last executing test programs: 6m53.534840936s ago: executing program 3 (id=10409): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m53.3064536s ago: executing program 3 (id=10411): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x25, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x1, 0x1, 0x81, 0x0, @val=0x80}, '?'}}}}, 0x33) 6m49.527160066s ago: executing program 3 (id=10423): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 6m49.056251191s ago: executing program 3 (id=10432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='.%)\x00', 0x20000, &(0x7f0000000100)={@align=0x8, {0x0, 0x9, 0xa, 0x7}}, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x2}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r4, 0xcb}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)={r4, 0x4}, &(0x7f0000000240)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 6m48.668495966s ago: executing program 3 (id=10434): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], 0x0}, 0x94) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="710542"], 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r5, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 6m47.651965869s ago: executing program 3 (id=10436): unshare(0x6a040000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) 6m32.213065768s ago: executing program 32 (id=10436): unshare(0x6a040000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) 54.575829624s ago: executing program 4 (id=12781): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25090002007379fa32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8810) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25090002007379fa32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8810) (async) 54.215806633s ago: executing program 4 (id=12786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 53.878108665s ago: executing program 4 (id=12790): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x0, 0x10101, 0x0) (async) recvmmsg(r3, &(0x7f0000001480), 0x0, 0x10040, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005c80)=ANY=[@ANYRES16=r4, @ANYRES64=r2, @ANYRESOCT=r1], 0x2238}, 0x1, 0x0, 0x0, 0x51}, 0x20050080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) (async) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4], 0x40}, 0x1, 0x0, 0x0, 0x404c891}, 0x4080) r5 = accept4(r0, 0x0, 0x0, 0x80000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x5}}}}, 0x30}}, 0x0) (async) mmap(&(0x7f000092f000/0x1000)=nil, 0x1000, 0x2, 0x28011, r6, 0xc255b000) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0xfffffffd) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) (async) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000400)={0x80}) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f00000030c0), 0x2) (async) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x49c1e8612308c1ed}, 0x4048801) r10 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0xff77) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x4008840}, 0x4000080) 53.66534014s ago: executing program 4 (id=12791): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000d00)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x116}, {0x6}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a002, 0x0) socket$kcm(0x29, 0x7, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) ioctl$TUNSETLINK(r3, 0x400454cd, 0x207) close(r5) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 51.602304671s ago: executing program 4 (id=12800): r0 = socket(0x2, 0x80809, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000007c0)={r1, 0x5}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r2, 0x1c, "cac41de8b2837c7083b18253a2454cbc95d1200e78d07e74a33a2227"}, &(0x7f0000000180)=0x24) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r3, 0xb0, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e23, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff9}, @in6={0xa, 0x4e20, 0x0, @mcast2, 0xd}, @in6={0xa, 0x4e24, 0x7, @empty, 0x7}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0xa801, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8001}]}, &(0x7f00000002c0)=0x10) 49.849179731s ago: executing program 4 (id=12804): unshare(0x6a040000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="82", 0x1}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) 47.50672122s ago: executing program 1 (id=12812): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000200), 0xc, &(0x7f0000000740)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {0x5, 0xffe0}, {0x2, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xb}, @filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0xfffc, 0xa, 0xc, 0x65f}, {0x67, 0x5, 0xd0, 0x8}, {0x7, 0x2, 0x3, 0x4}, {0x1, 0x80}, {0x140, 0x5, 0x3, 0x3}, {0x200, 0x92, 0xb, 0x8}, {0x8, 0x8, 0xfd}, {0x1ff, 0x4, 0xf, 0xea}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4884}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000a40)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x0, 0xff, 0x6, 0x6, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000040)) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xfff2, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x3, 0xe, 0x1, 0xd, 0x5, 0x8, 0x6, {0xfffff800, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8a4}, 0x4890) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delchain={0x24, 0x26, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xa, 0x9}, {0x2, 0x6}}}, 0x24}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4c840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x3, 0x3}) 47.003752535s ago: executing program 5 (id=12815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x138, 0x700001b, 0x148, 0x138, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, '\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 46.808037887s ago: executing program 0 (id=12816): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRES16=r0], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840011000000000002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xadc, 0xe}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "d29a91eefa4008326636457b449d786d"}]}, 0x34}, 0x1, 0x0, 0x0, 0x60000804}, 0x85) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x1, 0x1248000, 0x15, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7, 0x0, 0x1000, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r6, 0x2f, 0xb, 0x3, 0x400, 0x21, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x56}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000004800010329bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x4000040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) 46.315735618s ago: executing program 1 (id=12818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r2) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x3, 0xa517, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x80000000, 0x0, 0x7, 0x8}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x62f85a7d945ebab2}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x40}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x80) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 46.313542681s ago: executing program 5 (id=12819): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xa00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 45.397672158s ago: executing program 2 (id=12821): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x400) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400b27d4796f7c8b000001000010400"/27, @ANYBLOB="08001f0004", @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES16=r0], 0x44}}, 0x44) 44.999628285s ago: executing program 2 (id=12822): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4799}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@dev}, {@in6=@mcast2}, @in6=@local}}, [@mark={0xc}]}, 0x104}}, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) syz_emit_ethernet(0x319, &(0x7f0000000740)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@mpls_uc={0x8847, {[{0x401}, {0xb, 0x0, 0x1}], @ipv6=@generic={0x7, 0x6, "5a87c0", 0x2db, 0x19, 0x1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x32, 0x0, 0x81, 0x0, 0x0, 0x4, 0x65}, @routing={0x2, 0x4, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1d}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0xc, 0x23, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x6, 0x9d, "e0f695f3d1b24e7c1a991806450032fc6789e23dba7c9eb34be0b4a044d1c7204ab578a90cf751f3146410488e39f552010dedee73883d81bd9c2a342f7ac03b658aa5287d69c63524ddffc390cae1f8298f974bb6b3fd0296129f30d11128b029c459d2f1fb52c93db66f09754905cebb75c49bb4997dd35d48ce457682f7d40751c7b50562d9ae982ee265a10b6ca8b57208ebadad01077d9d41ee82"}, @generic={0xae, 0x4c, "2c1ad2a58ce59e88efb770b9b3cebc7e28a64d26c23f08fc6c5c533ee6b8321342bcae09d46652859295ad1d03277399700e0b80a6ced376caa3ffbf13415bf1fc9e21877ad955a65f5a7199"}, @ra={0x5, 0x2, 0x3}, @padn, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @hopopts={0x1, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3}]}, @srh={0x67, 0x8, 0x4, 0x4, 0x5, 0x0, 0x3000, [@local, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x4, 0x0, 0x0, 0x1, 0x0, 0xc, 0x67}, @srh={0xc, 0xe, 0x4, 0x7, 0x9, 0x30, 0x1922, [@private1, @private0, @private0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @local]}, @srh={0x88, 0x2, 0x4, 0x1, 0x0, 0x0, 0x2, [@dev={0xfe, 0x80, '\x00', 0x18}]}], "c4ffaa8f0a1a15454c2bbe6ffabc9cb0c51c278f035d28eeb6c199b4e498206e7793211a9cb2e4e644c45f2719dfb70dfcf2d54675ce2131f160ac9200a0cd352dfee70386457d705481f9655cd06a29eec3080285e2a8c11dcf41a2eb7c35feea42bfb67e15fb9766933f962f8d433967ea46979c4576e3101c20363362f6598a4de08495dbdec9cda7842480cbbf7e07f781"}}}}}}, &(0x7f0000000a80)={0x1, 0x2, [0x5cf, 0x4bb, 0x1a0, 0xb21]}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000000)=@ethtool_channels={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8021000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="74020000120000032cbd7000fcdbdf25270507024e234e22590000000500000008000000050000000600000003000000080000004b020000", @ANYRES32=r5, @ANYBLOB="070000000500000005000000eb2f0000a1000100f62ce2114ffce0d05a5218b54c6d320112e70b8ff37554d1ff7fbbb75362b5205996f3240eed52eba059848f29a5d55ff14a66e38952de8ed76db45e5f8c1957bdc13dd91f4ad3a856006605e572a387eddf8c24bcaadb239be5ff6c8f71861340c3d7e609540abe9de670d10d64c6c07ba5761ded5909657c3f99c773bec3f96743a47621e8d6f13eaf6a7e7f1cd1b52e5e97a5d981c26d42fc3bb5fe000000f4000100bffb0d75a8d056d324a490797114a357d2244877083c510fae91f4fc97d740197140a0e45053ada1122a3a7d1cd449cb6304be199af0a89e3df88c0f940a85a8cc5d4559d2cbdd0fe854f04c98648ee0c847fccaa655c2fc46ceea94fd30d409e0b89e4e60489d07fabdda9420f160cd2dacf285318dfa083a5d96a6f043efebeca657b0dba6ed0ff828a7247f660f84e262c0a2b3ea22f67ab4af11c119f4155502e6d670466749c52f42ba2d9f6b82d7c093a7f6762bd35ce6304631d6852b9e6c3cacee1f7d4d4810ee1adcff808136ae2f9f88ae54562bce28240beccf02de9cd86e4a8deffbfba78b986bae58ad8d0001003f0419d02e73935e5ebe19ee70b58836ab27c1c7b07dc3eed7235faa79c5f677a3862537271baa30d7cfe6c911bb3805010fb451fe0de1c5bba06dc398c2a76eaeef9122664b38f5ca103b4e277f0677f9abbfd406c63930df3d0d77ad96a4783eb24fcc4d4d5cc7cbbcad1deb95603fce89a41c6e6dbf188b27e9fdec66cffda021a636837088fbbc000000"], 0x274}}, 0x0) 44.998713331s ago: executing program 0 (id=12823): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x24, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_MAX_P={0x8, 0x3, 0xecca}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 44.849672336s ago: executing program 5 (id=12824): ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) close(0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000fedbdf2576c6e9a008000300", @ANYRES32=0x0, @ANYBLOB="0c0030800500020006000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003a40), 0x0, &(0x7f00000000c0)=""/36, 0x24}, 0x101}, {{&(0x7f0000003b00)=@tipc=@name, 0x80, &(0x7f0000000300)}, 0xf55f}, {{0x0, 0x0, 0x0}, 0x7}], 0x6, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008e80)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/249, 0xf9}], 0x2}, 0x8}, {{&(0x7f0000001d40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001dc0)=""/248, 0xf8}, {0x0}, {&(0x7f0000001f00)=""/152, 0x98}, {&(0x7f0000001fc0)=""/61, 0x3d}, {&(0x7f0000002000)=""/95, 0x5f}, {&(0x7f0000002080)=""/113, 0x71}, {0x0}, {&(0x7f0000002180)=""/118, 0x76}, {&(0x7f0000002200)=""/6, 0x6}], 0x9}, 0x10001}, {{&(0x7f0000002300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002380)=""/48, 0x30}, {&(0x7f00000023c0)=""/215, 0xd7}, {&(0x7f00000024c0)=""/201, 0xc9}, {&(0x7f00000025c0)=""/169, 0xa9}], 0x4, &(0x7f0000003700)=""/235, 0xeb}, 0x3}, {{&(0x7f0000003b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003c00)=""/90, 0x5a}, {&(0x7f0000003c80)=""/248, 0xf8}, {&(0x7f0000003d80)=""/60, 0x3c}, {&(0x7f0000003dc0)=""/233, 0xe9}, {&(0x7f0000000300)=""/64, 0x40}], 0x5, &(0x7f0000003f80)=""/116, 0x74}, 0x80000001}, {{&(0x7f0000004000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000004080)=""/63, 0x3f}, {&(0x7f00000040c0)=""/60, 0x3c}, {&(0x7f0000004100)=""/240, 0xf0}, {&(0x7f0000004200)=""/176, 0xb0}, {&(0x7f00000042c0)=""/69, 0x45}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/131, 0x83}, {&(0x7f0000005d00)=""/107, 0x6b}, {&(0x7f0000005d80)=""/46, 0x2e}], 0x9, &(0x7f0000005e80)=""/67, 0x43}, 0xa}, {{&(0x7f0000005f00)=@rc, 0x80, &(0x7f0000007000)=[{&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/98, 0x62}], 0x2, &(0x7f0000007040)=""/190, 0xbe}, 0xf79}, {{&(0x7f0000007100)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000007340)=[{&(0x7f0000007180)=""/145, 0x91}, {&(0x7f0000007240)=""/235, 0xeb}], 0x2, &(0x7f0000007380)=""/74, 0x4a}, 0x2}, {{&(0x7f0000007400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008740)=[{0x0}, {&(0x7f0000007500)=""/4096, 0x1000}, {&(0x7f0000008500)=""/44, 0x2c}, {&(0x7f0000008540)=""/225, 0xe1}, {&(0x7f0000008640)=""/217, 0xd9}], 0x5}}, {{0x0, 0x0, &(0x7f00000089c0)=[{0x0}], 0x1, &(0x7f0000008a00)=""/237, 0xed}, 0x4}, {{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000008e00), 0x0, &(0x7f0000008e40)=""/62, 0x3e}, 0x8}], 0xa, 0x40000000, &(0x7f0000009100)={0x77359400}) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) socket(0x1, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 44.378526944s ago: executing program 2 (id=12825): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000280)={0x0, 0x3ff, 0x99b, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r7, 0x400454cd, 0x337) setsockopt$inet_mreqsrc(r6, 0x11, 0x28, &(0x7f0000000080)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) bind$tipc(r1, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000eeff000000001c0012800b00010062726964676500000c0002800800140000000000"], 0x3c}}, 0x0) 44.215314526s ago: executing program 1 (id=12826): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x3c}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) 43.609961423s ago: executing program 0 (id=12827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000000)='-/(\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x2, 0xb]}, {0x0, 0x1, 0x3}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000200)=0xa}, {[0x0, 0x3, 0x8f]}, 0x2, 0xc9, &(0x7f0000000240)=""/201}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0401000a1a002abd80000000000000000000000000001b778fe0000001000000000000000000000000ffff00004e220000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) 43.444375596s ago: executing program 2 (id=12828): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x1}, {0xd}, @random="9f67830070df", @broadcast, @from_mac, {0x3, 0x2}}, @a_msdu=[{@broadcast, @device_a, 0x58, "fe6048a0c93fe8a64331c4a376b03854dc42d9c7c29fc3e793a76b4fe5687091ce4855e0184ccb487614a2e7732d66da373920a7472a066338742603b2f2f8bd618e949a3bf032747eac5d982a936e39c657f75dbe024d05"}, {@device_b, @device_b, 0x5f, "c0407018a84c1d05c6ce8d83ee927c49f46fa60601f2d8557f038940f9e88f1a1a5234da9e5e12a94e6439680481bed404af4d488c5af035b09f962ff626a3deab947f033e2a8edeb482fc7e879b760bded32d2b93b6f29fdd0ce3c4c76669"}, {@device_b, @device_a, 0xf8, "84689c135c9dd7663356bcb3b2e79274d682c48c630e10a36b09e30aa65c4fb58b55529ded99099580e17f674226e003050d7e181dd5995afeb9bcbefc6f01fecf2eabcf6e2bab81835f85b5ad96fc9bf0535febfa85bbde9133fb04fdb6fcc1017f9b7aa70a3db1c6bab0432b4667f669fc939d07d033816c14427aa12afe223064d6e4f396d0681abcdba57a226b9f63b6941c671fdb55bf4402caad5f20d9317439d305f82a2b4a5d72f321b3b69dcd0e7caa093d564d8a0f7b8549c35b61bc878aa87e5031f392fa7c41539003f1abb60a06d043720f31fed8103fac55f6724e70fcfb762923e6bd285188db5184458194b44447d1a3"}, {@broadcast, @device_a, 0x70, "947ffb216d6e8e87aed6cd0b5c16626fba0da45804ad57735441dbb3b8d514881aa7925bb31ba4944437b37858a5e25d75e673dcc7ddd1393de574f0aef7234e68ec6e76b5d022df06e11768b1fbbbb94c6f96b14671ecb886419cca9125971d3068d5e1aaafc6c3723d4c73e8b8dcd1"}, {@device_a, @broadcast, 0x79, "d83f2fa8bd515befb35cbb56feaa4934f5783d6f5334f24ba9bba1b4a7c5504a617d655d5d8f3041c5d7631936c39ec3fe34e5a7078198f009a5415d9774b6744d0196a5bb12bef2c9c2d98923486b16645cc255099fc49eb163f9772a3698f5a731f0a856942b06217ff44688c1533a4aa442c176e78ddd5c"}]}, 0x300) syz_80211_inject_frame(&(0x7f0000000380)=@broadcast, &(0x7f00000003c0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xf}, @broadcast, @device_a, @from_mac=@broadcast, {0x9, 0xff}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb3}, @void, @void, [{0xdd, 0x65, "55bb85bc3964fb8b240301219517012da86fffeceaa5dfce1a407c7645f3fe4d59ce8a90ed75f38645d77eb0a43e57a63613d4d315a85656f25f3821a087477617c5d8393e3d32db56f5839c5903b8c74d134dd6c952edae0aa62ba3b277f4fc19d0a911de"}, {0xdd, 0x73, "f7736e60b52616fdaef9b9a18699b594f5065b3d1f99f452eff50bd45681cd6e36f50941808d44feb36c2cf6d676b30619528ef8995a9a6eda9ac7c110715107ab9ba15fe6eb77e756b2c31d16352c8fa80ad05bac4c02f59e4bc5e5280e8c28fbc03bc8661a79a83ba8d8d1605e630e9c4f16"}, {0xdd, 0x70, "0d87bcc314407dc911433640c180b49a9e4dbde79a18e7c0a8b845b6566d2edb3e8fb29fc77f57c124d2ef845fdf763a6a46bc9a03575fbeee04bf9497801cb6846fbc2f1dd6baf502f53189fa8a1a9df8aba4cd22cb6ca02dc89bcdf2264200f2724bcb570b868d01fb3850d41e957d"}, {0xdd, 0xd9, "5102bead2eeb29fea45e700bd0b888e92c1a2fee3104e869c3f39a3963bd65e9d257eaaea872144c15a3d63697d1c6c4716bf6eef9816d70c6f2572f4313cc911e9ec925b27180cbf24b07ebc9c23a76f1db802ac9c25dc1ba0635bee9a4fcec40f7245041b317df0fb5d72384af751b3b5acb9fae263534e96868d062c150f634f081f8e60156ebd4495f10d131dd05fefde17024fd147195c740b9d9ecb4b8ac6c6bd4a9cf33c22a864a4207d4e9f2ffa810ff749d0529808971fceaa5835d6d9c8bad0dc9c35b004dac4aa3cb09e136add7abf1d5f457e7"}, {0xdd, 0xb2, "19caca34cbba55ed81eaee26ae4ce9725e540e024ba5b1754bd5a472b3055b1661b696c3a0fe3372302bfc7fc643c9084785a3dfcd0d3c23a8b90f2c00c6f4870cfd61f8e91904d5cd001f28e63a388e37b017347363445fa22fb7eccbc548148e3d07d99845819f444f74cda9e792de76ba2b926a58dc07588ec8754e8ea40ba4900f4dc4c8a4d31777cc03ec5db9adb2e6becd9552d6053ef6ab8a4d706afe3a825d6fd5dde06554421b3c90278801c4b4"}]}, 0x304) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'veth0_to_bridge\x00', 0x1010}) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000780), r2) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x2, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000800)='GPL\x00', 0x3, 0xe2, &(0x7f0000000840)=""/226, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x3, 0x5, 0x7}, 0x10, 0x1e9aa, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x5, 0x3, 0x0, 0x7}]}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000b00)=r3) (async) close(r0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) close(r2) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000c40)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r2) getsockname$packet(r1, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d40)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e00)={'ip6_vti0\x00', &(0x7f0000000d80)={'ip6tnl0\x00', 0x0, 0xa4b47e824eeec829, 0x10, 0x55, 0x3, 0x4, @loopback, @remote, 0x700, 0x10, 0xc}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r5, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000001100)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x168, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r11, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004881}, 0x2000000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1f4, 0x12, 0x200, 0x70bd2b, 0x25dfdbfe, {0x9, 0x10, 0x5, 0x8, {0x4e21, 0x4e24, [0x1, 0x7, 0x5, 0x1f], [0xb58, 0x8, 0x0, 0x7fff], 0x0, [0x2, 0xc]}, 0x624, 0x74ed1f17}, [@INET_DIAG_REQ_BYTECODE={0x92, 0x1, "797951b92445263c7a3689581091b3b018564f539aa953d8be5236f3a3234a218adfe785e6d5de7c2a59ec600afeef7360698890f9e32a66bdfb7bec8e07dcacec9201aa03b11b6ebe83431c75d1ca46d1ec5e2b3f7dd960b796886f8f41ddc26a6731917bd1cdd84276f5e1df8c22ce6dadf46987517c8526f51bdf2b73e48ddddbdd6ddf1c693c14202499e953"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "edebcff308a4b5ddafd3698b6731b1e390ce4282337c"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "e80f306dbe1bc806260a00db2d949800c9675229af4a3da3c94addfbc9aff6ec0d385e3ed43d4b40568738ce7028aff3cbc91b51a537257b176a237cf7abf55faf1646353706c447f7980cc30aae09112b780dfa8acd1e083f266e8d4b95e37e606ee0d977dd205308403e9e019fbf0661e22bee4fdea8a8771e892d6a1e841066d8f5e713281f38184ea9"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "695142a2729039178bcede585bb98978659496aa7e57cb70dad86518e9e27a7265a9fbdf4eb5f482c4b5d28b89e7be79f2303c16da502a0f66b916d564b3a4e3ba08f6501627675089e55964d7fc07415848b4064633dc7f5fb8dfb597401578cdefc2f4"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001580), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, r12, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4060000}, 0x4000000) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@fwd={0xc}, @enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x9}, {0x3, 0xb}, {0x7, 0x3}, {0xb, 0x9a4}]}, @enum={0xf, 0x6, 0x0, 0x6, 0x4, [{0xa, 0x1}, {0x8}, {0xd, 0x10001}, {0x6, 0x1}, {0x9, 0x5}, {0xb, 0x8}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x70, 0x0, 0x75, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x51, 0x61, 0x0]}}, &(0x7f0000001740)=""/158, 0xb9, 0x9e, 0x1, 0x401, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@bloom_filter={0x1e, 0x2, 0x5, 0x6, 0x20000, r5, 0x1ff, '\x00', r7, r13, 0x3, 0x4, 0x4, 0x6}, 0x50) (async) syz_80211_inject_frame(&(0x7f00000018c0)=@broadcast, &(0x7f0000001900)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@device_b, {0x6}}, 0x41, @val={0x8c, 0x18, {0xa62, "9fba1e900aef", @long="0875230605aa2be61a587d590182d9e6"}}}, 0x34) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r11, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)=@delneigh={0x58, 0x1d, 0x20, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, r7, 0x40, 0xa0, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @NDA_IFINDEX={0x8, 0x8, r8}, @NDA_FLAGS_EXT={0x8}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_VNI={0x8, 0x7, 0x7f}, @NDA_NH_ID={0x8, 0xd, 0xfff}, @NDA_LINK_NETNSID={0x8, 0xa, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) 42.887701269s ago: executing program 5 (id=12829): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 42.88497083s ago: executing program 0 (id=12830): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 42.101881202s ago: executing program 2 (id=12831): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000600"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P'], 0x78}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'team_slave_0\x00', 0x8}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x40, 0x0, {0x0, 0x0, 0xe403, r7, 0xa000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) listen(r4, 0x401) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x503, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x0, 0x11008}}, 0x20}}, 0x0) 41.878933515s ago: executing program 0 (id=12832): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000001000000000000000000000000000001400020077673100000000000000000000000000f400088050000080040009801400040002004e2064010101000000000000000006000500010000000800030002000000240001"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000000)={{0x8, 0x0, 0x2, 0x33d5, 0x5}, [{0x100000000, 0x4ada, 0x6, 0x8}, {0xd6a, 0x7, 0x2, 0x80}, {0xe3d, 0x164ce87b, 0xd, 0x2}, {0x9, 0x1000, 0x92}]}) 41.627789666s ago: executing program 1 (id=12833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x200}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xed}]}}]}, 0x44}}, 0x20000000) pipe(&(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltclass={0x58, 0x29, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb, 0xf}, {0x3, 0xfff1}, {0xffe0, 0x2}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfffff1cb}]}}, @TCA_RATE={0x6, 0x5, {0xa9, 0x6}}, @TCA_RATE={0x6, 0x5, {0xff, 0xd}}, @tclass_kind_options=@c_cbs={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000840) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) 41.496239185s ago: executing program 2 (id=12834): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 41.488708719s ago: executing program 5 (id=12835): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4, 0xffffffffffffffff, @void, @value=r1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.795624476s ago: executing program 0 (id=12836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'netpci0\x00', 0x52d35ce30131f272}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x0, 0xfff8, 0xd, 0x6}, {0xa, 0x0, 0xfffd, 0x8, 0x1, 0x9}, 0x7, 0xdf, 0x1e98}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r10, 0x1, 0x9, 0x6, @local}, 0x14) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1}], 0x1, 0x8001) 40.794303452s ago: executing program 5 (id=12837): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x59}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x20040801) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) 40.645510572s ago: executing program 1 (id=12838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @dev}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {0xf, 0xffff}, {0x10, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24044010) 23.164764981s ago: executing program 1 (id=12839): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000200000061100300000000009500000000000000241958bba48e24e9dad4363e3890a5ec92a1f786bcb463e7c64dfb2646e23310f4f85eda95fbb7f752f47214015bb7eeefb1e008555b7a4e637c2942d49f084dea2a1936432c2fa15d09b7efe8956ace977dccb34b6fe5de289d015a8cc59c3f208dcf840cc96b241fbc7b1f6ff7d490ed8d595aaaefa3aa5a8e5e2f9f617b18babd5ad25a690106b7724cdaf02d1694010b39bf12571d78b1fd06d93d9aa59ccd53e2cbb03038db95e8559b77a0aa0562f5a610fe81c6769eece9b9dc2b81e0a5c0180fe32145f14456eb7ee7fcf83aaf59"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) r5 = accept(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x3d, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f0000000080)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000300)={0xfffe, 0x8000}, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r7, 0x1}, 0x14}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000120000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a300000000009000100831b4c75e68ca023846f73797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000020a01", @ANYRES16=r5, @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) 0s ago: executing program 33 (id=12836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'netpci0\x00', 0x52d35ce30131f272}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x0, 0xfff8, 0xd, 0x6}, {0xa, 0x0, 0xfffd, 0x8, 0x1, 0x9}, 0x7, 0xdf, 0x1e98}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r10, 0x1, 0x9, 0x6, @local}, 0x14) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1}], 0x1, 0x8001) kernel console output (not intermixed with test programs): d4: (slave ip6gretap1): failed to get link speed/duplex [ 1463.002133][T16962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1463.076392][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1463.111356][T16962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1463.159926][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1463.171243][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12152'. [ 1463.190124][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12154'. [ 1463.202087][T16962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1463.222033][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1463.254320][T16962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1463.302847][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12152'. [ 1463.312587][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1463.349357][T17001] netlink: 'syz.4.12152': attribute type 10 has an invalid length. [ 1463.382006][T17001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12152'. [ 1463.406732][ T5788] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1463.526358][T17012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.533934][T17012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.642703][T17012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.660247][T17012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.832353][T17001] geneve2: entered promiscuous mode [ 1463.838329][T17001] geneve2: entered allmulticast mode [ 1463.914738][T26358] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.940596][T26358] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.961142][T26358] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.000582][T26358] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.046670][T19918] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1464.050215][T17028] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1464.084882][T17029] syzkaller0: entered promiscuous mode [ 1464.103277][T17029] syzkaller0: entered allmulticast mode [ 1464.210774][T17031] ip6t_rpfilter: unknown options [ 1464.288230][T17042] "syz.5.12163" (17042) uses obsolete ecb(arc4) skcipher [ 1464.308197][T19999] Bluetooth: hci5: command tx timeout [ 1464.350002][T19918] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1464.461241][T16962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.484766][T16962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.514000][ T2639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.521257][ T2639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.542046][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.549298][ T6315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.578550][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1464.709782][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1464.827473][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1464.939149][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1465.003402][T17060] netlink: 'syz.0.12165': attribute type 17 has an invalid length. [ 1465.067398][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1465.150109][T16962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.214297][T16962] veth0_vlan: entered promiscuous mode [ 1465.238915][T16962] veth1_vlan: entered promiscuous mode [ 1465.279855][T16962] veth0_macvtap: entered promiscuous mode [ 1465.291183][T16962] veth1_macvtap: entered promiscuous mode [ 1465.312292][T16962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.328727][T16962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.353155][T26358] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.363380][T26358] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.374134][T26358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.384470][T19918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.398726][T19999] Bluetooth: hci5: command tx timeout [ 1467.225334][T17035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1467.534491][T26358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.551074][T17074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12167'. [ 1467.577027][T26358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.633959][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12169'. [ 1467.781370][T19918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.789796][T19918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.890118][T26358] net_ratelimit: 19 callbacks suppressed [ 1467.890140][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1468.036860][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1468.167178][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1468.195187][T17107] x_tables: unsorted underflow at hook 2 [ 1468.236463][T17107] x_tables: unsorted underflow at hook 2 [ 1468.288434][T17111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12179'. [ 1468.312396][T19918] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1468.446998][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1468.468267][T19999] Bluetooth: hci5: command tx timeout [ 1468.607056][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1468.727108][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1468.803489][T17143] syzkaller0: entered promiscuous mode [ 1468.824645][T17143] syzkaller0: entered allmulticast mode [ 1468.853714][T17143] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1468.876942][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1468.898678][T17148] netlink: 'syz.2.12181': attribute type 13 has an invalid length. [ 1468.996722][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1469.005393][T17151] netlink: 'syz.4.12188': attribute type 21 has an invalid length. [ 1469.018373][T17151] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12188'. [ 1469.042595][T17151] netlink: 'syz.4.12188': attribute type 5 has an invalid length. [ 1469.052288][T17151] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12188'. [ 1469.065146][T17152] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1469.178326][T17158] netlink: 'syz.1.12191': attribute type 3 has an invalid length. [ 1469.228422][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12192'. [ 1469.239725][T17160] netlink: 'syz.1.12192': attribute type 13 has an invalid length. [ 1469.249740][T17160] netlink: 'syz.1.12192': attribute type 58 has an invalid length. [ 1469.258985][T17160] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12192'. [ 1470.069947][T17171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12196'. [ 1471.221665][T17110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1471.234936][T17168] ksmbd: Unknown IPC event: 1, ignore. [ 1471.459695][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12205'. [ 1471.498643][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12205'. [ 1471.885197][T17210] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1471.958023][T17210] bond1 (unregistering): Released all slaves [ 1472.664019][T17254] bridge10: entered promiscuous mode [ 1472.671383][T17254] bridge10: entered allmulticast mode [ 1472.795075][T17258] __nla_validate_parse: 1 callbacks suppressed [ 1472.795096][T17258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12219'. [ 1472.828405][T17258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12219'. [ 1472.864853][T17264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12219'. [ 1472.932323][T17264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12219'. [ 1473.059705][ T2638] net_ratelimit: 28 callbacks suppressed [ 1473.059727][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1473.131571][T17264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12219'. [ 1473.259691][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1473.413672][T19918] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1473.589956][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1473.720185][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1473.881427][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1474.037411][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1474.168499][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1474.337332][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1474.465985][T17323] Cannot find add_set index 65532 as target [ 1474.641189][T17309] syzkaller0: entered promiscuous mode [ 1474.663533][T17309] syzkaller0: entered allmulticast mode [ 1474.718577][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1474.964919][T17346] netlink: 'syz.0.12240': attribute type 32 has an invalid length. [ 1474.998964][T17346] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12240'. [ 1475.034008][T17347] netlink: 'syz.0.12240': attribute type 32 has an invalid length. [ 1475.078593][T17347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12240'. [ 1480.576946][ T2640] net_ratelimit: 3 callbacks suppressed [ 1480.576969][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1480.699164][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1480.765253][T17412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1480.772668][T17412] IPv6: NLM_F_CREATE should be set when creating new route [ 1480.794973][T17412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1480.867912][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1481.012304][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1481.174091][T17432] syzkaller0: entered promiscuous mode [ 1481.204750][T17432] syzkaller0: entered allmulticast mode [ 1481.252277][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12254'. [ 1481.270678][T17443] FAULT_INJECTION: forcing a failure. [ 1481.270678][T17443] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.342646][T17443] CPU: 0 UID: 0 PID: 17443 Comm: syz.4.12255 Not tainted syzkaller #0 PREEMPT(full) [ 1481.342674][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1481.342686][T17443] Call Trace: [ 1481.342694][T17443] [ 1481.342702][T17443] dump_stack_lvl+0xe8/0x150 [ 1481.342740][T17443] should_fail_ex+0x40c/0x560 [ 1481.342772][T17443] should_failslab+0xa8/0x100 [ 1481.342806][T17443] __kmalloc_noprof+0xfe/0x720 [ 1481.342836][T17443] ? fib6_info_alloc+0x30/0xf0 [ 1481.342861][T17443] ? fib6_info_alloc+0x30/0xf0 [ 1481.342893][T17443] fib6_info_alloc+0x30/0xf0 [ 1481.342922][T17443] ip6_route_info_create+0x149/0x890 [ 1481.342959][T17443] ip6_route_add+0x49/0x1b0 [ 1481.342991][T17443] inet6_rtm_newroute+0x267/0x1a30 [ 1481.343018][T17443] ? unwind_next_frame+0x8f/0x2550 [ 1481.343050][T17443] ? is_bpf_text_address+0x26/0x2b0 [ 1481.343084][T17443] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1481.343124][T17443] ? is_bpf_text_address+0x26/0x2b0 [ 1481.343160][T17443] ? __lock_acquire+0x683/0x2cf0 [ 1481.343192][T17443] ? kernel_text_address+0xa5/0xe0 [ 1481.343213][T17443] ? __kernel_text_address+0xd/0x30 [ 1481.343232][T17443] ? unwind_get_return_address+0x4d/0x90 [ 1481.343253][T17443] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1481.343280][T17443] ? arch_stack_walk+0xfb/0x150 [ 1481.343336][T17443] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1481.343360][T17443] rtnetlink_rcv_msg+0x802/0xc00 [ 1481.343392][T17443] ? netlink_sendmsg+0x5d4/0xb40 [ 1481.343420][T17443] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1481.343452][T17443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1481.343485][T17443] ? __lock_acquire+0x683/0x2cf0 [ 1481.343528][T17443] netlink_rcv_skb+0x226/0x4a0 [ 1481.343554][T17443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1481.343588][T17443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1481.343625][T17443] ? netlink_deliver_tap+0x2e/0x1b0 [ 1481.343648][T17443] ? netlink_deliver_tap+0x2e/0x1b0 [ 1481.343678][T17443] netlink_unicast+0x7bb/0x940 [ 1481.343712][T17443] netlink_sendmsg+0x813/0xb40 [ 1481.343746][T17443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1481.343775][T17443] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1481.343805][T17443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1481.343827][T17443] sock_sendmsg_nosec+0x13a/0x180 [ 1481.343859][T17443] ____sys_sendmsg+0x54e/0x850 [ 1481.343889][T17443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1481.343923][T17443] ? import_iovec+0x73/0xa0 [ 1481.343958][T17443] ___sys_sendmsg+0x2a5/0x360 [ 1481.343980][T17443] ? __lock_acquire+0x683/0x2cf0 [ 1481.344014][T17443] ? __pfx____sys_sendmsg+0x10/0x10 [ 1481.344043][T17443] ? kstrtouint+0x6e/0xe0 [ 1481.344108][T17443] ? __fget_files+0x2a/0x420 [ 1481.344136][T17443] ? __fget_files+0x3a2/0x420 [ 1481.344175][T17443] __sys_sendmmsg+0x273/0x4d0 [ 1481.344203][T17443] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1481.344237][T17443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1481.344279][T17443] ? ksys_write+0x242/0x270 [ 1481.344303][T17443] ? __pfx_ksys_write+0x10/0x10 [ 1481.344332][T17443] __x64_sys_sendmmsg+0xa0/0xc0 [ 1481.344356][T17443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.344378][T17443] do_syscall_64+0x174/0x580 [ 1481.344401][T17443] ? trace_irq_disable+0x3b/0x140 [ 1481.344429][T17443] ? clear_bhb_loop+0x40/0x90 [ 1481.344455][T17443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.344476][T17443] RIP: 0033:0x7f243579de99 [ 1481.344496][T17443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.344513][T17443] RSP: 002b:00007f243672c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1481.344537][T17443] RAX: ffffffffffffffda RBX: 00007f2435a25fa0 RCX: 00007f243579de99 [ 1481.344552][T17443] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1481.344566][T17443] RBP: 00007f243672c090 R08: 0000000000000000 R09: 0000000000000000 [ 1481.344579][T17443] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 1481.344592][T17443] R13: 00007f2435a26038 R14: 00007f2435a25fa0 R15: 00007fff0f615778 [ 1481.344625][T17443] [ 1481.830394][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1482.003692][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1482.023204][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12262'. [ 1482.097683][T17464] veth3: entered allmulticast mode [ 1482.128935][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1482.246865][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1482.358332][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1482.476902][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1484.107783][T17435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1484.325054][T17487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1484.332435][T17487] IPv6: NLM_F_CREATE should be set when creating new route [ 1484.377794][T17487] FAULT_INJECTION: forcing a failure. [ 1484.377794][T17487] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.424914][T17487] CPU: 1 UID: 0 PID: 17487 Comm: syz.2.12269 Not tainted syzkaller #0 PREEMPT(full) [ 1484.424946][T17487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1484.424959][T17487] Call Trace: [ 1484.424968][T17487] [ 1484.424976][T17487] dump_stack_lvl+0xe8/0x150 [ 1484.425015][T17487] should_fail_ex+0x40c/0x560 [ 1484.425048][T17487] should_failslab+0xa8/0x100 [ 1484.425081][T17487] __kmalloc_noprof+0xfe/0x720 [ 1484.425110][T17487] ? seg6_local_build_state+0x151/0xdd0 [ 1484.425130][T17487] ? seg6_local_build_state+0x151/0xdd0 [ 1484.425158][T17487] seg6_local_build_state+0x151/0xdd0 [ 1484.425188][T17487] ? pcpu_chunk_relocate+0x1d0/0x430 [ 1484.425217][T17487] ? __pfx_seg6_local_build_state+0x10/0x10 [ 1484.425254][T17487] ? lwtunnel_build_state+0xe2/0x4c0 [ 1484.425288][T17487] lwtunnel_build_state+0x384/0x4c0 [ 1484.425320][T17487] ? lwtunnel_build_state+0xe2/0x4c0 [ 1484.425352][T17487] fib_nh_common_init+0x130/0x3d0 [ 1484.425375][T17487] ? in6_dev_get+0x1a/0x290 [ 1484.425406][T17487] ? __pfx_fib_nh_common_init+0x10/0x10 [ 1484.425431][T17487] ? in6_dev_get+0x1a/0x290 [ 1484.425458][T17487] ? in6_dev_get+0x1a/0x290 [ 1484.425489][T17487] fib6_nh_init+0xd20/0x1e40 [ 1484.425526][T17487] ? __kmalloc_noprof+0x1ad/0x720 [ 1484.425553][T17487] ? kasan_save_track+0x4f/0x80 [ 1484.425581][T17487] ? __pfx_fib6_nh_init+0x10/0x10 [ 1484.425607][T17487] ? fib6_info_alloc+0x30/0xf0 [ 1484.425639][T17487] ? ip6_route_info_create+0x149/0x890 [ 1484.425666][T17487] ? ip6_route_add+0x49/0x1b0 [ 1484.425692][T17487] ? inet6_rtm_newroute+0x267/0x1a30 [ 1484.425715][T17487] ? rtnetlink_rcv_msg+0x802/0xc00 [ 1484.425745][T17487] ? netlink_rcv_skb+0x226/0x4a0 [ 1484.425767][T17487] ? netlink_unicast+0x7bb/0x940 [ 1484.425784][T17487] ? netlink_sendmsg+0x813/0xb40 [ 1484.425806][T17487] ? sock_sendmsg_nosec+0x13a/0x180 [ 1484.425832][T17487] ? ____sys_sendmsg+0x54e/0x850 [ 1484.425852][T17487] ? ___sys_sendmsg+0x2a5/0x360 [ 1484.425872][T17487] ? __sys_sendmmsg+0x273/0x4d0 [ 1484.425892][T17487] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1484.425913][T17487] ? do_syscall_64+0x174/0x580 [ 1484.425935][T17487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.425995][T17487] ? rcu_is_watching+0x15/0xb0 [ 1484.426016][T17487] ? ip_fib_metrics_init+0x419/0x6f0 [ 1484.426049][T17487] ip6_route_info_create_nh+0x16a/0xad0 [ 1484.426077][T17487] ? ipv6_addr_prefix+0x5d/0x1a0 [ 1484.426103][T17487] ? __asan_memcpy+0x40/0x70 [ 1484.426127][T17487] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 1484.426155][T17487] ? ipv6_addr_prefix+0xd6/0x1a0 [ 1484.426182][T17487] ? ip6_route_info_create+0x545/0x890 [ 1484.426217][T17487] ip6_route_add+0x6e/0x1b0 [ 1484.426250][T17487] inet6_rtm_newroute+0x267/0x1a30 [ 1484.426284][T17487] ? kasan_quarantine_put+0xbb/0x1f0 [ 1484.426312][T17487] ? lockdep_hardirqs_on+0x7a/0x110 [ 1484.426338][T17487] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1484.426361][T17487] ? nlmon_xmit+0xb0/0x100 [ 1484.426389][T17487] ? kmem_cache_free+0x182/0x650 [ 1484.426430][T17487] ? __lock_acquire+0x683/0x2cf0 [ 1484.426465][T17487] ? __dev_queue_xmit+0x29b/0x3820 [ 1484.426494][T17487] ? __local_bh_enable_ip+0xd0/0x130 [ 1484.426520][T17487] ? lockdep_hardirqs_on+0x7a/0x110 [ 1484.426569][T17487] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1484.426593][T17487] rtnetlink_rcv_msg+0x802/0xc00 [ 1484.426636][T17487] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1484.426666][T17487] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1484.426695][T17487] ? ref_tracker_free+0x689/0x830 [ 1484.426724][T17487] ? __pfx_ref_tracker_free+0x10/0x10 [ 1484.426763][T17487] netlink_rcv_skb+0x226/0x4a0 [ 1484.426787][T17487] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1484.426819][T17487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1484.426856][T17487] ? netlink_deliver_tap+0x2e/0x1b0 [ 1484.426879][T17487] ? netlink_deliver_tap+0x2e/0x1b0 [ 1484.426910][T17487] netlink_unicast+0x7bb/0x940 [ 1484.426944][T17487] netlink_sendmsg+0x813/0xb40 [ 1484.426980][T17487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1484.427009][T17487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1484.427038][T17487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1484.427061][T17487] sock_sendmsg_nosec+0x13a/0x180 [ 1484.427094][T17487] ____sys_sendmsg+0x54e/0x850 [ 1484.427124][T17487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1484.427157][T17487] ? import_iovec+0x73/0xa0 [ 1484.427194][T17487] ___sys_sendmsg+0x2a5/0x360 [ 1484.427216][T17487] ? __lock_acquire+0x683/0x2cf0 [ 1484.427250][T17487] ? __pfx____sys_sendmsg+0x10/0x10 [ 1484.427280][T17487] ? kstrtouint+0x6e/0xe0 [ 1484.427336][T17487] ? __fget_files+0x2a/0x420 [ 1484.427365][T17487] ? __fget_files+0x3a2/0x420 [ 1484.427406][T17487] __sys_sendmmsg+0x273/0x4d0 [ 1484.427436][T17487] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1484.427471][T17487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1484.427513][T17487] ? ksys_write+0x242/0x270 [ 1484.427537][T17487] ? __pfx_ksys_write+0x10/0x10 [ 1484.427566][T17487] __x64_sys_sendmmsg+0xa0/0xc0 [ 1484.427590][T17487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.427613][T17487] do_syscall_64+0x174/0x580 [ 1484.427642][T17487] ? trace_irq_disable+0x3b/0x140 [ 1484.427668][T17487] ? clear_bhb_loop+0x40/0x90 [ 1484.427693][T17487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.427715][T17487] RIP: 0033:0x7f02f3f9de99 [ 1484.427735][T17487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1484.427754][T17487] RSP: 002b:00007f02f4ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1484.427777][T17487] RAX: ffffffffffffffda RBX: 00007f02f4225fa0 RCX: 00007f02f3f9de99 [ 1484.427793][T17487] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1484.427808][T17487] RBP: 00007f02f4ed5090 R08: 0000000000000000 R09: 0000000000000000 [ 1484.427821][T17487] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 1484.427833][T17487] R13: 00007f02f4226038 R14: 00007f02f4225fa0 R15: 00007ffc1a2808a8 [ 1484.427867][T17487] [ 1485.085518][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.207989][T17501] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1485.248108][T17501] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1485.351446][T17501] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1485.374829][T17501] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1485.725158][ T2639] smbdirect: ib_dev[syz2] removed [ 1485.744024][T17524] pim6reg527: entered allmulticast mode [ 1485.777731][T19912] net_ratelimit: 22 callbacks suppressed [ 1485.777753][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1485.907967][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.000977][T17533] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12284'. [ 1486.050997][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.198824][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.336766][T17544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12287'. [ 1486.346937][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.477336][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.597553][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.712601][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.837705][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1486.948588][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1487.181345][T17566] x_tables: unsorted entry at hook 3 [ 1488.953628][T17529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1489.185857][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12299'. [ 1489.227677][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12297'. [ 1489.560756][T17591] netlink: 'syz.4.12304': attribute type 1 has an invalid length. [ 1489.651796][T17591] bond5: entered promiscuous mode [ 1489.658905][T17591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1490.131519][T17624] syzkaller0: entered promiscuous mode [ 1490.139871][T17624] syzkaller0: entered allmulticast mode [ 1490.203970][T17626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12311'. [ 1490.847374][ T2637] net_ratelimit: 27 callbacks suppressed [ 1490.847399][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1490.879016][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12321'. [ 1490.979464][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1490.992644][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12323'. [ 1491.035572][T17659] netlink: 'syz.1.12323': attribute type 1 has an invalid length. [ 1491.073154][T17659] netlink: 'syz.1.12323': attribute type 2 has an invalid length. [ 1491.098014][T17659] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1491.116775][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1491.227654][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1491.348345][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1491.477538][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1491.533762][T17677] netlink: zone id is out of range [ 1491.539410][T17677] netlink: zone id is out of range [ 1491.544631][T17677] netlink: zone id is out of range [ 1492.897275][T17612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1493.182736][T17685] FAULT_INJECTION: forcing a failure. [ 1493.182736][T17685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.229859][T17685] CPU: 0 UID: 0 PID: 17685 Comm: syz.5.12330 Not tainted syzkaller #0 PREEMPT(full) [ 1493.229889][T17685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1493.229903][T17685] Call Trace: [ 1493.229911][T17685] [ 1493.229920][T17685] dump_stack_lvl+0xe8/0x150 [ 1493.229955][T17685] should_fail_ex+0x40c/0x560 [ 1493.229989][T17685] _copy_to_user+0x31/0xb0 [ 1493.230011][T17685] simple_read_from_buffer+0xe1/0x170 [ 1493.230044][T17685] proc_fail_nth_read+0x1bb/0x230 [ 1493.230076][T17685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.230109][T17685] ? rw_verify_area+0x24a/0x4c0 [ 1493.230143][T17685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.230171][T17685] vfs_read+0x213/0xa80 [ 1493.230198][T17685] ? __pfx___mutex_lock+0x10/0x10 [ 1493.230224][T17685] ? __pfx_vfs_read+0x10/0x10 [ 1493.230248][T17685] ? __fget_files+0x2a/0x420 [ 1493.230281][T17685] ? __fget_files+0x3a2/0x420 [ 1493.230308][T17685] ? __fget_files+0x2a/0x420 [ 1493.230346][T17685] ksys_read+0x150/0x270 [ 1493.230368][T17685] ? __pfx_ksys_read+0x10/0x10 [ 1493.230398][T17685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.230421][T17685] do_syscall_64+0x174/0x580 [ 1493.230444][T17685] ? trace_irq_disable+0x3b/0x140 [ 1493.230479][T17685] ? clear_bhb_loop+0x40/0x90 [ 1493.230505][T17685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.230526][T17685] RIP: 0033:0x7f94b295e6ce [ 1493.230547][T17685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1493.230565][T17685] RSP: 002b:00007f94b3885fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1493.230589][T17685] RAX: ffffffffffffffda RBX: 00007f94b38866c0 RCX: 00007f94b295e6ce [ 1493.230605][T17685] RDX: 000000000000000f RSI: 00007f94b38860a0 RDI: 0000000000000003 [ 1493.230618][T17685] RBP: 00007f94b3886090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.230630][T17685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.230642][T17685] R13: 00007f94b2c26038 R14: 00007f94b2c25fa0 R15: 00007ffceba2b8c8 [ 1493.230676][T17685] [ 1493.812161][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12337'. [ 1493.915082][T17711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12336'. [ 1494.105235][T17722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12340'. [ 1494.198992][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12343'. [ 1495.051137][T17759] xt_TCPMSS: Only works on TCP SYN packets [ 1495.937102][ T2638] net_ratelimit: 125 callbacks suppressed [ 1495.937126][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.059392][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.177965][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.287203][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.400630][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.517792][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.628283][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.736773][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.857674][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1496.927617][T17714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1496.994256][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1497.234243][T17772] tipc: Started in network mode [ 1497.249749][T17772] tipc: Node identity ac14140f, cluster identity 4711 [ 1497.253563][T17778] xt_ecn: cannot match TCP bits for non-tcp packets [ 1497.262130][T17772] tipc: Enabled bearer , priority 10 [ 1497.273412][T17775] macsec0: entered promiscuous mode [ 1497.693543][T17793] netlink: 'syz.0.12364': attribute type 10 has an invalid length. [ 1498.032010][T17815] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12372'. [ 1498.105412][T17825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12374'. [ 1498.145423][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12372'. [ 1498.171435][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12372'. [ 1498.202383][T17831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12372'. [ 1498.297902][T15789] tipc: Node number set to 2886997007 [ 1498.333524][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12375'. [ 1498.915981][T17874] __nla_validate_parse: 2 callbacks suppressed [ 1498.916002][T17874] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12385'. [ 1498.937627][T17874] netlink: 11 bytes leftover after parsing attributes in process `syz.4.12385'. [ 1498.949314][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12385'. [ 1499.151791][T17881] syzkaller0: entered promiscuous mode [ 1499.157747][T17881] syzkaller0: entered allmulticast mode [ 1500.922971][T17808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1501.215468][T17884] FAULT_INJECTION: forcing a failure. [ 1501.215468][T17884] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.260891][T17884] CPU: 0 UID: 0 PID: 17884 Comm: syz.4.12388 Not tainted syzkaller #0 PREEMPT(full) [ 1501.260923][T17884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1501.260935][T17884] Call Trace: [ 1501.260942][T17884] [ 1501.260950][T17884] dump_stack_lvl+0xe8/0x150 [ 1501.260988][T17884] should_fail_ex+0x40c/0x560 [ 1501.261019][T17884] should_failslab+0xa8/0x100 [ 1501.261051][T17884] __kmalloc_noprof+0xfe/0x720 [ 1501.261074][T17884] ? trace_kmalloc+0x2a/0xf0 [ 1501.261097][T17884] ? ethnl_default_doit+0x166/0x15c0 [ 1501.261119][T17884] ? ethnl_default_doit+0x166/0x15c0 [ 1501.261151][T17884] ethnl_default_doit+0x166/0x15c0 [ 1501.261180][T17884] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1501.261221][T17884] genl_family_rcv_msg_doit+0x233/0x340 [ 1501.261259][T17884] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1501.261299][T17884] ? __lock_acquire+0x683/0x2cf0 [ 1501.261340][T17884] genl_rcv_msg+0x614/0x7a0 [ 1501.261376][T17884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1501.261404][T17884] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1501.261437][T17884] ? irqentry_exit+0x218/0x8f0 [ 1501.261469][T17884] netlink_rcv_skb+0x226/0x4a0 [ 1501.261494][T17884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1501.261529][T17884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1501.261571][T17884] ? down_read+0x2be/0x330 [ 1501.261610][T17884] genl_rcv+0x28/0x40 [ 1501.261637][T17884] netlink_unicast+0x7bb/0x940 [ 1501.261672][T17884] netlink_sendmsg+0x813/0xb40 [ 1501.261707][T17884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1501.261737][T17884] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1501.261767][T17884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1501.261789][T17884] sock_sendmsg_nosec+0x13a/0x180 [ 1501.261822][T17884] ____sys_sendmsg+0x54e/0x850 [ 1501.261852][T17884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1501.261886][T17884] ? import_iovec+0x73/0xa0 [ 1501.261922][T17884] ___sys_sendmsg+0x2a5/0x360 [ 1501.261944][T17884] ? __lock_acquire+0x683/0x2cf0 [ 1501.261978][T17884] ? __pfx____sys_sendmsg+0x10/0x10 [ 1501.262043][T17884] ? __fget_files+0x2a/0x420 [ 1501.262071][T17884] ? __fget_files+0x3a2/0x420 [ 1501.262110][T17884] __x64_sys_sendmsg+0x1b1/0x290 [ 1501.262138][T17884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1501.262183][T17884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.262207][T17884] do_syscall_64+0x174/0x580 [ 1501.262230][T17884] ? trace_irq_disable+0x3b/0x140 [ 1501.262257][T17884] ? clear_bhb_loop+0x40/0x90 [ 1501.262284][T17884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.262305][T17884] RIP: 0033:0x7f243579de99 [ 1501.262326][T17884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1501.262345][T17884] RSP: 002b:00007f243672c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1501.262369][T17884] RAX: ffffffffffffffda RBX: 00007f2435a25fa0 RCX: 00007f243579de99 [ 1501.262385][T17884] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1501.262398][T17884] RBP: 00007f243672c090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.262411][T17884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.262425][T17884] R13: 00007f2435a26038 R14: 00007f2435a25fa0 R15: 00007fff0f615778 [ 1501.262461][T17884] [ 1505.051537][T17885] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1505.083580][T17900] gretap0: entered promiscuous mode [ 1505.104990][T17900] vlan4: entered promiscuous mode [ 1505.252010][T17910] netlink: 144 bytes leftover after parsing attributes in process `syz.5.12395'. [ 1505.318233][ T2637] net_ratelimit: 23 callbacks suppressed [ 1505.318255][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1505.371977][T17905] syzkaller0: entered promiscuous mode [ 1505.403911][T17905] syzkaller0: entered allmulticast mode [ 1505.414709][T17921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12398'. [ 1505.450489][T17913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12394'. [ 1505.454596][T17921] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12398'. [ 1505.476799][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1505.619400][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1505.753233][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1505.913113][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1505.995122][T17951] FAULT_INJECTION: forcing a failure. [ 1505.995122][T17951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.018953][T17951] CPU: 0 UID: 0 PID: 17951 Comm: syz.2.12403 Not tainted syzkaller #0 PREEMPT(full) [ 1506.018984][T17951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1506.018997][T17951] Call Trace: [ 1506.019006][T17951] [ 1506.019015][T17951] dump_stack_lvl+0xe8/0x150 [ 1506.019063][T17951] should_fail_ex+0x40c/0x560 [ 1506.019096][T17951] _copy_to_user+0x31/0xb0 [ 1506.019122][T17951] simple_read_from_buffer+0xe1/0x170 [ 1506.019157][T17951] proc_fail_nth_read+0x1bb/0x230 [ 1506.019191][T17951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1506.019226][T17951] ? rw_verify_area+0x24a/0x4c0 [ 1506.019261][T17951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1506.019289][T17951] vfs_read+0x213/0xa80 [ 1506.019316][T17951] ? __pfx___mutex_lock+0x10/0x10 [ 1506.019342][T17951] ? __pfx_vfs_read+0x10/0x10 [ 1506.019365][T17951] ? __fget_files+0x2a/0x420 [ 1506.019399][T17951] ? __fget_files+0x3a2/0x420 [ 1506.019427][T17951] ? __fget_files+0x2a/0x420 [ 1506.019466][T17951] ksys_read+0x150/0x270 [ 1506.019491][T17951] ? __pfx_ksys_read+0x10/0x10 [ 1506.019523][T17951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.019547][T17951] do_syscall_64+0x174/0x580 [ 1506.019568][T17951] ? trace_irq_disable+0x3b/0x140 [ 1506.019596][T17951] ? clear_bhb_loop+0x40/0x90 [ 1506.019623][T17951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.019645][T17951] RIP: 0033:0x7f02f3f5e6ce [ 1506.019665][T17951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1506.019684][T17951] RSP: 002b:00007f02f4eb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1506.019706][T17951] RAX: ffffffffffffffda RBX: 00007f02f4eb46c0 RCX: 00007f02f3f5e6ce [ 1506.019721][T17951] RDX: 000000000000000f RSI: 00007f02f4eb40a0 RDI: 0000000000000005 [ 1506.019734][T17951] RBP: 00007f02f4eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.019748][T17951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.019761][T17951] R13: 00007f02f4226128 R14: 00007f02f4226090 R15: 00007ffc1a2808a8 [ 1506.019797][T17951] [ 1506.239171][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.359429][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.536700][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.554510][T17965] x_tables: duplicate entry at hook 2 [ 1506.605370][T17967] xt_hashlimit: size too large, truncated to 1048576 [ 1506.615259][T17967] xt_hashlimit: max too large, truncated to 1048576 [ 1506.622504][T17967] xt_hashlimit: invalid rate [ 1506.666865][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1506.787738][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1508.509426][T17927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1508.737186][T17977] pim6reg: entered allmulticast mode [ 1508.756273][T17977] pim6reg: left allmulticast mode [ 1509.839279][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1509.859519][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1509.866192][T18016] syzkaller0: entered promiscuous mode [ 1509.872873][T18016] syzkaller0: entered allmulticast mode [ 1509.872977][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1509.949950][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1509.992842][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1510.327938][ T2638] net_ratelimit: 28 callbacks suppressed [ 1510.327963][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1510.343437][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12429'. [ 1512.079508][T19999] Bluetooth: hci1: command tx timeout [ 1512.538547][T18012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1514.156655][T19999] Bluetooth: hci1: command tx timeout [ 1515.055528][T18036] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1515.088636][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1515.250554][T18052] bond0: (slave veth0_to_bond): Releasing backup interface [ 1515.323692][T18052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1515.392379][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1515.526834][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1515.668510][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1515.737698][T18018] ±ÿ speed is unknown, defaulting to 1000 [ 1515.937169][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1516.065241][T18080] netlink: 'syz.0.12442': attribute type 1 has an invalid length. [ 1516.092262][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1516.110400][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12442'. [ 1516.194273][T18093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12445'. [ 1516.243744][T19999] Bluetooth: hci1: command tx timeout [ 1516.330231][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1516.343465][T18095] syzkaller0: entered promiscuous mode [ 1516.351310][T18095] syzkaller0: entered allmulticast mode [ 1516.552677][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1516.658147][T18103] netlink: 'syz.2.12449': attribute type 1 has an invalid length. [ 1516.757180][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1516.765985][T18105] FAULT_INJECTION: forcing a failure. [ 1516.765985][T18105] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.781041][T18105] CPU: 0 UID: 0 PID: 18105 Comm: syz.5.12450 Not tainted syzkaller #0 PREEMPT(full) [ 1516.781069][T18105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1516.781083][T18105] Call Trace: [ 1516.781091][T18105] [ 1516.781101][T18105] dump_stack_lvl+0xe8/0x150 [ 1516.781140][T18105] should_fail_ex+0x40c/0x560 [ 1516.781172][T18105] should_failslab+0xa8/0x100 [ 1516.781206][T18105] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1516.781231][T18105] ? local_lock_release+0x9c/0x160 [ 1516.781274][T18105] ? __alloc_skb+0x1d7/0x7a0 [ 1516.781292][T18105] ? __alloc_skb+0x1d7/0x7a0 [ 1516.781318][T18105] __alloc_skb+0x1d7/0x7a0 [ 1516.781343][T18105] netlink_sendmsg+0x5d4/0xb40 [ 1516.781380][T18105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.781409][T18105] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1516.781439][T18105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.781462][T18105] sock_sendmsg_nosec+0x13a/0x180 [ 1516.781494][T18105] ____sys_sendmsg+0x54e/0x850 [ 1516.781523][T18105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.781557][T18105] ? import_iovec+0x73/0xa0 [ 1516.781594][T18105] ___sys_sendmsg+0x2a5/0x360 [ 1516.781616][T18105] ? __lock_acquire+0x683/0x2cf0 [ 1516.781651][T18105] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.781714][T18105] ? __fget_files+0x2a/0x420 [ 1516.781742][T18105] ? __fget_files+0x3a2/0x420 [ 1516.781780][T18105] __x64_sys_sendmsg+0x1b1/0x290 [ 1516.781806][T18105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1516.781850][T18105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.781874][T18105] do_syscall_64+0x174/0x580 [ 1516.781899][T18105] ? clear_bhb_loop+0x40/0x90 [ 1516.781926][T18105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.781947][T18105] RIP: 0033:0x7f94b299de99 [ 1516.781972][T18105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.781990][T18105] RSP: 002b:00007f94b3886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.782013][T18105] RAX: ffffffffffffffda RBX: 00007f94b2c25fa0 RCX: 00007f94b299de99 [ 1516.782028][T18105] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000007 [ 1516.782041][T18105] RBP: 00007f94b3886090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.782054][T18105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.782066][T18105] R13: 00007f94b2c26038 R14: 00007f94b2c25fa0 R15: 00007ffceba2b8c8 [ 1516.782101][T18105] [ 1517.115244][T18018] lo speed is unknown, defaulting to 1000 [ 1517.139037][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1517.295122][T18114] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12454'. [ 1517.307822][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1517.395686][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12456'. [ 1517.835804][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12463'. [ 1517.912013][T18149] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1517.970338][ T747] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1518.027975][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12465'. [ 1518.196227][T18018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.204049][T18018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.211963][T18018] bridge_slave_0: entered allmulticast mode [ 1518.222149][T18018] bridge_slave_0: entered promiscuous mode [ 1518.233919][T18018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.241746][T18018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.250956][T18018] bridge_slave_1: entered allmulticast mode [ 1518.260382][T18018] bridge_slave_1: entered promiscuous mode [ 1518.307900][T19999] Bluetooth: hci1: command tx timeout [ 1518.325125][T18018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.351777][T18018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.433532][T18018] team0: Port device team_slave_0 added [ 1518.459001][T18018] team0: Port device team_slave_1 added [ 1518.479787][T18174] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12470'. [ 1518.498245][T18174] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12470'. [ 1518.782176][T18193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12475'. [ 1518.833439][T18018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.852881][T18018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1518.885994][T18177] IPVS: ip_vs_add_dest(): server weight less than zero [ 1518.904509][ T10] IPVS: starting estimator thread 0... [ 1518.931791][T18018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.023359][T18018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.029005][T18200] IPVS: using max 27 ests per chain, 64800 per kthread [ 1519.040719][T18018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.168832][T18018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.441392][T18018] hsr_slave_0: entered promiscuous mode [ 1519.449144][T18018] hsr_slave_1: entered promiscuous mode [ 1519.456028][T18018] debugfs: 'hsr0' already exists in 'hsr' [ 1519.462529][T18018] Cannot create hsr debugfs directory [ 1519.469144][T18206] syzkaller0: entered promiscuous mode [ 1519.474670][T18206] syzkaller0: entered allmulticast mode [ 1519.492514][T18218] netlink: 'syz.2.12477': attribute type 3 has an invalid length. [ 1519.542053][T18221] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1519.802798][T18225] tipc: Enabled bearer , priority 0 [ 1520.003805][T18228] syzkaller0: entered promiscuous mode [ 1520.032473][T18228] syzkaller0: entered allmulticast mode [ 1520.067830][T18228] tipc: Resetting bearer [ 1520.179075][T18224] tipc: Resetting bearer [ 1520.214639][T18247] netlink: 400 bytes leftover after parsing attributes in process `syz.5.12488'. [ 1524.414479][T18224] tipc: Disabling bearer [ 1524.977990][T18273] FAULT_INJECTION: forcing a failure. [ 1524.977990][T18273] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.015918][T18273] CPU: 1 UID: 0 PID: 18273 Comm: syz.5.12493 Not tainted syzkaller #0 PREEMPT(full) [ 1525.015948][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1525.015961][T18273] Call Trace: [ 1525.015970][T18273] [ 1525.015979][T18273] dump_stack_lvl+0xe8/0x150 [ 1525.016016][T18273] should_fail_ex+0x40c/0x560 [ 1525.016046][T18273] should_failslab+0xa8/0x100 [ 1525.016077][T18273] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1525.016102][T18273] ? skb_clone+0x212/0x3a0 [ 1525.016124][T18273] ? skb_clone+0x212/0x3a0 [ 1525.016152][T18273] skb_clone+0x212/0x3a0 [ 1525.016176][T18273] __netlink_deliver_tap+0x413/0x860 [ 1525.016214][T18273] ? netlink_deliver_tap+0x2e/0x1b0 [ 1525.016238][T18273] netlink_deliver_tap+0x19c/0x1b0 [ 1525.016262][T18273] netlink_unicast+0x77f/0x940 [ 1525.016294][T18273] netlink_sendmsg+0x813/0xb40 [ 1525.016327][T18273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1525.016356][T18273] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1525.016385][T18273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1525.016406][T18273] sock_sendmsg_nosec+0x13a/0x180 [ 1525.016434][T18273] ____sys_sendmsg+0x54e/0x850 [ 1525.016462][T18273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1525.016494][T18273] ? import_iovec+0x73/0xa0 [ 1525.016532][T18273] ___sys_sendmsg+0x2a5/0x360 [ 1525.016553][T18273] ? __lock_acquire+0x683/0x2cf0 [ 1525.016584][T18273] ? __pfx____sys_sendmsg+0x10/0x10 [ 1525.016645][T18273] ? __fget_files+0x2a/0x420 [ 1525.016673][T18273] ? __fget_files+0x3a2/0x420 [ 1525.016712][T18273] __x64_sys_sendmsg+0x1b1/0x290 [ 1525.016739][T18273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1525.016782][T18273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.016816][T18273] do_syscall_64+0x174/0x580 [ 1525.016839][T18273] ? trace_irq_disable+0x3b/0x140 [ 1525.016865][T18273] ? clear_bhb_loop+0x40/0x90 [ 1525.016891][T18273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.016911][T18273] RIP: 0033:0x7f94b299de99 [ 1525.016932][T18273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.016949][T18273] RSP: 002b:00007f94b3844028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1525.016971][T18273] RAX: ffffffffffffffda RBX: 00007f94b2c26180 RCX: 00007f94b299de99 [ 1525.016986][T18273] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000007 [ 1525.017000][T18273] RBP: 00007f94b3844090 R08: 0000000000000000 R09: 0000000000000000 [ 1525.017013][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.017025][T18273] R13: 00007f94b2c26218 R14: 00007f94b2c26180 R15: 00007ffceba2b8c8 [ 1525.017060][T18273] [ 1525.460757][ T6315] net_ratelimit: 4 callbacks suppressed [ 1525.460779][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1525.520251][T18279] veth0: entered promiscuous mode [ 1525.705547][T18280] veth0: left promiscuous mode [ 1525.716948][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1526.038858][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1526.064116][T18299] syzkaller0: entered promiscuous mode [ 1526.095661][T18299] syzkaller0: entered allmulticast mode [ 1526.167721][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1526.175218][T18308] netlink: 'syz.5.12501': attribute type 30 has an invalid length. [ 1526.195461][T18308] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12501'. [ 1526.239543][T18308] netlink: 'syz.5.12501': attribute type 17 has an invalid length. [ 1526.387597][ T2636] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1526.416325][T18318] netlink: 336 bytes leftover after parsing attributes in process `syz.5.12501'. [ 1526.461442][T18318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12501'. [ 1526.515248][T18318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12501'. [ 1526.597151][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1526.798518][ T2636] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1526.952900][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1526.981279][T18339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12506'. [ 1527.134074][T18345] netlink: 'syz.2.12507': attribute type 83 has an invalid length. [ 1527.453570][T18360] xt_l2tp: v2 doesn't support IP mode [ 1527.575044][T18352] bond10 (unregistering): Released all slaves [ 1527.623112][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12509'. [ 1527.641792][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12509'. [ 1527.819870][ T2636] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1527.915967][T18018] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1527.948715][T18018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1527.968585][T18018] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1528.011539][T18018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1528.063326][T18018] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1528.102088][T18018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1528.123362][T18379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1528.130810][T18379] IPv6: NLM_F_CREATE should be set when creating new route [ 1528.168943][T18018] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1528.246242][T18018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1528.340171][T18396] netlink: 256 bytes leftover after parsing attributes in process `syz.5.12520'. [ 1528.350916][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1528.518553][T18018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.555726][T18018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.574767][ T2639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.582035][ T2639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.642544][ T2636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.649826][ T2636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.282002][T18018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.520125][T18018] veth0_vlan: entered promiscuous mode [ 1529.543465][T18018] veth1_vlan: entered promiscuous mode [ 1529.578519][T18018] veth0_macvtap: entered promiscuous mode [ 1529.591562][T18018] veth1_macvtap: entered promiscuous mode [ 1529.615056][T18018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.633161][T18018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.650332][ T2639] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.660333][ T2639] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.671653][ T2639] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.682023][ T2639] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.527174][ T6315] net_ratelimit: 16 callbacks suppressed [ 1530.527200][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1530.646752][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1530.757567][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1530.887600][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1530.996909][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1531.117729][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1531.226799][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1531.336374][T18399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1531.345462][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1531.612681][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.633523][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.711288][T18457] netlink: 260 bytes leftover after parsing attributes in process `syz.0.12532'. [ 1531.737995][ T2636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.761929][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1531.780624][ T2636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.917230][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1532.776431][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1532.799676][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1532.812764][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1532.830507][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1532.841356][T18504] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12545'. [ 1532.851694][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1533.037075][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12546'. [ 1533.069096][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12546'. [ 1533.179256][T18518] team0: Port device vlan0 added [ 1533.343655][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12549'. [ 1533.459308][T18530] netlink: 'syz.2.12551': attribute type 16 has an invalid length. [ 1533.511171][T18530] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12551'. [ 1533.627689][T18530] veth0_macvtap: entered allmulticast mode [ 1533.905206][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12556'. [ 1533.975548][T18553] netlink: 212 bytes leftover after parsing attributes in process `syz.4.12557'. [ 1534.213266][T18500] ±ÿ speed is unknown, defaulting to 1000 [ 1534.598123][T18569] netlink: 'syz.2.12559': attribute type 33 has an invalid length. [ 1534.657602][T18569] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1534.911486][T18566] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12562'. [ 1534.950477][ T5627] Bluetooth: hci4: command tx timeout [ 1535.630002][ T2636] net_ratelimit: 27 callbacks suppressed [ 1535.630092][ T2636] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1535.691670][T18615] netlink: 'syz.4.12569': attribute type 1 has an invalid length. [ 1536.089826][T18500] lo speed is unknown, defaulting to 1000 [ 1536.104482][T18624] ipvlan2: entered promiscuous mode [ 1536.116936][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1536.320203][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1536.510142][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1536.719179][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1537.028782][ T5627] Bluetooth: hci4: command tx timeout [ 1537.073123][T18672] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12583'. [ 1537.258585][T18500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.265939][T18500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.283500][T18500] bridge_slave_0: entered allmulticast mode [ 1537.320171][T18500] bridge_slave_0: entered promiscuous mode [ 1537.348371][T18500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.363777][T18500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.372602][T18500] bridge_slave_1: entered allmulticast mode [ 1537.382594][T18500] bridge_slave_1: entered promiscuous mode [ 1537.470752][T18678] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1537.474072][T18500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.515099][T18678] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1537.523037][T18500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.546689][T18678] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1537.659676][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12588'. [ 1537.687123][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12588'. [ 1537.712503][T18500] team0: Port device team_slave_0 added [ 1537.733743][T18500] team0: Port device team_slave_1 added [ 1537.823678][T18693] netlink: 'syz.4.12592': attribute type 5 has an invalid length. [ 1537.846589][T18500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.866304][T18500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.903425][T18500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.922663][T18500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.931793][T18500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.970607][T18500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.982236][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12591'. [ 1538.000136][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12591'. [ 1538.010227][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12591'. [ 1538.035389][T18700] netlink: 'syz.0.12593': attribute type 12 has an invalid length. [ 1538.081016][T18700] netlink: 'syz.0.12593': attribute type 2 has an invalid length. [ 1538.111384][T18500] hsr_slave_0: entered promiscuous mode [ 1538.122940][T18500] hsr_slave_1: entered promiscuous mode [ 1538.130900][T18500] debugfs: 'hsr0' already exists in 'hsr' [ 1538.137407][T18500] Cannot create hsr debugfs directory [ 1538.476079][T18714] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1538.629642][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.771700][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1538.930755][T18500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1538.944080][T18500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.984987][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1539.107049][ T5627] Bluetooth: hci4: command tx timeout [ 1539.170440][T18500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1539.183466][T18500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.212910][T18745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12609'. [ 1539.242439][T18747] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1539.278394][T18746] pim6reg: entered allmulticast mode [ 1539.296806][T17219] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1539.493130][T18500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1539.533354][T18500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.609829][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12611'. [ 1539.710997][T18767] netlink: 420 bytes leftover after parsing attributes in process `syz.2.12612'. [ 1539.828954][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1540.011757][T18500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.022946][T18777] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12615'. [ 1540.033558][T18500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.484150][T18790] syzkaller0: entered promiscuous mode [ 1540.509708][T18790] syzkaller0: entered allmulticast mode [ 1540.533326][T18793] netlink: 'syz.0.12622': attribute type 32 has an invalid length. [ 1540.545950][T18795] netlink: 'syz.0.12622': attribute type 32 has an invalid length. [ 1540.768629][ T2638] net_ratelimit: 3 callbacks suppressed [ 1540.768651][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1540.844403][T18810] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1540.894924][T18813] syzkaller0: entered promiscuous mode [ 1540.914305][T18813] syzkaller0: entered allmulticast mode [ 1540.955943][ T2636] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1541.110662][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1541.137764][T18822] TCP: TCP_TX_DELAY enabled [ 1541.190958][ T5627] Bluetooth: hci4: command tx timeout [ 1541.226664][ T2638] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1541.337145][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1541.457257][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1541.577539][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1541.688999][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1541.828913][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1541.909483][T18844] netlink: 'syz.2.12634': attribute type 1 has an invalid length. [ 1541.984448][T18844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1542.016930][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1542.085070][T18841] bond1: (slave geneve2): making interface the new active one [ 1542.098327][T18841] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1542.675327][T18851] pimreg: entered allmulticast mode [ 1543.503689][T18795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1543.522544][T18834] netlink: 'syz.5.12633': attribute type 3 has an invalid length. [ 1543.547456][T18834] netlink: 'syz.5.12633': attribute type 1 has an invalid length. [ 1543.553586][T18500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1543.568898][T18834] __nla_validate_parse: 2 callbacks suppressed [ 1543.568917][T18834] netlink: 204 bytes leftover after parsing attributes in process `syz.5.12633'. [ 1543.629030][T18500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1543.650364][T18500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1543.694724][T18500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1543.741330][T18500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1543.764985][T18500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1543.778448][T18500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1543.803179][T18500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1544.235014][T18500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1544.341513][T18500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.407595][T19912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.414881][T19912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.441514][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.448774][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.859167][T18909] ±ÿ speed is unknown, defaulting to 1000 [ 1544.876186][T18915] netlink: 'syz.0.12651': attribute type 4 has an invalid length. [ 1544.921930][T18915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1545.404749][T18933] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12655'. [ 1545.480856][T18937] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12655'. [ 1545.604034][T18933] bond1 (unregistering): Released all slaves [ 1545.738787][T18937] bond1 (unregistering): Released all slaves [ 1545.853027][ T6315] net_ratelimit: 23 callbacks suppressed [ 1545.853050][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1546.027075][T17219] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1546.070905][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.158806][T18500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.414001][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1546.455171][T18500] veth0_vlan: entered promiscuous mode [ 1546.514816][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12664'. [ 1546.554680][T18500] veth1_vlan: entered promiscuous mode [ 1546.563421][T18969] netlink: 'syz.5.12664': attribute type 2 has an invalid length. [ 1546.590440][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12664'. [ 1546.607253][T19918] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1546.674603][T18909] lo speed is unknown, defaulting to 1000 [ 1546.698463][T18500] veth0_macvtap: entered promiscuous mode [ 1546.753224][T18500] veth1_macvtap: entered promiscuous mode [ 1546.788253][ T2636] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1547.036615][T18500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.044785][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12671'. [ 1547.054987][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1547.123524][T18500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.202663][ T2640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.386840][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1547.422175][ T2640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.472160][ T2640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.515656][ T2640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.588630][T17219] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1547.688063][T19009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1547.737193][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1547.992418][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1548.155444][ T2637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.195677][ T2637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.458450][ T2639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.501424][ T2639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.541369][T19032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1548.581520][T19032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.614975][T19032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.629544][T19032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1549.212416][T19067] syzkaller0: entered promiscuous mode [ 1549.218238][T19067] syzkaller0: entered allmulticast mode [ 1549.231143][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12690'. [ 1549.241006][T19064] netlink: 'syz.4.12690': attribute type 7 has an invalid length. [ 1549.249871][T19064] netlink: 'syz.4.12690': attribute type 8 has an invalid length. [ 1549.286800][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12690'. [ 1549.318073][T19050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1549.344674][T19070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12693'. [ 1549.371231][T19067] netlink: 'syz.2.12693': attribute type 10 has an invalid length. [ 1549.393133][T19075] tipc: Cannot configure node identity twice [ 1549.417365][T19067] veth1_macvtap: left promiscuous mode [ 1549.464954][T19067] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1549.577615][T19083] x_tables: duplicate underflow at hook 1 [ 1549.645952][T19083] IPVS: set_ctl: invalid protocol: 98 172.30.0.6:20001 [ 1549.822426][ T359] IPVS: starting estimator thread 0... [ 1549.927212][T19095] IPVS: using max 33 ests per chain, 79200 per kthread [ 1549.986456][T19100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.030280][T19100] bridge_slave_0 (unregistering): left allmulticast mode [ 1550.044310][T19101] netlink: 'syz.5.12701': attribute type 2 has an invalid length. [ 1550.053569][T19103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12703'. [ 1550.054897][T19100] bridge_slave_0 (unregistering): left promiscuous mode [ 1550.073652][T19103] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12703'. [ 1550.108801][T19100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.111744][T19103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12703'. [ 1550.228573][T19106] netlink: 'syz.2.12704': attribute type 12 has an invalid length. [ 1550.256170][T19104] syzkaller0: entered promiscuous mode [ 1550.269022][T19104] syzkaller0: entered allmulticast mode [ 1550.462229][T19115] netlink: 'syz.2.12706': attribute type 1 has an invalid length. [ 1550.516430][T19116] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12706'. [ 1550.609771][T19118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1550.862877][ T2636] net_ratelimit: 15 callbacks suppressed [ 1550.862900][ T2636] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1550.999181][T17219] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1551.021137][T19142] syzkaller0: entered promiscuous mode [ 1551.059953][T19142] syzkaller0: entered allmulticast mode [ 1551.138883][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1551.139106][T19142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12713'. [ 1551.327306][T19159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12719'. [ 1551.351887][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1551.440898][T19159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12719'. [ 1551.499755][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1551.618022][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1551.747311][ T2639] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1551.752931][T19176] nbd: must specify a size in bytes for the device [ 1551.886831][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1551.975137][T19193] netlink: 'syz.1.12730': attribute type 29 has an invalid length. [ 1552.027077][T26358] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1552.159016][T17219] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1552.922513][T19231] netlink: 'syz.0.12738': attribute type 30 has an invalid length. [ 1552.924988][T19229] netlink: 'syz.4.12737': attribute type 1 has an invalid length. [ 1553.167439][T19229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1553.210556][T19233] bond1: entered promiscuous mode [ 1553.232579][T19233] bond1: entered allmulticast mode [ 1554.045537][T19278] ±ÿ speed is unknown, defaulting to 1000 [ 1554.499158][T19304] netlink: 'syz.2.12760': attribute type 10 has an invalid length. [ 1554.543529][T19304] __nla_validate_parse: 12 callbacks suppressed [ 1554.543552][T19304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12760'. [ 1554.568043][T19304] team0: entered allmulticast mode [ 1554.588939][T19304] team_slave_0: entered allmulticast mode [ 1554.623589][T19304] team_slave_1: entered allmulticast mode [ 1554.670176][T19304] bridge0: port 3(team0) entered blocking state [ 1554.691794][T19304] bridge0: port 3(team0) entered disabled state [ 1554.733586][T19304] team0: entered promiscuous mode [ 1554.760190][T19304] team_slave_0: entered promiscuous mode [ 1554.792378][T19304] team_slave_1: entered promiscuous mode [ 1554.815783][T19304] bridge0: port 3(team0) entered blocking state [ 1554.822465][T19304] bridge0: port 3(team0) entered forwarding state [ 1555.034709][T19321] macvlan0: entered promiscuous mode [ 1555.142208][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12762'. [ 1555.890849][T19278] lo speed is unknown, defaulting to 1000 [ 1555.896838][ T2640] net_ratelimit: 25 callbacks suppressed [ 1555.896860][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1556.583984][T19375] netlink: 'syz.2.12774': attribute type 12 has an invalid length. [ 1556.656781][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1556.775416][T19391] ip6t_srh: unknown srh match flags 4000 [ 1556.911115][T19395] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12779'. [ 1556.922445][ T2637] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1556.965975][T19395] xt_policy: neither incoming nor outgoing policy selected [ 1557.097218][T19912] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1557.398823][T19918] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1557.527646][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1557.551681][T19405] siw: device registration error -23 [ 1557.573549][T19407] siw: device registration error -23 [ 1557.678277][ T2640] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1557.777206][T19411] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1557.800724][T19411] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1557.823618][T19411] veth1_to_bridge: entered allmulticast mode [ 1557.836398][T19411] veth1_to_bridge: entered promiscuous mode [ 1557.864623][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12786'. [ 1557.869175][T19411] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1557.918201][T19411] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1557.925544][T19411] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 1557.935625][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12784'. [ 1558.107612][T19411] openvswitch: netlink: IP tunnel dst address not specified [ 1558.134920][T19431] netlink: 'syz.0.12789': attribute type 12 has an invalid length. [ 1558.181155][T19438] xt_policy: too many policy elements [ 1558.208417][ T6315] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1558.229966][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1558.391820][T19999] Bluetooth: hci0: command 0x0406 tx timeout [ 1558.875876][T19431] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1560.845474][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12798'. [ 1560.906651][ C0] net_ratelimit: 10314 callbacks suppressed [ 1560.906674][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1560.925158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1560.937942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1560.950357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1560.962866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1560.975276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1560.987683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.000185][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1561.012831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.025933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.420264][T19497] netlink: 'syz.2.12801': attribute type 12 has an invalid length. [ 1562.353384][T19507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12803'. [ 1562.423666][T19497] bond3: option primary_reselect: invalid value (255) [ 1562.552899][T19497] bond3 (unregistering): Released all slaves [ 1562.743506][T19499] bridge0: port 4(batadv1) entered blocking state [ 1562.777513][T19499] bridge0: port 4(batadv1) entered disabled state [ 1562.821147][T19499] batadv1: entered allmulticast mode [ 1562.864123][T19499] batadv1: entered promiscuous mode [ 1563.144372][T19509] ±ÿ speed is unknown, defaulting to 1000 [ 1563.214738][ T2635] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1563.224304][ T2635] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1563.789040][T19521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12806'. [ 1563.859455][T19524] netlink: 'syz.2.12806': attribute type 12 has an invalid length. [ 1563.902171][T19524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12806'. [ 1563.963758][T19526] lo: entered promiscuous mode [ 1564.009622][T19526] tunl0: entered promiscuous mode [ 1564.105625][T19526] gre0: entered promiscuous mode [ 1564.182350][T19526] gretap0: entered promiscuous mode [ 1564.300489][T19526] erspan0: entered promiscuous mode [ 1564.385826][T19526] ip_vti0: entered promiscuous mode [ 1565.138557][T19545] x_tables: duplicate underflow at hook 2 [ 1565.485274][T19553] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1565.918176][ C0] net_ratelimit: 19878 callbacks suppressed [ 1565.918199][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1565.936442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1565.948912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1565.961230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1565.973524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1565.986214][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1565.998515][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.010816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.023194][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1566.035504][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1567.497275][T19577] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12823'. [ 1567.581155][T19509] lo speed is unknown, defaulting to 1000 [ 1567.756790][T19577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12823'. [ 1568.642963][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 1568.725752][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12827'. [ 1568.971672][T19594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.379018][T19601] netlink: 'syz.5.12829': attribute type 10 has an invalid length. [ 1569.983509][T19601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.047682][T19601] team0: entered allmulticast mode [ 1570.114461][T19601] team_slave_0: entered allmulticast mode [ 1570.177250][T19601] team_slave_1: entered allmulticast mode [ 1570.241974][T19601] bond0: (slave team0): Enslaving as an active interface with an up link [ 1570.728499][T19613] tunl0: entered promiscuous mode [ 1570.828822][T19613] netlink: 'syz.1.12833': attribute type 4 has an invalid length. [ 1570.906033][T19613] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12833'. [ 1570.926698][ C0] net_ratelimit: 19854 callbacks suppressed [ 1570.926719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1570.945058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1570.957326][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1570.969977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1570.982475][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1570.994814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.007193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.019568][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1571.031851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.032024][T19496] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1575.936549][ C0] net_ratelimit: 36227 callbacks suppressed [ 1575.936573][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1575.936584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1575.936796][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1575.942770][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1575.954714][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1575.967220][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1575.979174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1575.991081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.003060][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1576.015028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1577.146528][ C1] sched: DL replenish lagged too much [ 1580.946554][ C0] net_ratelimit: 40222 callbacks suppressed [ 1580.946579][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1580.946636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1580.952742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.964834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1580.977082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.989069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1581.001021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.013038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1581.025031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.037055][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1585.956548][ C1] net_ratelimit: 39546 callbacks suppressed [ 1585.956572][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1585.957528][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1585.962892][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1585.974907][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1585.987265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1585.999338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.011348][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1586.023556][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.035432][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1586.047486][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1590.966685][ C1] net_ratelimit: 38392 callbacks suppressed [ 1590.966710][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1590.967767][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1590.972910][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1590.984928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1590.996882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1591.009001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.020917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1591.032918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.044846][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1591.057004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1595.976623][ C0] net_ratelimit: 38539 callbacks suppressed [ 1595.976647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1595.976732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1595.982833][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1595.994869][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1596.006844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.018812][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1596.030773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.042741][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1596.054707][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.066691][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1600.986590][ C0] net_ratelimit: 38533 callbacks suppressed [ 1600.986615][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1600.987038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1600.992917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.004830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1601.016803][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.028822][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1601.040818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1601.052844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1601.064818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1601.076853][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1605.996627][ C0] net_ratelimit: 38127 callbacks suppressed [ 1605.996654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1605.996681][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1606.002843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.014766][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1606.026858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.038806][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1606.051005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.063049][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1606.075294][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.087258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1610.652649][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1611.006572][ C1] net_ratelimit: 38080 callbacks suppressed [ 1611.006596][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1611.006658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.012942][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1611.024988][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.037233][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1611.049243][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1611.061298][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1611.073333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1611.085297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1611.097245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.016520][ C0] net_ratelimit: 38766 callbacks suppressed [ 1616.016545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.016655][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1616.022713][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.034653][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1616.046694][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.058670][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1616.070664][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1616.082589][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1616.094746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.106602][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1621.026713][ C0] net_ratelimit: 39410 callbacks suppressed [ 1621.026727][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1621.026738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.026992][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.033013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1621.045121][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1621.057232][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1621.069068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.081088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1621.092989][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.104978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1626.036585][ C0] net_ratelimit: 39610 callbacks suppressed [ 1626.036609][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.036631][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1626.042775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.054719][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1626.066868][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.078793][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1626.090775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.102855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1626.115090][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1626.126936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1630.608944][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 1631.046599][ C0] net_ratelimit: 39712 callbacks suppressed [ 1631.046624][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1631.046633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1631.046906][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1631.052778][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.064732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1631.076786][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.089603][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1631.101792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1631.113956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1631.126020][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1636.056604][ C0] net_ratelimit: 38983 callbacks suppressed [ 1636.056629][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.056646][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1636.062898][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1636.075614][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1636.087725][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1636.099626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1636.111727][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.123703][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1636.135660][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.147598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1641.066518][ C1] net_ratelimit: 40165 callbacks suppressed [ 1641.066541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1641.066726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.072750][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1641.084891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1641.096884][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1641.108878][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.120782][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1641.132756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.144974][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1641.156993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1646.076553][ C1] net_ratelimit: 39477 callbacks suppressed [ 1646.076578][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1646.076668][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.082832][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1646.096886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1646.107179][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1646.119107][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.131025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1646.143197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.155194][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1646.167221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1651.086622][ C0] net_ratelimit: 39608 callbacks suppressed [ 1651.086646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1651.087006][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1651.093389][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.105454][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1651.117622][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.129776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1651.141685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.153614][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1651.165878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.177846][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1656.096620][ C1] net_ratelimit: 39536 callbacks suppressed [ 1656.096623][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1656.096643][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1656.096837][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1656.102793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1656.114762][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1656.126834][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1656.138895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1656.150894][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1656.162866][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1656.174785][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1661.106501][ C1] net_ratelimit: 39953 callbacks suppressed [ 1661.106525][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1661.106574][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1661.112698][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1661.124786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1661.136805][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1661.148784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1661.160725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1661.172767][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1661.184771][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1661.196758][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.116657][ C1] net_ratelimit: 39072 callbacks suppressed [ 1666.116681][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1666.116721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1666.122873][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1666.134970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1666.147312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1666.159338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.171645][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1666.183857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.195803][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1666.207937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.126489][ C1] net_ratelimit: 39265 callbacks suppressed [ 1671.126515][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1671.126659][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.132673][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1671.144694][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.156773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1671.168872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.180721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1671.192785][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.204816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1671.216805][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1671.826946][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1676.136515][ C0] net_ratelimit: 40385 callbacks suppressed [ 1676.136541][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.136581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1676.142709][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.154742][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1676.166824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1676.178937][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1676.190937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.202839][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1676.214958][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1676.227019][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1681.146664][ C1] net_ratelimit: 39997 callbacks suppressed [ 1681.146690][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1681.146699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.146918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1681.153003][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1681.165097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1681.177256][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1681.189193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.201260][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1681.213261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.225460][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1686.156673][ C0] net_ratelimit: 38736 callbacks suppressed [ 1686.156705][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1686.156694][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1686.156928][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1686.163034][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1686.175092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1686.187173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1686.199246][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1686.211306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1686.223394][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1686.237101][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1691.166483][ C1] net_ratelimit: 39283 callbacks suppressed [ 1691.166506][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1691.166508][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1691.167246][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1691.172665][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1691.184744][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1691.196821][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1691.209001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1691.220965][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1691.233004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1691.244949][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1696.176503][ C0] net_ratelimit: 40239 callbacks suppressed [ 1696.176528][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1696.176533][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1696.176782][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1696.182681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1696.194620][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1696.206651][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.218709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1696.230656][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.242804][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1696.254866][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1701.186519][ C1] net_ratelimit: 40113 callbacks suppressed [ 1701.186544][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1701.186660][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1701.192702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1701.204737][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1701.216663][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1701.228848][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1701.240768][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1701.252859][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1701.264739][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1701.276739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.196555][ C0] net_ratelimit: 39174 callbacks suppressed [ 1706.196579][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1706.196580][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1706.196792][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1706.202831][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.215192][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1706.227267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1706.239323][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1706.251322][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.263315][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1706.275241][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1711.206621][ C1] net_ratelimit: 39282 callbacks suppressed [ 1711.206645][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1711.206650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.206870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1711.212791][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1711.224845][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.236848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1711.248807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1711.260816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1711.272816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.284801][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1716.216633][ C1] net_ratelimit: 39874 callbacks suppressed [ 1716.216657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1716.216688][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1716.222916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1716.234957][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1716.247034][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1716.258962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1716.270908][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1716.282935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1716.294798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1716.306825][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1721.226484][ C0] net_ratelimit: 39233 callbacks suppressed [ 1721.226509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1721.226602][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1721.232686][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1721.244743][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1721.256729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1721.268757][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1721.281029][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1721.292901][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1721.304947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1721.316835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1721.916437][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1721.923446][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16541/1:b..l [ 1721.932158][ C0] rcu: (detected by 0, t=10503 jiffies, g=326809, q=2634 ncpus=2) [ 1721.940166][ C0] task:syz-executor state:R running task stack:22256 pid:16541 tgid:16541 ppid:1 task_flags:0x40054c flags:0x00080002 [ 1721.955566][ C0] Call Trace: [ 1721.958888][ C0] [ 1721.961939][ C0] __schedule+0x17d9/0x56c0 [ 1721.966496][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1721.971826][ C0] ? kernel_text_address+0xa5/0xe0 [ 1721.977021][ C0] ? __pfx___schedule+0x10/0x10 [ 1721.981905][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1721.986902][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1721.991958][ C0] irqentry_exit+0x14f/0x8f0 [ 1721.996585][ C0] ? trace_irq_disable+0x3b/0x140 [ 1722.001738][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1722.007837][ C0] RIP: 0010:unwind_next_frame+0x9d6/0x2550 [ 1722.013769][ C0] Code: 08 bd 00 49 8d 55 04 4c 8b 45 00 49 8d 5d 01 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 04 17 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 1a 17 00 00 49 0f bf 45 00 49 01 c0 e9 [ 1722.033672][ C0] RSP: 0018:ffffc9000410f2a0 EFLAGS: 00000a03 [ 1722.039869][ C0] RAX: 1ffffffff21df701 RBX: ffffffff90efb80f RCX: ffffffff90718254 [ 1722.047875][ C0] RDX: ffffffff90efb812 RSI: ffffffff90efb80e RDI: ffffffff8c4bdb20 [ 1722.056283][ C0] RBP: ffffc9000410f380 R08: ffffc9000410fc88 R09: 0000000000000000 [ 1722.064302][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 1722.072396][ C0] R13: ffffffff90efb80e R14: ffffc9000410f348 R15: 1ffff92000821e69 [ 1722.080446][ C0] ? get_signal+0x121b/0x12c0 [ 1722.085176][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1722.090411][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1722.096601][ C0] arch_stack_walk+0x11b/0x150 [ 1722.101405][ C0] ? get_signal+0x121b/0x12c0 [ 1722.106114][ C0] stack_trace_save+0xa9/0x100 [ 1722.110907][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1722.116318][ C0] ? stack_trace_save+0xa9/0x100 [ 1722.121310][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1722.126891][ C0] kasan_save_track+0x3e/0x80 [ 1722.131608][ C0] ? kasan_save_track+0x3e/0x80 [ 1722.136492][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1722.141353][ C0] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1722.146939][ C0] ? kmem_cache_free+0x156/0x650 [ 1722.151913][ C0] ? tear_down_vmas+0x312/0x520 [ 1722.156898][ C0] ? exit_mmap+0x4ca/0x9f0 [ 1722.161387][ C0] ? __mmput+0x118/0x420 [ 1722.165671][ C0] ? exit_mm+0x221/0x2d0 [ 1722.169969][ C0] ? do_exit+0x6cd/0x2360 [ 1722.174441][ C0] ? do_group_exit+0x22d/0x2f0 [ 1722.179241][ C0] ? get_signal+0x121b/0x12c0 [ 1722.184007][ C0] __kasan_kmalloc+0x93/0xb0 [ 1722.188642][ C0] __kmalloc_cache_noprof+0x32d/0x660 [ 1722.194061][ C0] ? __kmalloc_cache_noprof+0x150/0x660 [ 1722.199738][ C0] ? kmem_cache_free+0x156/0x650 [ 1722.204720][ C0] ? kmem_cache_free+0x156/0x650 [ 1722.209699][ C0] ? tear_down_vmas+0x312/0x520 [ 1722.214589][ C0] kmem_cache_free+0x156/0x650 [ 1722.219402][ C0] tear_down_vmas+0x312/0x520 [ 1722.224123][ C0] exit_mmap+0x4ca/0x9f0 [ 1722.228401][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1722.233224][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1722.238027][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 1722.243706][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 1722.248939][ C0] __mmput+0x118/0x420 [ 1722.253040][ C0] exit_mm+0x221/0x2d0 [ 1722.257277][ C0] do_exit+0x6cd/0x2360 [ 1722.261609][ C0] ? cgroup1_freezing+0x20/0x350 [ 1722.266579][ C0] ? __pfx_do_exit+0x10/0x10 [ 1722.271296][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1722.276365][ C0] do_group_exit+0x22d/0x2f0 [ 1722.280984][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1722.286226][ C0] get_signal+0x121b/0x12c0 [ 1722.290786][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1722.296373][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1722.301603][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1722.307888][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1722.313737][ C0] exit_to_user_mode_loop+0x104/0x730 [ 1722.319266][ C0] ? rcu_is_watching+0x15/0xb0 [ 1722.324067][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.330168][ C0] do_syscall_64+0x353/0x580 [ 1722.334791][ C0] ? trace_irq_disable+0x3b/0x140 [ 1722.339851][ C0] ? clear_bhb_loop+0x40/0x90 [ 1722.344561][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.350482][ C0] RIP: 0033:0x7fbb3255e6ce [ 1722.354944][ C0] RSP: 002b:00007fff171fd158 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1722.363426][ C0] RAX: 0000000000000000 RBX: 00005555843ad500 RCX: 00007fbb3255e6ce [ 1722.371446][ C0] RDX: 00007fff171fd1b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1722.379543][ C0] RBP: 00007fff171fd21c R08: 0000000000000000 R09: 0000000000000000 [ 1722.387541][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000009e [ 1722.395539][ C0] R13: 0000000000000064 R14: 000000000017fd3a R15: 00007fff171fd270 [ 1722.403565][ C0] [ 1722.406613][ C0] rcu: rcu_preempt kthread starved for 218 jiffies! g326809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1722.417839][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1722.428097][ C0] rcu: RCU grace-period kthread stack dump: [ 1722.434098][ C0] task:rcu_preempt state:R running task stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1722.447711][ C0] Call Trace: [ 1722.451017][ C0] [ 1722.453974][ C0] __schedule+0x17d9/0x56c0 [ 1722.458513][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1722.463523][ C0] ? __pfx___schedule+0x10/0x10 [ 1722.468424][ C0] ? schedule+0x90/0x2b0 [ 1722.472791][ C0] schedule+0x164/0x2b0 [ 1722.476971][ C0] schedule_timeout+0x152/0x2c0 [ 1722.481858][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1722.487270][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1722.492589][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1722.498422][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1722.504013][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1722.508901][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1722.514133][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1722.519981][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1722.526184][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1722.531504][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1722.536743][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1722.542673][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1722.547397][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1722.552652][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1722.557653][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1722.562730][ C0] kthread+0x388/0x470 [ 1722.566843][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1722.572129][ C0] ? __pfx_kthread+0x10/0x10 [ 1722.576817][ C0] ret_from_fork+0x514/0xb70 [ 1722.581451][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1722.586784][ C0] ? __switch_to+0xc89/0x1420 [ 1722.591513][ C0] ? __pfx_kthread+0x10/0x10 [ 1722.596143][ C0] ret_from_fork_asm+0x1a/0x30 [ 1722.600960][ C0] [ 1722.604009][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1722.610360][ C0] CPU: 0 UID: 0 PID: 19912 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 1722.620016][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1722.630190][ C0] Workqueue: krds_cp_wq#20/7 rds_connect_worker [ 1722.636482][ C0] RIP: 0010:stack_depot_save_flags+0x9a/0x800 [ 1722.642590][ C0] Code: c1 c7 04 29 e9 31 cf 01 c5 29 f8 41 89 f8 41 c1 c0 06 41 31 c0 01 ef 45 89 c1 41 c1 c1 08 44 29 c5 41 31 e9 41 01 f8 44 29 cf <44> 89 c9 c1 c1 10 31 f9 45 01 c1 89 c8 c1 c0 13 41 29 c8 44 31 c0 [ 1722.662236][ C0] RSP: 0018:ffffc900000073f8 EFLAGS: 00000213 [ 1722.668339][ C0] RAX: 00000000b6fe4a4b RBX: 0000000000000801 RCX: 000000005f2416c0 [ 1722.676514][ C0] RDX: ffffc90000007468 RSI: 0000000000000026 RDI: 000000004e59707f [ 1722.684604][ C0] RBP: 000000003beac511 R08: 0000000077c66d64 R09: 00000000ee977f2b [ 1722.692612][ C0] R10: 0000000000000016 R11: ffffffff8eb59c60 R12: 0000000000000000 [ 1722.700616][ C0] R13: 0000000000000820 R14: ffffc90000007450 R15: ffffc90000007450 [ 1722.708708][ C0] FS: 0000000000000000(0000) GS:ffff888124f50000(0000) knlGS:0000000000000000 [ 1722.717671][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1722.724365][ C0] CR2: 00007f012ac16f50 CR3: 0000000077054000 CR4: 00000000003526f0 [ 1722.732378][ C0] Call Trace: [ 1722.735694][ C0] [ 1722.738578][ C0] kasan_save_track+0x4f/0x80 [ 1722.743292][ C0] ? kasan_save_track+0x3e/0x80 [ 1722.748294][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1722.753362][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1722.759122][ C0] ? skb_ext_add+0x148/0x8e0 [ 1722.763747][ C0] ? br_nf_pre_routing_ipv6+0x134/0x6f0 [ 1722.769323][ C0] ? br_handle_frame+0x127f/0x1510 [ 1722.774465][ C0] ? __netif_receive_skb_core+0x989/0x30b0 [ 1722.780315][ C0] ? process_backlog+0x706/0x1860 [ 1722.785372][ C0] ? __napi_poll+0xaa/0x330 [ 1722.789910][ C0] ? net_rx_action+0x61d/0xf50 [ 1722.794709][ C0] ? handle_softirqs+0x225/0x840 [ 1722.799674][ C0] ? do_softirq+0x76/0xd0 [ 1722.804034][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 1722.809350][ C0] ? __inet6_bind+0x386/0xf30 [ 1722.814143][ C0] ? kernel_bind+0x13e/0x1c0 [ 1722.818936][ C0] ? rds_tcp_conn_path_connect+0x53b/0x920 [ 1722.824778][ C0] ? rds_connect_worker+0x1d8/0x290 [ 1722.830007][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 1722.835765][ C0] ? worker_thread+0xa47/0xfb0 [ 1722.840559][ C0] ? kthread+0x388/0x470 [ 1722.844840][ C0] ? ret_from_fork+0x514/0xb70 [ 1722.849635][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1722.854643][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1722.859533][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1722.865028][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 1722.870698][ C0] ? skb_ext_add+0x148/0x8e0 [ 1722.875312][ C0] ? skb_ext_add+0x148/0x8e0 [ 1722.879970][ C0] skb_ext_add+0x148/0x8e0 [ 1722.884477][ C0] ? net_generic+0x1e/0x240 [ 1722.889035][ C0] br_nf_pre_routing_ipv6+0x134/0x6f0 [ 1722.894451][ C0] ? skb_pull_rcsum+0x232/0x3f0 [ 1722.899353][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1722.905380][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 1722.910619][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1722.916110][ C0] br_handle_frame+0x127f/0x1510 [ 1722.921097][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1722.926497][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1722.932418][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1722.937394][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1722.942790][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 1722.948479][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1722.954673][ C0] ? process_backlog+0x3c3/0x1860 [ 1722.959843][ C0] ? process_backlog+0x3c3/0x1860 [ 1722.964901][ C0] ? process_backlog+0x3c3/0x1860 [ 1722.969964][ C0] process_backlog+0x706/0x1860 [ 1722.974853][ C0] ? process_backlog+0x3c3/0x1860 [ 1722.980016][ C0] __napi_poll+0xaa/0x330 [ 1722.984389][ C0] net_rx_action+0x61d/0xf50 [ 1722.989024][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1722.994228][ C0] handle_softirqs+0x225/0x840 [ 1722.999137][ C0] ? do_softirq+0x76/0xd0 [ 1723.003552][ C0] ? __inet6_bind+0x386/0xf30 [ 1723.008263][ C0] do_softirq+0x76/0xd0 [ 1723.012447][ C0] [ 1723.015400][ C0] [ 1723.018360][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1723.023532][ C0] __inet6_bind+0x386/0xf30 [ 1723.028162][ C0] kernel_bind+0x13e/0x1c0 [ 1723.032612][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1723.037692][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1723.043540][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 1723.049225][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1723.055422][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1723.060654][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1723.066523][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1723.072295][ C0] rds_connect_worker+0x1d8/0x290 [ 1723.077460][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1723.083326][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1723.088961][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1723.094994][ C0] ? assign_work+0x3cf/0x5d0 [ 1723.099633][ C0] worker_thread+0xa47/0xfb0 [ 1723.104309][ C0] kthread+0x388/0x470 [ 1723.108416][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1723.113569][ C0] ? __pfx_kthread+0x10/0x10 [ 1723.118206][ C0] ret_from_fork+0x514/0xb70 [ 1723.122849][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1723.128083][ C0] ? __switch_to+0xc89/0x1420 [ 1723.132805][ C0] ? __pfx_kthread+0x10/0x10 [ 1723.137433][ C0] ret_from_fork_asm+0x1a/0x30 [ 1723.142376][ C0] [ 1723.155965][ T31] INFO: task kworker/u8:5:19494 blocked for more than 145 seconds. [ 1723.183633][ T31] Not tainted syzkaller #0 [ 1723.205533][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1723.230197][ T31] task:kworker/u8:5 state:D stack:25296 pid:19494 tgid:19494 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1723.259560][ T31] Workqueue: events_unbound linkwatch_event [ 1723.265541][ T31] Call Trace: [ 1723.286735][ T31] [ 1723.289736][ T31] __schedule+0x17d9/0x56c0 [ 1723.294276][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1723.317270][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1723.338542][ T31] ? __pfx___schedule+0x10/0x10 [ 1723.343480][ T31] ? schedule+0x90/0x2b0 [ 1723.365752][ T31] schedule+0x164/0x2b0 [ 1723.387157][ T31] schedule_preempt_disabled+0x13/0x30 [ 1723.392704][ T31] __mutex_lock+0x7bf/0x1550 [ 1723.415232][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1723.436822][ T31] ? linkwatch_event+0xe/0x60 [ 1723.459660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1723.464787][ T31] ? rcu_is_watching+0x15/0xb0 [ 1723.487377][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1723.493185][ T31] linkwatch_event+0xe/0x60 [ 1723.515552][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1723.537761][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1723.561586][ T31] ? assign_work+0x3cf/0x5d0 [ 1723.566253][ T31] worker_thread+0xa47/0xfb0 [ 1723.588722][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1723.593753][ T31] kthread+0x388/0x470 [ 1723.615544][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1723.637597][ T31] ? __pfx_kthread+0x10/0x10 [ 1723.642280][ T31] ret_from_fork+0x514/0xb70 [ 1723.664773][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1723.686649][ T31] ? __switch_to+0xc89/0x1420 [ 1723.691409][ T31] ? __pfx_kthread+0x10/0x10 [ 1723.696061][ T31] ret_from_fork_asm+0x1a/0x30 [ 1723.718618][ T31] [ 1723.721705][ T31] INFO: task syz.0.12836:19623 blocked for more than 146 seconds. [ 1723.746400][ T31] Not tainted syzkaller #0 [ 1723.783940][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1723.808509][ T31] task:syz.0.12836 state:D stack:27464 pid:19623 tgid:19620 ppid:16541 task_flags:0x400140 flags:0x00080002 [ 1723.837734][ T31] Call Trace: [ 1723.841070][ T31] [ 1723.844033][ T31] __schedule+0x17d9/0x56c0 [ 1723.866476][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1723.871496][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1723.894338][ T31] ? __pfx___schedule+0x10/0x10 [ 1723.915711][ T31] ? schedule+0x90/0x2b0 [ 1723.937589][ T31] schedule+0x164/0x2b0 [ 1723.941818][ T31] schedule_preempt_disabled+0x13/0x30 [ 1723.964971][ T31] __mutex_lock+0x7bf/0x1550 [ 1723.986366][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1724.008887][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1724.014021][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1724.036844][ T31] ? hook_file_ioctl+0x1f0/0x5f0 [ 1724.041868][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 1724.064302][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1724.085851][ T31] ? __fget_files+0x2a/0x420 [ 1724.108279][ T31] ? __fget_files+0x3a2/0x420 [ 1724.113038][ T31] ? __fget_files+0x2a/0x420 [ 1724.135328][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1724.156965][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1724.162155][ T31] __se_sys_ioctl+0xfc/0x170 [ 1724.184927][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.207685][ T31] do_syscall_64+0x174/0x580 [ 1724.212343][ T31] ? trace_irq_disable+0x3b/0x140 [ 1724.234902][ T31] ? clear_bhb_loop+0x40/0x90 [ 1724.257096][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.280899][ T31] RIP: 0033:0x7fbb3259de99 [ 1724.285380][ T31] RSP: 002b:00007fbb33389028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1724.312001][ T31] RAX: ffffffffffffffda RBX: 00007fbb32825fa0 RCX: 00007fbb3259de99 [ 1724.337939][ T31] RDX: 0000200000000140 RSI: 00000000400454da RDI: 0000000000000009 [ 1724.345987][ T31] RBP: 00007fbb32633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1724.371936][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1724.398018][ T31] R13: 00007fbb32826038 R14: 00007fbb32825fa0 R15: 00007fff171fce78 [ 1724.406096][ T31] [ 1724.426935][ T31] INFO: task syz.0.12836:19626 blocked for more than 146 seconds. [ 1724.434802][ T31] Not tainted syzkaller #0 [ 1724.456745][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1724.481690][ T31] task:syz.0.12836 state:D stack:26096 pid:19626 tgid:19620 ppid:16541 task_flags:0x400140 flags:0x00080002 [ 1724.511044][ T31] Call Trace: [ 1724.514477][ T31] [ 1724.535100][ T31] __schedule+0x17d9/0x56c0 [ 1724.556150][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1724.578823][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1724.583857][ T31] ? __pfx___schedule+0x10/0x10 [ 1724.606605][ T31] ? schedule+0x90/0x2b0 [ 1724.610918][ T31] schedule+0x164/0x2b0 [ 1724.615193][ T31] schedule_preempt_disabled+0x13/0x30 [ 1724.638576][ T31] __mutex_lock+0x7bf/0x1550 [ 1724.643246][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1724.665734][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1724.687524][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1724.692642][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 1724.715093][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1724.736390][ T31] ? __fget_files+0x2a/0x420 [ 1724.774787][ T31] ? __fget_files+0x3a2/0x420 [ 1724.797398][ T31] ? __fget_files+0x2a/0x420 [ 1724.802247][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1724.825026][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1724.846954][ T31] __se_sys_ioctl+0xfc/0x170 [ 1724.851636][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.875537][ T31] do_syscall_64+0x174/0x580 [ 1724.896843][ T31] ? trace_irq_disable+0x3b/0x140 [ 1724.901953][ T31] ? clear_bhb_loop+0x40/0x90 [ 1724.924385][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.947015][ T31] RIP: 0033:0x7fbb3259de99 [ 1724.951493][ T31] RSP: 002b:00007fbb307f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1724.977859][ T31] RAX: ffffffffffffffda RBX: 00007fbb32826090 RCX: 00007fbb3259de99 [ 1724.985895][ T31] RDX: 0000200000000180 RSI: 00000000400454ca RDI: 0000000000000009 [ 1725.012013][ T31] RBP: 00007fbb32633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1725.038197][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1725.046231][ T31] R13: 00007fbb32826128 R14: 00007fbb32826090 R15: 00007fff171fce78 [ 1725.072213][ T31] [ 1725.075299][ T31] [ 1725.075299][ T31] Showing all locks held in the system: [ 1725.100768][ T31] 1 lock held by kthreadd/2: [ 1725.105458][ T31] 2 locks held by kworker/0:1/10: [ 1725.128619][ T31] 4 locks held by kworker/u8:1/13: [ 1725.133797][ T31] 1 lock held by khungtaskd/31: [ 1725.156467][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1725.166409][ T31] 6 locks held by kworker/u8:2/36: [ 1725.205979][ T31] 3 locks held by kworker/u8:4/65: [ 1725.228950][ T31] 2 locks held by kworker/R-bat_e/3228: [ 1725.234641][ T31] 2 locks held by klogd/4980: [ 1725.256892][ T31] 2 locks held by udevd/4991: [ 1725.261629][ T31] 1 lock held by dhcpcd/5285: [ 1725.266333][ T31] 1 lock held by dhcpcd/5286: [ 1725.289829][ T31] 2 locks held by getty/5377: [ 1725.294560][ T31] #0: ffff888035db70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1725.322183][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1725.350281][ T31] 2 locks held by syz-executor/5611: [ 1725.355638][ T31] 5 locks held by kworker/u9:2/5627: [ 1725.378629][ T31] #0: ffff88803fd9e940 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1725.407365][ T31] #1: ffffc90004407c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1725.437819][ T31] #2: ffff888065ce8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1725.464904][ T31] #3: ffff888065ce80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1725.491322][ T31] #4: ffffffff901b46e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1725.519401][ T31] 4 locks held by kworker/u8:9/5788: [ 1725.524742][ T31] 2 locks held by kworker/1:8/5868: [ 1725.548397][ T31] 3 locks held by kworker/u8:10/6315: [ 1725.553826][ T31] 3 locks held by kworker/u8:12/19912: [ 1725.576944][ T31] 3 locks held by kworker/u8:20/19918: [ 1725.582472][ T31] 7 locks held by kworker/u9:0/19999: [ 1725.605572][ T31] #0: ffff88805548e140 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1725.634298][ T31] #1: ffffc9000fccfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1725.665369][ T31] #2: ffff88809a028ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1725.692572][ T31] #3: ffff88809a0280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1725.720843][ T31] #4: ffffffff901b46e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1725.748576][ T31] #5: ffff888048749af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 1725.775721][ T31] #6: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1725.804568][ T31] 4 locks held by kworker/u8:25/26358: [ 1725.827176][ T31] 3 locks held by kworker/0:4/30499: [ 1725.832543][ T31] #0: ffff88801b029d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1725.863433][ T31] #1: ffffc90005cbfc40 ((work_completion)(&(&net->ipv4.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1725.895192][ T31] #2: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: check_lifetime+0x451/0x970 [ 1725.921891][ T31] 3 locks held by kworker/u8:38/2635: [ 1725.945495][ T31] 2 locks held by kworker/u8:39/2636: [ 1725.967745][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1725.997248][ T31] #1: ffffc900054bfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1726.027394][ T31] 3 locks held by kworker/u8:40/2637: [ 1726.032823][ T31] #0: ffff8880322df940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1726.062316][ T31] #1: ffffc9000559fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1726.094077][ T31] #2: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1726.121022][ T31] 2 locks held by kworker/u8:41/2638: [ 1726.144806][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1726.174371][ T31] #1: ffffc90005e27c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1726.204271][ T31] 7 locks held by kworker/u8:42/2639: [ 1726.226097][ T31] 4 locks held by kworker/u8:43/2640: [ 1726.236532][ C1] net_ratelimit: 32470 callbacks suppressed [ 1726.236556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1726.236589][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1726.236828][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1726.236856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1726.237108][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1726.237120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1726.237386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1726.237404][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1726.237657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1726.237682][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1726.557220][ T31] 2 locks held by kworker/0:3/15790: [ 1726.562716][ T31] 2 locks held by syz-executor/16541: [ 1726.585911][ T31] 2 locks held by syz-executor/16962: [ 1726.608028][ T31] 4 locks held by kworker/u8:0/17219: [ 1726.631232][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1726.660979][ T31] #1: ffffc90004cdfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1726.691325][ T31] #2: ffff88809a2607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1728.941750][ T31] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1730.576619][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.246495][ C1] net_ratelimit: 38917 callbacks suppressed [ 1731.246520][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1731.246572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1731.252706][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1731.264736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1731.276660][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1731.288681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1731.300683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1731.312674][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1731.324743][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:cc:0e:a5:9a:98, vlan:0) [ 1731.336862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)