (slave erspan1): Releasing active interface [ 1180.699359][T23564] erspan1 (unregistering): left promiscuous mode [ 1180.848667][T23564] bond27 (unregistering): (slave geneve2): Releasing active interface [ 1180.959446][T23564] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1181.000125][T23564] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 1181.092702][T23564] bond19 (unregistering): (slave bridge3): Releasing backup interface [ 1181.116778][T23564] bond21 (unregistering): (slave bridge4): Releasing backup interface [ 1181.159920][T23564] bond23 (unregistering): (slave bridge5): Releasing backup interface [ 1181.218692][T23564] bond24 (unregistering): (slave bridge7): Releasing backup interface [ 1181.253823][T23564] bond26 (unregistering): (slave bridge8): Releasing backup interface [ 1181.253854][T23564] bridge8 (unregistering): left promiscuous mode [ 1181.303406][T23564] bond28 (unregistering): (slave bridge9): Releasing backup interface [ 1181.337984][T23564] bond29 (unregistering): (slave bridge10): Releasing backup interface [ 1181.383305][T23564] bond32 (unregistering): (slave bridge12): Releasing backup interface [ 1181.383336][T23564] bridge12 (unregistering): left promiscuous mode [ 1181.420733][T23564] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1181.438375][T23564] bond0 (unregistering): (slave bond33): Releasing backup interface [ 1181.439207][T23564] bond0 (unregistering): Released all slaves [ 1181.467849][T23564] bond1 (unregistering): Released all slaves [ 1181.490001][T23564] bond2 (unregistering): Released all slaves [ 1181.513557][T23564] bond3 (unregistering): Released all slaves [ 1181.536493][T23564] bond4 (unregistering): Released all slaves [ 1181.562242][T23564] bond5 (unregistering): Released all slaves [ 1181.595754][T23564] bond6 (unregistering): Released all slaves [ 1181.663040][T23564] bond7 (unregistering): Released all slaves [ 1181.688136][T23564] bond8 (unregistering): Released all slaves [ 1181.713602][T23564] bond9 (unregistering): Released all slaves [ 1181.741879][T23564] bond10 (unregistering): Released all slaves [ 1181.768672][T23564] bond11 (unregistering): Released all slaves [ 1181.804921][T23564] bond12 (unregistering): Released all slaves [ 1181.828783][T23564] bond13 (unregistering): Released all slaves [ 1181.868309][T23564] bond14 (unregistering): Released all slaves [ 1181.899496][T23564] bond15 (unregistering): Released all slaves [ 1181.930138][T23564] bond16 (unregistering): Released all slaves [ 1181.970294][T23564] bond17 (unregistering): Released all slaves [ 1182.013766][T23564] bond18 (unregistering): Released all slaves [ 1182.044851][T23564] bond19 (unregistering): Released all slaves [ 1182.076701][T23564] bond20 (unregistering): Released all slaves [ 1182.100672][T23564] bond21 (unregistering): Released all slaves [ 1182.137366][T23564] bond22 (unregistering): Released all slaves [ 1182.174517][T23564] bond23 (unregistering): Released all slaves [ 1182.203717][T23564] bond24 (unregistering): Released all slaves [ 1182.241015][T23564] bond25 (unregistering): Released all slaves [ 1182.302153][T23564] bond26 (unregistering): Released all slaves [ 1182.326958][T23564] bond27 (unregistering): Released all slaves [ 1182.366819][T23564] bond28 (unregistering): Released all slaves [ 1182.399441][T23564] bond29 (unregistering): Released all slaves [ 1182.426472][T23564] bond30 (unregistering): Released all slaves [ 1182.462678][T23564] bond31 (unregistering): Released all slaves [ 1182.498025][T23564] bond32 (unregistering): Released all slaves [ 1182.525593][T23564] bond33 (unregistering): Released all slaves [ 1182.698586][ T6398] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1183.258536][T23564] tipc: Disabling bearer [ 1183.272757][T23564] tipc: Left network mode [ 1183.396119][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9491'. [ 1183.397539][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9493'. [ 1183.577698][T23566] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1183.840058][ T6425] xt_policy: output policy not valid in PREROUTING and INPUT [ 1184.528647][ T6436] x_tables: duplicate underflow at hook 4 [ 1184.605811][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9498'. [ 1185.542016][T23564] hsr_slave_0: left promiscuous mode [ 1185.549094][T23564] hsr_slave_1: left promiscuous mode [ 1185.604833][T23564] veth1_macvtap: left promiscuous mode [ 1185.605514][T23564] veth0_macvtap: left promiscuous mode [ 1186.384420][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9502'. [ 1188.047300][T23564] IPVS: stop unused estimator thread 0... [ 1188.171929][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9510'. [ 1188.182927][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9510'. [ 1188.278445][ T6509] netlink: 'syz.2.9512': attribute type 1 has an invalid length. [ 1188.328970][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9512'. [ 1188.332460][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9512'. [ 1188.392042][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9512'. [ 1188.945497][ T6513] x_tables: unsorted entry at hook 4 [ 1189.076683][ T6513] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1189.397407][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9518'. [ 1189.815360][ T6538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1190.624882][ T6554] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9526'. [ 1190.777690][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9528'. [ 1190.983788][ T6562] ip6t_rt: address list match requested but addrnr is 0 [ 1191.209856][ T6563] tc_dump_action: action bad kind [ 1191.240566][ T6570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1191.677363][ T6585] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1192.049995][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9540'. [ 1192.058862][ T6596] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9541'. [ 1192.449328][ T6605] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1192.622591][ T6612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9549'. [ 1192.858386][ T6615] tipc: Started in network mode [ 1192.858421][ T6615] tipc: Node identity 22c2c10a88f2, cluster identity 4711 [ 1192.858601][ T6615] tipc: Enabled bearer , priority 0 [ 1192.899144][ T6615] syzkaller0: entered promiscuous mode [ 1192.899169][ T6615] syzkaller0: entered allmulticast mode [ 1193.079200][ T6613] tipc: Resetting bearer [ 1193.307100][ T6613] tipc: Disabling bearer [ 1193.352906][ T6631] netlink: 'syz.1.9555': attribute type 1 has an invalid length. [ 1193.439117][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9556'. [ 1193.440256][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9556'. [ 1193.446535][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9556'. [ 1193.447584][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9556'. [ 1193.758402][ T6631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1193.759422][ T6635] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1194.030443][ T6635] bond1: entered allmulticast mode [ 1194.179681][ T6628] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1194.182092][ T6632] syzkaller1: entered promiscuous mode [ 1194.182301][ T6632] syzkaller1: entered allmulticast mode [ 1194.314636][ T6654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1194.575153][ T6663] IPVS: set_ctl: invalid protocol: 43 172.20.20.23:20001 [ 1194.807599][ T6660] 8021q: VLANs not supported on ipvlan1 [ 1195.248028][ T6678] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1195.288548][ T6675] openvswitch: netlink: Flow actions attr not present in new flow. [ 1195.861168][ T6695] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1195.962511][ T6696] __nla_validate_parse: 61 callbacks suppressed [ 1195.962533][ T6696] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9572'. [ 1195.962550][ T6696] openvswitch: netlink: Flow actions attr not present in new flow. [ 1196.669076][ T6720] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9582'. [ 1196.802538][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9582'. [ 1196.923114][ T6721] bridge_slave_0: left allmulticast mode [ 1196.923144][ T6721] bridge_slave_0: left promiscuous mode [ 1196.923405][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.145338][ T6721] bridge_slave_1: left allmulticast mode [ 1197.145369][ T6721] bridge_slave_1: left promiscuous mode [ 1197.145690][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.475552][ T6721] bond0: (slave bond_slave_0): Releasing backup interface [ 1197.597990][ T6721] bond0: (slave bond_slave_1): Releasing backup interface [ 1197.604810][ T6741] can: request_module (can-proto-4) failed. [ 1197.669696][ T6721] team0: Port device team_slave_0 removed [ 1197.685051][ T6721] team0: Port device team_slave_1 removed [ 1197.686001][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.686023][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.687779][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.687798][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.690156][ T6721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1198.217146][ T5640] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1198.247594][ T6764] syzkaller0: entered promiscuous mode [ 1198.247618][ T6764] syzkaller0: entered allmulticast mode [ 1198.466334][ T6770] netlink: 436 bytes leftover after parsing attributes in process `syz.4.9591'. [ 1198.488219][ T6759] openvswitch: netlink: Flow actions attr not present in new flow. [ 1198.675576][ T6770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9591'. [ 1198.796166][ T6778] ip_tables: iptables: counters copy to user failed while replacing table [ 1199.215996][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9597'. [ 1199.216051][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9597'. [ 1199.297598][ T6792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9598'. [ 1199.409528][T23564] IPVS: starting estimator thread 0... [ 1199.409868][ T6798] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 1199.493986][ T6800] IPVS: using max 26 ests per chain, 62400 per kthread [ 1199.530976][ T6805] netlink: 'syz.0.9598': attribute type 2 has an invalid length. [ 1200.234997][ T6819] openvswitch: netlink: Flow actions attr not present in new flow. [ 1200.420327][ T6831] netlink: 4880 bytes leftover after parsing attributes in process `syz.2.9608'. [ 1200.420356][ T6831] netlink: 5804 bytes leftover after parsing attributes in process `syz.2.9608'. [ 1200.549603][ T6839] ip_tables: iptables: counters copy to user failed while replacing table [ 1200.954791][ T6849] mac80211_hwsim hwsim78 wlan0: entered promiscuous mode [ 1201.048800][ T6849] __nla_validate_parse: 1 callbacks suppressed [ 1201.048826][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9613'. [ 1201.117494][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9618'. [ 1201.214437][ T6866] openvswitch: netlink: Flow actions attr not present in new flow. [ 1201.587402][ T6880] netlink: 'syz.1.9621': attribute type 1 has an invalid length. [ 1201.630277][ T6864] syzkaller0: entered promiscuous mode [ 1201.630306][ T6864] syzkaller0: entered allmulticast mode [ 1201.648232][ T6878] netlink: 764 bytes leftover after parsing attributes in process `syz.2.9620'. [ 1201.649851][ T6883] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20001 [ 1201.717549][ T6885] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20001 [ 1201.993157][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9625'. [ 1201.993193][ T6896] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1202.488329][ T6907] ip_tables: iptables: counters copy to user failed while replacing table [ 1202.676730][ T6909] openvswitch: netlink: Flow actions attr not present in new flow. [ 1206.582576][ T6749] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1208.282671][ T6938] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1208.366559][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1208.422580][ T6938] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1208.511376][ T6938] bond2 (unregistering): Released all slaves [ 1208.696319][ T6950] openvswitch: netlink: Flow actions attr not present in new flow. [ 1209.128659][ T6964] syzkaller0: entered promiscuous mode [ 1209.128684][ T6964] syzkaller0: entered allmulticast mode [ 1209.136784][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1209.553767][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9655'. [ 1209.689390][ T6981] openvswitch: netlink: Flow actions attr not present in new flow. [ 1210.565422][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.565448][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.879397][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1210.905428][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1210.905467][ T7022] netlink: 'syz.2.9660': attribute type 8 has an invalid length. [ 1210.905481][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1211.117271][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1211.287111][ T7034] syzkaller0: entered promiscuous mode [ 1211.287138][ T7034] syzkaller0: entered allmulticast mode [ 1211.398751][ T7038] openvswitch: netlink: Flow actions attr not present in new flow. [ 1211.518724][ T7041] netlink: 'syz.5.9669': attribute type 1 has an invalid length. [ 1211.518750][ T7041] netlink: 'syz.5.9669': attribute type 2 has an invalid length. [ 1211.518764][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9669'. [ 1211.976423][ T7061] netlink: 232 bytes leftover after parsing attributes in process `syz.5.9674'. [ 1212.180489][ T7068] syzkaller0: entered promiscuous mode [ 1212.180515][ T7068] syzkaller0: entered allmulticast mode [ 1212.454071][ T7079] openvswitch: netlink: Flow actions attr not present in new flow. [ 1212.469249][ T7078] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9680'. [ 1212.684350][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9682'. [ 1213.201859][ T7112] netlink: 'syz.0.9688': attribute type 1 has an invalid length. [ 1213.535320][ T7124] syzkaller0: entered promiscuous mode [ 1213.535345][ T7124] syzkaller0: entered allmulticast mode [ 1213.738778][ T7129] netlink: 'syz.4.9695': attribute type 1 has an invalid length. [ 1213.738803][ T7129] netlink: 'syz.4.9695': attribute type 2 has an invalid length. [ 1213.738816][ T7129] netlink: 'syz.4.9695': attribute type 3 has an invalid length. [ 1213.738828][ T7129] __nla_validate_parse: 1 callbacks suppressed [ 1213.738840][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9695'. [ 1213.940678][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9698'. [ 1213.967915][ T7131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1214.370072][ T7142] netlink: 'syz.2.9699': attribute type 1 has an invalid length. [ 1214.370884][ T7142] block nbd296: server does not support multiple connections per device. [ 1214.390398][ T7142] block nbd296: shutting down sockets [ 1214.840229][ T7150] openvswitch: netlink: Flow actions attr not present in new flow. [ 1215.210435][ T7167] netlink: 'syz.4.9708': attribute type 1 has an invalid length. [ 1215.496492][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9709'. [ 1215.536739][T19512] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1215.560939][ T7173] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1215.561010][ T7173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.919986][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9712'. [ 1216.010730][ T7166] netlink: 21 bytes leftover after parsing attributes in process `syz.2.9707'. [ 1216.362514][ T7184] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1217.569742][ T7221] syzkaller0: entered promiscuous mode [ 1217.569979][ T7221] syzkaller0: entered allmulticast mode [ 1218.422669][ T7249] openvswitch: netlink: Flow actions attr not present in new flow. [ 1219.088131][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9726'. [ 1219.177714][ T7263] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1219.540299][ T7280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9732'. [ 1220.068312][ T7290] syzkaller0: entered promiscuous mode [ 1220.068337][ T7290] syzkaller0: entered allmulticast mode [ 1220.077175][ T7291] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9736'. [ 1220.356956][ T7294] openvswitch: netlink: Flow actions attr not present in new flow. [ 1220.761041][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9741'. [ 1221.002687][ T7310] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1221.103189][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9743'. [ 1221.197736][ T7318] FAULT_INJECTION: forcing a failure. [ 1221.197736][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.197772][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.2.9744 Not tainted syzkaller #0 PREEMPT(full) [ 1221.197795][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1221.197807][ T7318] Call Trace: [ 1221.197816][ T7318] [ 1221.197825][ T7318] dump_stack_lvl+0xe8/0x150 [ 1221.197865][ T7318] should_fail_ex+0x410/0x560 [ 1221.197898][ T7318] _copy_from_iter+0x1d3/0x1660 [ 1221.197935][ T7318] ? lock_acquire+0x115/0x350 [ 1221.197959][ T7318] ? __pfx__copy_from_iter+0x10/0x10 [ 1221.197986][ T7318] ? lock_acquire+0x115/0x350 [ 1221.198017][ T7318] copy_page_from_iter+0x219/0x2d0 [ 1221.198046][ T7318] tun_get_user+0x1c16/0x44d0 [ 1221.198076][ T7318] ? tun_get_user+0x70a/0x44d0 [ 1221.198129][ T7318] ? aa_file_perm+0x4ed/0x15f0 [ 1221.198161][ T7318] ? __pfx_tun_get_user+0x10/0x10 [ 1221.198188][ T7318] ? __lock_acquire+0x747/0x2de0 [ 1221.198224][ T7318] ? ref_tracker_alloc+0x341/0x4b0 [ 1221.198250][ T7318] ? lock_acquire+0x115/0x350 [ 1221.198272][ T7318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1221.198302][ T7318] ? lock_acquire+0x115/0x350 [ 1221.198323][ T7318] ? tun_get+0x1c/0x2f0 [ 1221.198352][ T7318] ? tun_get+0x1c/0x2f0 [ 1221.198374][ T7318] ? tun_get+0x1c/0x2f0 [ 1221.198402][ T7318] tun_chr_write_iter+0x113/0x200 [ 1221.198430][ T7318] vfs_write+0x612/0xba0 [ 1221.198463][ T7318] ? __pfx_vfs_write+0x10/0x10 [ 1221.198498][ T7318] ? __fget_files+0x2a/0x420 [ 1221.198537][ T7318] ksys_write+0x150/0x270 [ 1221.198559][ T7318] ? __pfx_ksys_write+0x10/0x10 [ 1221.198591][ T7318] do_syscall_64+0x166/0x520 [ 1221.198623][ T7318] ? trace_irq_disable+0x3b/0x140 [ 1221.198646][ T7318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.198669][ T7318] ? clear_bhb_loop+0x70/0xc0 [ 1221.198695][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.198716][ T7318] RIP: 0033:0x7effa895e98e [ 1221.198736][ T7318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1221.198754][ T7318] RSP: 002b:00007effa98e2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1221.198778][ T7318] RAX: ffffffffffffffda RBX: 00007effa98e36c0 RCX: 00007effa895e98e [ 1221.198794][ T7318] RDX: 0000000000000056 RSI: 0000200000000380 RDI: 00000000000000c8 [ 1221.198808][ T7318] RBP: 00007effa98e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.198822][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.198836][ T7318] R13: 00007effa8c26038 R14: 00007effa8c25fa0 R15: 00007fff44251b08 [ 1221.198871][ T7318] [ 1221.226577][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9734'. [ 1221.307551][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e13a800: rx timeout, send abort [ 1221.658715][ T7325] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1221.807615][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e13a800: abort rx timeout. Force session deactivation [ 1221.810690][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e13a400: rx timeout, send abort [ 1222.177440][ T7338] syzkaller0: entered promiscuous mode [ 1222.177619][ T7338] syzkaller0: entered allmulticast mode [ 1222.201985][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9752'. [ 1222.202018][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9752'. [ 1222.259342][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9752'. [ 1222.259375][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9752'. [ 1222.286084][ T7339] openvswitch: netlink: Flow actions attr not present in new flow. [ 1222.310750][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e13a400: abort rx timeout. Force session deactivation [ 1222.720599][ T7355] pim6reg: entered allmulticast mode [ 1222.776916][ T7358] netlink: 'syz.4.9758': attribute type 1 has an invalid length. [ 1222.796729][ T7355] macvlan2: entered promiscuous mode [ 1222.796754][ T7355] macvlan2: entered allmulticast mode [ 1223.005264][ T7367] xfrm0: mtu less than device minimum [ 1223.031032][ T7364] netlink: 'syz.0.9760': attribute type 1 has an invalid length. [ 1223.124255][ T7364] bond1: entered promiscuous mode [ 1223.126564][ T7364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1223.179321][ T7368] ipvlan2: entered allmulticast mode [ 1223.179347][ T7368] bond1: entered allmulticast mode [ 1223.341781][ T7364] bond1: (slave bridge2): making interface the new active one [ 1223.341811][ T7364] bridge2: entered promiscuous mode [ 1223.342063][ T7364] bridge2: entered allmulticast mode [ 1223.348285][ T7364] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1223.736290][ T7387] FAULT_INJECTION: forcing a failure. [ 1223.736290][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.736326][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.4.9769 Not tainted syzkaller #0 PREEMPT(full) [ 1223.736348][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1223.736361][ T7387] Call Trace: [ 1223.736370][ T7387] [ 1223.736380][ T7387] dump_stack_lvl+0xe8/0x150 [ 1223.736421][ T7387] should_fail_ex+0x410/0x560 [ 1223.736452][ T7387] ? __alloc_skb+0x1db/0x7a0 [ 1223.736481][ T7387] should_failslab+0xa8/0x100 [ 1223.736512][ T7387] ? __alloc_skb+0x1db/0x7a0 [ 1223.736535][ T7387] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1223.736566][ T7387] ? __alloc_skb+0x18d/0x7a0 [ 1223.736593][ T7387] ? __alloc_skb+0x1db/0x7a0 [ 1223.736628][ T7387] __alloc_skb+0x1db/0x7a0 [ 1223.736660][ T7387] tcp_make_synack+0xf4/0x1fd0 [ 1223.736777][ T7387] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1223.736822][ T7387] ? __pfx_tcp_make_synack+0x10/0x10 [ 1223.736847][ T7387] ? inet6_csk_route_req+0x5d5/0x8c0 [ 1223.736913][ T7387] ? lock_acquire+0x115/0x350 [ 1223.736941][ T7387] ? __pfx_inet6_csk_route_req+0x10/0x10 [ 1223.736984][ T7387] tcp_v6_send_synack+0xf5/0xd60 [ 1223.737043][ T7387] ? __pfx_get_random_u32+0x10/0x10 [ 1223.737140][ T7387] ? __pfx_tcp_v6_send_synack+0x10/0x10 [ 1223.737169][ T7387] ? rt6_score_route+0x165/0x380 [ 1223.737219][ T7387] ? __lock_acquire+0x747/0x2de0 [ 1223.737251][ T7387] tcp_rtx_synack+0x19d/0x660 [ 1223.737279][ T7387] ? __pfx_tcp_rtx_synack+0x10/0x10 [ 1223.737301][ T7387] ? tcp_parse_options+0x12d7/0x13a0 [ 1223.737362][ T7387] ? tcp_oow_rate_limited+0x22d/0x390 [ 1223.737391][ T7387] tcp_check_req+0xb17/0x1fa0 [ 1223.737454][ T7387] ? __pfx_tcp_check_req+0x10/0x10 [ 1223.737475][ T7387] ? sk_filter_trim_cap+0x192/0xd70 [ 1223.737501][ T7387] ? tcp_v6_fill_cb+0x3d/0x4c0 [ 1223.737524][ T7387] ? __asan_memmove+0x40/0x70 [ 1223.737546][ T7387] ? tcp_v6_fill_cb+0x260/0x4c0 [ 1223.737580][ T7387] tcp_v6_rcv+0x1166/0x2d90 [ 1223.737641][ T7387] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1223.737665][ T7387] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1223.737694][ T7387] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1223.737714][ T7387] ip6_protocol_deliver_rcu+0xab9/0x1680 [ 1223.737797][ T7387] ip6_input_finish+0x191/0x370 [ 1223.737833][ T7387] NF_HOOK+0x336/0x3c0 [ 1223.737864][ T7387] ? __pfx_ip6_input_finish+0x10/0x10 [ 1223.737892][ T7387] ? NF_HOOK+0x9e/0x3c0 [ 1223.737919][ T7387] ? __pfx_NF_HOOK+0x10/0x10 [ 1223.737950][ T7387] ? __pfx_ip6_input_finish+0x10/0x10 [ 1223.737993][ T7387] ip6_input+0x16a/0x270 [ 1223.738020][ T7387] ? ip6_input+0x23/0x270 [ 1223.738051][ T7387] NF_HOOK+0x336/0x3c0 [ 1223.738078][ T7387] ? __pfx_sock_wfree+0x10/0x10 [ 1223.738107][ T7387] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1223.738135][ T7387] ? NF_HOOK+0x9e/0x3c0 [ 1223.738162][ T7387] ? __pfx_NF_HOOK+0x10/0x10 [ 1223.738187][ T7387] ? ip6_rcv_core+0xa1/0x1870 [ 1223.738218][ T7387] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1223.738255][ T7387] ? netif_receive_skb+0x102/0xbf0 [ 1223.738281][ T7387] netif_receive_skb+0x278/0xbf0 [ 1223.738312][ T7387] ? __pfx_netif_receive_skb+0x10/0x10 [ 1223.738341][ T7387] ? rcu_is_watching+0x16/0xb0 [ 1223.738366][ T7387] ? tun_rx_batched+0x185/0x790 [ 1223.738393][ T7387] tun_rx_batched+0x1de/0x790 [ 1223.738425][ T7387] ? __pfx_tun_rx_batched+0x10/0x10 [ 1223.738451][ T7387] ? lock_acquire+0x115/0x350 [ 1223.738481][ T7387] ? tun_get_user+0x23ba/0x44d0 [ 1223.738505][ T7387] ? __local_bh_enable_ip+0xd6/0x140 [ 1223.738532][ T7387] ? tun_get_user+0x27b0/0x44d0 [ 1223.738569][ T7387] tun_get_user+0x2be0/0x44d0 [ 1223.738608][ T7387] ? tun_get_user+0x27b0/0x44d0 [ 1223.738638][ T7387] ? aa_file_perm+0x4ed/0x15f0 [ 1223.738665][ T7387] ? __pfx_tun_get_user+0x10/0x10 [ 1223.738692][ T7387] ? __lock_acquire+0x747/0x2de0 [ 1223.738731][ T7387] ? ref_tracker_alloc+0x341/0x4b0 [ 1223.738757][ T7387] ? lock_acquire+0x115/0x350 [ 1223.738781][ T7387] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1223.738810][ T7387] ? lock_acquire+0x115/0x350 [ 1223.738833][ T7387] ? tun_get+0x1c/0x2f0 [ 1223.738863][ T7387] ? tun_get+0x1c/0x2f0 [ 1223.738887][ T7387] ? tun_get+0x1c/0x2f0 [ 1223.738915][ T7387] tun_chr_write_iter+0x113/0x200 [ 1223.738941][ T7387] vfs_write+0x612/0xba0 [ 1223.738973][ T7387] ? __pfx_vfs_write+0x10/0x10 [ 1223.739007][ T7387] ? __fget_files+0x2a/0x420 [ 1223.739048][ T7387] ksys_write+0x150/0x270 [ 1223.739071][ T7387] ? __pfx_ksys_write+0x10/0x10 [ 1223.739106][ T7387] do_syscall_64+0x166/0x520 [ 1223.739135][ T7387] ? trace_irq_disable+0x3b/0x140 [ 1223.739157][ T7387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.739178][ T7387] ? clear_bhb_loop+0x70/0xc0 [ 1223.739205][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.739227][ T7387] RIP: 0033:0x7f0d9855e98e [ 1223.739247][ T7387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1223.739265][ T7387] RSP: 002b:00007f0d99389fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1223.739289][ T7387] RAX: ffffffffffffffda RBX: 00007f0d9938a6c0 RCX: 00007f0d9855e98e [ 1223.739305][ T7387] RDX: 0000000000000056 RSI: 0000200000000380 RDI: 00000000000000c8 [ 1223.739318][ T7387] RBP: 00007f0d9938a090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.739332][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.739346][ T7387] R13: 00007f0d98826038 R14: 00007f0d98825fa0 R15: 00007ffd96b199e8 [ 1223.739383][ T7387] [ 1223.942171][ T7389] syzkaller0: entered promiscuous mode [ 1223.942195][ T7389] syzkaller0: entered allmulticast mode [ 1224.614739][ T7411] __nla_validate_parse: 5 callbacks suppressed [ 1224.614761][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9774'. [ 1225.007562][ T7418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9777'. [ 1225.144644][ T7408] syzkaller0: entered promiscuous mode [ 1225.144877][ T7408] syzkaller0: entered allmulticast mode [ 1225.730869][ T7448] ip_tables: iptables: counters copy to user failed while replacing table [ 1225.927877][ T7453] netlink: 'syz.2.9783': attribute type 1 has an invalid length. [ 1226.169318][ T7457] x_tables: duplicate underflow at hook 1 [ 1226.182884][ T7459] netlink: 'syz.2.9783': attribute type 1 has an invalid length. [ 1226.253470][ T7464] x_tables: duplicate underflow at hook 1 [ 1231.704708][ T2914] Bluetooth: hci4: command 0x0406 tx timeout [ 1231.814483][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9786'. [ 1232.319583][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9789'. [ 1232.436791][ T6744] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1232.437431][ T6744] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1232.437482][ T6744] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - b2:f5:0c:0c:5e:94 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1232.824039][ T6744] team0: Port device bridge1 removed [ 1232.848427][ T6744] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1232.870324][ T6744] bond12 (unregistering): (slave bridge0): Releasing backup interface [ 1232.870353][ T6744] bridge0 (unregistering): left promiscuous mode [ 1232.870372][ T6744] bridge0 (unregistering): left allmulticast mode [ 1232.913617][ T6744] bond13 (unregistering): (slave bridge3): Releasing backup interface [ 1232.935172][ T6744] bond15 (unregistering): (slave bridge4): Releasing active interface [ 1232.987904][ T6744] bond0 (unregistering): Released all slaves [ 1233.017479][ T6744] bond1 (unregistering): Released all slaves [ 1233.046991][ T6744] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1233.049757][ T6744] bond2 (unregistering): Released all slaves [ 1233.090543][ T6744] bond3 (unregistering): Released all slaves [ 1233.125820][ T6744] bond4 (unregistering): Released all slaves [ 1233.149517][ T6744] bond5 (unregistering): Released all slaves [ 1233.175676][ T6744] bond6 (unregistering): Released all slaves [ 1233.209466][ T6744] bond7 (unregistering): Released all slaves [ 1233.232441][ T6744] bond8 (unregistering): Released all slaves [ 1233.258030][ T6744] bond9 (unregistering): Released all slaves [ 1233.288656][ T6744] bond10 (unregistering): Released all slaves [ 1233.315120][ T6744] bond11 (unregistering): Released all slaves [ 1233.345918][ T6744] bond12 (unregistering): Released all slaves [ 1233.371048][ T6744] bond13 (unregistering): Released all slaves [ 1233.403356][ T6744] bond14 (unregistering): Released all slaves [ 1233.437794][ T6744] bond15 (unregistering): Released all slaves [ 1233.463922][ T6744] bond16 (unregistering): Released all slaves [ 1233.489004][ T6744] bond17 (unregistering): Released all slaves [ 1233.530487][ T6744] bond18 (unregistering): Released all slaves [ 1233.559163][ T6744] bond19 (unregistering): Released all slaves [ 1233.657724][ T7476] macvlan0: entered promiscuous mode [ 1233.657751][ T7476] veth1_vlan: entered promiscuous mode [ 1234.016677][ T7494] team0 (unregistering): Port device xfrm0 removed [ 1234.155933][ T6744] tipc: Disabling bearer [ 1234.186108][ T6744] tipc: Left network mode [ 1234.282321][ T6744] IPVS: stopping master sync thread 25775 ... [ 1235.197134][ T7526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9797'. [ 1235.693031][ T7547] netlink: 'syz.1.9802': attribute type 1 has an invalid length. [ 1235.719372][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9800'. [ 1235.907737][ T7551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9801'. [ 1235.999635][ T7555] netlink: 4880 bytes leftover after parsing attributes in process `syz.0.9803'. [ 1235.999662][ T7555] netlink: 5804 bytes leftover after parsing attributes in process `syz.0.9803'. [ 1236.289781][ T7558] syzkaller0: entered promiscuous mode [ 1236.290015][ T7558] syzkaller0: entered allmulticast mode [ 1236.443325][ T6744] team0: Port device wlan0 removed [ 1236.447324][ T7567] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1236.929794][ T7581] netlink: 'syz.1.9812': attribute type 21 has an invalid length. [ 1236.929819][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9812'. [ 1237.034793][ T7587] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9814'. [ 1237.140773][ T6744] hsr_slave_0: left promiscuous mode [ 1237.176379][ T6744] hsr_slave_1: left promiscuous mode [ 1237.177514][ T6744] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1237.177538][ T6744] batman_adv: batadv0: Removing interface: ipvlan2 [ 1237.203875][ T6744] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1237.203899][ T6744] batman_adv: batadv0: Removing interface: ipvlan3 [ 1237.246848][ T6744] veth1_macvtap: left promiscuous mode [ 1237.246894][ T6744] veth0_macvtap: left promiscuous mode [ 1237.247038][ T6744] veth1_vlan: left promiscuous mode [ 1237.247112][ T6744] veth0_vlan: left promiscuous mode [ 1237.646786][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9816'. [ 1237.782146][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9820'. [ 1237.835222][ T7602] netlink: 4880 bytes leftover after parsing attributes in process `syz.5.9819'. [ 1237.835261][ T7602] netlink: 5804 bytes leftover after parsing attributes in process `syz.5.9819'. [ 1238.287865][ T7608] FAULT_INJECTION: forcing a failure. [ 1238.287865][ T7608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.287901][ T7608] CPU: 1 UID: 0 PID: 7608 Comm: syz.0.9823 Not tainted syzkaller #0 PREEMPT(full) [ 1238.287926][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1238.287938][ T7608] Call Trace: [ 1238.287946][ T7608] [ 1238.287960][ T7608] dump_stack_lvl+0xe8/0x150 [ 1238.287997][ T7608] should_fail_ex+0x410/0x560 [ 1238.288029][ T7608] _copy_from_user+0x2d/0xb0 [ 1238.288059][ T7608] ___sys_sendmsg+0x1c6/0x360 [ 1238.288090][ T7608] ? __lock_acquire+0x747/0x2de0 [ 1238.288118][ T7608] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.288188][ T7608] ? __fget_files+0x2a/0x420 [ 1238.288216][ T7608] ? __fget_files+0x3a2/0x420 [ 1238.288265][ T7608] __x64_sys_sendmsg+0x1b1/0x290 [ 1238.288299][ T7608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1238.288353][ T7608] do_syscall_64+0x166/0x520 [ 1238.288382][ T7608] ? trace_irq_disable+0x3b/0x140 [ 1238.288405][ T7608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.288426][ T7608] ? clear_bhb_loop+0x70/0xc0 [ 1238.288451][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.288472][ T7608] RIP: 0033:0x7f1e9139e159 [ 1238.288492][ T7608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.288511][ T7608] RSP: 002b:00007f1e92257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.288534][ T7608] RAX: ffffffffffffffda RBX: 00007f1e91625fa0 RCX: 00007f1e9139e159 [ 1238.288549][ T7608] RDX: 0000000000000000 RSI: 0000200000003140 RDI: 0000000000000003 [ 1238.288563][ T7608] RBP: 00007f1e92257090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.288576][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.288589][ T7608] R13: 00007f1e91626038 R14: 00007f1e91625fa0 R15: 00007fffb7350768 [ 1238.288623][ T7608] [ 1238.821120][ T7593] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1238.906490][ T7604] dvmrp0: entered allmulticast mode [ 1238.911564][ T6750] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.911626][ T6750] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.911660][ T6750] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.911693][ T6750] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.248489][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9828'. [ 1239.272086][ T7624] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1239.434354][ T7627] bridge0: port 4(veth1_to_bridge) entered blocking state [ 1239.434458][ T7627] bridge0: port 4(veth1_to_bridge) entered disabled state [ 1239.434652][ T7627] veth1_to_bridge: entered allmulticast mode [ 1239.441163][ T7627] veth1_to_bridge: entered promiscuous mode [ 1239.495640][ T7627] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1239.496208][ T7627] bridge0: port 4(veth1_to_bridge) entered blocking state [ 1239.496311][ T7627] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 1239.928912][ T6744] IPVS: stop unused estimator thread 0... [ 1240.002009][ T7649] netlink: 4880 bytes leftover after parsing attributes in process `syz.4.9831'. [ 1240.002037][ T7649] netlink: 5804 bytes leftover after parsing attributes in process `syz.4.9831'. [ 1240.354092][ T7665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9835'. [ 1240.558899][ T7676] netlink: 'syz.1.9839': attribute type 29 has an invalid length. [ 1240.675773][ T7681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1240.784070][ T7678] veth3: entered allmulticast mode [ 1240.883293][ T7694] Cannot find set identified by id 65534 to match [ 1240.887396][ T7694] tipc: Failed to remove unknown binding: 66,1,1/0:3281211107/3281211109 [ 1241.090003][ T7707] netlink: 'syz.0.9847': attribute type 9 has an invalid length. [ 1241.298162][ T7715] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1241.313457][ T7715] netlink: 'syz.1.9852': attribute type 11 has an invalid length. [ 1241.481021][ T7721] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1241.529150][ T7721] bond2: (slave lo): Enslaving as an active interface with an up link [ 1241.541801][ T7721] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1241.709756][ T7741] netlink: 'syz.1.9859': attribute type 24 has an invalid length. [ 1241.722705][ T7741] netlink: 'syz.1.9859': attribute type 23 has an invalid length. [ 1241.722969][ T7741] netlink: 'syz.1.9859': attribute type 23 has an invalid length. [ 1241.723236][ T7741] netlink: 'syz.1.9859': attribute type 23 has an invalid length. [ 1241.723484][ T7741] netlink: 'syz.1.9859': attribute type 23 has an invalid length. [ 1241.723730][ T7741] netlink: 'syz.1.9859': attribute type 23 has an invalid length. [ 1241.758559][ T7743] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1241.787850][ T7741] netlink: 'syz.1.9859': attribute type 23 has an invalid length. [ 1241.788124][ T7741] netlink: 'syz.1.9859': attribute type 23 has an invalid length. [ 1241.788340][ T7741] netlink: 'syz.1.9859': attribute type 23 has an invalid length. [ 1241.886585][ T7741] xt_connbytes: Forcing CT accounting to be enabled [ 1241.886621][ T7741] set match dimension is over the limit! [ 1242.557229][ T7780] __nla_validate_parse: 22 callbacks suppressed [ 1242.557253][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9873'. [ 1242.762711][ T7783] bond4: entered promiscuous mode [ 1242.768512][ T7783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1242.789787][ T7783] ipvlan2: entered allmulticast mode [ 1242.789814][ T7783] bond4: entered allmulticast mode [ 1242.810070][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9875'. [ 1242.834486][ T7787] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 1242.843696][ T7783] ipvlan3: entered allmulticast mode [ 1243.045804][ T7794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9876'. [ 1243.308831][ T7805] ip6gre1: entered allmulticast mode [ 1243.385010][ T7800] syzkaller0: entered promiscuous mode [ 1243.385038][ T7800] syzkaller0: entered allmulticast mode [ 1243.390058][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9884'. [ 1243.442981][ T7810] bond8: entered promiscuous mode [ 1243.443568][ T7810] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1243.513662][ T7823] bond8: (slave bridge6): making interface the new active one [ 1243.513692][ T7823] bridge6: entered promiscuous mode [ 1243.517359][ T7823] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1243.692939][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.693310][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.693555][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.693775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.693972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.292991][ C1] net_ratelimit: 2590 callbacks suppressed [ 1244.293020][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.293251][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.293508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.293773][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.294126][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.294353][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.294508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.294629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.294816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.294947][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.624792][ T7841] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9890'. [ 1245.025125][ T7843] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20002 [ 1245.311185][ T5640] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1245.320888][ T7844] Bluetooth: hci0: command 0x0401 tx timeout [ 1247.133193][ T2914] Bluetooth: hci1: command 0x0406 tx timeout [ 1247.543921][ T6750] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1249.301311][ C1] net_ratelimit: 21428 callbacks suppressed [ 1249.301339][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.301578][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.301874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.302207][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.302489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.302715][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.303092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.303240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.303425][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.303558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1251.776031][ T7810] ipvlan2: entered allmulticast mode [ 1251.776060][ T7810] bond8: entered allmulticast mode [ 1251.776074][ T7810] bridge6: entered allmulticast mode [ 1251.779283][ T7810] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1251.779313][ T7810] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1251.972737][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9892'. [ 1252.186617][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 1252.623672][ T7864] syzkaller0: entered promiscuous mode [ 1252.623702][ T7864] syzkaller0: entered allmulticast mode [ 1253.122250][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9896'. [ 1253.176688][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.725300][ T7881] xt_l2tp: v2 doesn't support IP mode [ 1254.300941][ T7893] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9906'. [ 1254.311925][ C1] net_ratelimit: 19014 callbacks suppressed [ 1254.311952][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.312237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.312499][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.312733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.313004][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.313222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.313481][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.313693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.313937][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.314148][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.648791][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9907'. [ 1254.808103][ T7897] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1254.827790][ T7900] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1254.870890][ T7904] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1255.095702][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9909'. [ 1255.158246][ T7912] netlink: 4880 bytes leftover after parsing attributes in process `syz.5.9912'. [ 1255.158274][ T7912] netlink: 5804 bytes leftover after parsing attributes in process `syz.5.9912'. [ 1255.302251][ T7908] xt_hashlimit: size too large, truncated to 1048576 [ 1255.602316][ T7917] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1259.321522][ C1] net_ratelimit: 21701 callbacks suppressed [ 1259.321550][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.321629][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.321916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.322212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.322228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.322588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.322936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.323462][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.324146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.324694][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.631274][ C0] sched: DL replenish lagged too much [ 1264.331342][ C0] net_ratelimit: 25903 callbacks suppressed [ 1264.331371][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.331389][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.331700][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.331958][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.332151][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.332317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.332777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.333199][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.333501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.333528][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.341465][ C1] net_ratelimit: 27055 callbacks suppressed [ 1269.341492][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.341646][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.341764][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.342013][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.342272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.342292][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.342586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.342854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.343090][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.343359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.351352][ C1] net_ratelimit: 26389 callbacks suppressed [ 1274.351380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.351643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.351762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.351951][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.352220][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.352341][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.352529][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.352799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.353132][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.353374][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.361389][ C1] net_ratelimit: 25406 callbacks suppressed [ 1279.361418][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.361465][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.361732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.361983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.362233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.362300][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.362528][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.362799][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.362972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.363045][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.371518][ C1] net_ratelimit: 25148 callbacks suppressed [ 1284.371546][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.371639][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.371811][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.372159][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.372305][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.372426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.372713][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.372952][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.373527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.373770][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.381370][ C1] net_ratelimit: 25615 callbacks suppressed [ 1289.381399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.381638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.381703][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.381985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.382252][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.382510][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.382732][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.382856][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.383194][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.383301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.984244][T19511] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1294.391476][ C1] net_ratelimit: 25541 callbacks suppressed [ 1294.391503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.391711][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.391794][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.392110][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.392390][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.392438][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.392661][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.392940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.393010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.393242][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.401357][ C1] net_ratelimit: 25534 callbacks suppressed [ 1299.401385][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.401573][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.401612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.401894][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.402147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.402218][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.402397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.402621][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.402851][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.402995][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.411291][ C1] net_ratelimit: 25026 callbacks suppressed [ 1304.411317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.411580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.411841][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.411841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.412197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.412455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.412484][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.412746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.413020][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.413230][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.421420][ C1] net_ratelimit: 25267 callbacks suppressed [ 1309.421447][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.421526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.421733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.422033][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.422097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.422321][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.422631][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.422801][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.422904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.423166][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.431327][ C1] net_ratelimit: 25353 callbacks suppressed [ 1314.431354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.431651][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.431849][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.431911][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.432165][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.432433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.432700][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.432841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.432952][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.433201][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.441315][ C1] net_ratelimit: 26656 callbacks suppressed [ 1319.441343][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.441630][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.441636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.441873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.442145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.442438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.442558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.442691][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.442928][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.443182][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.451341][ C1] net_ratelimit: 25957 callbacks suppressed [ 1324.451368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.451423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.451657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.451983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.452220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.452225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.452503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.452779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.452853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.453047][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.461386][ C1] net_ratelimit: 25647 callbacks suppressed [ 1329.461394][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.461414][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.461708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.462009][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.462140][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.462297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.462556][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.462712][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.462847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.463204][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.471420][ C1] net_ratelimit: 25179 callbacks suppressed [ 1334.471447][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.471534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.471724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.471989][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.472223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.472371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.472475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.472750][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.473009][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.473048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.481282][ C1] net_ratelimit: 26211 callbacks suppressed [ 1339.481308][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.481563][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.481594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.481801][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.482343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.482870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.483473][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.484040][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.484623][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.485106][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1342.255938][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1344.491432][ C1] net_ratelimit: 26525 callbacks suppressed [ 1344.491459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.491737][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.491916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.491988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.492279][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.492534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.492622][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.492820][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.493082][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.493308][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.501393][ C1] net_ratelimit: 26888 callbacks suppressed [ 1349.501420][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.501479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.501660][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.502169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.502426][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.502742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.502775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.503022][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.503363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.503485][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.511378][ C0] net_ratelimit: 26425 callbacks suppressed [ 1354.511404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.511578][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.511823][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.512000][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.512076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.512366][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.512684][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.512755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.512919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.513200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.521751][ C0] net_ratelimit: 24610 callbacks suppressed [ 1359.521778][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.521889][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.522131][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.522408][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.522700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.522980][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.523247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.523505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.523750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.523839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.531254][ C1] net_ratelimit: 22543 callbacks suppressed [ 1364.531281][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.531619][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.531828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.531895][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.532199][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.532472][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.532565][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.532736][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.533038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.533284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.541378][ C1] net_ratelimit: 20830 callbacks suppressed [ 1369.541404][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.541686][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.541946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.542144][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.542195][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.542477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.542720][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.542860][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.542979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1369.543265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.340379][ T5640] Bluetooth: hci0: command 0x0401 tx timeout [ 1374.551474][ C1] net_ratelimit: 20166 callbacks suppressed [ 1374.551501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.551687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.551763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.552058][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.552376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.552405][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.552658][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.552931][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.553297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.553547][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.561346][ C1] net_ratelimit: 21798 callbacks suppressed [ 1379.561375][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.561626][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.561914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.561990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.562177][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.562439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.562707][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.562717][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.562993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1379.563237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.571439][ C1] net_ratelimit: 21808 callbacks suppressed [ 1384.571465][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.571623][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.571707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.571983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.572285][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.572347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.572620][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.572936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.573198][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.573443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.581409][ C1] net_ratelimit: 21364 callbacks suppressed [ 1389.581435][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.581698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.582012][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.582316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.582602][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.582808][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.582954][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.583236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.583486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1389.583523][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.591428][ C1] net_ratelimit: 21881 callbacks suppressed [ 1394.591457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.591707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.591776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.591991][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.592251][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.592481][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.592677][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.592749][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.592999][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.593269][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.601275][ C1] net_ratelimit: 22448 callbacks suppressed [ 1399.601300][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.601367][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.601558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.601838][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.602081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.602154][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.602390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.602658][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.602905][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.603158][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.611261][ C1] net_ratelimit: 23790 callbacks suppressed [ 1404.611288][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.611523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.611783][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.612091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.612333][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.612576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.612589][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:e2:a3:55:5b:b9, vlan:0) [ 1404.612850][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.613084][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.613332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.012742][ T31] INFO: task kworker/0:6:5753 blocked for more than 146 seconds. [ 1409.012773][ T31] Not tainted syzkaller #0 [ 1409.012785][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1409.012796][ T31] task:kworker/0:6 state:D stack:23296 pid:5753 tgid:5753 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1409.012863][ T31] Workqueue: events netdev_work_proc [ 1409.012976][ T31] Call Trace: [ 1409.012985][ T31] [ 1409.013001][ T31] __schedule+0x17db/0x58f0 [ 1409.013056][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 1409.013099][ T31] ? __pfx___schedule+0x10/0x10 [ 1409.013136][ T31] ? schedule+0x90/0x2b0 [ 1409.013167][ T31] schedule+0x164/0x2b0 [ 1409.013196][ T31] schedule_preempt_disabled+0x13/0x30 [ 1409.013223][ T31] __mutex_lock+0x7c1/0x1550 [ 1409.013258][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1409.013290][ T31] ? netdev_work_proc+0x6f/0x770 [ 1409.013314][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1409.013354][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1409.621287][ C1] net_ratelimit: 22256 callbacks suppressed [ 1409.621314][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.621573][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.621595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1409.621896][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.622156][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.622429][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.622736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.622998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.623232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.623489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:e2:a3:55:5b:b9, vlan:0) [ 1410.922639][ T31] netdev_work_proc+0x6f/0x770 [ 1410.922686][ T31] ? __pfx_netdev_work_proc+0x10/0x10 [ 1410.922716][ T31] ? rcu_is_watching+0x16/0xb0 [ 1410.922749][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1410.922784][ T31] process_scheduled_works+0xc3d/0x1630 [ 1410.922852][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1410.922891][ T31] ? assign_work+0x3cf/0x5d0 [ 1410.922927][ T31] worker_thread+0xa47/0xfb0 [ 1410.922974][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1410.923018][ T31] kthread+0x38b/0x480 [ 1410.923043][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1410.923071][ T31] ? __pfx_kthread+0x10/0x10 [ 1410.923095][ T31] ret_from_fork+0x514/0xb70 [ 1410.923149][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1410.923173][ T31] ? __switch_to+0xc89/0x1420 [ 1410.923223][ T31] ? __pfx_kthread+0x10/0x10 [ 1410.923248][ T31] ret_from_fork_asm+0x1a/0x30 [ 1410.923301][ T31] [ 1410.923399][ T31] INFO: task kworker/u8:0:6744 blocked for more than 148 seconds. [ 1410.923418][ T31] Not tainted syzkaller #0 [ 1410.923429][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1410.923440][ T31] task:kworker/u8:0 state:D stack:24848 pid:6744 tgid:6744 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1410.923504][ T31] Workqueue: events_unbound linkwatch_event [ 1410.923531][ T31] Call Trace: [ 1410.923539][ T31] [ 1410.923554][ T31] __schedule+0x17db/0x58f0 [ 1410.923626][ T31] ? __pfx___schedule+0x10/0x10 [ 1410.923665][ T31] ? schedule+0x90/0x2b0 [ 1410.923697][ T31] schedule+0x164/0x2b0 [ 1410.923726][ T31] schedule_preempt_disabled+0x13/0x30 [ 1410.923753][ T31] __mutex_lock+0x7c1/0x1550 [ 1410.923789][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1410.923824][ T31] ? linkwatch_event+0xe/0x60 [ 1410.923848][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1410.923877][ T31] ? lock_acquire+0x115/0x350 [ 1410.923912][ T31] ? rcu_is_watching+0x16/0xb0 [ 1410.923940][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1410.923968][ T31] linkwatch_event+0xe/0x60 [ 1410.923988][ T31] process_scheduled_works+0xc3d/0x1630 [ 1410.924052][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1410.924088][ T31] ? assign_work+0x3cf/0x5d0 [ 1410.924115][ T31] worker_thread+0xa47/0xfb0 [ 1410.924169][ T31] kthread+0x38b/0x480 [ 1410.924190][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1410.924216][ T31] ? __pfx_kthread+0x10/0x10 [ 1410.924240][ T31] ret_from_fork+0x514/0xb70 [ 1410.924265][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1410.924287][ T31] ? __switch_to+0xc89/0x1420 [ 1410.924319][ T31] ? __pfx_kthread+0x10/0x10 [ 1410.924343][ T31] ret_from_fork_asm+0x1a/0x30 [ 1410.924394][ T31] [ 1410.924411][ T31] INFO: task syz.2.9909:7906 blocked for more than 148 seconds. [ 1410.924427][ T31] Not tainted syzkaller #0 [ 1410.924438][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1410.924448][ T31] task:syz.2.9909 state:D stack:26280 pid:7906 tgid:7905 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 1410.924507][ T31] Call Trace: [ 1410.924515][ T31] [ 1410.924529][ T31] __schedule+0x17db/0x58f0 [ 1410.924576][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1410.924641][ T31] ? __pfx___schedule+0x10/0x10 [ 1410.924678][ T31] ? schedule+0x90/0x2b0 [ 1410.924709][ T31] schedule+0x164/0x2b0 [ 1410.924739][ T31] schedule_preempt_disabled+0x13/0x30 [ 1410.924764][ T31] __mutex_lock+0x7c1/0x1550 [ 1410.924800][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1410.924834][ T31] ? cfg80211_pernet_exit+0x19/0x120 [ 1410.924947][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1410.925004][ T31] cfg80211_pernet_exit+0x19/0x120 [ 1410.925036][ T31] ops_undo_list+0x43d/0x8d0 [ 1410.925074][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1410.925100][ T31] ? ops_init+0x46a/0x5d0 [ 1410.925138][ T31] setup_net+0x2f6/0x350 [ 1410.925169][ T31] ? __pfx_setup_net+0x10/0x10 [ 1410.925196][ T31] ? down_read_killable+0x1bb/0x3b0 [ 1410.925219][ T31] ? __ns_common_init+0x2fc/0x4a0 [ 1410.925253][ T31] copy_net_ns+0x53b/0x780 [ 1410.925285][ T31] create_new_namespaces+0x3f0/0x6b0 [ 1410.925317][ T31] ? security_capable+0x7e/0x2c0 [ 1410.925357][ T31] unshare_nsproxy_namespaces+0x149/0x190 [ 1410.925390][ T31] ksys_unshare+0x5a7/0x950 [ 1410.925431][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1410.925461][ T31] ? rcu_is_watching+0x16/0xb0 [ 1410.925500][ T31] __x64_sys_unshare+0x38/0x50 [ 1410.925530][ T31] do_syscall_64+0x166/0x520 [ 1410.925559][ T31] ? trace_irq_disable+0x3b/0x140 [ 1410.925593][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.925617][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1410.925645][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.925667][ T31] RIP: 0033:0x7effa899e159