last executing test programs: 10.553813064s ago: executing program 3 (id=1047): syz_emit_ethernet(0x7e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x7, 0x100, {0x15, 0x4, 0x0, 0x4, 0x11d, 0x64, 0x8, 0xf3, 0x89, 0x1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, {[@ssrr={0x89, 0x3, 0xdc}, @lsrr={0x83, 0xf, 0xed, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}, @cipso={0x86, 0x24, 0x2, [{0x1, 0x12, "75955c05cc97d4e384fadd5647c17bcc"}, {0x5, 0xc, "f55913fec5e4340af196"}]}, @end, @noop, @generic={0x83, 0x5, "0b70e9"}]}}}}}}}, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xfff6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xe) 10.297150035s ago: executing program 3 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)={0x14, r1, 0x1, 0x0, 0x20000}, 0x14}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 9.996928451s ago: executing program 3 (id=1052): syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000140)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8ce6e3117aaf10cd}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20040010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="002119", 0x3}], 0x1, 0x7, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000003c0)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x8, 0x7e, 0x3, 0x7}, {0x8b38, 0x80, 0x6, 0x6}, {0x1, 0xd2, 0x8d, 0x1ff}, {0x283f, 0x5a, 0x7, 0x5}]}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipmr_newroute={0x0, 0x18, 0x4, 0x101, 0x25dfdbfd, {0x80, 0x10, 0x14, 0x6, 0xfe, 0x4, 0xfe, 0x8}, [@RTA_OIF={0x0, 0x4, r3}, @RTA_DST={0x0, 0x1, @multicast2}, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x4c, 0x5, @loopback}}, @RTA_MULTIPATH={0x0, 0x9, {0x973, 0x0, 0x6, r3}}, @RTA_SRC={0x0, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_OIF={0x0, 0x4, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) 8.099856135s ago: executing program 1 (id=1055): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x23}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) 7.813090972s ago: executing program 2 (id=1056): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r1}, 0x36) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.500709307s ago: executing program 1 (id=1057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xffffffffffffff73, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfe0f}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) 6.960435703s ago: executing program 4 (id=1058): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="100000000000000000000400070000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414"], 0x30}, 0x4000004) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8000}, 0x8) shutdown(r0, 0x1) syz_emit_ethernet(0x117, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0xe1, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@mcast2]}], "17dd25d7a633909b9be54c3a2a6c7f4f61cf0f698918fcd10647ea6e00711cf17d4cad6aa819f2acae451c45cb65483fe8f1c535fbd53a53e068d0e743fdc8d2c25e8a8072858cee2e96c6fa634dafd66fc7e09ca0823159e5c6e00f6865da8792d2b6a820cbf695bd638136fe8ca3aafc3f4962e901b7701fd4dfdc814ff6e39a21e911702137502f7db97e1b8cac99a10e4f4f6460d3432127f71e20d75fe949fa76dbf0b6d4188f0958ccdc1ee39c15916c77717a55aa891e36d19a0d6b39b1e1c4acc5b1e34955"}}}}}, 0x0) 6.947296846s ago: executing program 0 (id=1059): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2b, 0x80801, 0x1) shutdown(r1, 0x7ffffffe) r2 = socket(0x21, 0x0, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000000)=0x1662cd33, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r5, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) read(r0, &(0x7f0000000480)=""/186, 0xba) r9 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000540)=ANY=[@ANYBLOB="30000000000b05000000000000000000070000030800024000000002280001004e46515545554500080003400000000111158e1105f58789870f411f6dfb0f5e62b7fdbb59cc2d1d7ac5f7bce96a1b097797a5463b44350755e6b4f4dc177e0e9020db82164e16d17a4af67b4521f8e39c1c90d8b4c35838a7dc319d190e85135e87dcdf696100a1d31f225d21909708c95af4b12ca54e94712146a774d7a987a8898f53a9d45d2b25ffab0f38169b003828416e95635ac3c7fe149e477c82605c6bc055daecbb6c7dfe595d204771e21ea9722e7f9065191a2e21ff5d7a88fa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000104000000000100000000000000", @ANYRES32=r6, @ANYBLOB="234236f9ec1850c71bea8838d2ddcc72a7814a04dc3d7a128ff0bd5bc149da60d6ec6ccfe29235d53d38535378e62408b98f61187a164b214e1483a1c0196d8d58979a7a967f58b05e6209c7de522bc6c390ba7d6170cd1e0f355b562a00309b4f35674f0171165ac339287ea384727ad440dc1100af71935a7bfac68d73049449ef118844f1a33636d25b13d308656db2dc9ffb017b60c25e0bc5ed927614a3da2408e97ff1919218c6bbc12f41c33a1889e10e1ab88d4909d7dc1182167648c4"], 0x38}}, 0x804) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="23a4e897100001040000000001000000000000008dd5efd01b0e5f8884", @ANYRES32=r6, @ANYBLOB="00010000ac000000140012800b000100697036746e6c000004000280"], 0x34}}, 0xeb64d656041b2f26) 6.710164404s ago: executing program 1 (id=1060): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000010101010000000000000000000000060000000000000000cc7d5f5ab85d725cf572fc1860ebe0b843b26cfc0609a39ac519e2a2e18e1a8bf883302c0f4750109054b5046c30abc4f36e5868dbb3cb4ed0fdf86c0eb6bbcb338f1bce21b886"], 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x1505, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) 6.608789337s ago: executing program 3 (id=1061): sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x2c, 0x3ed, 0x800, 0x70bd29, 0x25dfdbfc, "75516bf1be127adc52ccda19df59fd83d054dd46f71863ed8971"}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1b57529485109bbb) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000140)="e7", 0xfdef}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) sendto$packet(r2, &(0x7f0000000240)="41d09292b4f9babe89cd637b86dd", 0x36, 0x40000, &(0x7f0000000200)={0x11, 0x17, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x2c, 0x3ed, 0x800, 0x70bd29, 0x25dfdbfc, "75516bf1be127adc52ccda19df59fd83d054dd46f71863ed8971"}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1b57529485109bbb) (async) socket$kcm(0xa, 0x3, 0x73) (async) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000140)="e7", 0xfdef}], 0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) shutdown(r5, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) (async) sendto$packet(r2, &(0x7f0000000240)="41d09292b4f9babe89cd637b86dd", 0x36, 0x40000, &(0x7f0000000200)={0x11, 0x17, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) (async) 6.155932202s ago: executing program 2 (id=1062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000002c0)="f239d2589c4f22a90a12000088fb", 0xe, 0x804, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="43a3528e74e1"}, 0x14) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x74a849580afd22a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdc9}, 0x48) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x3) 5.606940233s ago: executing program 0 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe1b}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) 5.38527853s ago: executing program 2 (id=1064): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000018000100000000001c0000000a0000000000000000000000080012"], 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x226000, 0x1000, 0x7}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x0, r5}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000004900000225bd7000ffdbdf250a008000", @ANYRES32=r3, @ANYBLOB="05000000080002000171d95cf903f1a2990000000800020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$kcm(0x2, 0x3, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) (async) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x9, 0x0, &(0x7f0000001580)) (async) sendto$inet(r2, &(0x7f0000000180)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r2, 0xfff) (async) r8 = accept4$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e, 0x0) recvmmsg$unix(r8, &(0x7f0000005140)=[{{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002840)}, {&(0x7f0000002880)}, {&(0x7f00000028c0)=""/228, 0xe4}, {&(0x7f00000029c0)=""/126, 0x7e}], 0x4}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002e00)=@abs, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000002e80)=""/132, 0x84}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/26, 0x1a}, {&(0x7f0000004d40)=""/231, 0xe7}, {&(0x7f0000004e40)=""/17, 0x11}], 0x5, &(0x7f0000005000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000002a80)=@abs, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002b00)=""/64, 0x40}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000002c40)=""/44, 0x2c}, {&(0x7f0000000580)}, {&(0x7f0000002cc0)=""/14, 0xe}, {&(0x7f0000002d00)=""/3, 0x3}], 0x6, &(0x7f0000002dc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/106, 0x6a}], 0x1}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f00000026c0)=""/127, 0x7f}], 0x1, &(0x7f0000002780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}}], 0x6, 0x10000, &(0x7f00000052c0)={0x77359400}) accept4(r2, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x4008}, 0x8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000000)={0x3, 0x7, 0x2}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x6000, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e0886411000500ff810057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 5.266657428s ago: executing program 4 (id=1065): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000040)='\'.\x00', 0x14000, &(0x7f0000000080)={@align=0x101, {0x8, 0x6e1c, 0x7, 0x7eb}}, 0x9650, &(0x7f0000000140), &(0x7f0000000100)=0x100}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x84, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xd}}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6900, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x85ba, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x2b96}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x84}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r5, 0x1, 0x6, @remote}, 0x10) 4.585733586s ago: executing program 0 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x2b, 0x3a, 0x4, 0x10, @local, @mcast1, 0x8001, 0x80, 0x8, 0x4200000}}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket(0x11, 0xa, 0x0) socket(0x1c, 0x80000, 0x6) bind$packet(r4, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x8001, 0x0, 0x9}, "1ba1"}}]}]}]}}]}, 0x54}}, 0x2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1034000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1c}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004805}, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r5 = accept4$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000540)=0x1c, 0x80800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'netpci0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002e00000127fd700000f304001e00000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 4.373680185s ago: executing program 4 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd26, 0x3, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0xfffffffffffffe6d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1000000}, 0x20) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) read(r1, &(0x7f0000002400)=""/4060, 0xfdc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 3.657510408s ago: executing program 3 (id=1068): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004510005c00000000002f90780000000000000000248065580000000010"], 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.036538973s ago: executing program 2 (id=1069): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r2, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x80) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000001480)={0x0, 0x8, 0x3}) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000001880)={0x0, 0x0, @start={r9, 0x1, "9b1352840b211bc2ebaa1933f08382333605b94c2238ebb20b14248e48987434e1be6bf0906926f2c1b5fb310bcc31ae69f1c08a9f9404bcea9975c4ff99b478d6cd0bb50a901ecb0ab7d108614fd7b38a713b711a3398b159e7339274312a55fb57e52fccd19d38aee0c033751f941b891c79b962a9c53aacae83d52c0ffcb69939151ea34a706681dffbca03d9f7e538309f41b7856889e07fde5a30dd2a674c469bcf1567bba6e3623c204e80c334d8f55adcecf0832076a5657806eabca1bdb55613691926473bfc270fc0c990243b1e56271220dfd5bfdd316e1ded1458d62332b6ccbb1afdb45675021a1a3c8bb3576494b8cca3e2be63ac1ec2aed0e6ebed37b2c2466bccbacca6918ae9d8a05b19c7bbbd68ce4c2df754961d93113241a972e965769c0365c5eb67bc55ea214452336e726cde0b2ee405f2e845d0db47a9c8003f3e6b812c4ac6a5263af27207697b8c680b056af84d06b0ce6906895877b9519862b49065947e3e0845538879fe1332bbbbda65e69254a1dec7d07121043fd5259592394ce638b4e43dfc2852c3f421e0647730612fedad1de9156d659163e40df4522e54588fa9c7263f37542dfe29f0d331a632544706ec4c2965d2dba29340ad57efa18b47e65dde057ff0780bbb0d5e85c101c55d3280cd7abde2a3c9c243d097439ae43a0c89cbe17998ff5847ca8de16da9633dcf73f4d74e17bf4dfa9c24a863e30462878bd9ce4f205fb03b91f78f92395f1f8925ee39c00b3aecaa5c0538b4a9561816f2f819f13b1c1d8dc4d842ffbf4ebdc0e958761f333542a298f7f185e171ac3ea2c29ed4bcd140acce1a43039c1495e631a5788d865aed86ae83cdf1141181f634509d3d8e12c3dc8a8314bfa48a22c6d67c793547e4efa49ce1ae9c1ae2c3606d10753a63e18edf692a517cd2c2aa374e99b5d3f65e79ffb1fe2f81e832374efdf59da0dfa1037d17a6a5ab1688eb04dbf27b3a8e395ccafa8e0bdf87f287bc268167b2824b95053c05e8049d256074f559959eb80596af067dc507a1fc8f610c77b3b3ed81e48048ab5978c2783e6be9b3332ec034cf6eae8533c4cfe6838c4f3628b043729c3aeb1f441f08497c6972487a8b0477721954b73ecb8e616ee052b51275de6262ffca3bdbf891dbc535040650ef156dd2e949dfd6f7553450d8db25e32a7797cafb6f3cdab0e98d906eec72a989c2f38303f33ae6fdcf42a620cf0946d4a74d15abee7ccffae868a89e894583dee601fb285326867a858ff1de1bc19ebe877a5361117aeddc8020d4aca53decbce42be2cd1ed4ac7ec79967d172400cbd3c71ebe10ab76928cfeee205b7037ef61799f39be0cb360b4094c6f3492f7bf538a26c1886d5f3f172db936683f7f288b6c121bb9ace3f34ebd6d945b1f282e762ac2677147eae26378eaaad4a21e51945", "749adaaed05222069128eb885cbe5dbf41e02c651916ed6fd8789cfb8ce505dce8430fe6aa502fd94777c76b0310337f77da794090ec94eeaecd73f418a825a5cf627f75dccce74e01e580e9ee6db49d762a4c805a9303c4cdb373fbeac5916620179fbeb44c151b47bac2cae9722f14fa83cc205cefcbcb0e09ca510e93f872b127317951017f9a97a236befb048fc001952546c84350da3692e1d1f3ca1dec590200ce4e2c5e776e4311a88e24d8b0e861d848925d7f9877ebce92172af79a65d8a87d3950e5165655410d08db757d1ff58bdb95625b9d70c364c2d9274708f934710ed4363c0176f932556a45a08ae5ec4b11f6960e28df66c57846dbacd77644ff96596edda7a2e7c2c4ba48ce7e981946f036bb56fdf90d627ac1b988574d4dc0b358a0d314f0402a1e4721eb41e2d048ad0b0bc42533dc167f709abf3afd3de21a3d204da06661816076fd286d5029da41ed1b37d0023514401ebedc6322aaef1c66dd1f53fbf663b76d86007d856437a80730b58764c246c6415c8b83cc394e5b81cbcf1e81207fa8b47092c3ae8c1fc354163783a1e8924b2cceeed89fd78c7a7a191c2b001abd5868bdc58c2833b2ea5bde9a4bea18cdd39c1227cceace5ea78b387d4fa2bdbf75e02dd5e61635d391e6e2ef6f5bd934280f0304c9a3a66f106a8641765e0e81eb3d2d895883e711f12fa8e2e13e62b516814c13be5f916b12aa5e678068ec2401ea31bdb68edf6ccf843c7495ab21ddd95daee3ae4acf258685fcaf9f2c74029b1d2dd10f2c413f338feb06560be3c8e1e068dc861021053383e5507517b6c4782c9611d4b8ac6319a9e7cd97c24b7ac6b1ddef9d082ad7ab931021c9f9edbd70fe7b7d1e434e100833544df8cb98f1ef9d7263e8c0944be1f8370afdfe2b2d4ad674dc035e4579de4715ba7decf4159751d91662262d02fc8f3c64396921d181b9e06b6503ec57e70d7edde9df7415a71efa23e5a4c8f2663671fae205ace2b746cb26224fb7eebb9757048b596c0fce09d8a0860e48ae2493667c861292982f2c9ec4065ec9ec3853bb61780940e074b55a19e35b84b5601d8d1f5125500b443b5afdfb2037dafd6f2af7de6b367e3c2be1cb238f375da6206a52caeaec2fe5b5d32b02a3d5aabae9e0991f629137dcc36435cb439e501369cbec7d4f3d39332681f3c2735b33fbc9910d30dcdc2f0b54d96d8718b842bd87868e707f8410350f805b88b74e1b0d66e90e1bd65c687f2987d3cb6b040268a906683e39f6b6381088b445b8084157ecbc5c3eda15ab9de496afd940405fb6fe95b521df6d558c947947668c006ef017c60c666f7d61ef3f96448e0ff308bec42dd1d8df422b822e1e77a94adc70f997ecf85ea54c722313d14ff35b9d126f87677585acd815c33f9c9c4e122d0b033acbe91e6ea4dec4fe1a7663dd"}, [0x9, 0x42bf7a72, 0x2, 0x5, 0xd, 0x7ff, 0x6480000000000, 0x4, 0x8, 0x8000000000000000, 0x8, 0x100000000, 0x2, 0x166b, 0x2dd, 0x10, 0x2, 0xd15, 0xfff, 0x5, 0x2800000000, 0x7f, 0x1, 0x3, 0x8, 0x5, 0x8, 0xcb4a, 0x7, 0x5, 0x1, 0x81, 0x7, 0x8, 0x3ff, 0x3, 0x2, 0x379, 0x400, 0x7, 0x7, 0xfffffffffffffff7, 0x5, 0x1, 0x2, 0x2, 0x1, 0x6, 0x0, 0x9, 0x7, 0x100000000, 0x4f26, 0x4, 0x100, 0x0, 0xfffffffffffff521, 0x0, 0x5, 0x800, 0x7, 0x1ff, 0xffffffffffffffff, 0x7ff]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f0000000000)=0x10) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev}, {@in6=@private0, 0xfffffffc, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r12, 0x0, 0x3, &(0x7f0000001140)={@empty, @initdev}, &(0x7f0000001180)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000001080)={'wg0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001100)={@dev={0xfe, 0x80, '\x00', 0x19}, r13}, 0x14) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a000769000200000000000000000005"], 0x18}}, 0x0) socket(0x28, 0x6, 0x0) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x1411, 0x223, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r15, 0x0, 0x484, 0x0, &(0x7f00000009c0)) 2.951635497s ago: executing program 0 (id=1070): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x9, 0x4, 0x6, 0x5, 0x5, 0x3, 0x8, 0xee, 0x7, 0xf4, 0x64, 0x8, 0xfb, 0x10}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x8c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r4, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r5, 0x1, "c1"}, &(0x7f0000000200)=0x9) 2.817934644s ago: executing program 1 (id=1071): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.22879708s ago: executing program 3 (id=1072): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0xb, 0x0, 0x4, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x0, 0x4, 0x7}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="47a9d4369398c3e97cf9b7ffb13c000000100001", @ANYRES32=r11, @ANYBLOB="00000000140001001c0012800b0001006d616373656300000c00028005000d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x6, 0x5, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x87a8, 0x40, 0x10, 0x73d}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000b40)={'syztnl2\x00', r7, 0x80, 0x20, 0x6, 0xea, {{0xe, 0x4, 0x0, 0x8, 0x38, 0x66, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x75, 0x0, 0x6, [0x1, 0x7, 0x5, 0x48, 0x4, 0x400]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000280), 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x70, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x26, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x70}}, 0xb1) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x90, 0x43, 0xa0, 0x0, 0x98, 0x120, 0x178, 0x178, 0x120, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @loopback, 0xff000000, 0xff, 'caif0\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) 2.163136064s ago: executing program 4 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002280)={'vlan1\x00', 0x0}) sendto$packet(r4, &(0x7f00000001c0)="3303120081fd140000007ef588a8a3482fa3", 0x12, 0x80, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0xcf}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="18006c6d9a5878c75e8600802e00090027bd700000000000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.932278491s ago: executing program 1 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000000)="192ca220ed175e65605092b57eb48a7127cb3150a01d39546377d8a9f7a1df949e94e6c18239b3fada6b614c20f96ebadc6a10dd258bcbe22034b9d102de2c15ad3292cce3b0bd0fc7a91bdc2ec241c568f60ff7f4527823f0ce16d2b14150f4ec5ac7fd30134be25a0ae7e48a0979d9656c324b68377096bef8a8bcda1e572db17bcdb49ee9b98141db023a3cce9c1648dd66f97abbc814a4b014d1f485f32d2b6107b97084cc8abaa6d373d12f5fc1846c4869bc61401b122820f1b158b2016d20bf09b53de61de52262660cc3c165980c9556011c39418f7577f507d2900f1c1722e0022f", 0xe6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.62536914s ago: executing program 0 (id=1075): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 1.481767941s ago: executing program 2 (id=1076): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = syz_open_procfs$namespace(r6, &(0x7f0000001780)='ns/ipc\x00') r10 = getpid() sendmmsg$unix(r5, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r7}}}, @rights={{0x18, 0x1, 0x1, [r9, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600), 0x0, &(0x7f0000000200)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r8}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r8}}}], 0x50}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r1, 0x952de000) 1.102708641s ago: executing program 4 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)="e6", 0x0}, 0x20) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, &(0x7f00000015c0)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)="e6", 0x0}, 0x20) (async) socket(0x10, 0x3, 0x0) (async) recvmmsg(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, &(0x7f00000015c0)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) 617.762341ms ago: executing program 0 (id=1078): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000080)='[/--\'\x00', 0x2000, &(0x7f0000000100)={@align=0x3, {0x0, 0x5, 0x5e, 0xfff}}, 0xca00, &(0x7f0000000140), &(0x7f0000000180)=0x9}, {[0x9, 0x9, 0x3, 0x81]}, 0x8000, 0x47, &(0x7f00000001c0)=""/71}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x1c8, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0xfffb}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x593}, {0x6, 0x16, 0x7ff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x100}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x844}, 0x80000c3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r10 = socket$unix(0x1, 0x5, 0x0) bind$unix(r10, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r10, 0x8) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x9) ppoll(&(0x7f0000000280)=[{r10, 0x3206}, {r8}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) 525.180223ms ago: executing program 1 (id=1079): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x2, 0xaa1, 0x9, 0x3ff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xf118, 0x7, 0xf, 0xfffffff3]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x14}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000080) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r3 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (rerun: 32) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r7, 0x2, 0x10}, &(0x7f0000000240)=0xc) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockname$llc(r1, &(0x7f0000000100), &(0x7f0000000200)=0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100003052abd70000006000000000000", @ANYRES32=r8, @ANYBLOB="0000000006380000200012800b00010069703667726500001000028006000e00010000000400120008000a00", @ANYRES32=r8, @ANYBLOB="61d4ffeb50b46d1970938c81592bd4b17aad7570264ec5f03fb4811c0bc33ea0cede049583ddd1c6b200a8ca0186f831903e5a5d96fa3bf1426518103f099c03880ace20c9b65753375a3bae518d1a819b9ff4f931089fd35e54"], 0x48}}, 0x0) 452.13833ms ago: executing program 2 (id=1080): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000000) ppoll(0x0, 0xffffff9d, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 0s ago: executing program 4 (id=1081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x50}}, 0x44804) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES32=r2]) (async) socket$netlink(0x10, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r5, 0x1, 0xd8}, 0x14) (async) close(r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000003000000000000140001"], 0x30}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) kernel console output (not intermixed with test programs): veth0_macvtap: entered promiscuous mode [ 84.138482][ T5634] veth1_macvtap: entered promiscuous mode [ 84.156297][ T5646] veth0_macvtap: entered promiscuous mode [ 84.172027][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.182523][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.217825][ T5646] veth1_macvtap: entered promiscuous mode [ 84.246567][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.292109][ T5637] veth0_macvtap: entered promiscuous mode [ 84.304864][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.321194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.336759][ T5635] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.348379][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.363822][ T5637] veth1_macvtap: entered promiscuous mode [ 84.396123][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.405220][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.426917][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.477804][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.488603][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.506257][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.515490][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.528893][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.574637][ T1020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.608111][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.626030][ T1020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.637265][ T1020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.663820][ T1020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.678275][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.771452][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.782191][ T5640] Bluetooth: hci3: command tx timeout [ 84.812471][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.853936][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.864563][ T5650] Bluetooth: hci0: command tx timeout [ 84.870345][ T4949] Bluetooth: hci1: command tx timeout [ 84.870378][ T4949] Bluetooth: hci4: command tx timeout [ 84.870432][ T5640] Bluetooth: hci2: command tx timeout [ 84.900943][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.951192][ T5841] netlink: 'syz.0.7': attribute type 11 has an invalid length. [ 84.969090][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.033202][ T5844] netlink: 'syz.3.8': attribute type 10 has an invalid length. [ 85.041162][ T5841] netlink: 'syz.0.7': attribute type 11 has an invalid length. [ 85.058219][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.071994][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.076305][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.086818][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.098095][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.114290][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.123592][ T5844] bond0: (slave team0): Enslaving as an active interface with an up link [ 85.148801][ T5841] Zero length message leads to an empty skb [ 85.155213][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.229440][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.237470][ T1020] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.253850][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.301194][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.332369][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.417610][ T5847] sctp: [Deprecated]: syz.3.9 (pid 5847) Use of int in max_burst socket option deprecated. [ 85.417610][ T5847] Use struct sctp_assoc_value instead [ 85.445044][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.464327][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.530821][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.564558][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.715304][ T5852] bond1: Unable to set up delay as MII monitoring is disabled [ 85.735782][ T5852] bond1 (unregistering): Released all slaves [ 85.808423][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 85.825098][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.841058][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 85.849905][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.861469][ T5855] netlink: 'syz.3.12': attribute type 12 has an invalid length. [ 85.874219][ T5855] netlink: 'syz.3.12': attribute type 11 has an invalid length. [ 85.883070][ T5863] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13'. [ 86.036165][ T5867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.055137][ T5869] xt_TCPMSS: Only works on TCP SYN packets [ 86.420323][ T5882] syz.4.18 uses obsolete (PF_INET,SOCK_PACKET) [ 86.481328][ T24] cfg80211: failed to load regulatory.db [ 86.628118][ T5884] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 86.675040][ T5884] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 86.695578][ T5884] gretap1: entered promiscuous mode [ 86.703615][ T5884] gretap1: entered allmulticast mode [ 86.776178][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 87.195119][ T5914] netlink: 7 bytes leftover after parsing attributes in process `syz.3.30'. [ 87.247645][ T5912] lo: entered allmulticast mode [ 87.679657][ T5936] syz_tun: entered allmulticast mode [ 87.686541][ T5934] syzkaller1: entered promiscuous mode [ 87.694013][ T5934] syzkaller1: entered allmulticast mode [ 87.711951][ T5936] pimreg: entered allmulticast mode [ 87.806557][ T5941] netlink: 56 bytes leftover after parsing attributes in process `syz.2.37'. [ 87.915634][ T5935] syz_tun: left allmulticast mode [ 87.960427][ T5945] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 88.103499][ T5945] netlink: 'syz.1.38': attribute type 10 has an invalid length. [ 88.153890][ T5945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.38'. [ 88.191507][ T5960] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 88.204521][ T5945] dummy0: entered promiscuous mode [ 88.212531][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'. [ 88.575306][ T5977] geneve1: entered promiscuous mode [ 88.723447][ T5991] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 88.870030][ T5997] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 88.897052][ T6000] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 88.906448][ T6002] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 88.928621][ T5997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.944108][ T6000] dummy0: left promiscuous mode [ 88.986021][ T6000] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 89.009520][ T6000] dummy0: entered promiscuous mode [ 89.016041][ T6004] xt_TCPMSS: Only works on TCP SYN packets [ 89.142456][ T6013] vlan2: entered promiscuous mode [ 89.147680][ T6013] geneve1: entered promiscuous mode [ 89.153450][ T6013] vlan2: entered allmulticast mode [ 89.158715][ T6013] geneve1: entered allmulticast mode [ 89.184613][ T6019] Bluetooth: MGMT ver 1.23 [ 89.195975][ T6019] xt_socket: unknown flags 0xe4 [ 89.362972][ T6024] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 89.439864][ T6031] block nbd0: not configured, cannot reconfigure [ 89.463839][ T6024] bond2 (unregistering): Released all slaves [ 89.635439][ T6032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.661207][ T6035] IPv6: sit1: Disabled Multicast RS [ 89.675681][ T6035] sit1: entered allmulticast mode [ 89.828388][ T6047] vlan0: entered promiscuous mode [ 90.083174][ T6063] FAULT_INJECTION: forcing a failure. [ 90.083174][ T6063] name failslab, interval 1, probability 0, space 0, times 1 [ 90.132960][ T6067] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 90.154321][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.4.69 Not tainted syzkaller #0 PREEMPT(full) [ 90.154346][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.154366][ T6063] Call Trace: [ 90.154374][ T6063] [ 90.154386][ T6063] dump_stack_lvl+0xe8/0x150 [ 90.154419][ T6063] should_fail_ex+0x412/0x560 [ 90.154445][ T6063] should_failslab+0xa8/0x100 [ 90.154466][ T6063] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 90.154494][ T6063] ? __alloc_skb+0x186/0x7d0 [ 90.154522][ T6063] ? __alloc_skb+0x1d0/0x7d0 [ 90.154547][ T6063] ? __local_bh_enable_ip+0xd0/0x130 [ 90.154578][ T6063] __alloc_skb+0x1d0/0x7d0 [ 90.154611][ T6063] netlink_sendmsg+0x5d4/0xb40 [ 90.154651][ T6063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.154684][ T6063] ? aa_sock_msg_perm+0xf1/0x1b0 [ 90.154715][ T6063] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 90.154745][ T6063] ____sys_sendmsg+0x972/0x9f0 [ 90.154763][ T6063] ? __might_fault+0xaf/0x130 [ 90.154795][ T6063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.154822][ T6063] ? import_iovec+0x73/0xa0 [ 90.154850][ T6063] ___sys_sendmsg+0x2a5/0x360 [ 90.154871][ T6063] ? __lock_acquire+0x6b5/0x2cf0 [ 90.154896][ T6063] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.154949][ T6063] ? __fget_files+0x2a/0x420 [ 90.154973][ T6063] ? __fget_files+0x3a0/0x420 [ 90.155006][ T6063] __x64_sys_sendmsg+0x1bd/0x2a0 [ 90.155028][ T6063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.155057][ T6063] ? __pfx_ksys_write+0x10/0x10 [ 90.155095][ T6063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.155116][ T6063] do_syscall_64+0x174/0x580 [ 90.155135][ T6063] ? trace_irq_disable+0x3b/0x140 [ 90.155164][ T6063] ? clear_bhb_loop+0x40/0x90 [ 90.155188][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.155206][ T6063] RIP: 0033:0x7fce5239ce59 [ 90.155235][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.155251][ T6063] RSP: 002b:00007fce532a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.155272][ T6063] RAX: ffffffffffffffda RBX: 00007fce52615fa0 RCX: 00007fce5239ce59 [ 90.155286][ T6063] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 90.155298][ T6063] RBP: 00007fce532a5090 R08: 0000000000000000 R09: 0000000000000000 [ 90.155309][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.155320][ T6063] R13: 00007fce52616038 R14: 00007fce52615fa0 R15: 00007fff18d8ca08 [ 90.155350][ T6063] [ 90.453840][ T6074] validate_nla: 1 callbacks suppressed [ 90.453859][ T6074] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 90.460806][ T6067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.468389][ T6074] __nla_validate_parse: 7 callbacks suppressed [ 90.468430][ T6074] netlink: 280 bytes leftover after parsing attributes in process `syz.2.72'. [ 90.676166][ T6085] netlink: 64 bytes leftover after parsing attributes in process `syz.0.73'. [ 90.686368][ T6085] netlink: 64 bytes leftover after parsing attributes in process `syz.0.73'. [ 90.962257][ T6101] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 91.115725][ T6114] netlink: 'syz.2.80': attribute type 4 has an invalid length. [ 91.133073][ T6114] netlink: 17 bytes leftover after parsing attributes in process `syz.2.80'. [ 91.399778][ T6121] vlan2: entered allmulticast mode [ 91.457323][ T6121] veth1_virt_wifi: entered allmulticast mode [ 91.484343][ T6135] FAULT_INJECTION: forcing a failure. [ 91.484343][ T6135] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.497666][ T6135] CPU: 0 UID: 0 PID: 6135 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT(full) [ 91.497692][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.497704][ T6135] Call Trace: [ 91.497723][ T6135] [ 91.497732][ T6135] dump_stack_lvl+0xe8/0x150 [ 91.497758][ T6135] should_fail_ex+0x412/0x560 [ 91.497784][ T6135] _copy_from_iter+0x1d3/0x1670 [ 91.497809][ T6135] ? rcu_is_watching+0x15/0xb0 [ 91.497839][ T6135] ? __pfx__copy_from_iter+0x10/0x10 [ 91.497868][ T6135] ? netlink_sendmsg+0x650/0xb40 [ 91.497897][ T6135] ? skb_put+0x11b/0x210 [ 91.497930][ T6135] netlink_sendmsg+0x6c0/0xb40 [ 91.497971][ T6135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.498037][ T6135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 91.498069][ T6135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.498099][ T6135] ____sys_sendmsg+0x972/0x9f0 [ 91.498118][ T6135] ? __might_fault+0xaf/0x130 [ 91.498150][ T6135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.498178][ T6135] ? import_iovec+0x73/0xa0 [ 91.498206][ T6135] ___sys_sendmsg+0x2a5/0x360 [ 91.498243][ T6135] ? __lock_acquire+0x6b5/0x2cf0 [ 91.498270][ T6135] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.498328][ T6135] ? __fget_files+0x2a/0x420 [ 91.498353][ T6135] ? __fget_files+0x3a0/0x420 [ 91.498390][ T6135] __x64_sys_sendmsg+0x1bd/0x2a0 [ 91.498424][ T6135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 91.498461][ T6135] ? __pfx_ksys_write+0x10/0x10 [ 91.498499][ T6135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.498521][ T6135] do_syscall_64+0x174/0x580 [ 91.498541][ T6135] ? trace_irq_disable+0x3b/0x140 [ 91.498569][ T6135] ? clear_bhb_loop+0x40/0x90 [ 91.498594][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.498613][ T6135] RIP: 0033:0x7f855459ce59 [ 91.498631][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.498646][ T6135] RSP: 002b:00007f8555491028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.498666][ T6135] RAX: ffffffffffffffda RBX: 00007f8554815fa0 RCX: 00007f855459ce59 [ 91.498680][ T6135] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 91.498693][ T6135] RBP: 00007f8555491090 R08: 0000000000000000 R09: 0000000000000000 [ 91.498704][ T6135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.498715][ T6135] R13: 00007f8554816038 R14: 00007f8554815fa0 R15: 00007ffd002373c8 [ 91.498746][ T6135] [ 91.771080][ T6133] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 91.861824][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 91.876472][ T6140] netlink: 'syz.1.84': attribute type 10 has an invalid length. [ 91.884989][ T6140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.84'. [ 91.952980][ T6143] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 91.968232][ T6139] dummy0: left promiscuous mode [ 91.991896][ T6137] ip_vti0: entered promiscuous mode [ 92.172416][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 92.288356][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 92.335642][ T6156] block nbd0: not configured, cannot reconfigure [ 92.387054][ T6165] netlink: 'syz.2.92': attribute type 4 has an invalid length. [ 92.404649][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 92.416591][ T6165] netlink: 152 bytes leftover after parsing attributes in process `syz.2.92'. [ 92.442541][ T6165] .`: renamed from bond0 (while UP) [ 92.800828][ T6186] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 92.983683][ T6175] vlan0: left promiscuous mode [ 93.037026][ T6175] vlan2: left promiscuous mode [ 93.042978][ T6175] geneve1: left promiscuous mode [ 93.076395][ T6186] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.086804][ T6186] .`: (slave team0): Enslaving as an active interface with an up link [ 93.154010][ T6204] netlink: 'syz.4.101': attribute type 1 has an invalid length. [ 93.245317][ T6204] netlink: 'syz.4.101': attribute type 10 has an invalid length. [ 93.265165][ T6204] dummy0: entered promiscuous mode [ 93.737553][ T6223] syzkaller0: entered promiscuous mode [ 93.767497][ T6223] syzkaller0: entered allmulticast mode [ 93.803682][ T6240] FAULT_INJECTION: forcing a failure. [ 93.803682][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.831592][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.4.111 Not tainted syzkaller #0 PREEMPT(full) [ 93.831617][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.831629][ T6240] Call Trace: [ 93.831636][ T6240] [ 93.831644][ T6240] dump_stack_lvl+0xe8/0x150 [ 93.831679][ T6240] should_fail_ex+0x412/0x560 [ 93.831706][ T6240] _copy_from_user+0x2d/0xb0 [ 93.831731][ T6240] ___sys_recvmsg+0x175/0x590 [ 93.831757][ T6240] ? __pfx____sys_recvmsg+0x10/0x10 [ 93.831782][ T6240] ? __fget_files+0x2a/0x420 [ 93.831825][ T6240] ? __fget_files+0x3a0/0x420 [ 93.831859][ T6240] do_recvmmsg+0x334/0x800 [ 93.831887][ T6240] ? __pfx_do_recvmmsg+0x10/0x10 [ 93.831929][ T6240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.831964][ T6240] __x64_sys_recvmmsg+0x198/0x250 [ 93.831987][ T6240] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 93.832032][ T6240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.832066][ T6240] do_syscall_64+0x174/0x580 [ 93.832084][ T6240] ? trace_irq_disable+0x3b/0x140 [ 93.832110][ T6240] ? clear_bhb_loop+0x40/0x90 [ 93.832150][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.832169][ T6240] RIP: 0033:0x7fce5239ce59 [ 93.832187][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.832203][ T6240] RSP: 002b:00007fce532a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 93.832223][ T6240] RAX: ffffffffffffffda RBX: 00007fce52615fa0 RCX: 00007fce5239ce59 [ 93.832237][ T6240] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 93.832249][ T6240] RBP: 00007fce532a5090 R08: 0000000000000000 R09: 0000000000000000 [ 93.832261][ T6240] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 93.832273][ T6240] R13: 00007fce52616038 R14: 00007fce52615fa0 R15: 00007fff18d8ca08 [ 93.832303][ T6240] [ 94.100709][ T6223] tipc: Started in network mode [ 94.110011][ T6223] tipc: Node identity 52a245feb56e, cluster identity 4711 [ 94.117739][ T6223] tipc: Enabled bearer , priority 0 [ 94.231820][ T6244] syzkaller0: entered promiscuous mode [ 94.237353][ T6244] syzkaller0: entered allmulticast mode [ 94.254132][ T6220] tipc: Resetting bearer [ 94.289069][ T6220] tipc: Disabling bearer [ 95.688722][ T6254] gretap0: entered promiscuous mode [ 95.694584][ T6254] vlan3: entered promiscuous mode [ 95.839165][ T6287] __nla_validate_parse: 13 callbacks suppressed [ 95.839185][ T6287] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.117'. [ 96.371645][ T6313] tipc: Failed to remove unknown binding: 66,0,0/0:609172081/609172082 [ 96.391427][ T6313] tipc: Failed to remove unknown binding: 66,0,0/0:609172081/609172082 [ 96.435572][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 96.569431][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.579042][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.648428][ T6318] .`: (slave team0): Releasing backup interface [ 96.863760][ T6318] bridge_slave_0: left allmulticast mode [ 96.869580][ T6318] bridge_slave_0: left promiscuous mode [ 96.876295][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.922146][ T6318] bridge_slave_1: left allmulticast mode [ 96.935177][ T6318] bridge_slave_1: left promiscuous mode [ 96.952131][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.017194][ T6318] .`: (slave bond_slave_0): Releasing backup interface [ 97.051078][ T6318] .`: (slave bond_slave_1): Releasing backup interface [ 97.079875][ T6318] team0: Port device team_slave_0 removed [ 97.128274][ T6318] team0: Port device team_slave_1 removed [ 97.158244][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.170487][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.202809][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.217077][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.235936][ T6318] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.286642][ T6326] bridge_slave_0: left allmulticast mode [ 97.304790][ T6326] bridge_slave_0: left promiscuous mode [ 97.334022][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.389417][ T6326] bridge_slave_1: left allmulticast mode [ 97.405513][ T6326] bridge_slave_1: left promiscuous mode [ 97.417220][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.442660][ T6326] bond0: (slave bond_slave_0): Releasing backup interface [ 97.454118][ T6369] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 97.480934][ T6326] bond0: (slave bond_slave_1): Releasing backup interface [ 97.496937][ T6326] team0: Port device team_slave_0 removed [ 97.508834][ T6326] team0: Port device team_slave_1 removed [ 97.516461][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.526824][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.543474][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.552215][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.565304][ T6326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.581790][ T6373] netlink: 'syz.2.131': attribute type 10 has an invalid length. [ 97.591569][ T6373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.131'. [ 97.716245][ T6343] vcan1: entered promiscuous mode [ 97.733528][ T6343] vcan1: entered allmulticast mode [ 97.823370][ T6369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.837229][ T6371] bond2: (slave dummy0): making interface the new active one [ 97.846732][ T6371] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 97.856878][ T6373] dummy0: entered promiscuous mode [ 97.865264][ T6373] bond2: (slave dummy0): Releasing active interface [ 97.877243][ T6381] syz_tun: entered allmulticast mode [ 97.896700][ T6383] syz_tun: entered allmulticast mode [ 97.915642][ T6383] pimreg: entered allmulticast mode [ 98.510083][ T6374] syz_tun: left allmulticast mode [ 98.622075][ T6378] syz_tun: left allmulticast mode [ 99.443847][ T6336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.696804][ T6392] netlink: 44 bytes leftover after parsing attributes in process `syz.2.136'. [ 99.732098][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.746003][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 99.800412][ T6401] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 99.826963][ T6401] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 99.851886][ T6402] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 99.877659][ T6402] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 100.028114][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 100.047792][ T6414] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 100.138057][ T6421] netlink: 'syz.1.144': attribute type 2 has an invalid length. [ 100.162011][ T6421] netlink: 'syz.1.144': attribute type 2 has an invalid length. [ 100.204890][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.237295][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.269265][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.308819][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.415457][ T6435] syz_tun: entered allmulticast mode [ 100.464364][ T6434] syz_tun: left allmulticast mode [ 100.526348][ T6439] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.149'. [ 100.674278][ T6443] syzkaller0: entered promiscuous mode [ 100.710776][ T6443] syzkaller0: entered allmulticast mode [ 100.817428][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 100.854433][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 101.365690][ T6485] lo: entered promiscuous mode [ 101.387404][ T6485] tunl0: entered promiscuous mode [ 101.401864][ T6485] gre0: entered promiscuous mode [ 101.438885][ T6485] gretap0: entered promiscuous mode [ 101.469106][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 101.495054][ T6485] erspan0: entered promiscuous mode [ 101.532246][ T6485] ip6_vti0: entered promiscuous mode [ 101.570422][ T6485] sit0: entered promiscuous mode [ 101.595870][ T6485] ip6tnl0: entered promiscuous mode [ 101.616286][ T6485] ip6gre0: entered promiscuous mode [ 101.637828][ T6485] syz_tun: entered promiscuous mode [ 101.681494][ T6485] ip6gretap0: entered promiscuous mode [ 101.691635][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.699193][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.710366][ T6485] bridge0: entered promiscuous mode [ 101.720700][ T6485] vcan0: entered promiscuous mode [ 101.739510][ T6485] bond0: entered promiscuous mode [ 101.746758][ T6485] bond_slave_0: entered promiscuous mode [ 101.753134][ T6485] bond_slave_1: entered promiscuous mode [ 101.763320][ T6485] team0: entered promiscuous mode [ 101.768526][ T6485] team_slave_0: entered promiscuous mode [ 101.775878][ T6485] team_slave_1: entered promiscuous mode [ 101.798230][ T6485] dummy0: entered promiscuous mode [ 101.808833][ T6485] nlmon0: entered promiscuous mode [ 101.815775][ T6485] batadv0: entered promiscuous mode [ 101.826668][ T6485] vxcan0: entered promiscuous mode [ 101.832967][ T6485] vxcan1: entered promiscuous mode [ 101.839175][ T6485] veth0: entered promiscuous mode [ 101.848700][ T6485] veth1: entered promiscuous mode [ 101.858314][ T6485] wg0: entered promiscuous mode [ 101.872890][ T6485] wg1: entered promiscuous mode [ 101.880720][ T6485] wg2: entered promiscuous mode [ 101.887569][ T6485] veth0_to_bridge: entered promiscuous mode [ 101.903264][ T6485] veth1_to_bridge: entered promiscuous mode [ 101.915799][ T6485] veth0_to_bond: entered promiscuous mode [ 101.926604][ T6485] veth1_to_bond: entered promiscuous mode [ 101.936697][ T6485] veth0_to_team: entered promiscuous mode [ 101.950086][ T6485] veth1_to_team: entered promiscuous mode [ 101.975681][ T6485] veth0_to_batadv: entered promiscuous mode [ 101.988986][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.996776][ T6485] batadv_slave_0: entered promiscuous mode [ 102.010920][ T6485] veth1_to_batadv: entered promiscuous mode [ 102.186386][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.210367][ T6485] batadv_slave_1: entered promiscuous mode [ 102.226301][ T6485] xfrm0: entered promiscuous mode [ 102.266462][ T6485] veth0_to_hsr: entered promiscuous mode [ 102.321813][ T6485] veth1_to_hsr: entered promiscuous mode [ 102.340764][ T6485] hsr0: entered promiscuous mode [ 102.355195][ T6485] veth1_virt_wifi: entered promiscuous mode [ 102.377107][ T6485] veth0_virt_wifi: entered promiscuous mode [ 102.387150][ T6485] virt_wifi0: entered promiscuous mode [ 102.416609][ T6485] vlan0: entered promiscuous mode [ 102.434435][ T6485] vlan1: entered promiscuous mode [ 102.448790][ T6485] macvlan0: entered promiscuous mode [ 102.460503][ T6485] macvlan1: entered promiscuous mode [ 102.469476][ T6485] ipvlan0: entered promiscuous mode [ 102.477974][ T6485] ipvlan1: entered promiscuous mode [ 102.490872][ T6485] macvtap0: entered promiscuous mode [ 102.498932][ T6485] macsec0: entered promiscuous mode [ 102.507282][ T6485] geneve0: entered promiscuous mode [ 102.516947][ T6485] geneve1: entered promiscuous mode [ 102.528016][ T6485] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 102.546541][ T6485] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 102.557878][ T6485] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 102.568744][ T6485] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 102.608488][ T6485] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 102.637793][ T6485] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 102.650398][ T6485] vxlan0: entered promiscuous mode [ 102.662619][ T6485] gretap1: left allmulticast mode [ 102.762995][ T6485] bond1: entered promiscuous mode [ 102.780162][ T6485] bridge1: entered promiscuous mode [ 102.790627][ T6491] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 102.800876][ T6515] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 102.830973][ T1165] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.906578][ T1165] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.920704][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 102.940862][ T1165] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.955935][ T1165] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.452843][ T6553] warning: `syz.2.173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.477961][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 122.488205][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 122.503079][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 122.532961][ T6561] x_tables: duplicate underflow at hook 2 [ 122.594431][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.178'. [ 122.623213][ T6546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.801869][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 122.883846][ T6578] netlink: 1 bytes leftover after parsing attributes in process `syz.4.183'. [ 123.068885][ T6588] syzkaller1: entered promiscuous mode [ 123.075120][ T6588] syzkaller1: entered allmulticast mode [ 123.089019][ T6592] ip6erspan0: entered allmulticast mode [ 123.427840][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 123.613923][ T6618] netlink: 'syz.3.195': attribute type 5 has an invalid length. [ 123.635772][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 123.963450][ T6639] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 123.996934][ T6641] openvswitch: netlink: IPv4 tun info is not correct [ 124.070269][ T6646] netlink: 'syz.3.203': attribute type 12 has an invalid length. [ 124.167252][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 124.238621][ T6653] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 124.309525][ T30] audit: type=1800 audit(1780639493.129:2): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.196" name="cgroup.controllers" dev="tmpfs" ino=211 res=0 errno=0 [ 124.554434][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 125.096301][ T6495] IPVS: starting estimator thread 0... [ 125.210981][ T6693] IPVS: using max 29 ests per chain, 69600 per kthread [ 125.245135][ T6698] netlink: 'syz.0.219': attribute type 2 has an invalid length. [ 125.585390][ T6722] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 125.893855][ T6745] openvswitch: netlink: Key type 2054 is out of range max 32 [ 125.913241][ T6743] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 126.695984][ T6791] openvswitch: netlink: Flow key attr not present in new flow. [ 126.753295][ T6793] openvswitch: netlink: Flow actions attr not present in new flow. [ 126.857306][ T6797] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 126.864752][ T5650] Bluetooth: hci2: command tx timeout [ 126.873873][ T6797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.676449][ T6831] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 127.702614][ T6831] batman_adv: batadv0: Adding interface: wlan0 [ 127.719875][ T6831] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.777897][ T6836] __nla_validate_parse: 13 callbacks suppressed [ 127.777919][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 127.812683][ T6831] batman_adv: batadv0: Interface activated: wlan0 [ 127.839292][ T6836] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.002669][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 128.240308][ T6855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.267'. [ 128.259725][ T6855] netlink: 'syz.3.267': attribute type 7 has an invalid length. [ 128.280943][ T6855] netlink: 'syz.3.267': attribute type 8 has an invalid length. [ 128.297987][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 128.511588][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.132293][ T6881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.159231][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 129.192796][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 129.309566][ T6893] sctp: [Deprecated]: syz.0.278 (pid 6893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.309566][ T6893] Use struct sctp_sack_info instead [ 129.316043][ T6892] xt_ipcomp: unknown flags 1D [ 129.355919][ T6891] xt_ipcomp: unknown flags 1D [ 129.371729][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 129.711102][ T6909] bridge0: port 1(ipvlan2) entered blocking state [ 129.725324][ T6909] bridge0: port 1(ipvlan2) entered disabled state [ 129.748088][ T6909] ipvlan2: entered allmulticast mode [ 129.771684][ T6909] bridge0: entered allmulticast mode [ 129.800540][ T6909] ipvlan2: left allmulticast mode [ 129.831586][ T6909] bridge0: left allmulticast mode [ 129.858780][ T6916] netlink: 80 bytes leftover after parsing attributes in process `syz.4.285'. [ 130.074790][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.288'. [ 130.652642][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 130.837873][ T6970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.062622][ T30] audit: type=1804 audit(1780639499.879:3): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.304" name="/newroot/58/cgroup.controllers" dev="tmpfs" ino=312 res=1 errno=0 [ 131.115272][ T30] audit: type=1800 audit(1780639499.889:4): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.304" name="cgroup.controllers" dev="tmpfs" ino=312 res=0 errno=0 [ 131.333727][ T6994] trusted_key: syz.3.310 sent an empty control message without MSG_MORE. [ 131.544421][ T7004] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 131.576606][ T7006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.717656][ T7004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.768371][ T7029] netlink: 'syz.2.316': attribute type 1 has an invalid length. [ 131.875585][ T7004] bond1: (slave geneve2): making interface the new active one [ 131.907979][ T7004] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 131.947966][ T7029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.016255][ T7035] bond4: (slave geneve2): making interface the new active one [ 132.045309][ T7035] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 132.107363][ T7042] netlink: 'syz.1.322': attribute type 3 has an invalid length. [ 132.119690][ T7040] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 132.544869][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.554642][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.566358][ T7064] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 132.582285][ T7064] syzkaller1: group set to 0 [ 132.888463][ T7074] __nla_validate_parse: 7 callbacks suppressed [ 132.888482][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 133.060641][ T7078] Cannot find set identified by id 65534 to match [ 133.107725][ T7080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.210740][ T7061] netlink: 'syz.2.327': attribute type 16 has an invalid length. [ 133.235084][ T7061] netlink: 'syz.2.327': attribute type 17 has an invalid length. [ 133.270408][ T7080] veth3: entered allmulticast mode [ 133.280838][ T7085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.318695][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.338'. [ 133.348879][ T7061] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 133.438664][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 133.790895][ T7105] tipc: Enabling of bearer rejected, failed to enable media [ 133.823034][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.832839][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.022472][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 134.228690][ T7122] netlink: 'syz.3.345': attribute type 10 has an invalid length. [ 134.460309][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.577460][ T7142] Cannot find del_set index 3 as target [ 134.861783][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.117292][ T7175] x_tables: duplicate underflow at hook 1 [ 135.489246][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 135.547143][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 135.785594][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 135.901043][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.417856][ T7245] netlink: 'syz.1.379': attribute type 1 has an invalid length. [ 136.444895][ T7245] netlink: 'syz.1.379': attribute type 29 has an invalid length. [ 136.477415][ T7245] netlink: 14 bytes leftover after parsing attributes in process `syz.1.379'. [ 136.647762][ T7256] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 136.774739][ T7267] netlink: 'syz.2.384': attribute type 10 has an invalid length. [ 136.832526][ T7256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.833297][ T7267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.384'. [ 136.871098][ T7262] dummy0: left promiscuous mode [ 136.876180][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.933517][ T7262] bond5: (slave dummy0): making interface the new active one [ 136.942951][ T7262] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 136.952869][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.964102][ T7265] ipvlan0: left promiscuous mode [ 136.987552][ T7267] dummy0: entered promiscuous mode [ 137.244634][ T7267] bond5: (slave dummy0): Releasing active interface [ 137.260828][ T7277] tipc: Enabling of bearer rejected, failed to enable media [ 137.448779][ T7297] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 137.791678][ T7315] can: request_module (can-proto-0) failed. [ 137.981390][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.233513][ T7333] xt_connbytes: Forcing CT accounting to be enabled [ 138.605062][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 138.614527][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 139.020278][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.900297][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.060165][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.383946][ T7292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.747051][ T7367] vlan3: entered allmulticast mode [ 140.768789][ T7367] bond0: entered allmulticast mode [ 140.864515][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.980996][ T7385] syzkaller1: entered promiscuous mode [ 140.998499][ T7385] syzkaller1: entered allmulticast mode [ 141.014948][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 141.032565][ T7385] netlink: 'syz.4.417': attribute type 21 has an invalid length. [ 141.073103][ T7385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.083376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.104101][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.121650][ T7391] netlink: 256 bytes leftover after parsing attributes in process `syz.0.418'. [ 141.139424][ T7391] unsupported nlmsg_type 40 [ 141.368502][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 141.765731][ T7427] bond2: entered promiscuous mode [ 141.772341][ T7427] bond2: entered allmulticast mode [ 141.778032][ T7427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.141751][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.180189][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.900257][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.065351][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.592911][ T7417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.717461][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 144.783309][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 144.941410][ T7479] vcan2: entered promiscuous mode [ 144.955552][ T6508] hid-generic 0005:15C2:0002.0001: item fetching failed at offset 4/6 [ 144.966201][ T7479] vcan2: entered allmulticast mode [ 144.981246][ T6508] hid-generic 0005:15C2:0002.0001: probe with driver hid-generic failed with error -22 [ 145.146510][ T7490] syzkaller1: entered promiscuous mode [ 145.165863][ T7490] syzkaller1: entered allmulticast mode [ 145.188652][ T7490] sctp: [Deprecated]: syz.2.445 (pid 7490) Use of int in max_burst socket option. [ 145.188652][ T7490] Use struct sctp_assoc_value instead [ 145.263352][ T6508] net_ratelimit: 3 callbacks suppressed [ 145.263370][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.392353][ T7500] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 145.478031][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.519546][ T7501] vlan3: entered promiscuous mode [ 145.539079][ T7501] bond1: entered promiscuous mode [ 145.558321][ T7501] vlan3: entered allmulticast mode [ 145.570055][ T7501] bond1: entered allmulticast mode [ 145.602850][ T7515] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 145.756204][ T7515] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.763894][ T7517] veth0_to_bond: left promiscuous mode [ 145.774532][ T7517] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 145.984704][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.121810][ T7546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.457'. [ 146.136171][ T7543] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.456'. [ 146.314537][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.378972][ T7561] xt_hashlimit: invalid rate [ 146.941570][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.340385][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.918106][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.380212][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.718437][ T7520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.737334][ T7568] netlink: 240 bytes leftover after parsing attributes in process `syz.4.461'. [ 148.976351][ T7598] netlink: 'syz.0.467': attribute type 39 has an invalid length. [ 149.006874][ T7598] hsr_slave_0: left promiscuous mode [ 149.044847][ T7598] hsr_slave_1: left promiscuous mode [ 149.201846][ T7612] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:19999 [ 149.402873][ T7622] netlink: 68 bytes leftover after parsing attributes in process `syz.2.475'. [ 149.421567][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.492518][ T7618] veth3: entered allmulticast mode [ 149.568598][ T7631] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 149.637198][ T7633] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 149.838435][ T6508] IPVS: starting estimator thread 0... [ 149.886874][ T7640] vlan4: entered promiscuous mode [ 149.911371][ T7640] bridge0: entered promiscuous mode [ 149.944777][ T7648] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 149.949628][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.479'. [ 149.960418][ T7644] IPVS: using max 26 ests per chain, 62400 per kthread [ 149.983311][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.013439][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.479'. [ 150.463256][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.507811][ T7668] syz_tun: entered allmulticast mode [ 150.561324][ T7668] pimreg: entered allmulticast mode [ 150.719542][ T7679] openvswitch: netlink: Multiple metadata blocks provided [ 150.754197][ T7679] openvswitch: netlink: Multiple metadata blocks provided [ 150.774765][ T7683] xt_hashlimit: size too large, truncated to 1048576 [ 150.851282][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.495'. [ 151.101372][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.502788][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.511253][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 151.533408][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.503'. [ 151.628649][ T7726] syz_tun: entered allmulticast mode [ 151.668829][ T7726] pimreg: entered allmulticast mode [ 151.759314][ T7728] netlink: 64 bytes leftover after parsing attributes in process `syz.0.505'. [ 151.849863][ T7730] syzkaller1: entered promiscuous mode [ 151.855130][ T7733] netlink: 1072 bytes leftover after parsing attributes in process `syz.4.506'. [ 151.880904][ T7730] syzkaller1: entered allmulticast mode [ 152.007375][ T7743] netem: change failed [ 152.033182][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.094072][ T7752] netlink: 72 bytes leftover after parsing attributes in process `syz.4.511'. [ 152.104295][ T7749] bridge_slave_0: left allmulticast mode [ 152.128344][ T7749] bridge_slave_0: left promiscuous mode [ 152.147949][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.185657][ T7749] bridge_slave_1: left allmulticast mode [ 152.198690][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.227805][ T7756] netlink: 112 bytes leftover after parsing attributes in process `syz.3.513'. [ 152.237492][ T7749] bond0: (slave bond_slave_0): Releasing backup interface [ 152.249531][ T7749] bond0: (slave bond_slave_1): Releasing backup interface [ 152.263907][ T7749] team0: Port device team_slave_0 removed [ 152.275526][ T7749] team0: Port device team_slave_1 removed [ 152.285614][ T7749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.546815][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.568434][ T7769] netlink: 44 bytes leftover after parsing attributes in process `syz.3.517'. [ 152.737883][ T7778] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 153.206956][ T7800] syzkaller0: entered promiscuous mode [ 153.236977][ T7800] syzkaller0: entered allmulticast mode [ 153.489636][ T7824] xt_hashlimit: size too large, truncated to 1048576 [ 153.500668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.579337][ T7831] netlink: 'syz.4.535': attribute type 11 has an invalid length. [ 153.591193][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.883260][ T7847] xt_TCPMSS: Only works on TCP SYN packets [ 153.915428][ T7847] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 153.915428][ T7847] Please contact the netfilter-devel mailing list or update your nftables rules. [ 154.070886][ T7854] netlink: 'syz.3.541': attribute type 23 has an invalid length. [ 154.140193][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.183919][ T7858] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 154.317831][ T7858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 154.341307][ T7866] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 154.396351][ T7858] macvlan2: entered promiscuous mode [ 154.408754][ T7858] macvlan2: entered allmulticast mode [ 154.417497][ T7858] bond7: entered promiscuous mode [ 154.422974][ T7858] veth0_to_bond: entered promiscuous mode [ 154.432407][ T7858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.441874][ T7858] bond7: left promiscuous mode [ 154.448588][ T7858] veth0_to_bond: left promiscuous mode [ 154.653957][ T7883] veth1_macvtap: left promiscuous mode [ 154.668168][ T7883] macsec0: entered promiscuous mode [ 154.679291][ T7883] macsec0: entered allmulticast mode [ 154.700772][ T7883] veth1_macvtap: entered promiscuous mode [ 154.709406][ T7885] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 154.719425][ T7883] veth1_macvtap: entered allmulticast mode [ 154.728188][ T7883] macsec0: left promiscuous mode [ 154.734828][ T7883] macsec0: left allmulticast mode [ 154.740381][ T7883] veth1_macvtap: left allmulticast mode [ 154.751768][ T7886] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 154.925900][ T7886] team1: entered promiscuous mode [ 154.955810][ T7886] team1: entered allmulticast mode [ 154.988545][ T7889] 8021q: VLANs not supported on gre0 [ 155.270877][ T7904] __nla_validate_parse: 8 callbacks suppressed [ 155.270895][ T7904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.556'. [ 155.363544][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.557'. [ 155.661187][ T29] net_ratelimit: 2049 callbacks suppressed [ 155.661211][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.700243][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.180933][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.500853][ T5650] Bluetooth: hci4: command tx timeout [ 157.507300][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.740228][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.115643][ T7898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.141066][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.358522][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 158.447384][ T7941] x_tables: duplicate underflow at hook 3 [ 158.781303][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.850144][ T7962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.572'. [ 158.942200][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'. [ 159.086417][ T7971] netlink: 'syz.0.574': attribute type 29 has an invalid length. [ 159.125833][ T7975] netlink: 'syz.0.574': attribute type 29 has an invalid length. [ 159.162480][ T7971] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 159.178639][ T7971] netlink: 'syz.0.574': attribute type 3 has an invalid length. [ 159.192352][ T7971] netlink: 172 bytes leftover after parsing attributes in process `syz.0.574'. [ 159.228307][ T7971] NCSI netlink: No device for ifindex 813332851 [ 159.278107][ T7971] netlink: 'syz.0.574': attribute type 32 has an invalid length. [ 159.308298][ T7971] netlink: 500 bytes leftover after parsing attributes in process `syz.0.574'. [ 159.336396][ T7984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.345815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.361303][ T7982] pim6reg: entered allmulticast mode [ 159.451435][ T7989] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 159.502617][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.581'. [ 159.568810][ T7989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.821242][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.834732][ T8015] xt_hashlimit: size too large, truncated to 1048576 [ 160.250764][ T8036] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 160.323615][ T8036] bond4: (slave veth3): Enslaving as an active interface with a down link [ 160.403216][ T8043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.860265][ T5366] net_ratelimit: 2 callbacks suppressed [ 160.860285][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.900328][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.591104][ T8000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.891984][ T8058] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.927009][ T8058] bond5: (slave lo): Enslaving as an active interface with an up link [ 162.945679][ T8058] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 162.979060][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.075391][ T8069] xt_hashlimit: size too large, truncated to 1048576 [ 163.145604][ T8077] netlink: 'syz.1.607': attribute type 1 has an invalid length. [ 163.155656][ T8077] Bluetooth: MGMT ver 1.23 [ 163.189791][ T8075] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.331214][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.422689][ T8087] xt_hashlimit: size too large, truncated to 1048576 [ 163.585920][ T8099] netlink: 104 bytes leftover after parsing attributes in process `syz.4.611'. [ 163.786555][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 163.909807][ T8107] syzkaller0: entered promiscuous mode [ 163.938737][ T8107] syzkaller0: entered allmulticast mode [ 163.983788][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.112794][ T8117] 8021q: VLANs not supported on ipvlan1 [ 164.243488][ T8124] netlink: 44 bytes leftover after parsing attributes in process `syz.0.617'. [ 164.446589][ T8130] tipc: New replicast peer: 0.0.0.0 [ 164.466595][ T8130] tipc: Enabled bearer , priority 10 [ 164.522704][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 164.596663][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 164.709645][ T8141] netlink: 32 bytes leftover after parsing attributes in process `syz.4.622'. [ 164.875562][ T8149] netlink: 'syz.1.625': attribute type 24 has an invalid length. [ 165.020583][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.137960][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 165.179718][ T8163] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 165.208065][ T8163] netlink: 96 bytes leftover after parsing attributes in process `syz.3.630'. [ 165.229485][ T8163] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 165.249422][ T8163] netlink: 'syz.3.630': attribute type 8 has an invalid length. [ 165.263873][ T8163] netlink: 606 bytes leftover after parsing attributes in process `syz.3.630'. [ 165.448028][ T8176] sock: sock_timestamping_bind_phc: sock not bind to device [ 165.527865][ T8183] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 165.575201][ T8183] netlink: 224 bytes leftover after parsing attributes in process `syz.2.634'. [ 165.602018][ T29] tipc: Node number set to 3888924158 [ 165.802192][ T8210] openvswitch: netlink: Flow key attr not present in new flow. [ 165.818160][ T8194] bond5: entered promiscuous mode [ 165.833551][ T8194] bond5: entered allmulticast mode [ 165.839246][ T8194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.858859][ T8209] wg1 speed is unknown, defaulting to 1000 [ 165.897828][ T8209] wg1 speed is unknown, defaulting to 1000 [ 165.979419][ T8209] wg1 speed is unknown, defaulting to 1000 [ 166.037228][ T8209] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 166.062470][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.121427][ T8209] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 166.218166][ T8209] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 166.303006][ T8209] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.382534][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.401411][ T8209] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 166.542414][ T5650] Bluetooth: hci4: command tx timeout [ 166.666981][ T8209] wg1 speed is unknown, defaulting to 1000 [ 166.701855][ T8209] wg1 speed is unknown, defaulting to 1000 [ 166.727687][ T8209] wg1 speed is unknown, defaulting to 1000 [ 166.878281][ T8209] wg1 speed is unknown, defaulting to 1000 [ 166.900422][ T8209] wg1 speed is unknown, defaulting to 1000 [ 166.926980][ T8257] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 166.948885][ T8257] tipc: Trying to set illegal importance in message [ 167.100434][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.339653][ T8270] syzkaller1: entered promiscuous mode [ 167.359247][ T8270] syzkaller1: entered allmulticast mode [ 167.490996][ T8276] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 167.741590][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.130887][ T8304] ipvlan2: entered allmulticast mode [ 168.150433][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.171114][ T8311] netlink: 'syz.2.666': attribute type 1 has an invalid length. [ 168.176120][ T8304] batadv_slave_1: entered allmulticast mode [ 168.225707][ T8318] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.296072][ T8304] batman_adv: batadv0: Adding interface: ipvlan2 [ 168.347345][ T8304] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.435744][ T8304] batman_adv: batadv0: Interface activated: ipvlan2 [ 168.544983][ T8336] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002 [ 168.806599][ T8323] syzkaller0: entered promiscuous mode [ 168.822661][ T8323] syzkaller0: entered allmulticast mode [ 168.926790][ T8350] __nla_validate_parse: 4 callbacks suppressed [ 168.926809][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 169.189551][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.421278][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.230427][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.260423][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.302870][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.461173][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.747062][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 172.766569][ T8375] netlink: 'syz.2.680': attribute type 21 has an invalid length. [ 172.780309][ T8375] netlink: 128 bytes leftover after parsing attributes in process `syz.2.680'. [ 172.806116][ T8370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.834059][ T8375] netlink: 3 bytes leftover after parsing attributes in process `syz.2.680'. [ 172.997706][ T8388] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 173.015733][ T8388] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 173.267799][ T8403] bridge5: entered allmulticast mode [ 173.276634][ T8394] syz.2.684 (8394) used greatest stack depth: 17944 bytes left [ 173.340266][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.468654][ T8402] bridge5: left allmulticast mode [ 173.614916][ T8414] netlink: 144 bytes leftover after parsing attributes in process `syz.4.691'. [ 173.631621][ T8412] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.856167][ T8424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.865169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.944386][ T8434] netlink: 228 bytes leftover after parsing attributes in process `syz.2.697'. [ 174.058721][ T8438] netlink: 36 bytes leftover after parsing attributes in process `syz.0.699'. [ 174.082283][ T8433] wg1 speed is unknown, defaulting to 1000 [ 174.098293][ T8441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.106919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.310547][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 174.381171][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.603458][ T8452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.817748][ T8452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.004050][ T8452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.053485][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'. [ 175.148995][ T8452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.415646][ T62] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.493378][ T1020] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.542677][ T1020] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.563696][ T8490] netlink: 36 bytes leftover after parsing attributes in process `syz.3.712'. [ 175.621731][ T62] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.834478][ T8503] netlink: 68 bytes leftover after parsing attributes in process `syz.3.712'. [ 175.862369][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.712'. [ 175.955188][ T8480] netlink: 356 bytes leftover after parsing attributes in process `syz.2.709'. [ 176.084500][ T8522] macvlan2: entered promiscuous mode [ 176.096269][ T8522] macvlan2: entered allmulticast mode [ 176.159473][ T8529] netlink: 43 bytes leftover after parsing attributes in process `syz.1.721'. [ 176.353883][ T8490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.467098][ T5731] net_ratelimit: 2 callbacks suppressed [ 176.467115][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.994207][ T8567] : renamed from gretap0 [ 177.196240][ T8575] netlink: 'syz.1.735': attribute type 1 has an invalid length. [ 177.284617][ T8575] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.315717][ T8577] vlan4: entered promiscuous mode [ 177.324583][ T8577] bond6: entered promiscuous mode [ 177.331125][ T8577] vlan4: entered allmulticast mode [ 177.336411][ T8577] bond6: entered allmulticast mode [ 177.359666][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.368828][ T8575] bond6: (slave bridge7): making interface the new active one [ 177.378398][ T8575] bridge7: entered promiscuous mode [ 177.384792][ T8575] bridge7: entered allmulticast mode [ 177.403835][ T8575] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 177.503839][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.574496][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 177.605285][ T8583] netlink: 'syz.2.738': attribute type 29 has an invalid length. [ 177.624728][ T8583] netlink: 'syz.2.738': attribute type 29 has an invalid length. [ 177.652928][ T8585] netlink: 'syz.1.739': attribute type 2 has an invalid length. [ 177.661598][ T8585] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 177.872243][ T8596] netlink: 'syz.3.744': attribute type 1 has an invalid length. [ 178.004462][ T8607] netlink: 'syz.3.744': attribute type 10 has an invalid length. [ 178.058248][ T8596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.106817][ T8602] dummy0: left promiscuous mode [ 178.133647][ T8602] bond6: (slave dummy0): making interface the new active one [ 178.151026][ T8602] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 178.238970][ T8607] dummy0: entered promiscuous mode [ 178.261098][ T8607] bond6: (slave dummy0): Releasing active interface [ 178.446240][ T8631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.455530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.467514][ T8631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.477640][ T1178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.500091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.512619][ T8631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.541411][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.676790][ T8691] __nla_validate_parse: 6 callbacks suppressed [ 179.676808][ T8691] netlink: 10 bytes leftover after parsing attributes in process `syz.0.770'. [ 179.700757][ T8690] netlink: 10 bytes leftover after parsing attributes in process `syz.0.770'. [ 179.727959][ T8693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.771'. [ 179.927805][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.774'. [ 179.982393][ T8702] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 180.108417][ T8718] bridge0: port 3(veth1_to_bridge) entered blocking state [ 180.139685][ T8718] bridge0: port 3(veth1_to_bridge) entered disabled state [ 180.148850][ T8718] veth1_to_bridge: entered allmulticast mode [ 180.165506][ T8718] veth1_to_bridge: entered promiscuous mode [ 180.180583][ T8718] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 180.213620][ T8718] bridge0: port 3(veth1_to_bridge) entered blocking state [ 180.220938][ T8718] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 180.446506][ T8733] netlink: 'syz.0.782': attribute type 161 has an invalid length. [ 180.565746][ T8744] netlink: 116 bytes leftover after parsing attributes in process `syz.0.786'. [ 180.578027][ T8742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.785'. [ 180.603902][ T8742] No such timeout policy "syz1" [ 180.826112][ T8756] netlink: 'syz.1.789': attribute type 39 has an invalid length. [ 180.856230][ T8756] hsr_slave_0: left promiscuous mode [ 180.896933][ T8756] hsr_slave_1: left promiscuous mode [ 180.945290][ T8764] netlink: 'syz.1.789': attribute type 39 has an invalid length. [ 181.276319][ T8782] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 181.288619][ T8774] tc action pedit 'at' offset -2147483633 out of bounds [ 181.334757][ T8785] netlink: 'syz.3.798': attribute type 49 has an invalid length. [ 181.348430][ T8782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.359477][ T8787] TCP: TCP_TX_DELAY enabled [ 181.368091][ T8782] dummy0: left promiscuous mode [ 181.395753][ T8782] bond3: (slave dummy0): making interface the new active one [ 181.404184][ T8782] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 181.414312][ T8774] syzkaller0: entered promiscuous mode [ 181.416036][ T8782] netlink: 'syz.4.797': attribute type 10 has an invalid length. [ 181.429244][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.797'. [ 181.438593][ T8774] syzkaller0: entered allmulticast mode [ 181.478643][ T8782] dummy0: entered promiscuous mode [ 181.485693][ T8782] bond3: (slave dummy0): Releasing active interface [ 181.557278][ T8791] netem: change failed [ 181.584067][ T6497] net_ratelimit: 4 callbacks suppressed [ 181.584083][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.660391][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.858367][ T8812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.893571][ T8812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.804'. [ 181.922805][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 182.144644][ T8824] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.807'. [ 182.175178][ T8827] openvswitch: netlink: Flow key attr not present in new flow. [ 182.436615][ T8837] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 182.532837][ T8837] 8021q: adding VLAN 0 to HW filter on device bond8 [ 182.568795][ T8842] netlink: 'syz.3.811': attribute type 10 has an invalid length. [ 182.578500][ T8839] dummy0: left promiscuous mode [ 182.616059][ T8839] bond8: (slave dummy0): making interface the new active one [ 182.632147][ T8839] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 182.639514][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.701578][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.712462][ T8842] dummy0: entered promiscuous mode [ 182.731194][ T8842] bond8: (slave dummy0): Releasing active interface [ 182.999369][ T8866] openvswitch: netlink: Flow key attr not present in new flow. [ 183.566303][ T8892] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 183.641749][ T8892] 8021q: adding VLAN 0 to HW filter on device bond9 [ 183.652707][ T8897] tipc: Started in network mode [ 183.666556][ T8897] tipc: Node identity ac14140f, cluster identity 4711 [ 183.674726][ T8897] tipc: New replicast peer: 255.255.255.255 [ 183.683002][ T8897] tipc: Enabled bearer , priority 10 [ 183.689566][ T8892] dummy0: left promiscuous mode [ 183.698647][ T8892] bond9: (slave dummy0): making interface the new active one [ 183.710558][ T8892] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 183.720775][ T8892] netlink: 'syz.3.828': attribute type 10 has an invalid length. [ 183.731233][ T8892] dummy0: entered promiscuous mode [ 183.741360][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.751429][ T8892] bond9: (slave dummy0): Releasing active interface [ 184.009579][ T8912] netlink: 'syz.3.834': attribute type 21 has an invalid length. [ 184.134384][ T8923] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 184.165577][ T8912] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 184.183311][ T8912] bond10 (unregistering): Released all slaves [ 184.260604][ T8923] 8021q: adding VLAN 0 to HW filter on device bond10 [ 184.578887][ T8950] netlink: 'syz.2.842': attribute type 2 has an invalid length. [ 184.643431][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.783633][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.820016][ T5366] tipc: Node number set to 2886997007 [ 184.893677][ T8969] __nla_validate_parse: 7 callbacks suppressed [ 184.893696][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.847'. [ 184.895182][ T30] audit: type=1804 audit(1780639553.719:5): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.845" name="/newroot/168/cgroup.controllers" dev="tmpfs" ino=869 res=1 errno=0 [ 184.993794][ T30] audit: type=1800 audit(1780639553.759:6): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.845" name="cgroup.controllers" dev="tmpfs" ino=869 res=0 errno=0 [ 185.175240][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 185.202134][ T8986] tipc: Enabling of bearer rejected, failed to enable media [ 185.282095][ T8989] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 185.338883][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.853'. [ 185.727018][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 185.807726][ T9012] syzkaller0: entered promiscuous mode [ 185.839997][ T9012] syzkaller0: entered allmulticast mode [ 186.062642][ T9033] netlink: 64 bytes leftover after parsing attributes in process `syz.4.863'. [ 186.100719][ T9033] netlink: 64 bytes leftover after parsing attributes in process `syz.4.863'. [ 186.121654][ T9025] netlink: 88 bytes leftover after parsing attributes in process `syz.4.863'. [ 186.576878][ T9055] xfrm1: entered allmulticast mode [ 186.586258][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 186.596707][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 186.898179][ T5366] net_ratelimit: 1 callbacks suppressed [ 186.898197][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.924988][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 186.940576][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.283366][ T9092] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.350884][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.374165][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.396364][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.425966][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.447995][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.464886][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.485576][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.504090][ T6497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.733128][ T9114] sctp: [Deprecated]: syz.3.889 (pid 9114) Use of int in max_burst socket option deprecated. [ 187.733128][ T9114] Use struct sctp_assoc_value instead [ 188.120647][ T9122] netlink: 'syz.1.891': attribute type 10 has an invalid length. [ 188.175497][ T9122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.208510][ T9122] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 188.284860][ T9127] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 188.309762][ T9127] netlink: 'syz.1.891': attribute type 2 has an invalid length. [ 188.513387][ T9142] netlink: 'syz.4.897': attribute type 1 has an invalid length. [ 189.164620][ T9176] 8021q: adding VLAN 0 to HW filter on device bond9 [ 189.194931][ T9176] macvlan3: entered promiscuous mode [ 189.209966][ T9176] macvlan3: entered allmulticast mode [ 189.217975][ T9176] bond9: entered promiscuous mode [ 189.227979][ T9176] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 189.293997][ T9176] bond9: left promiscuous mode [ 189.387755][ T9191] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.636567][ T9208] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.856726][ T9217] validate_nla: 1 callbacks suppressed [ 189.856744][ T9217] netlink: 'syz.3.925': attribute type 83 has an invalid length. [ 189.933630][ T9222] __nla_validate_parse: 10 callbacks suppressed [ 189.933651][ T9222] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.927'. [ 189.942476][ T9224] netlink: 14 bytes leftover after parsing attributes in process `syz.2.928'. [ 189.998773][ T9224] .` (unregistering): Released all slaves [ 190.078415][ T9227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.930'. [ 190.177655][ T9239] netlink: 14 bytes leftover after parsing attributes in process `syz.1.931'. [ 190.241623][ T9243] netlink: 112 bytes leftover after parsing attributes in process `syz.4.932'. [ 190.288860][ T9236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.930'. [ 190.311993][ T9232] syzkaller0: entered promiscuous mode [ 190.328299][ T9236] nbd: device at index 64 is going down [ 190.339113][ T9232] syzkaller0: entered allmulticast mode [ 190.359666][ T9238] netlink: 244 bytes leftover after parsing attributes in process `syz.4.932'. [ 190.553634][ T8381] udevd[8381]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 190.918841][ T5366] wg1 speed is unknown, defaulting to 1000 [ 190.943142][ T9267] tipc: Enabled bearer , priority 0 [ 191.046909][ T9265] tipc: Disabling bearer [ 191.084441][ T9281] netlink: 56 bytes leftover after parsing attributes in process `syz.1.943'. [ 191.192654][ T9288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.945'. [ 191.229137][ T9288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.945'. [ 191.249727][ T5650] block nbd0: Receive control failed (result -32) [ 191.366342][ T9296] netlink: 'syz.0.947': attribute type 33 has an invalid length. [ 191.476780][ T9296] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 191.491887][ T9296] bond5 (unregistering): Released all slaves [ 191.515307][ T9308] tipc: Started in network mode [ 191.521175][ T9308] tipc: Node identity ac14140f, cluster identity 4711 [ 191.528796][ T9308] tipc: Enabled bearer , priority 10 [ 191.833385][ T9330] syzkaller1: entered promiscuous mode [ 191.839070][ T9330] syzkaller1: entered allmulticast mode [ 192.515132][ T9362] syzkaller1: entered promiscuous mode [ 192.544528][ T9362] syzkaller1: entered allmulticast mode [ 192.571929][ T9369] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 192.591210][ T6508] tipc: Node number set to 2886997007 [ 192.640618][ T9362] netlink: 'syz.2.967': attribute type 1 has an invalid length. [ 192.675975][ T9373] bridge0: port 1(veth1_to_bridge) entered blocking state [ 192.704711][ T9373] bridge0: port 1(veth1_to_bridge) entered disabled state [ 192.739586][ T9373] veth1_to_bridge: entered allmulticast mode [ 192.792449][ T9373] veth1_to_bridge: entered promiscuous mode [ 193.141361][ T9410] ip6t_rpfilter: unknown options [ 193.826130][ T9449] netlink: 'syz.4.981': attribute type 3 has an invalid length. [ 193.846701][ T9457] lo speed is unknown, defaulting to 1000 [ 193.860840][ T9457] lo speed is unknown, defaulting to 1000 [ 193.870937][ T9457] lo speed is unknown, defaulting to 1000 [ 193.884941][ T9457] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 193.943683][ T9457] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 193.970884][ T9457] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 193.998816][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.005381][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.062933][ T9457] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 194.152005][ T9457] lo speed is unknown, defaulting to 1000 [ 194.187823][ T9457] lo speed is unknown, defaulting to 1000 [ 194.205811][ T9468] syzkaller0: entered promiscuous mode [ 194.243149][ T9468] syzkaller0: entered allmulticast mode [ 194.257840][ T9457] lo speed is unknown, defaulting to 1000 [ 194.288530][ T9457] lo speed is unknown, defaulting to 1000 [ 194.385304][ T9457] lo speed is unknown, defaulting to 1000 [ 195.164286][ T9519] __nla_validate_parse: 10 callbacks suppressed [ 195.164307][ T9519] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1002'. [ 195.329513][ T9529] net_ratelimit: 818 callbacks suppressed [ 195.329533][ T9529] openvswitch: netlink: Unknown key attributes 2 [ 195.444054][ T9538] openvswitch: netlink: Flow key attr not present in new flow. [ 196.198559][ T9589] openvswitch: netlink: Flow key attr not present in new flow. [ 196.466692][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 196.501220][ T9607] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 196.518459][ T9609] openvswitch: netlink: Missing valid actions attribute. [ 196.540947][ T9607] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 196.554279][ T9609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.573589][ T9607] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 196.601605][ T9607] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 196.644903][ T9616] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 196.744629][ T9605] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 196.863061][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1030'. [ 196.937086][ T9619] bond11: (slave gretap1): making interface the new active one [ 196.958944][ T9619] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 197.087040][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 197.246114][ T9640] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 197.416971][ T9643] FAULT_INJECTION: forcing a failure. [ 197.416971][ T9643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.503329][ T9643] CPU: 0 UID: 0 PID: 9643 Comm: syz.0.1035 Not tainted syzkaller #0 PREEMPT(full) [ 197.503358][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.503371][ T9643] Call Trace: [ 197.503379][ T9643] [ 197.503387][ T9643] dump_stack_lvl+0xe8/0x150 [ 197.503415][ T9643] should_fail_ex+0x412/0x560 [ 197.503444][ T9643] _copy_from_user+0x2d/0xb0 [ 197.503471][ T9643] ___sys_sendmsg+0x1c6/0x360 [ 197.503491][ T9643] ? __lock_acquire+0x6b5/0x2cf0 [ 197.503525][ T9643] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.503583][ T9643] ? __fget_files+0x2a/0x420 [ 197.503608][ T9643] ? __fget_files+0x3a0/0x420 [ 197.503655][ T9643] __x64_sys_sendmsg+0x1bd/0x2a0 [ 197.503677][ T9643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.503707][ T9643] ? __pfx_ksys_write+0x10/0x10 [ 197.503745][ T9643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.503767][ T9643] do_syscall_64+0x174/0x580 [ 197.503787][ T9643] ? trace_irq_disable+0x3b/0x140 [ 197.503817][ T9643] ? clear_bhb_loop+0x40/0x90 [ 197.503841][ T9643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.503860][ T9643] RIP: 0033:0x7fa5f9f9ce59 [ 197.503879][ T9643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.503899][ T9643] RSP: 002b:00007fa5fade9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.503925][ T9643] RAX: ffffffffffffffda RBX: 00007fa5fa215fa0 RCX: 00007fa5f9f9ce59 [ 197.503940][ T9643] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 197.503952][ T9643] RBP: 00007fa5fade9090 R08: 0000000000000000 R09: 0000000000000000 [ 197.503964][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.503975][ T9643] R13: 00007fa5fa216038 R14: 00007fa5fa215fa0 R15: 00007ffe804120b8 [ 197.504006][ T9643] [ 197.720731][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 197.730965][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 197.834949][ T9655] wg1 speed is unknown, defaulting to 1000 [ 197.842763][ T9655] lo speed is unknown, defaulting to 1000 [ 197.924225][ T9657] ip6gre1: entered allmulticast mode [ 198.486730][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 198.929672][ T9679] bond12: option lp_interval: invalid value (0) [ 198.944141][ T9679] bond12: option lp_interval: allowed values 1 - 2147483647 [ 199.023145][ T9679] bond12 (unregistering): Released all slaves [ 199.103577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.115957][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.128479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.140877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.330088][ C0] net_ratelimit: 2939 callbacks suppressed [ 200.330109][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.348577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.362082][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.374479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.386819][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.399273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.411695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.424154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.436564][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.449015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.585644][ T9715] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 201.358926][ T5650] Bluetooth: hci0: command 0x0406 tx timeout [ 201.366135][ T5650] Bluetooth: hci1: command 0x0406 tx timeout [ 201.373090][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 201.380177][ T5650] Bluetooth: hci3: command 0x0406 tx timeout [ 202.885334][ T9732] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1059'. [ 202.925456][ T9732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1059'. [ 203.099623][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 203.829182][ T9748] netlink: 'syz.0.1063': attribute type 2 has an invalid length. [ 203.868164][ T9748] netlink: 'syz.0.1063': attribute type 1 has an invalid length. [ 204.217629][ T9752] netlink: 'syz.1.1060': attribute type 1 has an invalid length. [ 204.468745][ T9752] 8021q: adding VLAN 0 to HW filter on device bond12 [ 204.813605][ T9737] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 205.340174][ C0] net_ratelimit: 10128 callbacks suppressed [ 205.340196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.359625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.372036][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.385532][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.397898][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.411430][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.423825][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.437286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.449664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.463065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.646200][ T9737] bond13 (unregistering): Released all slaves [ 205.885304][ T9777] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1068'. [ 207.770444][ T9797] xt_hashlimit: size too large, truncated to 1048576 [ 208.362451][ T30] audit: type=1800 audit(1780639577.179:7): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1076" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1091 res=0 errno=0 [ 210.350066][ C0] net_ratelimit: 6477 callbacks suppressed [ 210.350086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.352320][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.358487][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.373618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.380758][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.383440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.400340][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.405599][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.407995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.422911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.360242][ C0] net_ratelimit: 12712 callbacks suppressed [ 215.360264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.363585][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.366625][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 215.383984][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.392331][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.407883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.415563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.416028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 215.418986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.433235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.648039][ C0] sched: DL replenish lagged too much [ 220.370502][ C1] net_ratelimit: 14158 callbacks suppressed [ 220.370542][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.371948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.379517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.388837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.389217][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 220.392044][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.406634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.413875][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.414254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 220.417246][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.380066][ C1] net_ratelimit: 13232 callbacks suppressed [ 225.380103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.384615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 225.389256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.399960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.416315][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.423338][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.424214][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 225.440765][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.449826][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.465300][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.390024][ C1] net_ratelimit: 14311 callbacks suppressed [ 230.390061][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.391043][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.398722][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.408440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.408833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 230.411709][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.425295][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.433221][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.433679][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 230.434737][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.400071][ C1] net_ratelimit: 14654 callbacks suppressed [ 235.400109][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.402738][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.408944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.418439][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.418841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 235.421631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.436200][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.443393][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.443763][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 235.446677][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.410359][ C0] net_ratelimit: 14480 callbacks suppressed [ 240.410381][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.414621][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.417047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.433946][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.440893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 240.443468][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.458532][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.465740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.466155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 240.469508][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.420143][ C0] net_ratelimit: 13725 callbacks suppressed [ 245.420165][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 245.423725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.428669][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.443338][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.450716][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.451067][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 245.453854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.467772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.475461][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.475843][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 250.430060][ C1] net_ratelimit: 14499 callbacks suppressed [ 250.430099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.430425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.439541][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.448434][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 250.450784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.466761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.473555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.473927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 250.477400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.491416][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.440008][ C1] net_ratelimit: 14763 callbacks suppressed [ 255.440046][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.441242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.448958][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.458266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.458600][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 255.461306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.475313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.483118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.483478][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 255.485978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.450304][ C1] net_ratelimit: 14940 callbacks suppressed [ 260.450350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.451706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.459160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.468694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.469044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 260.471693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.485956][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.493687][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.494058][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 260.496706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.460048][ C1] net_ratelimit: 14982 callbacks suppressed [ 265.460102][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.461519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.469810][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.478470][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.478886][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 265.481907][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.496061][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.503514][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.503876][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 265.506552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.639333][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.470321][ C1] net_ratelimit: 14944 callbacks suppressed [ 270.470359][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.472155][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.480141][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.488846][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.489196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 270.491886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.507122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.513911][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.514350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 270.517193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.479956][ C1] net_ratelimit: 14923 callbacks suppressed [ 275.480007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.480240][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.489531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.498330][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 275.501015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.516770][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.523569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.524144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 275.541519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.550382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.490236][ C1] net_ratelimit: 14725 callbacks suppressed [ 280.490287][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.490859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.498903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.508604][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.508940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 280.511788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.525597][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.533453][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.533803][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 280.536360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.499920][ C1] net_ratelimit: 14790 callbacks suppressed [ 285.499957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.501574][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.508650][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.518200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.518558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 285.521290][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.535652][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.543198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.543596][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 285.546278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.510206][ C0] net_ratelimit: 14848 callbacks suppressed [ 290.510229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.515779][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.517077][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.534032][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.540617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 290.544429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.558691][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.565454][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.565874][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 290.569022][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.253041][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 295.520148][ C1] net_ratelimit: 14542 callbacks suppressed [ 295.520188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.521888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.529510][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.538482][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.538833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 295.541859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.556026][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.563459][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.563858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 295.566625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.530497][ C1] net_ratelimit: 14933 callbacks suppressed [ 300.530536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.532023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.539459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.548828][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.549266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 300.551948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.566403][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.573838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.574187][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 300.576829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.540503][ C1] net_ratelimit: 14823 callbacks suppressed [ 305.540570][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.540961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.549383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.559025][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.559434][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 305.562186][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.576241][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.584223][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.584583][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 305.601405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.550193][ C0] net_ratelimit: 14991 callbacks suppressed [ 310.550216][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.550238][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.556719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 310.559150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.573923][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.581287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.581622][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 310.584239][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.598823][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.606178][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.560270][ C1] net_ratelimit: 15913 callbacks suppressed [ 315.560311][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.560460][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.569361][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.578665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.579024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.579416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.580452][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 315.595954][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.605036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.621024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.570410][ C1] net_ratelimit: 16453 callbacks suppressed [ 320.570462][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.570717][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.579358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.588823][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.589180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.589641][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.606367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.613832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 320.616119][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.630870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.579968][ C1] net_ratelimit: 16249 callbacks suppressed [ 325.580018][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.582535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.589009][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.598276][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.598611][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.598938][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.599880][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 325.615513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.624597][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.640559][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.590080][ C1] net_ratelimit: 15016 callbacks suppressed [ 330.590117][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.590261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.599291][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.608363][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.608690][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.609109][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.625552][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.633180][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 330.637180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.650193][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 333.219850][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 333.226846][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5632/1:b..l P5646/1:b..l P9820/1:b..l P9797/1:b..l [ 333.238587][ C1] rcu: (detected by 1, t=10503 jiffies, g=36149, q=769 ncpus=2) [ 333.246372][ C1] task:syz.3.1072 state:R running task stack:24984 pid:9797 tgid:9792 ppid:5636 task_flags:0x40054c flags:0x00080000 [ 333.260602][ C1] Call Trace: [ 333.263920][ C1] [ 333.266871][ C1] __schedule+0x1821/0x5740 [ 333.271435][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.276497][ C1] ? __pfx___schedule+0x10/0x10 [ 333.281401][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 333.286805][ C1] preempt_schedule_common+0x82/0xd0 [ 333.292122][ C1] preempt_schedule_thunk+0x16/0x30 [ 333.297351][ C1] _raw_spin_unlock+0x3f/0x50 [ 333.302063][ C1] __zap_vma_range+0x3d36/0x4b70 [ 333.307078][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 333.312398][ C1] ? mas_find+0xb0e/0xd30 [ 333.316753][ C1] ? unmap_vmas+0x1c5/0x570 [ 333.321294][ C1] unmap_vmas+0x3ac/0x570 [ 333.325659][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 333.330584][ C1] exit_mmap+0x280/0x9e0 [ 333.334874][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 333.339694][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 333.344851][ C1] ? __pfx_exit_aio+0x10/0x10 [ 333.349576][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 333.354834][ C1] __mmput+0x118/0x430 [ 333.358924][ C1] exit_mm+0x1f6/0x2d0 [ 333.363021][ C1] do_exit+0x6a2/0x22c0 [ 333.367222][ C1] ? __pfx_do_exit+0x10/0x10 [ 333.371851][ C1] ? cgroup1_freezing+0x20/0x350 [ 333.376816][ C1] ? cgroup1_freezing+0x20/0x350 [ 333.381797][ C1] do_group_exit+0x21b/0x2d0 [ 333.386428][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.391670][ C1] get_signal+0x1284/0x1330 [ 333.396272][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 333.401862][ C1] ? rawv6_setsockopt+0x276/0x5f0 [ 333.406922][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 333.413133][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 333.418439][ C1] ? rcu_is_watching+0x15/0xb0 [ 333.423239][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.429379][ C1] do_syscall_64+0x353/0x580 [ 333.434004][ C1] ? trace_irq_disable+0x3b/0x140 [ 333.439058][ C1] ? clear_bhb_loop+0x40/0x90 [ 333.443766][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.449687][ C1] RIP: 0033:0x7f387559ce59 [ 333.454136][ C1] RSP: 002b:00007f38763b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.462572][ C1] RAX: fffffffffffffffe RBX: 00007f3875816090 RCX: 00007f387559ce59 [ 333.470588][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 333.478577][ C1] RBP: 00007f3875632d6f R08: 0000000000000538 R09: 0000000000000000 [ 333.486566][ C1] R10: 0000200000019200 R11: 0000000000000246 R12: 0000000000000000 [ 333.494559][ C1] R13: 00007f3875816128 R14: 00007f3875816090 R15: 00007ffc99b43408 [ 333.502570][ C1] [ 333.505615][ C1] task:syz.1.1079 state:R running task stack:26520 pid:9820 tgid:9816 ppid:5634 task_flags:0x40044c flags:0x00080002 [ 333.519131][ C1] Call Trace: [ 333.522424][ C1] [ 333.525391][ C1] __schedule+0x1821/0x5740 [ 333.529947][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 333.535189][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.540250][ C1] ? __pfx___schedule+0x10/0x10 [ 333.545158][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 333.550600][ C1] preempt_schedule_common+0x82/0xd0 [ 333.555915][ C1] preempt_schedule_thunk+0x16/0x30 [ 333.561151][ C1] _raw_spin_unlock+0x3f/0x50 [ 333.565860][ C1] __zap_vma_range+0x3d36/0x4b70 [ 333.570870][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 333.576186][ C1] ? mas_find+0xb0e/0xd30 [ 333.580562][ C1] ? unmap_vmas+0x1c5/0x570 [ 333.585111][ C1] unmap_vmas+0x3ac/0x570 [ 333.589479][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 333.594389][ C1] exit_mmap+0x280/0x9e0 [ 333.598679][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 333.603479][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 333.608629][ C1] ? __pfx_exit_aio+0x10/0x10 [ 333.613349][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 333.618577][ C1] __mmput+0x118/0x430 [ 333.622669][ C1] exit_mm+0x1f6/0x2d0 [ 333.626769][ C1] do_exit+0x6a2/0x22c0 [ 333.630958][ C1] ? cgroup1_freezing+0x20/0x350 [ 333.635926][ C1] ? __pfx_do_exit+0x10/0x10 [ 333.640556][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.645644][ C1] do_group_exit+0x21b/0x2d0 [ 333.650272][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.655515][ C1] get_signal+0x1284/0x1330 [ 333.660070][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 333.665663][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 333.671870][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 333.677183][ C1] ? rcu_is_watching+0x15/0xb0 [ 333.681990][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.688088][ C1] do_syscall_64+0x353/0x580 [ 333.692701][ C1] ? trace_irq_disable+0x3b/0x140 [ 333.697774][ C1] ? clear_bhb_loop+0x40/0x90 [ 333.702478][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.708401][ C1] RIP: 0033:0x7f06e239ce59 [ 333.712836][ C1] RSP: 002b:00007f06e32070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 333.721281][ C1] RAX: fffffffffffffe00 RBX: 00007f06e2615fa8 RCX: 00007f06e239ce59 [ 333.729270][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06e2615fa8 [ 333.737290][ C1] RBP: 00007f06e2615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 333.745280][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.753280][ C1] R13: 00007f06e2616038 R14: 00007ffc06c60ef0 R15: 00007ffc06c60fd8 [ 333.761299][ C1] [ 333.764342][ C1] task:syz-executor state:R running task stack:22024 pid:5646 tgid:5646 ppid:5633 task_flags:0x400140 flags:0x00080000 [ 333.777863][ C1] Call Trace: [ 333.781161][ C1] [ 333.784119][ C1] __schedule+0x1821/0x5740 [ 333.788662][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 333.793640][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 333.798604][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 333.803578][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 333.808546][ C1] ? __pfx___schedule+0x10/0x10 [ 333.813439][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 333.818409][ C1] preempt_schedule_irq+0x4d/0xa0 [ 333.823461][ C1] irqentry_exit+0x14f/0x8b0 [ 333.828081][ C1] ? trace_irq_disable+0x3b/0x140 [ 333.833143][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.839149][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 333.844456][ C1] Code: ff ff ff e8 31 cf 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b 5a 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 ed 91 [ 333.864094][ C1] RSP: 0018:ffffc90003b0f138 EFLAGS: 00000282 [ 333.870200][ C1] RAX: c949dc13ba6b0500 RBX: 0000000000000000 RCX: 0000000000000046 [ 333.878219][ C1] RDX: 000000006145c306 RSI: ffffffff8e2172cb RDI: ffffffff8c28b8e0 [ 333.886208][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 333.894202][ C1] R10: ffffc90003b0f298 R11: ffffffff81b0e0e0 R12: 0000000000000002 [ 333.902194][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 333.910198][ C1] ? unwind_next_frame+0xa6/0x2550 [ 333.915354][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 333.921550][ C1] ? unwind_next_frame+0xa6/0x2550 [ 333.926698][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 333.931765][ C1] ? unwind_next_frame+0xa6/0x2550 [ 333.936894][ C1] unwind_next_frame+0xc3/0x2550 [ 333.941854][ C1] ? unwind_next_frame+0xa6/0x2550 [ 333.947001][ C1] ? unwind_next_frame+0xa6/0x2550 [ 333.952133][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 333.957788][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 333.962841][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 333.969022][ C1] arch_stack_walk+0x11b/0x150 [ 333.973825][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 333.978883][ C1] stack_trace_save+0xa9/0x100 [ 333.983682][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 333.989105][ C1] save_stack+0x122/0x230 [ 333.993469][ C1] ? __pfx_save_stack+0x10/0x10 [ 333.998348][ C1] ? __free_frozen_pages+0xc1c/0xd30 [ 334.003662][ C1] ? __slab_free+0x274/0x2c0 [ 334.008274][ C1] ? qlist_free_all+0x99/0x100 [ 334.013151][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 334.018803][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 334.023870][ C1] ? page_ext_put+0x97/0xc0 [ 334.028436][ C1] __reset_page_owner+0x71/0x1f0 [ 334.033405][ C1] __free_frozen_pages+0xc1c/0xd30 [ 334.038556][ C1] __slab_free+0x274/0x2c0 [ 334.043015][ C1] qlist_free_all+0x99/0x100 [ 334.047635][ C1] ? vm_area_dup+0x2b/0x680 [ 334.052167][ C1] kasan_quarantine_reduce+0x148/0x160 [ 334.057659][ C1] __kasan_slab_alloc+0x22/0x80 [ 334.062570][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 334.068059][ C1] ? vm_area_dup+0x2b/0x680 [ 334.072588][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 334.078278][ C1] vm_area_dup+0x2b/0x680 [ 334.082645][ C1] dup_mmap+0x8b4/0x1da0 [ 334.086939][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 334.091662][ C1] ? copy_mm+0x130/0x4a0 [ 334.095939][ C1] ? copy_mm+0x130/0x4a0 [ 334.100227][ C1] copy_mm+0x13b/0x4a0 [ 334.104333][ C1] copy_process+0x1f1c/0x4440 [ 334.109061][ C1] ? copy_process+0xd87/0x4440 [ 334.113859][ C1] ? __pfx_copy_process+0x10/0x10 [ 334.118925][ C1] kernel_clone+0x2d7/0x940 [ 334.123461][ C1] ? cgroup1_freezing+0x20/0x350 [ 334.128449][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 334.133520][ C1] __x64_sys_clone+0x1b6/0x230 [ 334.138341][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 334.143674][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 334.148989][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.155076][ C1] do_syscall_64+0x174/0x580 [ 334.159696][ C1] ? trace_irq_disable+0x3b/0x140 [ 334.164784][ C1] ? clear_bhb_loop+0x40/0x90 [ 334.169494][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.175423][ C1] RIP: 0033:0x7fce523c58d2 [ 334.179866][ C1] RSP: 002b:00007fff18d8cc20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 334.188324][ C1] RAX: ffffffffffffffda RBX: 00007fff18d8cc20 RCX: 00007fce523c58d2 [ 334.196327][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 334.204320][ C1] RBP: 00007fff18d8cdac R08: 0000000000000000 R09: 0000000000000001 [ 334.212312][ C1] R10: 000055556bf237d0 R11: 0000000000000246 R12: 0000000000000001 [ 334.220304][ C1] R13: 00000000000927c0 R14: 0000000000032f65 R15: 00007fff18d8ce00 [ 334.228329][ C1] [ 334.231368][ C1] task:syz-executor state:R running task stack:24312 pid:5632 tgid:5632 ppid:5622 task_flags:0x40050c flags:0x00080002 [ 334.244887][ C1] Call Trace: [ 334.248193][ C1] [ 334.251147][ C1] __schedule+0x1821/0x5740 [ 334.255696][ C1] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 334.261888][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.268259][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 334.273328][ C1] ? __pfx___schedule+0x10/0x10 [ 334.278215][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 334.283620][ C1] preempt_schedule_common+0x82/0xd0 [ 334.288938][ C1] preempt_schedule_thunk+0x16/0x30 [ 334.294175][ C1] _raw_spin_unlock+0x3f/0x50 [ 334.298888][ C1] __zap_vma_range+0x3d36/0x4b70 [ 334.303895][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 334.309235][ C1] ? mas_find+0xb0e/0xd30 [ 334.313592][ C1] ? unmap_vmas+0x1c5/0x570 [ 334.318117][ C1] unmap_vmas+0x3ac/0x570 [ 334.322474][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 334.327388][ C1] exit_mmap+0x280/0x9e0 [ 334.331666][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 334.336468][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 334.341627][ C1] ? __pfx_exit_aio+0x10/0x10 [ 334.346338][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 334.351574][ C1] __mmput+0x118/0x430 [ 334.355673][ C1] exit_mm+0x1f6/0x2d0 [ 334.359790][ C1] do_exit+0x6a2/0x22c0 [ 334.363991][ C1] ? cgroup1_freezing+0x20/0x350 [ 334.368961][ C1] ? __pfx_do_exit+0x10/0x10 [ 334.373582][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 334.378694][ C1] do_group_exit+0x21b/0x2d0 [ 334.383330][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.388573][ C1] get_signal+0x1284/0x1330 [ 334.393125][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 334.398712][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 334.404029][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.409258][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 334.415481][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 334.420794][ C1] ? rcu_is_watching+0x15/0xb0 [ 334.425591][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.431683][ C1] do_syscall_64+0x353/0x580 [ 334.436298][ C1] ? trace_irq_disable+0x3b/0x140 [ 334.441352][ C1] ? clear_bhb_loop+0x40/0x90 [ 334.446055][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.451971][ C1] RIP: 0033:0x7f3875557fd7 [ 334.456435][ C1] RSP: 002b:00007ffc99b438f0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 334.464880][ C1] RAX: fffffffffffffe00 RBX: 000055558f080500 RCX: 00007f3875557fd7 [ 334.472875][ C1] RDX: 0000000040000000 RSI: 00007ffc99b4394c RDI: ffffffffffffffff [ 334.480874][ C1] RBP: 00007ffc99b4394c R08: 0000000000000000 R09: 0000000000000000 [ 334.488889][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 334.496880][ C1] R13: 0000000000000003 R14: 00007ffc99b43ba8 R15: 0000000000000000 [ 334.504904][ C1] [ 334.507946][ C1] rcu: rcu_preempt kthread starved for 6877 jiffies! g36149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 334.519076][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 334.529059][ C1] rcu: RCU grace-period kthread stack dump: [ 334.534973][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 334.548505][ C1] Call Trace: [ 334.551811][ C1] [ 334.554766][ C1] __schedule+0x1821/0x5740 [ 334.559361][ C1] ? __pfx___schedule+0x10/0x10 [ 334.564269][ C1] ? schedule+0x90/0x360 [ 334.568566][ C1] schedule+0x164/0x360 [ 334.572765][ C1] schedule_timeout+0x158/0x2c0 [ 334.577646][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 334.583055][ C1] ? __pfx_process_timeout+0x10/0x10 [ 334.588406][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 334.594249][ C1] ? prepare_to_swait_event+0x340/0x370 [ 334.599843][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 334.604768][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 334.610007][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 334.614813][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 334.621000][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 334.626309][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 334.631550][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 334.637394][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 334.642009][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 334.647231][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 334.653075][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 334.658039][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 334.663095][ C1] kthread+0x389/0x470 [ 334.667193][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 334.672412][ C1] ? __pfx_kthread+0x10/0x10 [ 334.677033][ C1] ret_from_fork+0x514/0xb70 [ 334.681650][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 334.686791][ C1] ? __switch_to+0xc79/0x1410 [ 334.691511][ C1] ? __pfx_kthread+0x10/0x10 [ 334.696132][ C1] ret_from_fork_asm+0x1a/0x30 [ 334.700942][ C1] [ 334.703984][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 334.710347][ C1] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 334.719831][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.729916][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 334.736202][ C1] RIP: 0010:unwind_next_frame+0x50e/0x2550 [ 334.742045][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 334.761675][ C1] RSP: 0018:ffffc90000a07d98 EFLAGS: 00000a03 [ 334.767770][ C1] RAX: 0000000000000000 RBX: ffffffff9042bd44 RCX: dffffc0000000000 [ 334.775762][ C1] RDX: ffffffff9042bd04 RSI: ffffffff90bb7090 RDI: ffffffff8c28b880 [ 334.783760][ C1] RBP: ffffffff9042bd44 R08: 0000000000000018 R09: ffffffff8e95cc20 [ 334.791760][ C1] R10: ffffc90000a07eb8 R11: ffffffff81b0e0e0 R12: ffffffff810014c9 [ 334.799766][ C1] R13: ffffffff9042bd40 R14: ffffc90000a07e68 R15: ffffffff9042bd44 [ 334.807767][ C1] FS: 0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 334.816718][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.823322][ C1] CR2: 00007fa5fad45690 CR3: 0000000078da2000 CR4: 00000000003526f0 [ 334.831324][ C1] Call Trace: [ 334.834625][ C1] [ 334.837499][ C1] ? unwind_next_frame+0xa6/0x2550 [ 334.842648][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.848840][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.855027][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.861232][ C1] arch_stack_walk+0x11b/0x150 [ 334.866032][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.872213][ C1] ? skb_clone+0x212/0x3a0 [ 334.876653][ C1] stack_trace_save+0xa9/0x100 [ 334.881448][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 334.886851][ C1] ? NF_HOOK+0xa2/0x6e0 [ 334.891028][ C1] ? NF_HOOK+0x64e/0x6e0 [ 334.895293][ C1] kasan_save_track+0x3e/0x80 [ 334.900001][ C1] ? kasan_save_track+0x3e/0x80 [ 334.904907][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 334.909976][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 334.915641][ C1] ? skb_clone+0x212/0x3a0 [ 334.920086][ C1] ? br_flood+0x8cf/0xb80 [ 334.924448][ C1] ? br_handle_frame_finish+0x1521/0x1c80 [ 334.930204][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 334.935343][ C1] ? br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 334.941520][ C1] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 334.947095][ C1] ? br_handle_frame+0x1277/0x1510 [ 334.952227][ C1] ? __netif_receive_skb_core+0x98f/0x3170 [ 334.958054][ C1] ? process_backlog+0x76d/0x1950 [ 334.963109][ C1] ? __napi_poll+0xae/0x340 [ 334.967635][ C1] ? net_rx_action+0x627/0xf70 [ 334.972429][ C1] ? handle_softirqs+0x22a/0x840 [ 334.977395][ C1] ? __irq_exit_rcu+0xca/0x220 [ 334.982190][ C1] ? irq_exit_rcu+0x9/0x30 [ 334.986630][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 334.992474][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.998681][ C1] __kasan_slab_alloc+0x6c/0x80 [ 335.003565][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 335.009052][ C1] ? skb_clone+0x212/0x3a0 [ 335.013495][ C1] ? br_handle_vlan+0x61/0x530 [ 335.018286][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 335.023954][ C1] skb_clone+0x212/0x3a0 [ 335.028235][ C1] br_flood+0x8cf/0xb80 [ 335.032427][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 335.038009][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 335.043356][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 335.049301][ C1] ? ip6t_do_table+0x173/0x1560 [ 335.054211][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 335.059353][ C1] ? nf_hook_slow+0x176/0x220 [ 335.064066][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 335.069992][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 335.074987][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 335.080512][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 335.086433][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 335.091321][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 335.096652][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 335.102664][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 335.108597][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 335.114005][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 335.119580][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 335.125514][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 335.132046][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 335.137288][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 335.142775][ C1] br_handle_frame+0x1277/0x1510 [ 335.147761][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 335.153094][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 335.159010][ C1] ? ktime_get+0x45/0x220 [ 335.163377][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 335.168691][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 335.174354][ C1] ? __hrtimer_rearm_deferred+0x99/0x450 [ 335.180018][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 335.186219][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 335.191201][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 335.197297][ C1] ? irqentry_exit+0x218/0x8b0 [ 335.202100][ C1] ? process_backlog+0x3eb/0x1950 [ 335.207165][ C1] ? process_backlog+0x3eb/0x1950 [ 335.212216][ C1] ? process_backlog+0x3eb/0x1950 [ 335.217265][ C1] ? process_backlog+0x3eb/0x1950 [ 335.222311][ C1] process_backlog+0x76d/0x1950 [ 335.227213][ C1] __napi_poll+0xae/0x340 [ 335.231565][ C1] ? skb_defer_free_flush+0x233/0x260 [ 335.236975][ C1] net_rx_action+0x627/0xf70 [ 335.241606][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 335.246735][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 335.251795][ C1] ? net_tx_action+0x5b6/0xc30 [ 335.256599][ C1] ? net_tx_action+0xbfb/0xc30 [ 335.261400][ C1] handle_softirqs+0x22a/0x840 [ 335.266192][ C1] ? __irq_exit_rcu+0xca/0x220 [ 335.270986][ C1] __irq_exit_rcu+0xca/0x220 [ 335.275600][ C1] irq_exit_rcu+0x9/0x30 [ 335.279865][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 335.285544][ C1] [ 335.288495][ C1] [ 335.291442][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 335.297437][ C1] RIP: 0010:rcu_is_watching+0x5e/0xb0 [ 335.302836][ C1] Code: 03 42 80 3c 38 00 74 08 4c 89 f7 e8 fc 41 86 00 48 c7 c3 d8 39 39 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 <8b> 03 65 ff 0d d9 32 8d 11 74 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f [ 335.322462][ C1] RSP: 0018:ffffc900054d6fd8 EFLAGS: 00000246 [ 335.328561][ C1] RAX: 0000000000000000 RBX: ffff8880b87339d8 RCX: 0000000080000001 [ 335.336553][ C1] RDX: ffffc900054d7101 RSI: ffffffff8c28b8c0 RDI: ffffffff8c28b880 [ 335.344550][ C1] RBP: dffffc0000000000 R08: ffffc900054d7a00 R09: 0000000000000000 [ 335.352549][ C1] R10: ffffc900054d7118 R11: fffff52000a9ae25 R12: ffffc900054d7a10 [ 335.360551][ C1] R13: ffffc900054d0000 R14: ffffffff8e262798 R15: dffffc0000000000 [ 335.368591][ C1] ? rcu_is_watching+0x15/0xb0 [ 335.373389][ C1] ? unwind_next_frame+0xa6/0x2550 [ 335.378529][ C1] unwind_next_frame+0x1b76/0x2550 [ 335.383677][ C1] ? unwind_next_frame+0xa6/0x2550 [ 335.388832][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2cb0 [ 335.395101][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.401296][ C1] arch_stack_walk+0x11b/0x150 [ 335.406094][ C1] ? ieee80211_iface_work+0x845/0x1380 [ 335.411582][ C1] stack_trace_save+0xa9/0x100 [ 335.416393][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 335.421802][ C1] ? unwind_next_frame+0xa6/0x2550 [ 335.426958][ C1] ? unwind_next_frame+0xa6/0x2550 [ 335.432106][ C1] kasan_save_track+0x3e/0x80 [ 335.436815][ C1] ? kasan_save_track+0x3e/0x80 [ 335.441687][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 335.446479][ C1] ? __kmalloc_noprof+0x35c/0x760 [ 335.451531][ C1] ? ieee802_11_parse_elems_full+0x14a/0x29f0 [ 335.457625][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2cb0 [ 335.463951][ C1] __kasan_kmalloc+0x93/0xb0 [ 335.468577][ C1] __kmalloc_noprof+0x35c/0x760 [ 335.473466][ C1] ? ieee802_11_parse_elems_full+0x14a/0x29f0 [ 335.479586][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 335.484655][ C1] ieee802_11_parse_elems_full+0x14a/0x29f0 [ 335.490635][ C1] ? unwind_next_frame+0xa6/0x2550 [ 335.495777][ C1] ? unwind_next_frame+0xa6/0x2550 [ 335.500910][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 335.506227][ C1] ? unwind_next_frame+0xa6/0x2550 [ 335.511370][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 335.516330][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.522550][ C1] ? arch_stack_walk+0x11b/0x150 [ 335.527527][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 335.533883][ C1] ? stack_trace_save+0xa9/0x100 [ 335.538853][ C1] ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2cb0 [ 335.544955][ C1] ? kasan_save_track+0x3e/0x80 [ 335.549839][ C1] ? kasan_save_free_info+0x46/0x50 [ 335.555101][ C1] ? __kasan_slab_free+0x5c/0x80 [ 335.560068][ C1] ? kmem_cache_free+0x182/0x650 [ 335.565046][ C1] ? ieee80211_iface_work+0xbdb/0x1380 [ 335.570547][ C1] ? worker_thread+0xa53/0xfc0 [ 335.575345][ C1] ? kthread+0x389/0x470 [ 335.579617][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 335.584586][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 335.591140][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 335.596200][ C1] ? kcov_remote_start+0x17f/0x7a0 [ 335.601349][ C1] ieee80211_iface_work+0x845/0x1380 [ 335.604699][ C0] net_ratelimit: 8717 callbacks suppressed [ 335.604739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.606659][ C1] cfg80211_wiphy_work+0x2cf/0x460 [ 335.613519][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.624333][ C1] ? process_scheduled_works+0xa70/0x1860 [ 335.624363][ C1] process_scheduled_works+0xb5d/0x1860 [ 335.630695][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.641479][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 335.648172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.652743][ C1] ? assign_work+0x3d5/0x5e0 [ 335.652770][ C1] worker_thread+0xa53/0xfc0 [ 335.665724][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 335.670656][ C1] kthread+0x389/0x470 [ 335.690511][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.691803][ C1] ? __pfx_worker_thread+0x10/0x10 [ 335.704883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.707868][ C1] ? __pfx_kthread+0x10/0x10 [ 335.720929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.724864][ C1] ret_from_fork+0x514/0xb70 [ 335.737814][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.741421][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 335.741446][ C1] ? __switch_to+0xc79/0x1410 [ 335.754345][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 335.757907][ C1] ? __pfx_kthread+0x10/0x10 [ 335.796225][ C1] ret_from_fork_asm+0x1a/0x30 [ 335.801048][ C1] [ 336.995503][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.014272][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.610137][ C1] net_ratelimit: 18982 callbacks suppressed [ 340.610159][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.612750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.616928][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.629203][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.640787][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.652671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.664644][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.676052][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.676408][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:ed:0f:8f:14:1b, vlan:0) [ 340.678406][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)