last executing test programs: 35.873018291s ago: executing program 4 (id=6645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f00000016c0)="448b7c0acf8bc0cefe8360fcbebe9c4cb092c7cc18e53a39f1646bce1fb342a3ec7f72d4b9f7088004068586f357d571cc924e7e0111f7562fb25df24d20419e1c1536c0c0d79ee88493faf4cae82322439504450469e79eedf697c6ef7059a457b834dd4ac5c48e8c910b2f41a35d88cd527d9c14510cb50f05dea5ebd21896bd9c4724acc8ae8016db4f3c45a6f3043f3a24c7044c0f616883a0ca957054023284182aeeac0dc31e21d86caa3891514de94f8bbb5af371583533ad66bdeb3c875cfecaba3477af3ebb5f5296b9c29a1ec7bcd15026eeb53a98dfe33cea7d339019ac5b063ba43db0960a0bc6c88f7e927d732eb83e", 0xf6}, {&(0x7f0000000480)="305cb800001e0d", 0x7}], 0x3) 35.585425133s ago: executing program 3 (id=6649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x8c0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79ccd3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dcdfb946272ca085f4fa96d531abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) 30.657776037s ago: executing program 3 (id=6653): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 30.588036064s ago: executing program 2 (id=6654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x81}}, 0x30) sendto$packet(r2, &(0x7f0000000000)="298c18728a4642176f425609c41fb20507568b64a885e4ccd5d91df6b0f45233102206c6ec7cd2109aeb79a12a405e91210dff35523f6b9b47fdbaf2d4c3a8c7aa041382be5e13656c", 0x49, 0x0, &(0x7f0000000080)={0x11, 0xd, r5, 0x1, 0x1}, 0x14) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r6, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) sendto$inet6(r2, &(0x7f0000000280)="eaa379986279c0db8e75c52bacabe506a1f35e8a8646af15d37f23ebfd66ea81a56f72925f70cfc7533bade2edb59e520b407fb754560a200541340fc0931c795e9e15d217d37de82fcff1affdb749f963ccb8d7d470b47acfc79352836fcad57e04bffb34bd596289c3db09371c7706c3103d95a0386f08f62489413f40c1fe07e8a50638d50e0c1bd3c5eb32b47c2376949e7fba571e8f18084ab3d00db7b02aace3fbe05d32d92553a1c4945959e867f220264865b5915d4041dbb50ae30cee40f94e140c776c094a38598373b441962a65669501d079124abd59d06327619a889408dca0b6c26ebfc23e92779e47a927", 0xf2, 0x20040000, 0x0, 0x0) 30.5858721s ago: executing program 4 (id=6655): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/59, 0x3b}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 30.32764016s ago: executing program 3 (id=6657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x3e8, 0x310, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10044001}, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000012c0)) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e23, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba51687b8727bb905c7b42a0c9b26559b4ecc397c6a33731df0fca1aee35968435e8129f8e6d52a0754fcaa693706c4557af6be8821983e702fdd3dac90b6cbe00b1fe59f5bcd890dbb87c0d8d80ba8727e4ff6b89af3ecda43705a9dc113396c950947e85193eabe1364909509babcad37d21392d071480ff4f69dc5db442263d4608ff94e5157c65bb35c3f4a7af6bfb562a317cf13292abdbd5ac3f31d47da6fe5e8be324c78b37e2f351955bbf5f18f86a0cd98d68dca14aea59917ce05e0dc0e3a2033d22a506109db846c49f8c7d575c02349736311e40bc497c9a7da1fe4f94d8e601a5cff4cbd63ed730a01c7f07dd74d603b951557b93e551b0e028232412d568dadc29c2c9e01ca85b83d779cd3b918f9c73ba471ee9079fc42b511b45c3d4f80a46f8e9ad22a05ef5422348ff415b2131e2b2ae0ef5fab9f678bc5ef02d611655d6264e0755e176ade135a971851bd22666ae753ff5135bf14a005cea45a8b163706ea52af786f2b48362ec8619f8f728ab9fee21bcc9e000d1c470a51cec5a510f06de4dc52fc82e0be10fe0ac55f09e086cdb7f5d5f935033e4925a6ca1b1ea42f511dafd63a3cc32bcfe20aca26adb6eded22fc956b96cf2b70b5e78dbf4c2da06438c9be342f44f1dbc9bc4e453bad09f8e7d2b611e9f33f681c4342e31fee49d613b170d9ae6c93c7ece1bf0d8aaf00870b6896b8fee4ee9d705608a044ec3537ae6c46b5345e4c41576911757d4ed5bdee8e14f73df14b88af36b4c303346d88b424fea428c77cabc55198fafbcec9b027f9a9759638d733fe2dec7996ddba717fd7e0f0188f9213701c304a2b01186c72a8cfdcb87dd9c8711ec0c438eb7c229b8dfbec5c14bfeec20810b4be8944f7d6f44e5bb8839b84afe25a8654ac821efb9c850394d452873db8e9f05de381103b1278f3b34ec0b920d3aa111c82fe424588debe04dd75ac991c5f650f0b8e72c1783d975d663fc0d939f32bca98650141b381af26436c6352d98a6e30843d956ad68f998851b8c64c49a59ca6937355ac4412009cd0a2e4cacf5b02063908f7937e7563e6f63703adc5aff159f3628eb64071fc74e4e66e142113a176c2a649d653f55e833a3f184f91995547a79f46c7ca02813136c920fe6f69fe466656518478ccb84c02d751a502dff90558ce066d9be71c8fa800d7a1d56b5ca52be3122aae2cfbfe1b11d454ad72bdf7fd9d450a74734594f5e566ac2a37ca8b648fee012bf7f83f1126743b0f4791592e17dfca010a3dafeac81b88c5a47d948fc772fe4b48146b10aa319a13ca4f4dc05861859929d3c1d69967d18290cc87777a4231a6ce8dc2a4e34450e3a7659c05e5e12239d768ef8394f82278b975a68497571d1e5191ac329a66b5219f3f7f20f21261cdc3028a3662b6c10198bf7d3d513b5b823d4703cb29d89b84da69a6358a269769a8b23712c6291e77fc4da837e0857b4bbc08bba0659c55a1e06fdf1736df13948824a37515f8c49de6d502519077197debfc74709ed564315279ec804c7a0305526b14efcab44364105aa805efd97f0444d6016e35712dba75b038ea63917e6163614a3a6c694d7612e00cddab8bd31f6ba146d08e949d50ed3b0ef8fd3412ffd020bfabbcfbc5c3fa436022de3fd973869066871ec639653f3b4b5f01374adf3b60940d241a5dda6df550662ccb1a4575e2419baf1a76a246c9b7f39a05c03d832aa28293a54c619865fed0fdccd570859ffc7b1844ea8cff1e12389382e39211e665fec9d82faf11fd2300412d24dab176515aff938a6b12b5427b7fa6b42a3042248977b2f4eae9d96534a85b9ed500f62866d39f5301a3b6e60d392248fcfad25c2803c875e00010f40caca1a5932e00765c3b52427a2a8d6875a73ccb3b8e78dd27555994bf4358b2e577efe8886939515be37889e3656a5e0a949619f0f0b9cae7dc59a2415bec72df3439e563cfe69b7952abfad6cb6a979c146355e590ace810017d04075f23a1554a81bcdfb82c2396fd61fe95cd0f9c2e394bdbb0900648675ec09b94b1d4672e613be577cb398bb5d188b7c09865e2edbb273f8d9b0ae836f24b34ae6cd22e37e1ab31c835c23bd8f6deb49402f19406b0c7cddfbe357ab496910a8efa939dd9ab91de3ba67d07103063fbf9ee6fbd7b61c6b65ebe735cfab2c1162b379a3cbcbdb14d82b7f2e707ddd896ac5085ef5b15da85663df079bd5ef6180c775a4b7d645630aa9ea704f69ec8ea052f8f41e62f0e6f78a5a846e9130c53eb29a7bab9b102bf08729243f6ffe0ee6f28e98e4d0c1f49813aa04c2774f1f076310d923e900fe1c609bc5a308421fb82a12b03b9be47ce6d88635bb1722739d1abcdbc28133de131d2151d76f565be56813bb3edcf4d870f4acd0bfe5b30d60ef065158bf7b8401096a1647de88c7b0144eacecabfdf9d48d91573e82f2efecab095339e799e36ab3ee1eb66db9f9c21d96bcb2b7bf4ab01e8e56df8c4bca2bed7732472468a3b447024bc997adff639ba35e2af10f661199c4a8a2b2a8e3e59ff4ed5da468c1c2c41001efc0529636ce4ef9dd6b28deed0ad5a758abd2a3a3f024f56dd17fb4b1af62a6b91f24973071a9982df0047f85280f4a5decece67fc02428f830343e910fef6f3467c9d7776a06c133a50752cff4aa72bcbb9e4dbd8489e2e3698aae45a8753071fb6d803943d171adb60e8fcec9865e46df8fa120b939537a05b63daec7e0ecf9713c491646f04435364de697fbabf3c72d08a24f1bf34212bcdb7d5e038ac28ff76d5243b695e7faa1211a940da618930d79acdc6fdc7c9f2f4a5435d3f748ec68429f5ca2548315801cf73d74816f1ece3dfa6fb557ac105ad28d4532e1c8c6b5ab3526fbe73916dbe123acb4ac89c1b5a0664b81e216453db066e3c4318006ba3e25ed6cfe22c80f17619b7372947013749c7d04f13277f81f4461492d9237c5961be4d30965607a4d5db095070df02230cc87d9ab8633e60de83aedf8814e632bac8566bbfcdf159c9a2a7944be1a61792b8af10dd28d0ebadf7e4f231af099450813c5e27f934112e11124b01106615cee48aee88947f31a1839b83ad5c8326e30f318ae57b56becaec7094c4e7d2a377bfcb0c29ce046623e6ec120ea63c53cef94deb3d813d4b1749009084c3ade1675b55490b9d1faa03d7a2fd34921d62c31d7ef1f181883ac312dbb08b2600edce0ba197d1704485e2f155ec659de742a22628270968905324381f203a1ad7ac30b252d4c3ff9915fe32c16cbf4684a7c517b9a2ecec2433685f4741b6f02f8aa2bd0f6bf370962f38214899129012a0d36ba14c0a3e93742d063f09f0c1e838fc1095b065089c91d02a4b2e1d0a49d2294682a38d578424d1e81ff959b33f746114b795319a047d65f5e3b7a347e6cf8b0fad9eaea3db5eca7e953f77bc6c23de8f938bb505013f5c39173cb69312af98d5ff14715794c729f41490297c2b418eef11841a788eaaa7ebdb77880b64701aee50371f542e79831321833dda60213fa741ec197419d83f61c06397a47a75f50b986c53e6fdf8a6e07008e1a29b1774ceb11429a1ecec05bf80da802239c58f226ab5eb34d522ff62bc0528d87e716793e56c48352648291470bb592981acc06c2ba1547e11babf3f1d22f5e01e1f759c05816cdfe0c986c58ebbd08d8449807cd2579d5b7265930f696f8aff73e247cec12c0d1fdbcc4880245b866c2cab8b6bdf0951c2c6beccab7513ba28545036d164b407e1228a831e3b37f9c56721c347d499c1c29b8a972d2d1cfeb47f20975b4eb0b62e25dfa4ef116e62e415cde22bc039d1ccb9e70a5599881bb8b61f680670b787afc8734ac8c39ca50fbed619e54ac1421bc2584d4f7027593e12f738ba0f2d5fe03fcc7168056332477eb0b26c0579d54d8537f941acc183fdca495a7ffa10f0d3189f8c32742d5564c97e26b659969f7060a7c8864445c252c5b1755a3e8473ef9b0909eb74cabb553c3d6ab58f12ed75703d9139a4f57ef71af90815a5273e64282582623c41c51352d12ce48e0712f50ab3dc528619e1e16b52452204b3c7e1e16556e8fbdf0d623216186ff5ca84ad730ff457b06e766e085d5dee40a308fae8b4e19e18245a3ed02967f07441903c149ae9da5fe238194009ded2a3d80a67e1c3abdfb63fad0155529c48a748ef499252d5d3e912304b1d11ee77dc25427e5e9a115583a692558aef65faba0e1f0bc4aa6b6ac21d4fe4741feac17a7c6b5699384e30f7236f400d9df6d658add13b4f0a4b16a77d1f9e6b4d3045f7ba7ee68ce171008e635496ad631f59846b7895aa329390d2ad9980b6586d383a740f1e1b0883a3fddc4126c2d09fd5815dd892692e1c3b7eb2951b766bd4bca19896f75dbfaf51ad4ca9f97d00049082091e3c6cdf16026b1de4603ac7afde08a7a8ffd110636d3d063c2bb6fa84bfd7fff8ad04d0c812fe14a77bd3a9b9fdcc3e0fbaf5ac2475130987f81ac8c9898f95112aa597f40ec11e04684e45b56d81e11180f59b606886306fbc62c076a12a41238ccd74d3154f312f10f3ad215d64a468cb15eae30a3f7f7e5cf6a87dbd813df8093d2b3586693ddee6a5c1b0caaec1ef419657b89692bbd2a7064767cf5b4c3ef6d120557b4df5e7ee6094f935870edc070ae3e96c850a61356c5d79008fc98728dd87470a98aa1c1ab6056990110c0b3108e50b573d77ad4856c03da8098c8fd176685803db471a642dfb9a9ef2d14e186eea96219ea0fa03cc28d7ea2686e61c3f46f15c23213a6432d77ffea182ec26dbf9118a2fc082bdee517e0974982819a7a996b7a30f5901dd3c44b3344bdf93a61ecc4cddb969d3b94e6f4910a9b38ff886d5c96a820092f112ee6eb0ce094940280a2040862157497b3a3374a4d62c34d1fdf6826811db1ea7f28b64f22304e2246dcee44ca361370c0d1727f951dbdb1a329368a5dd76ba4486ce508a28d0ce2eb95daab36caf101dc2351c4efdf3ec70221888dad522b0d51a0b9765a410ca8cf00baaeb074d310cdd908e76586e59d0c7c27eb5557e474ac54525c237d5b2eedccab12b0f96fa2c00239e2017dfeb645fdd748d5c21684181b81464d32909b4995f274a9717f224c1e34cd41c8d12b9f13daeae3f65510c6ecf94956d630db0478fbf87c7d7c75221046a1a1886696f89e427b94139164b99b88d83b633122b5d9483f4261be27d01d6011cee48b1c24a3aff62c4d04f9dfb00e1a7a1013f97e87306147b7da305a36077cf0a7618563a754e34e65c2ee95932eb2da4b73ca83f3afcce93d8d59357ca7b5d9f37e5ba475be39bb8870af109d95527b44777ff8f55ace0adf84f73ce065371a4ce78b22d7a6bbf1bbae4c57b44262ddff39f4ce8b858f89737f33786445cbaf271959da24"}}}}, 0xfce) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0x2c, 0x2c, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0xffff}, {0x1f, 0xa}, {0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xaa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x0, 0xb, 0xe0d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 30.227961713s ago: executing program 2 (id=6658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000000), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x3, 0xf985afd41fe3df3, 0x8, {r2, r3/1000+60000}, {0x77359400}, {0x4, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "ab67e8473918159c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x0) 30.160026179s ago: executing program 1 (id=6659): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c7000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000080) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000000800064000000000140000001000010000000000000000000084000a0dfb7c7f1e46c58ed794408e3956b0957a7aa8701d49cd52dfea9e8a"], 0x7c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x25df5bfb, {0x0, 0x0, 0x0, r8, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x2c}}, 0x2000a100) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x49}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 29.970403084s ago: executing program 2 (id=6661): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000d, 0x2010, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="d2e6725d5a"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000d, 0x2010, r0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="d2e6725d5a"]) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) 24.624250864s ago: executing program 4 (id=6663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x66}]}, &(0x7f0000000240)='GPL\x00', 0x4}, 0x90) 24.612876817s ago: executing program 1 (id=6664): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats={0x4b}}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@delqdisc={0xb8, 0x25, 0x800, 0x78bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0xffe0, 0x9}, {0xd, 0x10}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x1}]}}]}, 0x3c}}, 0x20008000) 24.44902847s ago: executing program 2 (id=6665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f00000016c0)="448b7c0acf8bc0cefe8360fcbebe9c4cb092c7cc18e53a39f1646bce1fb342a3ec7f72d4b9f7088004068586f357d571cc924e7e0111f7562fb25df24d20419e1c1536c0c0d79ee88493faf4cae82322439504450469e79eedf697c6ef7059a457b834dd4ac5c48e8c910b2f41a35d88cd527d9c14510cb50f05dea5ebd21896bd9c4724acc8ae8016db4f3c45a6f3043f3a24c7044c0f616883a0ca957054023284182aeeac0dc31e21d86caa3891514de94f8bbb5af371583533ad66bdeb3c875cfecaba3477af3ebb5f5296b9c29a1ec7bcd15026eeb53a98dfe33cea7d339019ac5b063ba43db0960a0bc6c88f7e927d732eb83e", 0xf6}, {&(0x7f0000000480)="305cb800001e0d", 0x7}], 0x3) 24.448626444s ago: executing program 3 (id=6666): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000001000000000083f36a8a319c996abc0ac90bb178564be74089d41f2e6693dc06e3621d3e70cb374a3dbe9140bbab520f7fad"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000007385f44fb232c79e00dca825d3303c"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x80003, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000420000000800000002"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r3, &(0x7f0000000200)={0x1f, @none}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8080040}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000f06010400004000000000000700000506000b000200000006000b000400000006000b00ffff000006000b000000000067d62c27a1d0979d871b5b56fb039cc5ca771934f900f75e0ac43646ca0a870ab9b212d4207edee1858e93bc85ef4ec3a96bd57c6d9f0a29709ad01c7ea516666391d2caba9ce1"], 0x34}, 0x1, 0x0, 0x0, 0x24040080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 24.426868725s ago: executing program 4 (id=6667): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000000c0)=0x3) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x6b, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x7, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) getsockname$netlink(r5, &(0x7f0000000140), &(0x7f0000000180)=0xc) 24.379845782s ago: executing program 0 (id=6668): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, &(0x7f0000000040), r3, 0x0, 0x800000000ff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x16, &(0x7f0000000940)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000200)=0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x3) 24.256714913s ago: executing program 0 (id=6669): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x1604, 0x4) 24.254952235s ago: executing program 1 (id=6670): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x22}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a06ff7f0000810540010000000058000b480400945f64009400050038925a010000000000000080047824d8a307e60bbc00fff5dd000000100001000b080800418e01400004fcff", 0x58}, {&(0x7f0000000180)="98a16a336584da4134cce28f10766e871ca319f4e6ae790f0605501a487922d6ac3d9d482afda1b3fa64e85d138a577ec6caae2fe58a842899193bdd2fd1437b8fcbfedd09621072c28565d90fcb146d4f3c94f9e46983582eb65560801a69815c67900b96951b6d41c6cbe05d4b494b088be8a9aa2f03e8a57b50114361d2b19055bc663784d604f0de73fec74141eec422c0527bdaa012d4c892618de4201edf98b1ec79e5dd678620649e92c462edc06fe8b61dbaeeadb9ae93d0414edad0e0dd4464677402d41735350c98933dc70e022c8de3b817", 0xd7}, {&(0x7f0000000300)="c3ba32efed8f57fe2a9697f8732c0b9e3df35b8e2c325043709cb8d7afabb601a1344bb13db77aace87d5c8c63867bc104034c7b27de86c2ac4fb88d5db60bf773972555cbdded7832553a0191ee12d8f9c43f5c787485bab2ac59e9441535ce683ba2b820c5b02b4e299d1cc219c42294a69776e2d57a6a4d30606a2acf4e49ac52f5a4b9f2454b867addb31f4ab7687a92a34a129c7a9bac417d8e39015e8eba3254dfc54cd32728b87a7150d8f6685d8950532dd930", 0xb7}], 0x3) 24.074554354s ago: executing program 1 (id=6671): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x1e4, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0x1c0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd2, 0x8, 0xa, 0x0, 0x1, 0x3, 0xf, 0x5}}, {0xe, 0x2, [0x7e, 0x50e, 0x9, 0x4479, 0xd0b3]}}, {{0x1c, 0x1, {0x7, 0xff, 0x2, 0x6, 0x0, 0x4, 0x1, 0x8}}, {0x14, 0x2, [0x8, 0x1, 0x7, 0x9, 0x2, 0x2, 0x49, 0x5]}}, {{0x1c, 0x1, {0xf8, 0x3, 0x2, 0x2, 0x0, 0x9, 0x1, 0x8}}, {0x14, 0x2, [0x0, 0x5, 0x5, 0x7fff, 0x10, 0x1ff, 0x9, 0x5b2f]}}, {{0x1c, 0x1, {0x9, 0x50, 0xb0, 0x1, 0x8ee5ac35318fa7e, 0x81, 0x9, 0x3}}, {0xa, 0x2, [0x0, 0xe, 0x800]}}, {{0x1c, 0x1, {0x3, 0xe1, 0x83c, 0x5, 0x2, 0x9, 0x7, 0x7}}, {0x12, 0x2, [0x7ff, 0x6e1, 0x2, 0x1ff, 0x7, 0xf1e, 0x0]}}, {{0x1c, 0x1, {0xb, 0x61, 0xa2, 0x9, 0x2, 0x3, 0x2, 0x3}}, {0xa, 0x2, [0xb, 0x3, 0x2]}}, {{0x1c, 0x1, {0xd, 0x0, 0x7ff, 0x4, 0x2, 0x7fffffff, 0xa77, 0x7}}, {0x12, 0x2, [0x7, 0xd, 0x6, 0x100, 0x1, 0x200, 0x200]}}, {{0x1c, 0x1, {0x3, 0xb, 0x2, 0x3, 0x2, 0x400, 0x0, 0x2}}, {0x8, 0x2, [0x5, 0x4]}}, {{0x1c, 0x1, {0x2, 0xf, 0x100, 0x3, 0x1, 0x2, 0x101, 0x8}}, {0x14, 0x2, [0x1000, 0x7, 0x8, 0x6fd, 0x2, 0xe30, 0x3, 0x5]}}, {{0x1c, 0x1, {0x2, 0x1, 0x8001, 0xff000000, 0x0, 0x6, 0x80fe, 0x5}}, {0xe, 0x2, [0x3, 0x100, 0x0, 0x1, 0x5]}}]}]}, 0x1e4}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x3) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x1000000, 0x482, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="27fd7000fdffffff00"/20, @ANYRES32=0x0, @ANYBLOB="29000000000400001c00128009000100626f6e64000000000c00028008001f0004000000"], 0x3c}}, 0x0) 23.958640247s ago: executing program 0 (id=6672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x0, 0x6, {{0x14, 0x4, 0x0, 0x1, 0x50, 0x68, 0xc790, 0xa, 0x2f, 0x0, @loopback, @private=0xa010101, {[@cipso={0x86, 0x3b, 0x3, [{0x1, 0xd, "bf94d723bf5618d852bf53"}, {0x1, 0x11, "5a53870ec582b2907f079bca730fdb"}, {0x4, 0xb, "51b844959e29457918"}, {0x5, 0xc, "545b3a3bcdf93356c5c0"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x9, 0x0, 0x40, @local, @mcast2, 0x700, 0x8, 0xff, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x5, 0x4, {{0x9, 0x4, 0x3, 0x4, 0x24, 0x66, 0x0, 0x52, 0x4, 0x0, @private=0xa010102, @local, {[@cipso={0x86, 0xf, 0x0, [{0x0, 0x9, "017272f48508d8"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x58, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x700, 0x8700, 0x9, 0xfffff470, {{0x43, 0x4, 0x2, 0x9, 0x10c, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @empty, {[@rr={0x7, 0xf, 0xda, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x27, 0x1, 0x5, [{@empty, 0x4}]}, @end, @rr={0x7, 0xb, 0xee, [@multicast1, @loopback]}, @noop, @lsrr={0x83, 0x7, 0xdf, [@remote]}, @timestamp_addr={0x44, 0x44, 0xb6, 0x1, 0x6, [{@empty, 0x7}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x1}, {@empty, 0x5}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010100}, {@multicast1}]}, @ssrr={0x89, 0x27, 0x9e, [@rand_addr=0x64010101, @remote, @private=0xa010100, @remote, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xd}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "a691c25748821a7667"}]}, @cipso={0x86, 0x4b, 0x1, [{0x1, 0xd, "ac66bf8bbc89093b4e2c51"}, {0x5, 0x6, "198fdbae"}, {0x0, 0x8, "1b8506cdafab"}, {0x6, 0x6, "2bcc6ac3"}, {0x2, 0x2}, {0x1, 0x2}, {0x6, 0xc, "64f0cc6d8822dac795c3"}, {0x6, 0x3, "f7"}, {0x2, 0x8, "9c03ed6f9e03"}, {0x6, 0x9, "e57a742c384679"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x8000, 0x8000, 0xa, 0x3, {{0x33, 0x4, 0x3, 0x2, 0xcc, 0x68, 0x0, 0x81, 0x4, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x34, 0x2, [{0x1, 0xe, "955efe1ee5e879a3fb1b647d"}, {0xa, 0x7, "94a95dcd3f"}, {0x6, 0xd, "02cf5f859ead0a8788ccba"}, {0x0, 0xc, "2b10e2d4e7ea97c078f3"}]}, @end, @generic={0x0, 0x12, "a0f647fffae5b3f5d5069a1d874607ab"}, @timestamp_prespec={0x44, 0x3c, 0x17, 0x3, 0x7, [{@multicast2, 0x6}, {@multicast1, 0x4}, {@local, 0x1}, {@remote}, {@rand_addr=0x64010100, 0xf}, {@local, 0xfffffff7}, {@loopback, 0x9}]}, @rr={0x7, 0x17, 0x4f, [@local, @remote, @broadcast, @remote, @broadcast]}, @generic={0x88, 0x8, '}Pn_[\"'}, @ssrr={0x89, 0x13, 0x5f, [@remote, @broadcast, @local, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x52, 0x6, 0x3, 0x6, 0x37, @private1, @private2, 0x20, 0x0, 0xfffffffb, 0x120389cd}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1d4, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4094}, 0x24040801) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1dc, r12, 0x2, 0x70bd2b, 0xfff, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_SSIDS={0x74, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x19, 0x0, @random="9dbf8b584d1cbd0dfd723419cefc7303ebae8d26ca"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @random="9f7e471c5bf1"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x13c1}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x11c, 0x84, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4e3ce5620815"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="c885719035e3"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2f23}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x200}, @NL80211_BAND_5GHZ={0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x13}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xb51000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x62}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x9}]}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x7}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4068000}, 0x80) recvfrom(r0, &(0x7f0000001000)=""/2, 0x2, 0x2060, &(0x7f0000001040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x80) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) getsockname$unix(r13, &(0x7f0000001100)=@abs, &(0x7f0000001180)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000011c0)={'wlan0\x00'}) preadv(r13, &(0x7f0000001780)=[{&(0x7f0000001200)=""/106, 0x6a}, {&(0x7f0000001280)=""/234, 0xea}, {&(0x7f0000001380)=""/118, 0x76}, {&(0x7f0000001400)=""/94, 0x5e}, {&(0x7f0000001480)=""/160, 0xa0}, {&(0x7f0000001540)=""/123, 0x7b}, {&(0x7f00000015c0)=""/46, 0x2e}, {&(0x7f0000001600)=""/69, 0x45}, {&(0x7f0000001680)=""/254, 0xfe}], 0x9, 0x7, 0x6) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x50, r12, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x8040) getsockopt$inet6_mreq(r13, 0x29, 0x14, &(0x7f00000019c0)={@private0, 0x0}, &(0x7f0000001a00)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r13, &(0x7f0000001cc0)={&(0x7f0000001980), 0xc, &(0x7f0000001c80)={&(0x7f0000001a40)={0x204, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4004084}, 0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), r13) sendmsg$DEVLINK_CMD_SB_POOL_GET(r15, &(0x7f0000001fc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001d80)={0x1e0, r16, 0x1, 0x70bd2a, 0x5, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x33}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x746}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc06}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7a5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4ce}, {0x6, 0x11, 0x7}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24024001) r17 = syz_genetlink_get_family_id$team(&(0x7f0000002040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002080)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000002600)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000025c0)={&(0x7f00000020c0)={0x4d0, r17, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x83a}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r8}, {0x27c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xffff, 0x7, 0x96, 0x1}, {0x6, 0x37, 0x0, 0x8}, {0x8, 0xd, 0xfd, 0x3}, {0x7, 0x5, 0xff, 0x3}, {0x6, 0x4, 0x3, 0x7}, {0x7, 0x6, 0x10, 0xb}, {0x8, 0x72, 0x0, 0x5}, {0x8, 0x2, 0xb3, 0xbf5}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xffa6, 0x80, 0x1, 0x6fb}, {0xc5, 0x6, 0x3a, 0x5}, {0x5, 0x5, 0x9}, {0xa2, 0x6, 0x4, 0x80000000}, {0x612a, 0x1, 0x1}]}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x40004}, 0xc0) bind$bt_l2cap(r13, 0xffffffffffffffff, 0x0) 23.828692076s ago: executing program 3 (id=6673): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x4040004) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x18, 0x0, 0xfd, r2}}, 0x18}}, 0x0) 23.826247674s ago: executing program 0 (id=6674): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffcb, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', r1, 0x8000, 0x1, 0x1, 0x1, {{0x3c, 0x4, 0x1, 0x4, 0xf0, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x9f, [@private=0xa8, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x7, 0xf, "73837fdea0d7f6245103932624"}, {0x4, 0x11, "80919a958109c91a11de50b1205c06"}, {0x5, 0xd, "dc6f099d6cfda1d1b9d293"}, {0x0, 0x8, "209a1bc79312"}]}, @timestamp_prespec={0x44, 0x34, 0x1a, 0x3, 0x5, [{@local, 0xe}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@broadcast}, {@broadcast, 0x6}, {@remote, 0x9}, {@local, 0x3}]}, @noop, @timestamp_addr={0x44, 0x24, 0x9f, 0x1, 0x0, [{@remote}, {@multicast1, 0x7fffffff}, {@empty, 0x87c7}, {@remote, 0x7fff}]}, @timestamp_prespec={0x44, 0x1c, 0x1d, 0x3, 0x8, [{@local, 0x2}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xaf}]}, @noop]}}}}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x41c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r1}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8000, 0x2d, 0x80, 0x2}, {0x400, 0xa, 0x7, 0x1718}, {0x0, 0x9, 0xd, 0xb9}, {0x8, 0x86, 0xa, 0x3}, {0x2, 0xfa, 0x9, 0xfff}, {0xc294, 0x80, 0x40, 0x1000}, {0x1, 0x6, 0x4, 0x5}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x183}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7346}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xea}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x80090}, 0x20000004) 19.349276036s ago: executing program 3 (id=6675): r0 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r3, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r2}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r3, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r2}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) 19.343129376s ago: executing program 1 (id=6676): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[], 0x58}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000024c0)=""/4095, 0xfff}, {&(0x7f00000003c0)=""/254, 0xfe}], 0x2}}], 0x1, 0x0, 0x0) 19.257702244s ago: executing program 0 (id=6677): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\b):\x00', 0x103000, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x2]}, {0x8, 0x1, 0x3, 0x4}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000140)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x10, 0x0, [{@initdev}]}}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_dellink={0x6c, 0x11, 0x2, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x20302, 0x40010}, [@IFLA_BROADCAST={0xa, 0x2, @random="bd4563fcea8b"}, @IFLA_MAP={0x24, 0xe, {0x8, 0x6, 0x10001, 0x30, 0x0, 0x52}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0x10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8811}, 0x4051) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000400)={0x4, 0x3, 0x7}) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0xfffffffffffffffd, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000440)=0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000480)={'veth0_to_bridge\x00', {0x2, 0x4e23, @loopback}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r0, 0x28, 0x0, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x19, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x6, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r0, r0, 0x14, 0x30, r0, @void, @void, @void, @value=r4, r3}, 0x20) socket$kcm(0x29, 0x7, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$cgroup(r0, &(0x7f0000000940)='syz1\x00', 0x200002, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r0, r6, 0xa, 0x0, @void}, 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000009c0)={0x7fff, 0x3, 0x3, 0x8}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000a00)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000c00)={r8, 0x1000}) r9 = accept$unix(r2, &(0x7f0000001c00), &(0x7f0000001c80)=0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001cc0)={'batadv_slave_1\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d00)={@cgroup=r0, r0, 0x35, 0x2014, 0x0, @value=r7, @void, @void, @void, r3}, 0x20) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d80), r1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r11, 0xc02, 0x7, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008011) 19.175463283s ago: executing program 2 (id=6678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000004c0)}, 0x20) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0x15, 0x0, &(0x7f0000000280)) syz_init_net_socket$x25(0x9, 0x2, 0x10) 18.923955103s ago: executing program 4 (id=6679): r0 = socket$kcm(0x21, 0x2, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) recvmsg(r1, &(0x7f0000001940)={&(0x7f0000000200)=@phonet, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/172, 0xac}, {&(0x7f00000017c0)=""/95, 0x5f}, {&(0x7f0000001840)=""/50, 0x32}], 0x5, &(0x7f0000001900)=""/38, 0x26}, 0x10140) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xc}}], 0x10}, 0x0) (async) syz_emit_ethernet(0xf6, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x22, 0x4, 0x0, 0x3c, 0xe8, 0x66, 0x0, 0xa, 0x6, 0x0, @multicast2, @multicast2, {[@end, @noop, @cipso={0x86, 0x6b, 0xffffffffffffffff, [{0x2, 0xb, "073a441af8d57c4b9e"}, {0x0, 0xd, "0370357fb5a1401a6244d5"}, {0x5, 0xb, "111c6d1e7087a4a654"}, {0x0, 0x3, ' '}, {0x5, 0xd, "05cc775b138ae785c766a7"}, {0x7, 0x12, "60a5d126960450087a8880ba280743ce"}, {0x7, 0x10, "d2dabce180e832cb20303b1a6ebe"}, {0x7, 0x5, "64b8a9"}, {0x7, 0xb, "652e27766c15421aa1"}]}, @generic={0x86, 0x5, "429ab7"}]}}, @name_distributor={{0x60, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x5, 0x0, 0x1, 0xfff9, 0x4, 0x4, 0x4e22, 0x4e24, 0x3, 0x2, 0x0, 0x0, 0x1}, [{0xffffffff, 0x7, 0xfff, 0x9, 0x3, 0xf54, 0x9, 0x10001}, {0x9f6c, 0x2, 0x9, 0x7fffffff, 0x9, 0x8, 0x8, 0x8}]}}}}}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6}, @void, @val={0xc, 0x99, {0x1ff, 0x4}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1a}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x69}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0xf}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x5c}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008041}, 0x220c8080) 18.257099489s ago: executing program 1 (id=6680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11002bbd7000fbdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900fdffffff2d00000018000500090000001400040070696d72656700000000000000000000798e5ad539ff57df801a352838a1c4bc74b6a9c0603c2db7fa8c6ff1d066e29c44dbbb757324f8"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x69}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x72}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xef55}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fffffff}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x97, 0xc5, "28110a02a6b2809586ba6f0299a892bb2825e40d2f9c5419ba7df3086f463bb1832ff3709753419ca39142c56a8499319e6f1f7d7a6ed5e944e96278c2c32bd56fe3b0bb40502eef5734d80085efd601c62dc867591225c7cc962384eee0badde8f031d4ef0aaea5e754d8daeae0b0cef84215173db668f956ce3c8846271f8c04f5fc8a6755146c9368b4699710e9d5952ac3"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xc}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 18.255872167s ago: executing program 0 (id=6681): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x220, 0x14, 0x706, 0x70bd2c, 0x25dfdbfd, {0x1a}, [@INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "8cca6f03a2ffdcd279aa42e83f3de177ec44f0f634697e43e200ed08a9abea49a22e518c63993ae49f7fd0cb43f29b7d60527c45072535"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "b3da626b9f264f2b3b33dcc01b5590e40126763f9e1891c99fb5b7acd77cb6df87a7fea7ebf52f4f39dff100d972c9196394c26b77e037fc543f2d461d5a5b25d8f7b0481fe979b3ed4d3e28c0a958b6fd05e1c6bd0950c6d3128fe5f55c9ee8929a3fc6a2ae5108cd02ef11d8dda36dfd6b041080cb6475a25109df115c2852931d04c327281ad76d560774eead60aa4ad7532af007b45f18a3e9549b645aacbf1e311c1f8513db7b2374737f5ac07a6578b8ab446e37e17f0a6c83767bed7c96d601b5b177717752429df096e63c0fe84368da127f44ddcb05ab7809308fa05c"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "eda89ec48d1846c7ecb6484de2d2249c64824d436ed599f706d269c08beac267b1a007774dcbb31c5c89fcb01dafd9ab6933ac59c992ad0ee3ca53255319b8c17444a8db242b3cadf23bf1884b79c60890d9e250e790149be073793ce119c2b38a54b17a5873b4905c05a38541590b08a3e36d3dd0b3c4624af8c087472f609625ca88b58b16a7876a81d696dc45945e22fcf5415d"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "3fba770b3d5be821b944491c7afc585e73aedc32c4f9c21e40ad5087803a6a12cacde43d0bb6da6f2deb17d4f2241be1d98d701fe3d16a177b194564a6f58f5a5981120700b2f4"}]}, 0x220}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 18.140204818s ago: executing program 2 (id=6682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0x14, 0x3, 0xff, 0xfffff01a}, {0x6, 0x1, 0x1, 0x80100000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000100), 0x12d) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@gettaction={0xb8, 0x32, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c4}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe000000}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3af}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="bc1b00400007012bbd700020000000017c00000400c2800c0001800600060065580000971b0280540211", @ANYRES16=r0, @ANYBLOB="aeef5b285b138b76c583db8e75fbf5c9238d543e6ded5de3c63259b7910b4a2db02e50e420c61ee702c39f69ba7c782a27b50fd793e59f139f35b377c7cc17c95ecb63d80fae84033fd576f0df99090ed7fd2df66da9f95269701a7882ff533e07eb5d589877bfbb01d88259258fc05fdbf5110e047639aeb68e2a6b1d63e5219deb7c2ac4d169e18c5623ac59db07c9a2a440a81232e52fdaae8d8b919be71b7bcdb62deff2500e"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016f891e6808c424987ec10dece53cfa13e3b0a03433461111b43885a97c4059694b7eb65700925d5a283a604e783f3321aefdc527d2e169fa7fa9e1abc65e88ae2bf02770532ccf032071ce29b2ad6388f3f68bea89a050c8b142461dbb8d005ce526956e77de3b09f4a180dc51fc71b0b54f98d65ccd1ca24663df132113ad1"], 0x78) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 0s ago: executing program 4 (id=6683): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000020bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe00000000850000002b000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e024334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd617545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d36c309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x2}, 0x10}, 0x94) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'sed\x00', 0x1, 0x6, 0x3d}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'none\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) recvmsg(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffffffffffd85, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r12 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "1a0faf1da08ccb1cec8fc54a26a27b371faf7bd264caf826e368215fc1c8adee", "f8039ac0770d08460579a9ba902beafbf8b45c0000e6ffffffffffffff00", "6f7492bd8ced0087319761f5b57d51469478d09858e8ff1d6025145da220230e", "17f392d425c4372e1681ded4d1ce4ed8ebd26ffa35d3baa342d6889f9bb50659", "3adbf77c2c48b462202c9f1b4becfa1faa5aeb26438400", "47feffffff00", 0xfff, 0xe, 0x6, 0x3, 0x4}}) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x60000220}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0010000150020002cbd7000fcdbdf250b84c1000100ce4953d1f7f0a45e2620b62889f5a3f26da0221ee63bea46eae1db62d5dbf5f7075c24e831bf06abc507ccd17d41bd354cc5c7db5d6798050fff2d5588933501e6fb605339dea170f804976767a8831bc76924990a0d3887c3220e8b7a43529295670a8bdce954267f92543d05ef523122b78f6f39595c6e3f2c004782f8ff887c5da4fd1e239d276f6fc46501b3ef27632d9940e6626f22e949d9f3e51e8a671307eed3ce58351dde19290ceb8e30b8dea909891cb07b000000c6000100aedd68e693fd517843419d582770ffdea66f84543c081730661cee1ce680354bace90fda354fbb2d9cb4c33de76f567a655f4f03eaa4e485e1728e541eb154c5c3c8a536a854ace409936108fd276562ae2981fd2fb252fa1e096361e563af3697e4f61dd703ecb9c810a72e9cd2b4abe6b561f1520e7f74cfeeafba14ce384d4ee02dabfb4c206ce397c5400047c15619df977e6d188fb9636cdea5cf1adc053acf79bb1d3124b10c2c6f24ebe99078f983ac7f00"/402], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x80) unshare(0x4020200) kernel console output (not intermixed with test programs): 069] netlink: 'syz.1.5971': attribute type 83 has an invalid length. [ 663.908124][T27894] hsr_slave_1: entered promiscuous mode [ 663.924582][T27894] debugfs: 'hsr0' already exists in 'hsr' [ 663.941706][T27894] Cannot create hsr debugfs directory [ 664.515517][T28100] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5977'. [ 664.542317][T28100] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5977'. [ 664.706468][T27894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.732881][T27894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.786953][T28103] tipc: Enabled bearer , priority 0 [ 664.847514][T28096] tipc: Disabling bearer [ 664.932123][ T4945] Bluetooth: hci1: command tx timeout [ 665.075498][T27894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.113680][T27894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.324342][T27894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.349136][T27894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.370000][T28127] netlink: 'syz.2.5981': attribute type 5 has an invalid length. [ 665.568972][T27894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.601763][T27894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.692482][T28144] tipc: Enabled bearer , priority 0 [ 665.881009][T28144] syzkaller0: entered promiscuous mode [ 665.888472][T28144] syzkaller0: entered allmulticast mode [ 665.897547][T28144] tipc: Resetting bearer [ 665.917783][T28166] netlink: 'syz.4.5993': attribute type 1 has an invalid length. [ 665.964364][T28143] tipc: Resetting bearer [ 666.835640][T28179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5995'. [ 666.902214][T28180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5995'. [ 667.011996][ T4945] Bluetooth: hci1: command tx timeout [ 668.489495][T28143] tipc: Disabling bearer [ 668.499127][T28166] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 668.589712][ T5832] tipc: Node number set to 1152874444 [ 668.719918][T27894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 668.745409][T27894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.763618][T27894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 668.812388][T27894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.839558][T27894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 668.866163][T27894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.878763][T28199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 668.899137][T27894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 668.924121][T27894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 669.113234][T28218] syzkaller0: entered promiscuous mode [ 669.118871][T28218] syzkaller0: entered allmulticast mode [ 669.214540][T28222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6007'. [ 669.266527][T27894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.338498][T27894] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.354008][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.361193][ T6781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.370903][T28231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6010'. [ 669.411602][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.418821][ T6781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.476511][T28234] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 669.496744][T28234] bond5 (unregistering): Released all slaves [ 669.546832][T28241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6013'. [ 669.574016][T28241] netlink: 'syz.2.6013': attribute type 2 has an invalid length. [ 669.606053][T28241] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6013'. [ 669.625873][T28241] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6013'. [ 669.751229][T28244] syzkaller0: entered promiscuous mode [ 669.755938][T28250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6017'. [ 669.756915][T28244] syzkaller0: entered allmulticast mode [ 669.897598][T28260] netdevsim netdevsim1 : renamed from netdevsim0 [ 670.106769][T28279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6022'. [ 670.148172][T28282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6023'. [ 670.179411][T28283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.464194][T27894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.672919][T28309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6029'. [ 670.695283][T27894] veth0_vlan: entered promiscuous mode [ 670.738817][T27894] veth1_vlan: entered promiscuous mode [ 670.857780][T27894] veth0_macvtap: entered promiscuous mode [ 670.907383][T27894] veth1_macvtap: entered promiscuous mode [ 670.983703][T28329] netlink: 'syz.1.6033': attribute type 1 has an invalid length. [ 670.992922][T28327] tipc: Enabled bearer , priority 0 [ 670.996917][T28329] netlink: 'syz.1.6033': attribute type 2 has an invalid length. [ 671.007961][T28329] netlink: 'syz.1.6033': attribute type 1 has an invalid length. [ 671.021322][T27894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.035259][T28329] netlink: 'syz.1.6033': attribute type 3 has an invalid length. [ 671.047092][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6033'. [ 671.059877][T28327] syzkaller0: entered promiscuous mode [ 671.073362][T28327] syzkaller0: entered allmulticast mode [ 671.082774][T28326] tipc: Resetting bearer [ 671.115316][T28326] tipc: Disabling bearer [ 671.143435][T27894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.160232][ T6777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.192714][ T6777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.221387][ T6777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.294052][ T6777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.672602][T28366] netlink: 'syz.1.6041': attribute type 83 has an invalid length. [ 671.829316][ T402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.867308][ T402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.004253][ T6777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.025547][ T6777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.406956][T28402] tipc: Enabled bearer , priority 0 [ 672.435071][T28406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.556214][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.569926][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.575261][T28402] syzkaller0: entered promiscuous mode [ 672.586139][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.594479][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.595246][T28402] syzkaller0: entered allmulticast mode [ 672.608931][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 672.655476][T28402] tipc: Resetting bearer [ 672.805169][ T6807] tipc: Resetting bearer [ 672.815663][T28400] tipc: Resetting bearer [ 674.052865][ T2542] block nbd2: Possible stuck request ffff888027ec1dc0: control (read@0,1024B). Runtime 30 seconds [ 674.063833][ T2542] block nbd2: Possible stuck request ffff888027ec1f80: control (read@1024,1024B). Runtime 30 seconds [ 674.074947][ T2542] block nbd2: Possible stuck request ffff888027ec2140: control (read@2048,1024B). Runtime 30 seconds [ 674.088505][ T2542] block nbd2: Possible stuck request ffff888027ec2300: control (read@3072,1024B). Runtime 30 seconds [ 674.693415][ T5631] Bluetooth: hci2: command tx timeout [ 675.336935][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 675.354562][T28400] tipc: Disabling bearer [ 675.364009][T28420] netlink: 'syz.3.6055': attribute type 5 has an invalid length. [ 675.565370][T28441] __nla_validate_parse: 7 callbacks suppressed [ 675.565388][T28441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6061'. [ 675.612717][T28441] netlink: 'syz.1.6061': attribute type 7 has an invalid length. [ 675.640108][T28441] netlink: 'syz.1.6061': attribute type 8 has an invalid length. [ 675.664619][T28441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6061'. [ 675.679439][T28443] bond1: entered promiscuous mode [ 675.685670][T28443] bond1: entered allmulticast mode [ 675.691293][T28443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 675.694411][T28449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6062'. [ 675.756837][T28452] nbd: couldn't find device at index 16768768 [ 675.957515][T28449] macvtap1: entered promiscuous mode [ 675.971857][T28449] vlan0: entered promiscuous mode [ 675.981105][T28449] macvtap1: entered allmulticast mode [ 675.988259][T28449] vlan0: entered allmulticast mode [ 675.995092][T28449] veth0_vlan: entered allmulticast mode [ 676.026395][T28462] tipc: Enabled bearer , priority 0 [ 676.033976][T28457] nftables ruleset with unbound chain [ 676.128997][T28462] syzkaller0: entered promiscuous mode [ 676.136080][T28462] syzkaller0: entered allmulticast mode [ 676.145661][T28462] tipc: Resetting bearer [ 676.160053][T28471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6070'. [ 676.185840][T28459] tipc: Resetting bearer [ 676.191732][T28471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6070'. [ 676.776555][ T5631] Bluetooth: hci2: command tx timeout [ 676.822780][T28500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6077'. [ 678.852880][ T5631] Bluetooth: hci2: command tx timeout [ 678.862476][T28459] tipc: Disabling bearer [ 678.875749][T28471] geneve2: entered promiscuous mode [ 678.880961][T28471] geneve2: entered allmulticast mode [ 679.046000][T28411] wg1 speed is unknown, defaulting to 1000 [ 679.149472][T28411] lo speed is unknown, defaulting to 1000 [ 679.162003][T28513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6082'. [ 679.265370][T28517] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6084'. [ 679.309445][T28519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6083'. [ 679.482138][T28532] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6087'. [ 680.231641][T28568] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 680.383761][T28579] netlink: 'syz.3.6097': attribute type 8 has an invalid length. [ 680.452369][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 680.889498][T28411] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.895063][T28610] __nla_validate_parse: 2 callbacks suppressed [ 680.895079][T28610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6104'. [ 680.912872][T28411] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.913114][T28411] bridge_slave_0: entered allmulticast mode [ 680.914936][T28411] bridge_slave_0: entered promiscuous mode [ 680.936438][ T5631] Bluetooth: hci2: command tx timeout [ 680.943337][T28411] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.950538][T28411] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.959328][T28411] bridge_slave_1: entered allmulticast mode [ 680.968257][T28411] bridge_slave_1: entered promiscuous mode [ 681.061026][T28411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.089795][T28411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.124792][T28612] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6105'. [ 681.150232][T28612] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6105'. [ 681.197419][T28626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6109'. [ 681.216546][T28411] team0: Port device team_slave_0 added [ 681.230050][T28631] netlink: 'syz.1.6112': attribute type 10 has an invalid length. [ 681.263974][T28631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 681.274735][T28631] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 681.283729][T28631] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 681.299003][T28411] team0: Port device team_slave_1 added [ 681.388898][T28640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6114'. [ 681.409348][T28637] : entered promiscuous mode [ 681.420350][T28639] Cannot find del_set index 4 as target [ 681.441639][T28645] netlink: 'syz.3.6114': attribute type 5 has an invalid length. [ 681.443297][T28411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.470192][T28411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.510121][T28411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.527538][T28411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.528725][T28637] netlink: 'syz.0.6113': attribute type 39 has an invalid length. [ 681.538775][T28411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.569856][T28411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.635141][T28646] syzkaller0: entered promiscuous mode [ 681.641104][T28646] syzkaller0: entered allmulticast mode [ 681.686857][T28651] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6117'. [ 681.754422][T28411] hsr_slave_0: entered promiscuous mode [ 681.774911][T28411] hsr_slave_1: entered promiscuous mode [ 681.783189][T28411] debugfs: 'hsr0' already exists in 'hsr' [ 681.789100][T28411] Cannot create hsr debugfs directory [ 682.055642][T28666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6124'. [ 682.326300][T28411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.349783][T28411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.367251][T28689] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.6128'. [ 682.404265][T28689] netlink: Unknown conntrack attr (type=2304, max=9) [ 682.620984][T28411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.660877][T28411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.752153][T28705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6134'. [ 682.821582][T28705] tipc: Disabling bearer [ 682.912227][T28411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.935106][T28411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.977634][T28726] netlink: 'syz.1.6140': attribute type 1 has an invalid length. [ 683.008771][T28726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6140'. [ 683.088083][T28411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.104350][T28411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.282455][T28740] netlink: 'syz.3.6144': attribute type 16 has an invalid length. [ 683.309729][T28740] netlink: 'syz.3.6144': attribute type 16 has an invalid length. [ 683.348770][T28740] netlink: 'syz.3.6144': attribute type 16 has an invalid length. [ 683.477259][T28740] netlink: 'syz.3.6144': attribute type 16 has an invalid length. [ 684.447680][ T5745] IPVS: starting estimator thread 0... [ 684.563464][T28802] IPVS: using max 33 ests per chain, 79200 per kthread [ 685.583223][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.645052][T28797] syzkaller1: entered promiscuous mode [ 686.650593][T28797] syzkaller1: entered allmulticast mode [ 686.769784][T28411] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 686.799315][T28411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 686.815781][T28810] veth1_macvtap: entered allmulticast mode [ 686.828333][T28411] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 686.842524][T28810] __nla_validate_parse: 2 callbacks suppressed [ 686.842542][T28810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6158'. [ 686.887780][T28411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 686.900756][T28813] xt_hashlimit: size too large, truncated to 1048576 [ 686.902971][T28411] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 686.934708][T28815] IPv6: NLM_F_CREATE should be specified when creating new route [ 686.947200][T28815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6159'. [ 686.951648][T28411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.988670][T28812] IPv6: sit1: Disabled Multicast RS [ 687.029283][T28810] veth1_macvtap (unregistering): left allmulticast mode [ 687.256920][T28411] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 687.288281][T28411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 687.455249][T28844] bond2: (slave bond_slave_1): Device is not our slave [ 687.473858][T28844] bond2: option active_slave: invalid value (bond_slave_1) [ 687.515080][T28844] bond2 (unregistering): Released all slaves [ 687.537154][T28854] netlink: 'syz.3.6163': attribute type 1 has an invalid length. [ 687.657435][T28858] tipc: Enabled bearer , priority 0 [ 687.669322][T28863] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6168'. [ 687.765448][T28858] syzkaller0: entered promiscuous mode [ 687.778261][T28858] syzkaller0: entered allmulticast mode [ 687.785910][T28858] tipc: Resetting bearer [ 687.808562][T28411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.828366][T28857] tipc: Resetting bearer [ 687.836329][T28866] netlink: 'syz.3.6169': attribute type 83 has an invalid length. [ 688.732396][T28875] IPVS: set_ctl: invalid protocol: 33 172.20.20.38:20002 [ 690.913405][T28857] tipc: Disabling bearer [ 691.022615][T28411] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.059272][T20612] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.066503][T20612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.107275][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.114484][ T6777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.261460][T28889] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6176'. [ 691.284370][T28886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6175'. [ 691.359156][T28886] x_tables: duplicate underflow at hook 3 [ 691.507755][T28902] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 691.677470][T28914] xt_bpf: check failed: parse error [ 691.727448][T28919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6185'. [ 691.763162][T28919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6185'. [ 691.791061][T28922] syzkaller0: entered promiscuous mode [ 691.807651][T28922] syzkaller0: entered allmulticast mode [ 692.085188][T28940] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 692.202044][T28411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.370103][T28411] veth0_vlan: entered promiscuous mode [ 692.404542][T28411] veth1_vlan: entered promiscuous mode [ 692.476335][T28411] veth0_macvtap: entered promiscuous mode [ 692.489792][T28960] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6199'. [ 692.491772][T28411] veth1_macvtap: entered promiscuous mode [ 692.512621][T28963] netlink: 'syz.0.6200': attribute type 1 has an invalid length. [ 692.569960][T28963] 8021q: adding VLAN 0 to HW filter on device bond5 [ 692.619867][T28973] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 692.680884][T28411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.718099][T28411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.754581][T28963] macvlan3: entered promiscuous mode [ 692.760984][T28963] macvlan3: entered allmulticast mode [ 692.769112][T28963] bond5: entered promiscuous mode [ 692.775062][T28963] veth0_to_bond: entered promiscuous mode [ 692.786326][T28963] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 692.796793][T28963] bond5: left promiscuous mode [ 692.801915][T28963] veth0_to_bond: left promiscuous mode [ 692.833841][ T6777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.844001][ T6777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.857132][T28978] syzkaller0: entered promiscuous mode [ 692.865218][T28978] syzkaller0: entered allmulticast mode [ 692.876972][ T6777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.887675][ T6777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.954989][T28980] netlink: 'syz.4.6205': attribute type 1 has an invalid length. [ 693.076444][T28984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6205'. [ 693.090021][T28986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6207'. [ 693.124029][T28980] bond8: entered promiscuous mode [ 693.134755][T28980] bond8: entered allmulticast mode [ 693.154555][T28980] 8021q: adding VLAN 0 to HW filter on device bond8 [ 693.257034][T28984] macvlan2: entered promiscuous mode [ 693.286590][T28984] macvlan2: entered allmulticast mode [ 693.388398][T29000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6210'. [ 693.411723][T29000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6210'. [ 693.434776][ T6781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.452736][ T6781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.471776][T29007] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.654693][T29013] SET target dimension over the limit! [ 693.728751][T29006] syzkaller0: entered promiscuous mode [ 693.736107][T29006] syzkaller0: entered allmulticast mode [ 693.747300][ T402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.755452][ T402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.841593][T29024] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6215'. [ 696.546310][T29021] netlink: 'syz.3.6215': attribute type 29 has an invalid length. [ 696.724124][T29032] x_tables: unsorted underflow at hook 1 [ 696.744006][T29032] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20003 [ 696.896808][T29040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.977747][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.995711][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 697.008986][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 697.019641][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 697.031990][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 697.227210][T29057] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6222'. [ 697.275317][T29062] tipc: New replicast peer: 255.255.255.255 [ 697.306295][T29062] tipc: Enabled bearer , priority 10 [ 697.350229][T29066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6228'. [ 698.014419][T29110] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6241'. [ 698.025913][T29110] netlink: 8188 bytes leftover after parsing attributes in process `syz.2.6241'. [ 698.031768][T29044] wg1 speed is unknown, defaulting to 1000 [ 698.038433][T29110] openvswitch: netlink: Flow key attr not present in new flow. [ 698.066785][T29044] lo speed is unknown, defaulting to 1000 [ 698.094363][T29114] netlink: 'syz.3.6242': attribute type 1 has an invalid length. [ 698.187697][T29121] netlink: 'syz.2.6244': attribute type 13 has an invalid length. [ 698.199734][T29114] 8021q: adding VLAN 0 to HW filter on device bond2 [ 698.264845][T29118] bond2: (slave geneve3): making interface the new active one [ 698.275098][T29118] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 698.284575][T29121] veth1_macvtap: left promiscuous mode [ 698.290473][T29121] macsec0: entered allmulticast mode [ 698.486936][T29135] netlink: 'syz.0.6248': attribute type 11 has an invalid length. [ 698.516172][T29135] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6248'. [ 698.557849][T29138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6250'. [ 698.569851][T29138] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6250'. [ 698.584161][T29138] openvswitch: netlink: Flow key attr not present in new flow. [ 698.622110][T29136] block nbd0: server does not support multiple connections per device. [ 698.635397][T29136] block nbd0: shutting down sockets [ 698.686276][T29143] netlink: 'syz.0.6252': attribute type 1 has an invalid length. [ 698.763217][T29150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6254'. [ 698.785141][T29143] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6252'. [ 698.821656][T29143] tipc: Enabling of bearer rejected, failed to enable media [ 698.937647][T29165] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6256'. [ 698.956933][T29143] veth5: entered promiscuous mode [ 698.984198][T29143] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 699.092958][ T4945] Bluetooth: hci5: command tx timeout [ 699.326598][T29044] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.337905][T29044] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.346282][T29044] bridge_slave_0: entered allmulticast mode [ 699.354059][T29044] bridge_slave_0: entered promiscuous mode [ 699.362468][T29044] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.369651][T29044] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.377424][T29044] bridge_slave_1: entered allmulticast mode [ 699.386586][T29044] bridge_slave_1: entered promiscuous mode [ 699.415826][T29044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.428853][T29044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.459386][T29044] team0: Port device team_slave_0 added [ 699.467925][T29044] team0: Port device team_slave_1 added [ 699.491317][T29044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.499672][T29044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.526255][T29044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.538538][T29044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.545583][T29044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.572744][T29044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.616239][T29044] hsr_slave_0: entered promiscuous mode [ 699.623099][T29044] hsr_slave_1: entered promiscuous mode [ 699.629185][T29044] debugfs: 'hsr0' already exists in 'hsr' [ 699.635172][T29044] Cannot create hsr debugfs directory [ 700.933670][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 701.172010][ T4945] Bluetooth: hci5: command tx timeout [ 701.919353][T29159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.951712][T29044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 701.980034][T29044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 702.016797][T29044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 702.094846][T29044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.112817][T29206] IPVS: set_ctl: invalid protocol: 54 172.20.20.29:20000 [ 702.115131][T29207] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 702.123985][T29044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 702.160622][T29044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 702.178586][T29044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 702.204786][T29044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 702.211319][T29206] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 702.217248][T29205] netlink: 'syz.1.6264': attribute type 4 has an invalid length. [ 702.288978][T29208] netlink: 'syz.1.6264': attribute type 4 has an invalid length. [ 702.360422][ T54] lo speed is unknown, defaulting to 1000 [ 702.393754][ T54] syz0: Port: 1 Link ACTIVE [ 702.425290][ T10] lo speed is unknown, defaulting to 1000 [ 702.534476][T29226] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 702.599293][T29044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.671712][T29044] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.710881][ T6810] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.718135][ T6810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.778771][ T6810] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.786126][ T6810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.804732][T29247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6275'. [ 702.944386][T29252] syzkaller0: entered promiscuous mode [ 702.953507][T29252] syzkaller0: entered allmulticast mode [ 703.000231][T29254] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.008297][T29254] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.108362][T29254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.121573][T29254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.190041][T29254] macsec0: left allmulticast mode [ 703.262065][ T402] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.262274][ T4945] Bluetooth: hci5: command tx timeout [ 703.366580][ T402] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.379468][ T402] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.414772][ T402] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.426284][T29266] netlink: 81 bytes leftover after parsing attributes in process `syz.2.6279'. [ 704.134126][ T2542] block nbd2: Possible stuck request ffff888027ec1dc0: control (read@0,1024B). Runtime 60 seconds [ 704.145152][ T2542] block nbd2: Possible stuck request ffff888027ec1f80: control (read@1024,1024B). Runtime 60 seconds [ 704.159293][ T2542] block nbd2: Possible stuck request ffff888027ec2140: control (read@2048,1024B). Runtime 60 seconds [ 704.170774][ T2542] block nbd2: Possible stuck request ffff888027ec2300: control (read@3072,1024B). Runtime 60 seconds [ 704.236005][T29302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6289'. [ 704.256929][T29044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.265779][T29302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6289'. [ 704.338811][T29302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6289'. [ 704.344550][T29306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 704.377283][T29312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6291'. [ 704.546062][T29318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6293'. [ 704.576875][T29320] syz.1.6294: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 704.604321][T29320] CPU: 0 UID: 0 PID: 29320 Comm: syz.1.6294 Not tainted syzkaller #0 PREEMPT(full) [ 704.604344][T29320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.604356][T29320] Call Trace: [ 704.604363][T29320] [ 704.604372][T29320] dump_stack_lvl+0xe8/0x150 [ 704.604401][T29320] warn_alloc+0x249/0x340 [ 704.604426][T29320] ? stack_trace_save+0xa9/0x100 [ 704.604484][T29320] ? __pfx_warn_alloc+0x10/0x10 [ 704.604514][T29320] ? kasan_save_track+0x4f/0x80 [ 704.604531][T29320] ? kasan_save_track+0x3e/0x80 [ 704.604548][T29320] ? __kasan_kmalloc+0x93/0xb0 [ 704.604567][T29320] ? __kmalloc_cache_noprof+0x31c/0x660 [ 704.604587][T29320] ? xskq_create+0x56/0x170 [ 704.604712][T29320] ? xsk_setsockopt+0x54c/0x990 [ 704.604730][T29320] ? do_sock_setsockopt+0x17c/0x1b0 [ 704.604812][T29320] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 704.604833][T29320] ? do_syscall_64+0x15f/0xf80 [ 704.604861][T29320] __vmalloc_node_range_noprof+0x132/0x1750 [ 704.604916][T29320] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 704.604946][T29320] ? __kasan_kmalloc+0x93/0xb0 [ 704.604975][T29320] vmalloc_user_noprof+0xad/0xe0 [ 704.604997][T29320] ? xskq_create+0xbf/0x170 [ 704.605018][T29320] xskq_create+0xbf/0x170 [ 704.605041][T29320] xsk_init_queue+0x8a/0xe0 [ 704.605064][T29320] xsk_setsockopt+0x54c/0x990 [ 704.605086][T29320] ? __pfx_xsk_setsockopt+0x10/0x10 [ 704.605104][T29320] ? __pfx_aa_sk_perm+0x10/0x10 [ 704.605195][T29320] ? aa_sock_opt_perm+0xff/0x1a0 [ 704.605246][T29320] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 704.605286][T29320] ? __pfx_xsk_setsockopt+0x10/0x10 [ 704.605308][T29320] do_sock_setsockopt+0x17c/0x1b0 [ 704.605335][T29320] __x64_sys_setsockopt+0x13d/0x1b0 [ 704.605360][T29320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.605379][T29320] do_syscall_64+0x15f/0xf80 [ 704.605401][T29320] ? trace_irq_disable+0x3b/0x140 [ 704.605428][T29320] ? clear_bhb_loop+0x40/0x90 [ 704.605449][T29320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.605465][T29320] RIP: 0033:0x7f60d6f9ce59 [ 704.605483][T29320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.605498][T29320] RSP: 002b:00007f60d7efe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 704.605517][T29320] RAX: ffffffffffffffda RBX: 00007f60d7215fa0 RCX: 00007f60d6f9ce59 [ 704.605529][T29320] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 704.605540][T29320] RBP: 00007f60d7032d6f R08: 0000000000000004 R09: 0000000000000000 [ 704.605551][T29320] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.605562][T29320] R13: 00007f60d7216038 R14: 00007f60d7215fa0 R15: 00007ffdb6300418 [ 704.605591][T29320] [ 704.606654][T29320] Mem-Info: [ 704.772773][T29327] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 704.818528][T29320] active_anon:5728 inactive_anon:0 isolated_anon:0 [ 704.818528][T29320] active_file:3026 inactive_file:40276 isolated_file:0 [ 704.818528][T29320] unevictable:768 dirty:76 writeback:0 [ 704.818528][T29320] slab_reclaimable:12942 slab_unreclaimable:138270 [ 704.818528][T29320] mapped:29575 shmem:1303 pagetables:2257 [ 704.818528][T29320] sec_pagetables:0 bounce:0 [ 704.818528][T29320] kernel_misc_reclaimable:0 [ 704.818528][T29320] free:1261806 free_pcp:24801 free_cma:0 [ 704.950920][T29326] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 704.954588][T29320] Node 0 active_anon:22712kB inactive_anon:0kB active_file:12104kB inactive_file:160900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60956kB dirty:300kB writeback:0kB shmem:3676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16828kB pagetables:8796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 704.996762][T29325] syzkaller0: entered promiscuous mode [ 705.009189][T29325] syzkaller0: entered allmulticast mode [ 705.028847][T29320] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:57344kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 705.166595][T29320] Node 0 DMA free:11176kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:88kB local_pcp:84kB free_cma:0kB [ 705.215010][T29342] netlink: 'syz.3.6300': attribute type 1 has an invalid length. [ 705.233473][T29342] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6300'. [ 705.253512][T29320] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 705.259422][T29342] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6300'. [ 705.276873][T29320] Node 0 DMA32 free:1265244kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22812kB inactive_anon:0kB active_file:12104kB inactive_file:160900kB unevictable:1536kB writepending:300kB zspages:0kB present:3129332kB managed:2552612kB mlocked:0kB bounce:0kB free_pcp:34980kB local_pcp:20444kB free_cma:0kB [ 705.292641][T29342] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6300'. [ 705.326751][T29320] lowmem_reserve[]: 0 0 0 0 0 [ 705.335299][ T4945] Bluetooth: hci5: command tx timeout [ 705.381309][T29320] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 705.413857][T29320] lowmem_reserve[]: 0 0 0 0 0 [ 705.429047][T29320] Node 1 Normal free:3770804kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57948kB local_pcp:27780kB free_cma:0kB [ 705.501984][T29320] lowmem_reserve[]: 0 0 0 0 0 [ 705.551124][T29320] Node 0 DMA: 2*4kB (U) 2*8kB (U) 1*16kB (U) 2*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11176kB [ 705.568771][T29320] Node 0 DMA32: 8906*4kB (UME) 6613*8kB (UM) 3627*16kB (UM) 337*32kB (UME) 103*64kB (UME) 744*128kB (UME) 894*256kB (UME) 498*512kB (UME) 270*1024kB (UME) 116*2048kB (UM) 2*4096kB (U) = 1265248kB [ 705.595701][T29320] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 705.608125][T29320] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 16*16kB (UM) 13*32kB (UM) 14*64kB (UM) 7*128kB (UM) 6*256kB (UM) 7*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 917*4096kB (UM) = 3770804kB [ 705.627863][T29320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 705.638414][T29320] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 705.649336][T29320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 705.699530][T29320] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 705.717001][T29320] 44587 total pagecache pages [ 705.723213][T29320] 0 pages in swap cache [ 705.727482][T29320] Free swap = 124996kB [ 705.732445][T29320] Total swap = 124996kB [ 705.742975][T29320] 2097051 pages RAM [ 705.746965][T29320] 0 pages HighMem/MovableOnly [ 705.751744][T29320] 427116 pages reserved [ 705.778346][T29320] 0 pages cma reserved [ 708.742373][ T4994] udevd[4994]: worker [19645] /devices/virtual/block/nbd2 is taking a long time [ 708.826832][T29044] veth0_vlan: entered promiscuous mode [ 708.851654][T29044] veth1_vlan: entered promiscuous mode [ 708.886916][T29374] netlink: 'syz.2.6307': attribute type 1 has an invalid length. [ 708.907901][T29376] netlink: 'syz.2.6307': attribute type 1 has an invalid length. [ 708.987167][T29044] veth0_macvtap: entered promiscuous mode [ 709.045869][T29374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6307'. [ 709.081300][T29376] veth3: entered promiscuous mode [ 709.196940][T29382] veth3: entered promiscuous mode [ 709.215034][T29044] veth1_macvtap: entered promiscuous mode [ 709.243208][T29044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.284663][T29044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.324738][T29401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 709.347722][T29401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6316'. [ 709.361270][T29403] geneve2: entered promiscuous mode [ 709.366947][T29403] geneve2: entered allmulticast mode [ 709.374899][T20612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.425008][T20612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.442614][T20612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.483072][T20612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.491134][T29409] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 709.507052][T20612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 709.530279][T20612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 709.539419][T20612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 709.553218][T29407] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6318'. [ 709.563860][T20612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 709.881657][T29419] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6323'. [ 710.015765][T29424] netlink: 'syz.2.6323': attribute type 1 has an invalid length. [ 710.754150][T29429] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6324'. [ 712.015339][T29384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.154131][ T6783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.182850][ T6783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.287327][T29440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.294672][T29440] IPv6: NLM_F_CREATE should be set when creating new route [ 712.302058][T29440] IPv6: NLM_F_CREATE should be set when creating new route [ 712.322889][T20612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.335235][T20612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.509177][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6329'. [ 712.689763][ T6783] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.713230][ T6783] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.735447][ T6783] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.764379][ T6783] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.887984][T29473] netlink: 'syz.3.6337': attribute type 2 has an invalid length. [ 712.910893][T29473] netlink: 'syz.3.6337': attribute type 8 has an invalid length. [ 712.935627][T29473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6337'. [ 713.045243][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 713.064293][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 713.075434][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 713.084029][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 713.092317][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 713.767227][T29475] wg1 speed is unknown, defaulting to 1000 [ 713.928633][ T6781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.943217][ T6781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.953793][ T6781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45454 - 0 [ 714.026433][T29475] lo speed is unknown, defaulting to 1000 [ 714.202565][T29505] netlink: 'syz.0.6345': attribute type 7 has an invalid length. [ 714.235969][ T6781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.255764][T29512] netlink: 'syz.0.6345': attribute type 9 has an invalid length. [ 714.286082][ T6781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.327102][ T6781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45454 - 0 [ 714.463644][T29517] H: renamed from dummy0 [ 714.527419][T29517] netlink: 576 bytes leftover after parsing attributes in process `syz.2.6349'. [ 714.620843][ T6781] bond0: (slave netdevsim1): Releasing backup interface [ 714.635626][ T6781] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 714.654802][ T6781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.668164][ T6781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.680109][ T6781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45454 - 0 [ 714.720887][T29528] erspan0: entered allmulticast mode [ 714.989207][ T6781] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.006121][ T6781] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.019457][ T6781] netdevsim netdevsim1  (unregistering): unset [1, 1] type 2 family 0 port 45454 - 0 [ 715.183591][ T5631] Bluetooth: hci3: command tx timeout [ 715.246264][T29561] netlink: 'syz.4.6358': attribute type 16 has an invalid length. [ 715.257548][T29561] netlink: 'syz.4.6358': attribute type 17 has an invalid length. [ 715.261118][T29565] netlink: 'syz.2.6359': attribute type 1 has an invalid length. [ 715.315535][T29565] netlink: 'syz.2.6359': attribute type 1 has an invalid length. [ 715.331472][T29561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 715.460538][T29569] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 715.648195][T29573] bond3: option lp_interval: invalid value (0) [ 715.682963][T29573] bond3: option lp_interval: allowed values 1 - 2147483647 [ 715.693166][T29573] bond3 (unregistering): Released all slaves [ 715.827009][ T402] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.039128][ T402] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.317045][T29590] syzkaller0: entered promiscuous mode [ 716.367318][T29590] syzkaller0: entered allmulticast mode [ 716.399315][T29615] netlink: 'syz.0.6367': attribute type 10 has an invalid length. [ 716.465551][T29620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6368'. [ 716.496295][T20612] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.630673][T29629] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6370'. [ 717.263309][ T5631] Bluetooth: hci3: command tx timeout [ 719.342130][ T5631] Bluetooth: hci3: command tx timeout [ 719.958675][ T6810] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.038673][T29637] nbd: couldn't find device at index 4138025 [ 720.047027][T29639] Cannot find add_set index 2 as target [ 720.119819][ T6781] veth0_to_bond: left allmulticast mode [ 720.130428][T29647] netlink: 'syz.2.6375': attribute type 6 has an invalid length. [ 720.184887][ T6781] veth0_to_bond: left promiscuous mode [ 720.208125][ T6781] bridge3: port 2(veth0_to_bond) entered disabled state [ 720.261016][ T6781] veth5: left allmulticast mode [ 720.280220][ T6781] veth5: left promiscuous mode [ 720.298447][ T6781] bridge3: port 1(veth5) entered disabled state [ 720.793612][ T6781] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 720.945322][ T6781] bond8 (unregistering): (slave geneve3): Releasing active interface [ 721.412575][ T5631] Bluetooth: hci3: command tx timeout [ 721.491702][ T6781] bond0 (unregistering): Released all slaves [ 721.503485][ T6781] bond1 (unregistering): Released all slaves [ 721.518205][ T6781] bond2 (unregistering): Released all slaves [ 721.533600][ T6781] bond3 (unregistering): Released all slaves [ 721.548717][ T6781] bond4 (unregistering): Released all slaves [ 721.566334][ T6781] bond5 (unregistering): Released all slaves [ 721.581444][ T6781] bond6 (unregistering): Released all slaves [ 721.597702][ T6781] bond7 (unregistering): Released all slaves [ 721.616118][ T6781] bond8 (unregistering): Released all slaves [ 721.632536][ T6781] bond9 (unregistering): Released all slaves [ 721.648926][ T6781] bond10 (unregistering): Released all slaves [ 721.663923][ T6781] bond11 (unregistering): Released all slaves [ 721.678126][ T6781] bond12 (unregistering): Released all slaves [ 721.701261][ T6781] bond13 (unregistering): Released all slaves [ 721.719935][ T6781] bond14 (unregistering): Released all slaves [ 721.735641][ T6781] bond15 (unregistering): Released all slaves [ 721.754041][ T6781] bond16 (unregistering): Released all slaves [ 721.793622][T29674] C: renamed from lo (while UP) [ 721.812007][T29674] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 721.866415][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 722.028345][ T54] wg1 speed is unknown, defaulting to 1000 [ 722.049912][ T54] syz2: Port: 1 Link DOWN [ 722.064652][ T6781] tipc: Left network mode [ 722.077585][T29693] netlink: 'syz.4.6383': attribute type 13 has an invalid length. [ 722.180034][T29701] netlink: 'syz.3.6384': attribute type 6 has an invalid length. [ 722.239895][T29686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6381'. [ 722.443491][T29475] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.452475][T29475] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.475452][T29475] bridge_slave_0: entered allmulticast mode [ 722.483412][T29475] bridge_slave_0: entered promiscuous mode [ 722.586344][T29475] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.594687][T29475] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.607194][T29475] bridge_slave_1: entered allmulticast mode [ 722.617208][T29475] bridge_slave_1: entered promiscuous mode [ 722.627359][T29714] netlink: 'syz.2.6389': attribute type 1 has an invalid length. [ 722.638580][T29714] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6389'. [ 722.864648][T29724] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6393'. [ 722.926021][T29729] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6393'. [ 722.959052][T29475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.999090][T29475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.037692][T29727] netlink: 'syz.0.6394': attribute type 14 has an invalid length. [ 723.506437][T29475] team0: Port device team_slave_0 added [ 723.620068][T29475] team0: Port device team_slave_1 added [ 723.747891][T29761] netlink: 'syz.0.6402': attribute type 1 has an invalid length. [ 723.806501][T29761] netlink: 'syz.0.6402': attribute type 1 has an invalid length. [ 723.817070][T29475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.832034][T29475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.877503][ T6777] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe8 [ 723.914528][T29475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.008188][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 724.017847][T29475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.027590][T29475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.062035][T29475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.208838][T29475] hsr_slave_0: entered promiscuous mode [ 724.216353][T29475] hsr_slave_1: entered promiscuous mode [ 724.223813][T29475] debugfs: 'hsr0' already exists in 'hsr' [ 724.229556][T29475] Cannot create hsr debugfs directory [ 724.489997][ T6781] hsr_slave_0: left promiscuous mode [ 724.522251][ T6781] veth0_macvtap: left promiscuous mode [ 724.527895][ T6781] veth1_vlan: left promiscuous mode [ 724.533701][ T6781] veth0_vlan: left promiscuous mode [ 724.903083][ T6810] smbdirect: ib_dev[syz2] removed [ 724.959021][ T6777] smc: removing ib device syz0 [ 725.000330][ T54] lo speed is unknown, defaulting to 1000 [ 725.007623][ T6777] smbdirect: ib_dev[syz0] removed [ 725.015870][ T54] syz0: Port: 1 Link DOWN [ 725.339205][T29794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6408'. [ 725.362355][T29794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6408'. [ 725.452664][T29475] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.654786][T29475] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.793295][T29475] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.951438][T29475] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.731541][T29765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.796997][T29475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 726.911341][T29475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.957490][T29475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 727.009171][T29475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.064080][T29475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 727.141104][T29475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.194568][T29475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 727.332835][T29475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.622774][T29829] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6414'. [ 727.727920][T29814] tipc: Enabling of bearer rejected, failed to enable media [ 727.800021][T29820] batadv_slave_0: Caught tx_queue_len zero misconfig [ 728.210653][T29842] openvswitch: netlink: Key type 203 is out of range max 32 [ 728.356356][T29475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.467460][T29475] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.511119][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.518321][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.626187][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.633430][ T6802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.668089][T29862] IPVS: length: 137 != 1152 [ 728.674382][T29863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6422'. [ 728.751648][T29866] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 0, id = 0 [ 729.011483][T29872] tipc: Started in network mode [ 729.031478][T29872] tipc: Node identity 7e56a951becf, cluster identity 4711 [ 729.049085][T29872] tipc: Enabled bearer , priority 0 [ 729.194693][T29881] syzkaller0: entered promiscuous mode [ 729.206166][T29881] syzkaller0: entered allmulticast mode [ 729.239918][ T6781] IPVS: stop unused estimator thread 0... [ 729.669182][T29907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6432'. [ 729.716102][T29907] netlink: 50 bytes leftover after parsing attributes in process `syz.3.6432'. [ 729.743220][T29907] netlink: 50 bytes leftover after parsing attributes in process `syz.3.6432'. [ 729.860104][T29920] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6436'. [ 729.890253][T29920] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6436'. [ 729.920756][T29916] geneve2: left promiscuous mode [ 729.935647][T29916] geneve2: left allmulticast mode [ 729.986433][ T6802] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.030937][ T6802] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 730.097355][ T5832] tipc: Node number set to 3231295825 [ 730.121433][ T6802] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.171310][ T6802] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 730.224998][ T6802] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.252007][ T6802] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 730.346358][ T6802] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.363031][ T6802] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 730.581315][T29964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6446'. [ 730.611713][T29964] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 730.678336][T29964] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 730.701741][T29964] gretap2: entered promiscuous mode [ 730.728644][T29964] gretap2: entered allmulticast mode [ 730.758291][T29475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.797795][T29971] openvswitch: netlink: IP tunnel dst address not specified [ 731.068257][T29475] veth0_vlan: entered promiscuous mode [ 731.104631][T29475] veth1_vlan: entered promiscuous mode [ 731.346563][T29475] veth0_macvtap: entered promiscuous mode [ 731.410327][T29475] veth1_macvtap: entered promiscuous mode [ 731.489014][T29475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.541222][T29475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.631231][ T6783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.694614][ T6783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.754777][ T6783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.794772][ T6783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.979128][T30017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6455'. [ 732.051664][T30017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6455'. [ 732.210113][ T6805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.255470][ T6805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.378262][T30028] netlink: 'syz.2.6458': attribute type 1 has an invalid length. [ 732.397157][ T6777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.426815][ T6777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.946898][T30048] netlink: 'syz.1.6462': attribute type 10 has an invalid length. [ 732.987287][T30048] __nla_validate_parse: 1 callbacks suppressed [ 732.987306][T30048] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6462'. [ 733.108379][T30055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6464'. [ 733.144686][T30055] netlink: 'syz.2.6464': attribute type 7 has an invalid length. [ 733.192588][T30055] netlink: 'syz.2.6464': attribute type 8 has an invalid length. [ 733.221339][T30055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6464'. [ 733.602596][T30085] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6469'. [ 733.766762][T30089] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.6470'. [ 733.910178][T30093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6472'. [ 733.954382][T30093] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6472'. [ 734.223686][ T2542] block nbd2: Possible stuck request ffff888027ec1dc0: control (read@0,1024B). Runtime 90 seconds [ 734.224315][T30107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6476'. [ 734.236264][ T2542] block nbd2: Possible stuck request ffff888027ec1f80: control (read@1024,1024B). Runtime 90 seconds [ 734.257211][ T2542] block nbd2: Possible stuck request ffff888027ec2140: control (read@2048,1024B). Runtime 90 seconds [ 734.269031][ T2542] block nbd2: Possible stuck request ffff888027ec2300: control (read@3072,1024B). Runtime 90 seconds [ 734.309506][ T4945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 734.345289][ T4945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 734.358893][ T4945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 734.372826][ T4945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 734.378033][T30113] syzkaller0: entered promiscuous mode [ 734.394104][ T4945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 734.402977][T30113] syzkaller0: entered allmulticast mode [ 734.709963][T30126] x_tables: duplicate underflow at hook 2 [ 734.934717][T30135] netlink: 'syz.1.6482': attribute type 1 has an invalid length. [ 735.010801][T30141] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6483'. [ 735.719040][T30172] syzkaller0: entered promiscuous mode [ 735.732133][T30172] syzkaller0: entered allmulticast mode [ 736.268183][T30192] netlink: 'syz.2.6499': attribute type 17 has an invalid length. [ 736.280065][T30193] netlink: 'syz.4.6498': attribute type 64 has an invalid length. [ 736.301435][T30192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6499'. [ 736.418476][T30192] gretap0: entered promiscuous mode [ 736.457555][ T5631] Bluetooth: hci0: command tx timeout [ 736.696506][T30192] gretap0: left promiscuous mode [ 736.824668][T30200] C: Caught tx_queue_len zero misconfig [ 736.886865][T30105] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.903586][T30105] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.912378][T30105] bridge_slave_0: entered allmulticast mode [ 736.920933][T30105] bridge_slave_0: entered promiscuous mode [ 736.955471][T30105] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.966156][T30105] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.974690][T30105] bridge_slave_1: entered allmulticast mode [ 736.982671][T30105] bridge_slave_1: entered promiscuous mode [ 737.019092][T30206] ip6tnl0: Caught tx_queue_len zero misconfig [ 737.140893][T30105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.158285][T30105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.265252][T30105] team0: Port device team_slave_0 added [ 737.307423][T30105] team0: Port device team_slave_1 added [ 737.482966][T30105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.491216][T30105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.533380][T30105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.559011][T30233] bridge_slave_0: left allmulticast mode [ 737.565995][T30233] bridge_slave_0: left promiscuous mode [ 737.577351][T30233] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.593378][T30233] bridge_slave_1: left allmulticast mode [ 737.599118][T30233] bridge_slave_1: left promiscuous mode [ 737.612978][T30233] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.627125][T30233] bond0: (slave bond_slave_0): Releasing backup interface [ 737.645180][T30233] bond0: (slave bond_slave_1): Releasing backup interface [ 737.666869][T30233] team0: Port device team_slave_0 removed [ 737.677095][T30233] team0: Port device team_slave_1 removed [ 737.684546][T30233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.694147][T30233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.703608][T30233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.711314][T30233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.720877][T30233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 737.739986][T30105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.772697][T30105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.809584][T30105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.951760][T30240] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 738.005760][T30251] netlink: 'syz.1.6515': attribute type 39 has an invalid length. [ 738.136401][T30255] __nla_validate_parse: 5 callbacks suppressed [ 738.136419][T30255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6516'. [ 738.190848][T30105] hsr_slave_0: entered promiscuous mode [ 738.239983][T30105] hsr_slave_1: entered promiscuous mode [ 738.283951][T30105] debugfs: 'hsr0' already exists in 'hsr' [ 738.309474][T30105] Cannot create hsr debugfs directory [ 738.493986][T30255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6516'. [ 738.530963][T30277] netlink: 'syz.4.6518': attribute type 9 has an invalid length. [ 738.534380][ T5631] Bluetooth: hci0: command tx timeout [ 738.590072][T30277] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.6518'. [ 738.996045][T30292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6521'. [ 739.054211][T30299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6521'. [ 739.342869][T30316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6528'. [ 739.408706][T30319] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 739.583082][T30105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.604577][T30105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.950115][T30333] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6530'. [ 740.154208][T30105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.190815][T30105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.444579][T30105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.492358][T30105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.616740][ T5631] Bluetooth: hci0: command tx timeout [ 740.648834][T30105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.663108][ T29] audit: type=1107 audit(1779288548.129:13): pid=30351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 740.663423][T30105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.834558][T30355] netlink: 'syz.3.6534': attribute type 1 has an invalid length. [ 740.853934][T30355] netlink: 'syz.3.6534': attribute type 2 has an invalid length. [ 741.089167][T30362] netlink: 'syz.1.6536': attribute type 4 has an invalid length. [ 741.113699][T30360] team0: Device gtp1 is up. Set it down before adding it as a team port [ 741.140835][T30364] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6535'. [ 742.156184][T30304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.216198][T30105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 742.320272][T30105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 742.357693][T30105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 742.390040][T30105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.419142][T30105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 742.466590][T30105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 742.488488][T30105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 742.527316][T30105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 742.693466][ T4945] Bluetooth: hci0: command tx timeout [ 742.923247][T30392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 742.956542][T30392] bridge0: port 1(bond1) entered blocking state [ 742.976926][T30392] bridge0: port 1(bond1) entered disabled state [ 742.984912][T30392] bond1: entered allmulticast mode [ 742.996975][T30392] bond1: entered promiscuous mode [ 743.011134][T30392] bridge0: port 1(bond1) entered blocking state [ 743.018309][T30392] bridge0: port 1(bond1) entered forwarding state [ 743.073590][ T6805] bridge0: port 1(bond1) entered disabled state [ 743.207473][T30428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6550'. [ 743.215806][T30433] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 743.258766][T30433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6552'. [ 743.308994][T30433] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.321674][T30433] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.322495][T30435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6553'. [ 743.365430][T30436] netlink: 'syz.4.6552': attribute type 21 has an invalid length. [ 743.375571][T30436] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6552'. [ 743.397410][T30437] IPVS: ip_vs_add_dest(): server weight less than zero [ 743.405447][T10763] IPVS: starting estimator thread 0... [ 743.477540][T30435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.485919][T30436] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6552'. [ 743.496580][T30441] IPVS: using max 40 ests per chain, 96000 per kthread [ 743.509295][T30439] netlink: 'syz.3.6555': attribute type 3 has an invalid length. [ 743.681586][T30105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.793952][T30105] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.834314][T30456] netlink: 'syz.3.6557': attribute type 1 has an invalid length. [ 743.855732][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.862955][ T6809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.871629][T30456] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6557'. [ 743.896720][T30458] netlink: 'syz.1.6556': attribute type 1 has an invalid length. [ 743.903064][T30456] netlink: 'syz.3.6557': attribute type 1 has an invalid length. [ 743.917216][T30455] syzkaller0: entered promiscuous mode [ 743.927302][T30455] syzkaller0: entered allmulticast mode [ 743.935761][T30456] netlink: 'syz.3.6557': attribute type 8 has an invalid length. [ 743.953481][T30456] netlink: 582 bytes leftover after parsing attributes in process `syz.3.6557'. [ 744.085590][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.092816][ T6791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.176176][T30458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 744.186868][T30458] bond2: (slave bond3): making interface the new active one [ 744.195802][T30458] bond2: (slave bond3): Enslaving as an active interface with an up link [ 744.247428][T30468] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 744.295910][T30463] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 744.365281][T30470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.730939][T30490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6570'. [ 745.067831][T30512] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 745.514992][T30105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.596741][T30105] veth0_vlan: entered promiscuous mode [ 745.619874][T30105] veth1_vlan: entered promiscuous mode [ 745.669381][T30105] veth0_macvtap: entered promiscuous mode [ 745.698566][T30105] veth1_macvtap: entered promiscuous mode [ 745.786131][T30105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.902413][T30105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.958886][ T6803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.968152][ T6803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.010177][T30534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6579'. [ 746.070450][ T6803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.108764][ T6803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.205622][T30539] : entered promiscuous mode [ 746.657781][T30552] netlink: 'syz.3.6584': attribute type 1 has an invalid length. [ 746.726781][T30556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6586'. [ 746.866119][T30563] netlink: zone id is out of range [ 746.905221][ T6803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.913458][T30563] netlink: zone id is out of range [ 746.933745][ T6803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.951346][T30563] netlink: zone id is out of range [ 746.989173][T30563] netlink: zone id is out of range [ 747.026563][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.052757][T30563] netlink: zone id is out of range [ 747.068762][T30569] netlink: 'syz.2.6590': attribute type 8 has an invalid length. [ 747.079271][T30563] netlink: zone id is out of range [ 747.087064][T30563] netlink: zone id is out of range [ 747.095252][T30563] netlink: zone id is out of range [ 747.101125][T30563] netlink: zone id is out of range [ 747.266138][ T6777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.301452][ T6777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.558789][T30578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.878969][T30585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.955321][T30585] bond4 (unregistering): Released all slaves [ 748.080361][T30599] netlink: 'syz.4.6600': attribute type 21 has an invalid length. [ 748.123629][T30603] netlink: 'syz.0.6598': attribute type 1 has an invalid length. [ 748.470141][T30621] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 748.763775][T30633] __nla_validate_parse: 7 callbacks suppressed [ 748.763792][T30633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6608'. [ 748.832695][T30638] veth0: entered promiscuous mode [ 748.847043][T30633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6608'. [ 748.897938][T30636] veth0: left promiscuous mode [ 749.214177][T30645] validate_nla: 1 callbacks suppressed [ 749.214195][T30645] netlink: 'syz.0.6612': attribute type 30 has an invalid length. [ 749.259894][T30633] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 749.593118][T30656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6613'. [ 749.691263][T30662] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6615'. [ 749.730577][T30663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6616'. [ 750.150397][T30684] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6619'. [ 750.156608][T30683] netlink: 'syz.1.6622': attribute type 19 has an invalid length. [ 750.168441][T30683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6622'. [ 750.194314][ T402] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.194512][T30683] netlink: 'syz.1.6622': attribute type 19 has an invalid length. [ 750.205688][ T402] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.220713][T30683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6622'. [ 750.230531][ T402] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.245667][ T402] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.980707][T30671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.922691][T30739] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 756.249389][T30754] x_tables: unsorted entry at hook 1 [ 756.365895][T30758] gtp0: entered promiscuous mode [ 756.387190][T30763] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6639'. [ 756.439101][T30758] gtp0: entered allmulticast mode [ 756.450072][T30762] nbd: couldn't find a device at index 3 [ 757.067286][T30780] syzkaller0: entered promiscuous mode [ 757.105919][T30780] syzkaller0: entered allmulticast mode [ 762.363106][T30823] syzkaller0: entered promiscuous mode [ 762.397696][T30823] syzkaller0: entered allmulticast mode [ 762.457499][T30836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6657'. [ 762.721071][T30840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6657'. [ 762.769949][T30852] tipc: Trying to set illegal importance in message [ 764.308711][ T2542] block nbd2: Possible stuck request ffff888027ec1dc0: control (read@0,1024B). Runtime 120 seconds [ 764.321579][ T2542] block nbd2: Possible stuck request ffff888027ec1f80: control (read@1024,1024B). Runtime 120 seconds [ 764.332921][ T2542] block nbd2: Possible stuck request ffff888027ec2140: control (read@2048,1024B). Runtime 120 seconds [ 764.347002][ T2542] block nbd2: Possible stuck request ffff888027ec2300: control (read@3072,1024B). Runtime 120 seconds [ 767.771677][T30830] syzkaller1: entered promiscuous mode [ 767.778199][T30830] syzkaller1: entered allmulticast mode [ 768.000440][T30867] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6662'. [ 768.355608][T30875] syzkaller0: entered promiscuous mode [ 768.361936][T30875] syzkaller0: entered allmulticast mode [ 768.399417][T30885] bridge0: port 3(veth1_to_bridge) entered blocking state [ 768.419306][T30885] bridge0: port 3(veth1_to_bridge) entered disabled state [ 768.437963][T30885] veth1_to_bridge: entered allmulticast mode [ 768.467141][T30885] veth1_to_bridge: entered promiscuous mode [ 768.481026][T30885] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 768.527576][T30885] bridge0: port 3(veth1_to_bridge) entered blocking state [ 768.534917][T30885] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 768.812706][T30899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6674'. [ 773.125162][T30886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6667'. [ 773.136001][T30899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6674'. [ 773.254173][ C0] net_ratelimit: 250 callbacks suppressed [ 773.254195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.273058][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.285655][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.298095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.310653][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.323171][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.335731][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.348174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.360749][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.373190][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.161036][T30908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6675'. [ 774.524150][T30908] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 774.791287][T30908] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 774.819199][T30921] netlink: 'syz.1.6680': attribute type 5 has an invalid length. [ 774.906432][T30921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6680'. [ 774.910249][T30908] gretap1: entered promiscuous mode [ 774.971973][T30908] gretap1: entered allmulticast mode [ 775.041667][T30925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6681'. [ 778.261877][ C1] net_ratelimit: 12315 callbacks suppressed [ 778.261912][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 778.261977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.269146][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 778.280241][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.281431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.294526][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 778.305384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.307891][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.319598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 778.330357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.958437][ C0] sched: DL replenish lagged too much [ 783.272068][ C1] net_ratelimit: 13817 callbacks suppressed [ 783.272112][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 783.272542][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.279170][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 783.290454][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.291729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.304898][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 783.316406][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.317660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.330392][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 783.341268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.282300][ C1] net_ratelimit: 13533 callbacks suppressed [ 788.282335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 788.282551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.289611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 788.300719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.301869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.315405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 788.325829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.326998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.340027][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 788.350739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.128167][T30880] Bluetooth: hci1: command 0x0406 tx timeout [ 793.292248][ C1] net_ratelimit: 13601 callbacks suppressed [ 793.292274][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.292281][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 793.292842][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 793.298816][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.299936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.312633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 793.323585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.325660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.337864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 793.348488][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.219863][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 798.302005][ C1] net_ratelimit: 13707 callbacks suppressed [ 798.302038][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 798.302408][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.309125][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 798.320340][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.321536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.334758][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 798.345466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.346677][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.359790][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 798.370374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.311796][ C1] net_ratelimit: 13565 callbacks suppressed [ 803.311830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 803.312274][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.318998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 803.330128][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.331282][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.344832][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 803.355258][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.356429][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.369560][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 803.380093][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.668117][T30931] Bluetooth: hci2: command tx timeout [ 808.321798][ C0] net_ratelimit: 15752 callbacks suppressed [ 808.321819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.321875][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 808.328269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.328619][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.342189][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 808.353531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.367372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 808.377838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.378208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.378600][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.710248][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.332022][ C0] net_ratelimit: 14044 callbacks suppressed [ 813.332028][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 813.332042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.332708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 813.338386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.338732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.352508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 813.362921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.365484][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.377185][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 813.387840][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.341761][ C1] net_ratelimit: 14237 callbacks suppressed [ 818.341809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 818.341917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.348985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 818.360115][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.360453][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.360788][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.362690][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.374882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 818.385377][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.385733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.352047][ C1] net_ratelimit: 13178 callbacks suppressed [ 823.352088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 823.353337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.359141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 823.370481][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.370854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.371209][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.385091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 823.397185][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 823.409798][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 823.420352][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.361860][ C0] net_ratelimit: 13671 callbacks suppressed [ 828.361882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.362285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 828.368180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.368533][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.382192][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 828.394381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.407231][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 828.418287][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.432340][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 828.442749][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.371916][ C1] net_ratelimit: 13603 callbacks suppressed [ 833.371960][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 833.372667][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.379136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 833.390435][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.390879][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.391252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.404899][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 833.417073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.429861][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 833.440255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.382000][ C0] net_ratelimit: 13453 callbacks suppressed [ 838.382021][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.382175][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 838.388404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.390257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.402310][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 838.413486][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.427178][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 838.438084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.438430][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.440237][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.391938][ C1] net_ratelimit: 13623 callbacks suppressed [ 843.391973][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 843.392376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.399269][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 843.410441][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.412822][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.424747][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 843.435382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.435814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.436207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.449812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 848.401939][ C0] net_ratelimit: 14274 callbacks suppressed [ 848.401961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.402118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 848.408228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.408560][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.422368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 848.434764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.447508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 848.458104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.459909][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 848.472441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 853.412068][ C0] net_ratelimit: 14148 callbacks suppressed [ 853.412088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.412132][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 853.418349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.418685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.432557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 853.444418][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.457388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 853.467785][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.468125][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.468459][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.422384][ C1] net_ratelimit: 13499 callbacks suppressed [ 858.422417][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 858.423555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.429697][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 858.440878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.441222][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.441558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.443443][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.455838][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 858.465993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 858.466385][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.431827][ C0] net_ratelimit: 13506 callbacks suppressed [ 863.431851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.431980][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 863.438195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.438520][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.452384][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 863.462899][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.464804][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.476990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 863.487911][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.488306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.441997][ C0] net_ratelimit: 14399 callbacks suppressed [ 868.442019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.442289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 868.448714][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.462240][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 868.472858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.473255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.473645][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.487839][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 868.499307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 868.512607][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 873.451856][ C0] net_ratelimit: 14545 callbacks suppressed [ 873.451877][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.451906][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 873.458278][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.459860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.472357][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 873.482742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.483591][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.499942][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 873.511402][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.511817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.040345][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.462134][ C1] net_ratelimit: 15003 callbacks suppressed [ 878.462181][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 878.463420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.469248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 878.480549][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.481319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.495083][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 878.505513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.505870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.506210][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.507716][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.471763][ C1] net_ratelimit: 14154 callbacks suppressed [ 883.471806][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 883.472850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.479086][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 883.490161][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.490918][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.504945][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 883.515333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.515685][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.516092][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 883.529688][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 888.481776][ C1] net_ratelimit: 13582 callbacks suppressed [ 888.481823][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 888.482289][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.488781][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 888.500083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.500468][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.500814][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.502980][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.514762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 888.525249][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.526072][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.491928][ C0] net_ratelimit: 13938 callbacks suppressed [ 893.491957][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.493366][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 893.499993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.512297][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 893.522698][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.523480][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.537139][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 893.547549][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.547935][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.548271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.502228][ C1] net_ratelimit: 14100 callbacks suppressed [ 898.502262][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 898.503846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.509407][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 898.521152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.521929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.534890][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 898.545535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.545901][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.546243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 898.559677][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 901.600045][ T2542] block nbd2: Possible stuck request ffff888027ec1dc0: control (read@0,1024B). Runtime 150 seconds [ 903.263158][ T2542] block nbd2: Possible stuck request ffff888027ec1f80: control (read@1024,1024B). Runtime 150 seconds [ 903.512082][ C1] net_ratelimit: 14039 callbacks suppressed [ 903.512116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 903.512338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.519389][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 903.530486][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.531229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.545059][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 903.555373][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.555718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.556099][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.570107][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 904.128884][ T2542] block nbd2: Possible stuck request ffff888027ec2140: control (read@2048,1024B). Runtime 150 seconds [ 904.154655][ T2542] block nbd2: Possible stuck request ffff888027ec2300: control (read@3072,1024B). Runtime 150 seconds [ 908.521802][ C0] net_ratelimit: 13692 callbacks suppressed [ 908.521831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.521872][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 908.528133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.530288][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.542155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 908.552695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.553443][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.567219][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 908.577829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.578177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.532036][ C0] net_ratelimit: 13913 callbacks suppressed [ 913.532059][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.533627][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.538381][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.538704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.552152][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 913.562829][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.565013][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.577576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.587802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.588572][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.542226][ C1] net_ratelimit: 14421 callbacks suppressed [ 918.542259][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 918.543842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.549375][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 918.560506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.561254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.574718][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 918.585586][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.585973][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.586312][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.600143][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.551781][ C0] net_ratelimit: 14837 callbacks suppressed [ 923.551804][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.552187][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.558096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.558428][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.572101][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 923.584717][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.596596][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 923.607414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.608168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.621710][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 928.561947][ C0] net_ratelimit: 14341 callbacks suppressed [ 928.561968][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.562237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 928.568335][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.568663][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.582355][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 928.593461][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.595725][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.608339][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 928.619326][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.620088][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.156630][ T30] INFO: task kworker/u8:20:6791 blocked for more than 149 seconds. [ 933.572345][ C1] net_ratelimit: 13485 callbacks suppressed [ 933.572378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 933.573194][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.579558][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 933.590963][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.591744][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.605116][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 933.615638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.615978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.616313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.630247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 935.301707][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 935.308695][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30924/1:b..l [ 935.317258][ C1] rcu: (detected by 1, t=10503 jiffies, g=153709, q=2887 ncpus=2) [ 935.325177][ C1] task:syz.2.6682 state:R running task stack:24216 pid:30924 tgid:30924 ppid:28411 task_flags:0x400040 flags:0x00080000 [ 935.340133][ C1] Call Trace: [ 935.343437][ C1] [ 935.346395][ C1] __schedule+0x1821/0x5740 [ 935.350929][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 935.355916][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 935.361148][ C1] ? __pfx___schedule+0x10/0x10 [ 935.366044][ C1] preempt_schedule_irq+0x4d/0xa0 [ 935.371090][ C1] irqentry_exit+0x14f/0x760 [ 935.375716][ C1] ? trace_irq_disable+0x3b/0x140 [ 935.381033][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 935.387029][ C1] RIP: 0010:unwind_next_frame+0x4ea/0x2550 [ 935.392861][ C1] Code: 4c 8b 6c 24 20 0f 84 86 16 00 00 e9 03 02 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 <48> 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 [ 935.412487][ C1] RSP: 0018:ffffc90006fe6fb8 EFLAGS: 00000202 [ 935.418574][ C1] RAX: 0000000000000008 RBX: ffffffff904942f0 RCX: 0000000000000008 [ 935.426558][ C1] RDX: ffffffff904942d0 RSI: ffffffff90c50e52 RDI: ffffffff8c28af00 [ 935.434545][ C1] RBP: ffffffff904942d0 R08: 0000000000000009 R09: ffffffff8e95cda0 [ 935.442527][ C1] R10: ffffc90006fe70e8 R11: fffff52000dfce29 R12: ffffffff81771cd6 [ 935.450515][ C1] R13: ffffffff904942d0 R14: ffffc90006fe70e8 R15: 000000000000771c [ 935.458506][ C1] ? __unwind_start+0xf6/0x760 [ 935.463311][ C1] ? unwind_next_frame+0xd5/0x2550 [ 935.468447][ C1] ? unwind_next_frame+0xa6/0x2550 [ 935.473573][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 935.479045][ C1] ? __unwind_start+0xf7/0x760 [ 935.483837][ C1] __unwind_start+0x5b8/0x760 [ 935.488542][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 935.494813][ C1] arch_stack_walk+0xe3/0x150 [ 935.499551][ C1] ? __unwind_start+0xf7/0x760 [ 935.504343][ C1] stack_trace_save+0xa9/0x100 [ 935.509226][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 935.514652][ C1] save_stack+0x122/0x230 [ 935.519012][ C1] ? __pfx_save_stack+0x10/0x10 [ 935.523905][ C1] __reset_page_owner+0x71/0x1f0 [ 935.528874][ C1] __free_frozen_pages+0xbc7/0xd30 [ 935.534020][ C1] __slab_free+0x274/0x2c0 [ 935.538482][ C1] qlist_free_all+0x99/0x100 [ 935.543099][ C1] ? mas_alloc_nodes+0x291/0x350 [ 935.548129][ C1] kasan_quarantine_reduce+0x148/0x160 [ 935.553623][ C1] __kasan_slab_alloc+0x22/0x80 [ 935.558853][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 935.564331][ C1] ? mas_alloc_nodes+0x291/0x350 [ 935.569378][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 935.575035][ C1] mas_alloc_nodes+0x291/0x350 [ 935.579826][ C1] mas_preallocate+0x2d6/0x640 [ 935.584620][ C1] ? rcu_is_watching+0x15/0xb0 [ 935.589412][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 935.594761][ C1] ? __mas_set_range+0x12f/0x3c0 [ 935.599731][ C1] __split_vma+0x318/0xa40 [ 935.604185][ C1] ? __pfx___split_vma+0x10/0x10 [ 935.609159][ C1] vma_modify+0x88a/0x1e10 [ 935.613607][ C1] vma_modify_flags+0x24b/0x330 [ 935.618480][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 935.623883][ C1] ? rcu_is_watching+0x15/0xb0 [ 935.628664][ C1] ? percpu_counter_add_batch+0xea/0x1d0 [ 935.634432][ C1] ? __vm_enough_memory+0x11b/0x380 [ 935.639664][ C1] mprotect_fixup+0x62a/0xb60 [ 935.644382][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 935.649623][ C1] ? apparmor_file_mprotect+0x1d0/0x400 [ 935.655189][ C1] ? security_file_mprotect+0x1a/0x290 [ 935.660765][ C1] do_mprotect_pkey+0x8d5/0xd20 [ 935.665649][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 935.671034][ C1] ? vm_mmap_pgoff+0x373/0x4f0 [ 935.675836][ C1] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 935.680628][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 935.685883][ C1] ? rcu_is_watching+0x15/0xb0 [ 935.690675][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.696766][ C1] __x64_sys_mprotect+0x80/0x90 [ 935.701694][ C1] do_syscall_64+0x15f/0xf80 [ 935.706314][ C1] ? trace_irq_disable+0x3b/0x140 [ 935.711364][ C1] ? clear_bhb_loop+0x40/0x90 [ 935.716074][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.721987][ C1] RIP: 0033:0x7fc9b6b9cc57 [ 935.726418][ C1] RSP: 002b:00007ffff2772348 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 935.734856][ C1] RAX: ffffffffffffffda RBX: 00007fc9b79a26c0 RCX: 00007fc9b6b9cc57 [ 935.742846][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fc9b7983000 [ 935.750847][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 935.758839][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffff27724a0 [ 935.766831][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 935.774842][ C1] [ 935.777876][ C1] rcu: rcu_preempt kthread starved for 5361 jiffies! g153709 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 935.789078][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 935.799062][ C1] rcu: RCU grace-period kthread stack dump: [ 935.804965][ C1] task:rcu_preempt state:R running task stack:27008 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 935.818481][ C1] Call Trace: [ 935.821777][ C1] [ 935.824718][ C1] __schedule+0x1821/0x5740 [ 935.829256][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 935.834253][ C1] ? __pfx___schedule+0x10/0x10 [ 935.839152][ C1] ? schedule+0x90/0x360 [ 935.843423][ C1] schedule+0x164/0x360 [ 935.847604][ C1] schedule_timeout+0x158/0x2c0 [ 935.852478][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 935.857876][ C1] ? __pfx_process_timeout+0x10/0x10 [ 935.863191][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 935.869110][ C1] ? prepare_to_swait_event+0x340/0x370 [ 935.874692][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 935.879577][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 935.885749][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 935.891052][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 935.896289][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 935.902155][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 935.906771][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 935.911995][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 935.917827][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 935.922822][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 935.927878][ C1] kthread+0x389/0x470 [ 935.931976][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 935.937190][ C1] ? __pfx_kthread+0x10/0x10 [ 935.941805][ C1] ret_from_fork+0x514/0xb70 [ 935.946412][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 935.951536][ C1] ? __switch_to+0xc79/0x1410 [ 935.956242][ C1] ? __pfx_kthread+0x10/0x10 [ 935.960858][ C1] ret_from_fork_asm+0x1a/0x30 [ 935.965661][ C1] [ 935.968688][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 935.975023][ C1] Sending NMI from CPU 1 to CPUs 0: [ 935.980252][ C0] NMI backtrace for cpu 0 [ 935.980271][ C0] CPU: 0 UID: 0 PID: 3230 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 935.980289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 935.980301][ C0] Workqueue: bat_events batadv_dat_purge [ 935.980391][ C0] RIP: 0010:unwind_next_frame+0x295/0x2550 [ 935.980414][ C0] Code: 8d 04 40 48 8d 04 45 50 10 bc 90 48 3d 92 42 71 91 0f 87 13 04 00 00 45 39 e8 48 bd 00 00 00 00 00 fc ff df 0f 84 17 04 00 00 <4a> 8d 14 ad 24 44 43 90 45 29 e8 4a 8d 1c 82 48 83 c3 fc 49 89 d5 [ 935.980429][ C0] RSP: 0018:ffffc900000069d8 EFLAGS: 00000202 [ 935.980442][ C0] RAX: ffffffff90c5d998 RBX: dffffc0000000000 RCX: 0000000080000100 [ 935.980454][ C0] RDX: 00000000000aac8e RSI: ffffffff90c5d938 RDI: ffffffff8c28af00 [ 935.980465][ C0] RBP: dffffc0000000000 R08: 000000000001a18c R09: ffffffff8e95cda0 [ 935.980476][ C0] R10: ffffc90000006af8 R11: ffffffff81b0efc0 R12: ffffffff8187df25 [ 935.980488][ C0] R13: 000000000001a17c R14: ffffc90000006aa8 R15: 00000000000087df [ 935.980499][ C0] FS: 0000000000000000(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 935.980512][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.980523][ C0] CR2: 000055557651c4e8 CR3: 0000000077994000 CR4: 00000000003526f0 [ 935.980538][ C0] Call Trace: [ 935.980544][ C0] [ 935.980555][ C0] ? unwind_next_frame+0xa6/0x2550 [ 935.980575][ C0] ? do_softirq+0x76/0xd0 [ 935.980598][ C0] ? do_softirq+0x76/0xd0 [ 935.980614][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 935.980644][ C0] arch_stack_walk+0x11b/0x150 [ 935.980667][ C0] ? do_softirq+0x76/0xd0 [ 935.980683][ C0] stack_trace_save+0xa9/0x100 [ 935.980705][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 935.980732][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 935.980749][ C0] kasan_save_track+0x3e/0x80 [ 935.980769][ C0] ? kasan_save_track+0x3e/0x80 [ 935.980788][ C0] ? kasan_save_free_info+0x46/0x50 [ 935.980803][ C0] ? __kasan_slab_free+0x5c/0x80 [ 935.980823][ C0] ? kmem_cache_free+0x182/0x650 [ 935.980844][ C0] ? skb_release_head_state+0x270/0x360 [ 935.980920][ C0] ? __kfree_skb+0x24/0x210 [ 935.980939][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 935.981032][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 935.981115][ C0] ? nf_hook_slow+0xc5/0x220 [ 935.981208][ C0] ? NF_HOOK+0x21f/0x3c0 [ 935.981229][ C0] ? netif_receive_skb+0x278/0xbf0 [ 935.981297][ C0] ? NF_HOOK+0xa4/0x3a0 [ 935.981335][ C0] ? br_handle_frame_finish+0x1541/0x1c80 [ 935.981358][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 935.981379][ C0] ? br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 935.981394][ C0] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 935.981408][ C0] ? br_handle_frame+0x1277/0x1510 [ 935.981430][ C0] ? __netif_receive_skb_core+0x98f/0x3170 [ 935.981471][ C0] ? process_backlog+0x76d/0x1950 [ 935.981488][ C0] ? __napi_poll+0xae/0x340 [ 935.981503][ C0] ? net_rx_action+0x627/0xf70 [ 935.981519][ C0] ? handle_softirqs+0x22a/0x840 [ 935.981534][ C0] ? do_softirq+0x76/0xd0 [ 935.981565][ C0] ? skb_release_head_state+0x270/0x360 [ 935.981585][ C0] kasan_save_free_info+0x46/0x50 [ 935.981602][ C0] __kasan_slab_free+0x5c/0x80 [ 935.981623][ C0] kmem_cache_free+0x182/0x650 [ 935.981650][ C0] ? __skb_ext_put+0x221/0x2f0 [ 935.981674][ C0] skb_release_head_state+0x270/0x360 [ 935.981698][ C0] __kfree_skb+0x24/0x210 [ 935.981718][ C0] ip6_mc_input+0x8de/0xbd0 [ 935.981743][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 935.981768][ C0] ? ip6_rcv_finish+0x265/0x280 [ 935.981790][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 935.981811][ C0] ip_sabotage_in+0x1e1/0x270 [ 935.981836][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 935.981867][ C0] nf_hook_slow+0xc5/0x220 [ 935.981891][ C0] NF_HOOK+0x21f/0x3c0 [ 935.981913][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 935.981934][ C0] ? NF_HOOK+0x9e/0x3c0 [ 935.981955][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 935.981977][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 935.982002][ C0] ? netif_receive_skb+0x102/0xbf0 [ 935.982018][ C0] netif_receive_skb+0x278/0xbf0 [ 935.982032][ C0] ? NF_HOOK+0xfa/0x3a0 [ 935.982044][ C0] ? lock_acquire+0x106/0x350 [ 935.982062][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 935.982079][ C0] ? br_netif_receive_skb+0x126/0x190 [ 935.982096][ C0] NF_HOOK+0xa4/0x3a0 [ 935.982108][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 935.982122][ C0] ? NF_HOOK+0xfa/0x3a0 [ 935.982134][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 935.982149][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 935.982167][ C0] ? br_pass_frame_up+0x275/0x420 [ 935.982191][ C0] br_handle_frame_finish+0x1541/0x1c80 [ 935.982213][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 935.982234][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.982261][ C0] ? ip6t_do_table+0x153/0x1560 [ 935.982330][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 935.982347][ C0] ? nf_hook_slow+0x176/0x220 [ 935.982370][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.982393][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 935.982419][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 935.982443][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.982465][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 935.982545][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 935.982566][ C0] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 935.982581][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.982609][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 935.982625][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 935.982645][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 935.982662][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 935.982676][ C0] ? br_nf_pre_routing+0x75f/0x14c0 [ 935.982702][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 935.982724][ C0] br_handle_frame+0x1277/0x1510 [ 935.982751][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 935.982775][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.982803][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 935.982825][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 935.982848][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 935.982872][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 935.982888][ C0] ? ip6_rcv_finish+0x265/0x280 [ 935.982910][ C0] ? NF_HOOK+0x336/0x3c0 [ 935.982936][ C0] ? process_backlog+0x3eb/0x1950 [ 935.982957][ C0] ? process_backlog+0x3eb/0x1950 [ 935.982973][ C0] ? process_backlog+0x3eb/0x1950 [ 935.982990][ C0] ? process_backlog+0x3eb/0x1950 [ 935.983008][ C0] process_backlog+0x76d/0x1950 [ 935.983034][ C0] __napi_poll+0xae/0x340 [ 935.983049][ C0] ? skb_defer_free_flush+0x233/0x260 [ 935.983067][ C0] net_rx_action+0x627/0xf70 [ 935.983084][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 935.983110][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 935.983136][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 935.983170][ C0] handle_softirqs+0x22a/0x840 [ 935.983187][ C0] ? do_softirq+0x76/0xd0 [ 935.983204][ C0] ? batadv_dat_purge+0x2da/0x3c0 [ 935.983221][ C0] do_softirq+0x76/0xd0 [ 935.983235][ C0] [ 935.983241][ C0] [ 935.983246][ C0] __local_bh_enable_ip+0xf8/0x130 [ 935.983262][ C0] batadv_dat_purge+0x2da/0x3c0 [ 935.983280][ C0] ? process_scheduled_works+0xa70/0x1860 [ 935.983296][ C0] process_scheduled_works+0xb5d/0x1860 [ 935.983327][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 935.983341][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 935.983371][ C0] rescuer_thread+0x827/0x1130 [ 935.983393][ C0] ? rescuer_thread+0xbb/0x1130 [ 935.983419][ C0] kthread+0x389/0x470 [ 935.983438][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 935.983454][ C0] ? __pfx_kthread+0x10/0x10 [ 935.983474][ C0] ret_from_fork+0x514/0xb70 [ 935.983491][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 935.983507][ C0] ? __switch_to+0xc79/0x1410 [ 935.983530][ C0] ? __pfx_kthread+0x10/0x10 [ 935.983550][ C0] ret_from_fork_asm+0x1a/0x30 [ 935.983576][ C0] [ 936.762873][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 938.581860][ C0] net_ratelimit: 14628 callbacks suppressed [ 938.581882][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.581899][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 938.589881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.611133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 938.612106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.623960][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7a:5b:d8:47:ae:b8, vlan:0) [ 938.636373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.648368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 938.660497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.672390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 939.507413][ T2542] block nbd2: Possible stuck request ffff888027ec1dc0: control (read@0,1024B). Runtime 180 seconds [ 939.534421][ T2542] block nbd2: Possible stuck request ffff888027ec1f80: control (read@1024,1024B). Runtime 180 seconds [ 939.561246][ T2542] block nbd2: Possible stuck request ffff888027ec2140: control (read@2048,1024B). Runtime 180 seconds [ 939.586902][ T2542] block nbd2: Possible stuck request ffff888027ec2300: control (read@3072,1024B). Runtime 180 seconds [ 939.624789][ T30] Not tainted syzkaller #0 [ 939.642838][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.651543][ T30] task:kworker/u8:20 state:D stack:22296 pid:6791 tgid:6791 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 939.677053][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 939.695626][ T30] Call Trace: [ 939.698940][ T30] [ 939.715064][ T30] __schedule+0x1821/0x5740 [ 939.719627][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 939.738548][ T30] ? __pfx___schedule+0x10/0x10 [ 939.757261][ T30] ? schedule+0x90/0x360 [ 939.761558][ T30] schedule+0x164/0x360 [ 939.778554][ T30] schedule_preempt_disabled+0x13/0x30 [ 939.797091][ T30] __mutex_lock+0x7f7/0x1550 [ 939.814544][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 939.819533][ T30] ? __mutex_lock+0x608/0x1550 [ 939.838563][ T30] ? addrconf_dad_work+0x11e/0x14c0 [ 939.857294][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 939.875344][ T30] ? trace_irq_disable+0x3b/0x140 [ 939.880429][ T30] addrconf_dad_work+0x11e/0x14c0 [ 939.898057][ T30] ? lock_acquire+0x106/0x350 [ 939.916109][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 939.921538][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 939.941008][ T30] ? process_scheduled_works+0xa70/0x1860 [ 939.960499][ T30] ? process_scheduled_works+0xa70/0x1860 [ 939.979084][ T30] ? process_scheduled_works+0xa70/0x1860 [ 939.999198][ T30] process_scheduled_works+0xb5d/0x1860 [ 940.017583][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.036871][ T30] ? assign_work+0x3d5/0x5e0 [ 940.041522][ T30] worker_thread+0xa53/0xfc0 [ 940.060113][ T30] kthread+0x389/0x470 [ 940.077909][ T30] ? __pfx_worker_thread+0x10/0x10 [ 940.095847][ T30] ? __pfx_kthread+0x10/0x10 [ 940.100508][ T30] ret_from_fork+0x514/0xb70 [ 940.118218][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 940.136066][ T30] ? __switch_to+0xc79/0x1410 [ 940.140801][ T30] ? __pfx_kthread+0x10/0x10