last executing test programs: 7m53.821365641s ago: executing program 1 (id=6218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000740)=0x2000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/71, 0x328000, 0x800, 0x9, 0x3}, 0xfffffffffffffee8) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x6, {0x2, 0x4e20, @local}, 'bridge0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000047afad1a", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c0002800500040007000000"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000804) 7m49.560983675s ago: executing program 1 (id=6221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="28aabf003a00010000fc020000000000000000000000000000000000000000000000000000000000111540f60309a2637a4c44e7f0c23a3c76064154209a5315d50b719e1c32fd9009fc77a589b691e72511e424086f1623ded98a1eeed8e19f618b5385bd80e7bf49f3da86e8ca76b0f03d5ff584ac1be3ee8372e17c3596845d6822cbac987354a81c1d26188272a49542b5dd4218eefdc8626ed590"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000002000), 0x4) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="07a6"], 0x158}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x485}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008002) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 64) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async, rerun: 64) accept4(r2, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000680)=0x80, 0x0) (rerun: 64) bind$alg(r11, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r10, 0x0) (async, rerun: 32) write$cgroup_devices(r10, &(0x7f00000005c0)={'a', ' *:* ', 'r\x00'}, 0x8) (async, rerun: 32) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r9, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20044050}, 0x40000) 7m49.234243613s ago: executing program 1 (id=6225): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d00)={{0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x109200, &(0x7f0000000280)={@align=0xe, {0x2, 0x6, 0x7fffffff}}, 0x10, &(0x7f00000002c0), &(0x7f0000000380)=0xf8dc}, 0x8, &(0x7f0000000c00)=[{0x1, 0x2, &(0x7f00000003c0)='^\x00', &(0x7f0000000400)="7b086a23a3efee13c76eb5d5a6d486011053a1c338aaa4b5c46e5fca3b3bf69baac8d1da4f8d771c9f439c52baf58cbbd503ab2f92d8589e18c09b44ec1ddba14c6c73ccdedc0641e1eb331d0e85ddeac797efb6072b1972c752445f40e4c8666921b92a03b16f12251f63771a87cbc59c0944075afc03273e5b583c549a8a6fe3a495e584b7259c678bb622ab2064970a9e985289718105e701fcf45561b8d2365dcdc3e44bffc9546031fd8736a89d802e9c2ee4d0a644be0024094b24a4e5ff46759f7d6cac5414a1020c6b576bb2da5935c9c632f38a01f3317dff3d8d29221c", 0xe2, 0x2}, {0x3, 0x0, &(0x7f0000000500)='\x00', &(0x7f00000005c0)="128f6de0e7d1737e3f3d6f5803966f3bc9a16fe84c23712fcf46b2ff20d21cedd158fad69a932f0ac307aa17f7ec7b66477bedd34a88d399ab5d94b1a1a764e2c0b75a0624d4", 0x46, 0x12}, {0x2, 0x7d, &(0x7f0000000640)='\'##:$#\x00', &(0x7f0000000680)="20a10256e00863ceacef64b90c08b52d6c266e6a4e46ec87a9784090c1ccd921f7e9b09af3a7eaf41837405b", 0x2c, 0x20}, {0x1, 0x4, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="2e5af1ee0927fe26cb57f9c8d79691fcdab8a1aa031cf01557557054a6d96b7a00187dedbe43121a9fc3e384f47ecf3f83d528c9d7019c45c5ca995228cdb89786cf0f4814725a6d7d077c8d3e45788f2fe021ac4a59e3b2b162b4322d36b056d40901fe5b388797a4ac1896bff34de4b43fe721bef9ee69c157c3ae97d86a4b8dca472c5cb046a1dd667b9b68ca74fa0e17789f49aa", 0x96, 0xa}, {0x1, 0xc, &(0x7f00000007c0)='gre0\x00', &(0x7f0000000800)="d1bdaafdf79c70064f03f32853c97a835145aaec057ec04c7708e0b83b433c8e0492fdfbf190cefca8a66bfea95945c7ddb8d89bb846c3ec5ead23ed645e6b63184694c4c78da13488d5283545c6390e2906461e82307c9fc45eb084466f2f9d004f141cf2ba97104cebba70e25f625698e4fca90500201853b3aeaca94163db5ea4ad62717668ae812b79052f14e2664a216d7a524983a22cc6c78ea78a868acde39dd32c5f7223c2de397a1575ee160f5d7c4f911bff2870b187be7e52da95551b", 0xc2, 0x3a}, {0x3, 0x40, &(0x7f0000000900)='\xff\xff', &(0x7f0000000940)="936daa188d816b579fbb4ebbe8f1561b1b5d00a0ce84b3771a6050ce35425a2e42e591ad2e94f5ce0ce323a905bae54adce543ed7943aa9b90d96cf1c5814da0141681506df4b096b838f26f273329168717d72ba95885416fa30c892bb6035f6a9cd87205", 0x65, 0x8}, {0x1, 0xa75, &(0x7f00000009c0)='\x00', &(0x7f0000000a00)="ca20f11673d2c2fadff8da1f2aef671783050a6a1453460ca0fc2bee3d6b0e3dfc558e5efc641d52a39963ba61537651bdb19c72de80468f0e52cd51f5de20b5e4bfd2a6fa2a863e7bbba61011a671c9ceb107806c8230577ee0062e97e9ccdbaed2083ce48de184a08fc9a3a3d155e2d5e7d74cb28436b2440506b20e666ceb637df32c00dcd9d5a737dbfa2d6ae54bfb7fadea276865287d1483fc6bf3b1034be79009671b8d73b9fcba68f908cafe1bcd64ab7231145ce89c1a899eeb992ddf5eadac1d3b52731eb48dd7f2a823259f8f7775531cf05df8c5c0777911187e998b2ef87cf296f00206ef2266380685df4def93ddb5c1653a", 0xf9, 0x22}, {0x1, 0x8001, &(0x7f0000000b00)=')$\x00', &(0x7f0000000b40)="c3ea8f4da8ce2783911955ec9d99a528cbcfa8809a619f5704d01fa25b1f0beebed614c0247c2004f8dcc461913bd229362c897073fd0aaecb5b0c818c9a840a2c8daf6ffac52a805c3579b24c3c63b01995f9b88538a00342622995362763790b93ad3c95f03acf00511f8b73009bb3e1b1f06f1c80f5a878ce3e062790d5da04d2014e4589071ec9880bd04cf83ab86921bc7e5807890c907d4c9c5fab7f1071ddc85e037f07d8f7eb2f1875da0dc1da9c7f2e0dc381253f5d", 0xba, 0x30}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x891d, &(0x7f00000001c0)={'gre0\x00', 0x0}) (async) recvmmsg(r3, &(0x7f0000000340), 0x0, 0x40002000, &(0x7f0000000e40)) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r1, @ANYBLOB="230002000000d9000000929399878a7c475700ed4b8e279ec3148ee0a6b8717367e7b171772a76ae88d8da531d43628a0ced6b0a7b67c792d301ca72191ed35f1002d40c81abe9f8"], 0x2c}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xfffffff7}, 0x10) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) close(0x3) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m49.037044862s ago: executing program 1 (id=6228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000440)=""/194, &(0x7f0000000540)=0xc2) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000040)=0x9, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa8d"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r9, 0xff, 0x3, &(0x7f0000000900)="7c73c6e9", 0x4) sendmmsg$alg(r8, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800170100000300000001000000000000d883153ed592e20bab07f5a6b0d2368586bd8412f4656c4d4f25044a4341ba8b3a8e3eff9d555b7b5e026dbc7b1d301274d278693c251b750ca9e621a6c6712526843e89b0fc0884d89f8236340fce172aaec1837948b5005177e62754aad745b6bfab24ddc0c464462d346b7ab6861b6402e1e4994d41ea7254bd1290f17bbe", @ANYRES16=r5], 0x18, 0x40045}], 0x1, 0x4000090) recvmmsg(r8, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/38, 0x26}], 0x1}, 0x3ff}], 0x1, 0x40002020, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050008000000000000020effffee08000300", @ANYRES32=r10, @ANYBLOB="4d000e0080000000ffffffffffff080211000001505050505050000000000000000000008400010000060202020202020101480406050800000008060206003c04010fa104760600012b00060000000008000c007f0000000500a30001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 7m48.771200332s ago: executing program 1 (id=6231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c2ad8e98be22f76b333c631c72065771"}, @md5sig={0x13, 0x12, "3e485e6a2fef685077d0813fabcb4246"}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "5bcf3ba7127f8a75", "06353dd21f39bf4af29f95a4d43d4e30ee471f5e6418b72b69bde3909da9642b", "70dbf81f", "1c1ae17273575149"}, 0x38) r3 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'pim6reg0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x28, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x80, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x404c880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000010800014000000001080003400000000008000240000000000900010096170b9d2986112859754f7273797a3000d200000900020073797a32000000001400000011000100"], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 7m48.545282374s ago: executing program 1 (id=6233): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @empty}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x8, 0x1, {{0x32, 0x4, 0x3, 0x38, 0xc8, 0x67, 0x0, 0x34, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x6b, 0x7, [{0x188a9018dc6d0090, 0x5, "a02168"}, {0x6, 0x10, "ebfb2163a57a5f7997093d9f4bc6"}, {0x0, 0x9, "78ab8038a4319d"}, {0x0, 0x4, "d0eb"}, {0x0, 0x12, "283f0273ac6844357f0e5fdfd6de8f64"}, {0x7, 0x5, "1fc1a7"}, {0x6, 0x12, "7e1cf8bb60c83336c8e70d37380c406a"}, {0x6, 0xa, "3de3134c45289d5c"}, {0x0, 0x10, "0f7104f3811c4d207a72f06e07c9"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x31, 0x0, 0x2, [0x7f, 0x101, 0x3ff, 0x10000, 0x0]}, @timestamp={0x44, 0x18, 0x6b, 0x0, 0x4, [0x8, 0x6, 0xffffffff, 0x75, 0xffffffff]}, @timestamp_prespec={0x44, 0xc, 0x37, 0x3, 0x4, [{@remote, 0x3e}]}, @noop, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x4e22, 0xffff, 0x4e22, 0xfb, 0x8, 0x0, 0xa0, 0x16, r2, r3}, {0x6, 0xbe, 0x4, 0x8, 0x4, 0xffffffff, 0x9, 0xffffffffffffffff}, {0x7, 0x10001, 0xe8a0, 0x1}, 0x3, 0x6e6bb6, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4d2, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x8, 0x0}, 0x0, 0x0, 0x0, 0xc, 0x5, 0x7600, 0x8}}, 0xe8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) 7m33.452309951s ago: executing program 32 (id=6233): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @empty}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x8, 0x1, {{0x32, 0x4, 0x3, 0x38, 0xc8, 0x67, 0x0, 0x34, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x6b, 0x7, [{0x188a9018dc6d0090, 0x5, "a02168"}, {0x6, 0x10, "ebfb2163a57a5f7997093d9f4bc6"}, {0x0, 0x9, "78ab8038a4319d"}, {0x0, 0x4, "d0eb"}, {0x0, 0x12, "283f0273ac6844357f0e5fdfd6de8f64"}, {0x7, 0x5, "1fc1a7"}, {0x6, 0x12, "7e1cf8bb60c83336c8e70d37380c406a"}, {0x6, 0xa, "3de3134c45289d5c"}, {0x0, 0x10, "0f7104f3811c4d207a72f06e07c9"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x31, 0x0, 0x2, [0x7f, 0x101, 0x3ff, 0x10000, 0x0]}, @timestamp={0x44, 0x18, 0x6b, 0x0, 0x4, [0x8, 0x6, 0xffffffff, 0x75, 0xffffffff]}, @timestamp_prespec={0x44, 0xc, 0x37, 0x3, 0x4, [{@remote, 0x3e}]}, @noop, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0x4e22, 0xffff, 0x4e22, 0xfb, 0x8, 0x0, 0xa0, 0x16, r2, r3}, {0x6, 0xbe, 0x4, 0x8, 0x4, 0xffffffff, 0x9, 0xffffffffffffffff}, {0x7, 0x10001, 0xe8a0, 0x1}, 0x3, 0x6e6bb6, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4d2, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x8, 0x0}, 0x0, 0x0, 0x0, 0xc, 0x5, 0x7600, 0x8}}, 0xe8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) 30.789371978s ago: executing program 0 (id=9520): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000"], 0x4ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 32) 30.594256299s ago: executing program 0 (id=9524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d75}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x6d, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d75}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x6d, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x0, 0x5}) (async) 30.265448888s ago: executing program 0 (id=9529): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000068bfc901afdfd200"/39], 0x50) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@empty=0xe0}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r5, 0x2}, 0x20) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 30.069390917s ago: executing program 0 (id=9533): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='O\x8c\x00', 0xd402c16a4a08b277, &(0x7f0000000080)={@_ha_fsid={[0x81, 0x3]}, {0x7, 0xfff7, 0x0, 0x5}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xa}) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x20, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @nested={0x4}]}, 0x20}], 0x1}, 0x0) 29.939065481s ago: executing program 0 (id=9537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c00058018000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aa"], 0x74}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 29.805334603s ago: executing program 0 (id=9539): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e1c, 0x5, @private0, 0xa}}, 0x0, 0x0, 0x35, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ec9d8afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r12, &(0x7f0000000040)={0x23, 0x14}, 0x10) (async) bind$phonet(r12, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r11, &(0x7f0000000000)={0x23, 0x4}, 0x10) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) (async) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r13, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff0060031200000088fb143488a87f43055762cb80948864113b022543424aa608", 0x2f, 0x8004, &(0x7f0000000a80)={0x11, 0x88a8, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) 28.580158923s ago: executing program 4 (id=9555): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x2003, 0x0, r3}, 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r3, &(0x7f00000000c0)=0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000100)={r5, 0x9, 0x20}, 0xc) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r8}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000440)=ANY=[@ANYRES64=r7, @ANYBLOB="746f115fc9201917d6ba8e404d5a62fd60e734f402df40f2a930763f0ef26ecdd44efc9fbd8c214cc11baa2bffdd052700d4d66c3e8a2c3e1932a366085f1e9ec9b9a16632abe758b4160359ac3c06c12f27e329acae92e41ba867169f1867", @ANYRES16=r7, @ANYRES8=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000094204c942694ebf6029d1231ee0c7e3b8987ed49b799adf59492435db8ce7100b364662b99d818360bc3521bf9fc8934a0f01aa3393c204ad0764df107b82025f993c8d74e031b39585b375f7d1a"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 28.20577796s ago: executing program 4 (id=9560): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(r6, &(0x7f0000000040)=""/244, 0xf4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd050a000900ffffffffffff000008000300000400000000000000", @ANYRES32=r10, @ANYBLOB="08000b0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x24000884) 27.657300104s ago: executing program 3 (id=9566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000038f030000000000fe02001085000000b900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_dump={0x3e, 0x18, 0x0, 0xe6, "965cc527e27a05667684e699bf416c5bbd9bc63240a0f36def9eb04da017435a67fc648b99a26717bd51a8f8537472410325e2b404bb0ff8d7f5af495c3de32be84ebe6c3e8d8f22402864631b8fb2256704c85d4889a6296503995923ddf3fa89039e03a602d63d699fae468e456e6f3cf42305345575150c4bb095a716097e86de0e40b0c2eb654d8b09af09de24493a82e9e34c39a56a14825cee8e4beff73e938489ff5aaf5c4b3528deb25856e8183f5d251d2056662aa85896f3a748246dc506f78fa0822d6aa9ae35ca9747773540f84d3b763cbf18ff8fa5662de2bef85cdc0c2638"}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.619890701s ago: executing program 5 (id=9568): r0 = socket(0xd, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r0, 0x5, 0x7ff, "66d441acee95761e0e5040f7a5786458f8efa7ac7b749166df13f6e9c324e7cd94"}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001300)=""/4096, &(0x7f0000002300)=0x1000) 27.364804536s ago: executing program 5 (id=9569): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) splice(r1, 0x0, r0, 0x0, 0x800, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r7, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) r8 = socket(0x2b, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) sendto$x25(r8, &(0x7f0000000280)="f75cc1c8c621b5d889a7976ecb089c7b413e0c50dbee2d397f3cef58ecc99026609934e1860614a9f1721740f6a9c415611322858f2f08878166661287dbf39895951e2c82e937dce2a3ed00", 0x4c, 0x4040006, &(0x7f0000000300)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_ifreq(r2, 0x8913, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x6}) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f0000000000)) r9 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'gre0\x00'}) 27.267321097s ago: executing program 3 (id=9571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 27.061949249s ago: executing program 4 (id=9572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x22020600) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="700002"], 0x5) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)={0x0, 0x1, [@random="30c2add443ff"]}) 27.032543896s ago: executing program 5 (id=9573): syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 27.018607442s ago: executing program 3 (id=9574): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x95}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 26.966019351s ago: executing program 2 (id=9575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @mcast1}, 0x1c) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 26.895281319s ago: executing program 5 (id=9576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xfca4, 0x19, 0x1, 0x0, 0x10, {{@in6=@local, @in=@rand_addr=0x64010102, 0x0, 0x7, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6, 0x0, r1}, {0x0, 0xdf5, 0x1abe1019, 0x0, 0x0, 0x8, 0x80000000000000, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bba, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 26.878558691s ago: executing program 3 (id=9577): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x94881, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000000000010000000000000003000000000100000002"], 0x0, 0x53}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="f91bf2105b2dc959c27780082fa9d3445a851ee90eeaf28e743c262acd8cbcafaec22866f643c653bf5f6f5405ef0e55c7d50c465a2a5356688d", 0x3a}, {&(0x7f0000000100)="aeb3272f4e6db683597651881512485dc85f3de5edf141553625ba359d158c381654c7efd686f1143b4f021cd9bf61abdb57e996b46f2c73a8ff34e9063105698466bd35d9a1fab7a03217b2820d58c093868b8b911f591de0af85b4ff7d53087012883f8b2efe084de6f206558ece1f2cbafb47882c6bd9c638ac196e2ac4c964f1bdb9c9d8288f", 0x88}, {&(0x7f00000001c0)="9973272aa889e911618713303919eb4d965395fde46737c6b0a3918d", 0x1c}, {&(0x7f0000000240)="bb250637b677927fe71ceebb67a5f89643afbfaf6014c43b774f77e59ab825941f2e72737016a7a669d7a2d08a9244095bd68924af99328b887913e3b95f1abc1635fc178454d5d78809281fa8cdf53a25", 0x51}], 0x4) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'vcan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 26.789959311s ago: executing program 2 (id=9578): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="18000300010003", 0x7) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) sendto$inet6(r0, &(0x7f0000000240)="3b1cc6a2ab23d37a279207ce2c2c5af8520c8c1b98152dbd464beb0e65d5201b3f7517549a8a3490d484acd8dd0397b52d19faf051a8291f42ec621da6a946166ccfaa4edbf7622a4a9f0fe2cc0702919be027cd576c379fb31394f7505d757c138880b33548d9861c85f8666934af9798efe9699087", 0x76, 0x24000045, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7fd24001613802b}, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r5, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x167}, {0x6, 0x11, 0xfff8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x240000d5) 26.762857623s ago: executing program 5 (id=9579): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c", 0x32}], 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x400060df) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 26.581080489s ago: executing program 3 (id=9580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="d80400003100010029bd7000fcdbdf250531373657560f324d2530b2bc7c311b87cb2b0d04580ef52f8410486063a25464b8ad34b08819d992f34118d3c7dfe3433b8fcad45fa7f4411d8b4d61fc3175893568d3ca9ba72e53fc"], 0x4d8}], 0x1, 0x0, 0x0, 0x20040090}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) 26.413346288s ago: executing program 5 (id=9581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000100)={r1, 0x0, 0x8, 0x40, 0xfffffffffffffff8, 0x4, [0x5, 0x7, 0xfffffffffffffff9, 0x7fffffff, 0x7, 0x355]}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0xfffffffffffffe00, 0x6}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'pim6reg1\x00', 0xfffffffb}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x1, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0x7, 0x3, 0x4, 0xa2f7, 0x22, 'syz1\x00', "f7863468414dc04200774de0e96d299f3496f2a5b51a7cae1b8043e33d9658e6", "d1a724b4f4a274d7b5afa7ccf3bea50a80146d261cfccceee625c0707b30f6fc", [{0x3, 0xcf3c, {0x1, 0x225}}, {0xce30, 0x7, {0x0, 0x93}}, {0x7, 0x0, {0x97b02970f87f5d1e, 0x9000}}, {0xffff, 0x7, {0x1, 0xf}}, {0x4837, 0x1, {0x0, 0x8}}, {0x0, 0xfffa, {0x2, 0x8000}}, {0x7, 0x8, {0x3, 0xffffffff}}, {0x4046, 0x9, {0x0, 0x400}}, {0x2, 0xa7, {0x3}}, {0x2, 0xacd, {0x3, 0x80000000}}, {0x9, 0x5, {0x1, 0x2bb}}, {0xfff0, 0x2, {0x1, 0x3}}, {0x7, 0x1, {0x2, 0x7}}, {0x5, 0x8, {0x0, 0x7}}, {0x8, 0x9, {0x3, 0x7}}, {0x6, 0x4, {0x3, 0x5}}, {0x0, 0x4, {0x3, 0x7}}, {0x8, 0x401, {0x3, 0x7f}}, {0x6948, 0xfff, {0x3, 0x4}}, {0x8, 0xd, {0x1, 0x1}}, {0x80, 0x1, {0x1, 0x6}}, {0x7023, 0xa, {0x1, 0x7}}, {0x4ef5, 0x2, {0x2, 0x9}}, {0x0, 0xfb66, {0x2, 0x2}}, {0x3, 0x7, {0x0, 0xc33}}, {0x1000, 0x7, {0x1, 0x9}}, {0xe, 0x2, {0x3}}, {0x0, 0x1, {0x2, 0x1}}, {0xf, 0x4, {0x2, 0x7f}}, {0x1, 0xff, {0x0, 0x20c7}}, {0x7, 0x56, {0x2, 0x1}}, {0x0, 0x8, {0x2, 0x3980}}, {0xe0, 0x7, {0x1, 0x6670}}, {0x4a96, 0xa, {0x0, 0x8}}, {0xfff7, 0x9, {0x0, 0x7fff}}, {0x5, 0xe72, {0x1, 0xbf62}}, {0x1, 0x1, {0x0, 0x475b}}, {0xdc0, 0x1, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x3}}, {0xe048, 0xc, {0x3, 0x9f7}}]}}}, {{0x254, 0x1, {{0x3, 0xb}, 0x9, 0xb, 0xfffa, 0xc, 0x3, 'syz0\x00', "5a56801c80393f05c46e3bd4020d16f9785f119511ed7359b739c58349901c2f", "d95a8f4b15029f06120252e0ff6bbe9c6d98534035451ab466be41bd0d2a3031", [{0x4, 0x8, {0x2, 0x7}}, {0x7, 0x4, {0x3, 0xf}}, {0xff, 0x5, {0x3, 0x8}}, {0x3, 0x38, {0x0, 0xf62}}, {0x8, 0x4, {0x3, 0xd}}, {0xf18, 0x68, {0x2}}, {0x8, 0x8, {0x3, 0x4}}, {0x7, 0x9, {0x2, 0x4}}, {0x0, 0x8, {0x2, 0x4}}, {0x7, 0xb, {0x3, 0x7}}, {0x101, 0x6, {0x0, 0x7}}, {0xd, 0x6, {0x1, 0x4}}, {0xff, 0x0, {0x2, 0x80}}, {0xf85a, 0x9, {0x1, 0x5}}, {0x1000, 0x9c, {0x1, 0x1}}, {0x30c, 0x1ff, {0x0, 0x7fffffff}}, {0x8, 0x8001, {0x0, 0x81}}, {0x40, 0x7, {0x3}}, {0x3, 0x7, {0x1, 0x2}}, {0x4, 0x7, {0x0, 0x1ff}}, {0xf03d, 0x2, {0x3, 0x1}}, {0x7, 0x34c}, {0x8, 0x2, {0x2, 0x5}}, {0xad34, 0x3, {0x2, 0x4}}, {0x6, 0x0, {0x1, 0x79}}, {0xbd6c, 0x6, {0x2, 0x95}}, {0x0, 0x0, {0x2, 0x9}}, {0x1706, 0x9, {0x2, 0x3}}, {0xe, 0x101, {0x2, 0x9}}, {0x0, 0x1, {0x0, 0x1000}}, {0x8520, 0xda, {0x1, 0x7}}, {0x3505, 0x6, {0x1, 0x2}}, {0x4, 0xd, {0x2, 0x4}}, {0x2, 0x0, {0x2, 0x4}}, {0x1, 0x800, {0x0, 0x8}}, {0x400, 0x4c9, {0x2, 0xe46}}, {0xfffa, 0xcc, {0x3, 0x26f}}, {0x0, 0x3, {0x2, 0x8}}, {0x1e0d, 0x3, {0x2, 0x6}}, {0xca, 0x97, {0x3, 0x7fff}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x57, 0x1, 0x0, 0x8, 0xf, 'syz1\x00', "094838d5e9890f0172ecece746db65f17a652b3c501d4498e8262cb33ae13ef5", "b88e0b2b86d605315dcb4223491b286eeea0fd78cad3b852976ceed9f3c767c5", [{0x7, 0x1, {0x1, 0x3}}, {0x3, 0x6, {0x0, 0xc}}, {0x43, 0x0, {0x1, 0x4}}, {0x2, 0x4, {0x1, 0x1}}, {0x7, 0x9, {0x2}}, {0x642c, 0x1be7, {0x3, 0xffffffff}}, {0x3, 0x5, {0x1, 0x8}}, {0x2, 0xe68, {0x1, 0x7e2d8806}}, {0x6, 0xf6b, {0x2, 0x2}}, {0x0, 0x7, {0x3, 0x7}}, {0x3, 0xfffb, {0x1, 0x5}}, {0x0, 0x6, {0x1, 0x4e26}}, {0x200, 0x400, {0x0, 0x1}}, {0x7, 0x1, {0x0, 0x1}}, {0x1, 0x9, {0x3, 0x16}}, {0x1, 0x101, {0x2, 0x3}}, {0x76ac, 0x7f, {0x3}}, {0x5, 0x0, {0x0, 0x3ff}}, {0x1, 0x177, {0x1, 0x68}}, {0x3, 0x1, {0x1, 0x101}}, {0x0, 0x3, {0x1, 0x8}}, {0x0, 0x482, {0x1, 0x2}}, {0x6, 0x2, {0x0, 0x8}}, {0xbf, 0x4, {0x0, 0x3}}, {0x4, 0x3, {0x0, 0x3ff}}, {0x1, 0x2, {0x1, 0x9}}, {0x0, 0x4, {0x2, 0xbdc697a}}, {0x0, 0xc2, {0x1, 0xffffffea}}, {0x4, 0x1, {0x0, 0x5}}, {0x6, 0x5, {0x0, 0xf}}, {0x1, 0x18b3, {0x0, 0x8cf}}, {0x6, 0x8, {0x2}}, {0x0, 0x0, {0x3, 0x3}}, {0x7f, 0x8, {0x3, 0x4}}, {0x8000, 0x0, {0x1, 0x26}}, {0x96, 0x7, {0x0, 0x4}}, {0x4, 0x40, {0xe1c09247e5b4b400, 0x4}}, {0xff, 0x2, {0x1, 0x1}}, {0x6, 0x2, {0x3, 0xf99}}, {0x0, 0x7, {0x0, 0x8}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) recvmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000280)=""/158, 0x9e}, {&(0x7f0000000340)=""/63, 0x3f}], 0x4, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x2) 26.096590341s ago: executing program 3 (id=9582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x42, &(0x7f0000000040), 0x3b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r7, 0x1, 0x70bd2d, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x2, @l2={'ib', 0x3a, 'wlan0\x00'}}}}}, 0x34}}, 0x20000000) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x38, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) 26.069077285s ago: executing program 2 (id=9583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c01000010000100feffffff0001000000000001fc010000000000000000000000000001000107144e51fc05000000000100"/64, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x8044801}, 0x40000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a000100faffffff00010000ac1e0101000000000000000e0000fffffffb010000000000000000000000000001000107174e0c00050a000020870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff010000000000000000000000000001fe0000000000000095010000000000100f00000000000000edcb0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x844) 25.883742636s ago: executing program 4 (id=9584): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x174, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x120, 0x2, [@TCA_BASIC_EMATCHES={0x7c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6, 0x2}, {0x400, 0x7}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0xa0, 0x3, [@m_connmark={0x9c, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x69, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x24, 0x1402, 0x400, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 25.877129016s ago: executing program 2 (id=9585): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="a7000100794383a05aaa5f2543000000", 0x10) close(0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team0\x00'}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000100)={0x100000000, 0x2, 0x3}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@private=0xa010102, @multicast1, 0xff, 0xffffff00, 'team0\x00', 'wg1\x00', {}, {0xff}, 0x1d, 0x0, 0x7}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x1, 0x6, 0x5, 0x3], 0x5, 0x2}, {0x3, [0x2, 0x0, 0x2, 0x3, 0x6, 0x5], 0x2, 0x2}}}}, {{@ip={@private=0xa010102, @rand_addr=0x64010102, 0xff, 0xffffff00, 'syz_tun\x00', 'dummy0\x00', {}, {0xff}, 0x5c, 0x3, 0x1}, 0x0, 0xd8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@set={{0x40}, {{0x0, [0x0, 0x4, 0x3, 0x0, 0x2, 0x4], 0x3, 0x1}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0xfffd, 0x6, 0xd, 'syz1\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmmsg$inet(r4, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x2400804c) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000540)={0xc, 0x1, 0xb, 0x4, 0xef5, 0x81}) 25.757160637s ago: executing program 2 (id=9586): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1d00000000000000801019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 25.711518496s ago: executing program 4 (id=9587): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x633b, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x20000000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x4102, 0x1, 0x10000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}, 0xc164}], 0x1, 0x32021, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0xe8, 0x10, 0x1, 0x0, 0x0, {{'drbg_pr_hmac_sha384\x00'}}, [{0x8}]}, 0xe8}}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x633b, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socket(0x1d, 0x2, 0x6) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x20000000, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x4102, 0x1, 0x10000}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}, 0xc164}], 0x1, 0x32021, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0xe8, 0x10, 0x1, 0x0, 0x0, {{'drbg_pr_hmac_sha384\x00'}}, [{0x8}]}, 0xe8}}, 0x0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) 25.553833926s ago: executing program 2 (id=9588): r0 = socket(0x28, 0xa, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x7f, @private2, 0x7}], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000804) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x10, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x74, 0x0, 0x840, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x6b, "73e154da18f13ea7110fd949cb63ae2d1b71cb59eb8a23d60732144e35d61280f9a32e088e6487c7c54027abd7f91910a72ef29ef7eeee16fdd498e70de77ba98befb61970a6fa411ace0710ed971d8f7370ec6c5de6f4cf68558d912c6f11cf78f4923d3cf53534c83a63"}, &(0x7f0000000100)=0x73) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={r7, 0xcc, &(0x7f0000000240)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0xbf9a, @remote, 0x91}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, @in6={0xa, 0x4e21, 0xbb2, @private1, 0x8f9}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000400)=0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x7d, &(0x7f0000000700)={r9, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r7, 0x5}, 0x8) 25.551756016s ago: executing program 4 (id=9589): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) close(r1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000003780)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x90) (async) socket$unix(0x1, 0x5, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa2, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x20000, 0x0, {0x1}}, 0x14}}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={r6, 0x7, 0xffffffffffff7fff, 0x80000000}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x15, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x79926464a2e9146c}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x1e}, 0x94) 0s ago: executing program 33 (id=9581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000100)={r1, 0x0, 0x8, 0x40, 0xfffffffffffffff8, 0x4, [0x5, 0x7, 0xfffffffffffffff9, 0x7fffffff, 0x7, 0x355]}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0xfffffffffffffe00, 0x6}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'pim6reg1\x00', 0xfffffffb}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x1, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0x7, 0x3, 0x4, 0xa2f7, 0x22, 'syz1\x00', "f7863468414dc04200774de0e96d299f3496f2a5b51a7cae1b8043e33d9658e6", "d1a724b4f4a274d7b5afa7ccf3bea50a80146d261cfccceee625c0707b30f6fc", [{0x3, 0xcf3c, {0x1, 0x225}}, {0xce30, 0x7, {0x0, 0x93}}, {0x7, 0x0, {0x97b02970f87f5d1e, 0x9000}}, {0xffff, 0x7, {0x1, 0xf}}, {0x4837, 0x1, {0x0, 0x8}}, {0x0, 0xfffa, {0x2, 0x8000}}, {0x7, 0x8, {0x3, 0xffffffff}}, {0x4046, 0x9, {0x0, 0x400}}, {0x2, 0xa7, {0x3}}, {0x2, 0xacd, {0x3, 0x80000000}}, {0x9, 0x5, {0x1, 0x2bb}}, {0xfff0, 0x2, {0x1, 0x3}}, {0x7, 0x1, {0x2, 0x7}}, {0x5, 0x8, {0x0, 0x7}}, {0x8, 0x9, {0x3, 0x7}}, {0x6, 0x4, {0x3, 0x5}}, {0x0, 0x4, {0x3, 0x7}}, {0x8, 0x401, {0x3, 0x7f}}, {0x6948, 0xfff, {0x3, 0x4}}, {0x8, 0xd, {0x1, 0x1}}, {0x80, 0x1, {0x1, 0x6}}, {0x7023, 0xa, {0x1, 0x7}}, {0x4ef5, 0x2, {0x2, 0x9}}, {0x0, 0xfb66, {0x2, 0x2}}, {0x3, 0x7, {0x0, 0xc33}}, {0x1000, 0x7, {0x1, 0x9}}, {0xe, 0x2, {0x3}}, {0x0, 0x1, {0x2, 0x1}}, {0xf, 0x4, {0x2, 0x7f}}, {0x1, 0xff, {0x0, 0x20c7}}, {0x7, 0x56, {0x2, 0x1}}, {0x0, 0x8, {0x2, 0x3980}}, {0xe0, 0x7, {0x1, 0x6670}}, {0x4a96, 0xa, {0x0, 0x8}}, {0xfff7, 0x9, {0x0, 0x7fff}}, {0x5, 0xe72, {0x1, 0xbf62}}, {0x1, 0x1, {0x0, 0x475b}}, {0xdc0, 0x1, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x3}}, {0xe048, 0xc, {0x3, 0x9f7}}]}}}, {{0x254, 0x1, {{0x3, 0xb}, 0x9, 0xb, 0xfffa, 0xc, 0x3, 'syz0\x00', "5a56801c80393f05c46e3bd4020d16f9785f119511ed7359b739c58349901c2f", "d95a8f4b15029f06120252e0ff6bbe9c6d98534035451ab466be41bd0d2a3031", [{0x4, 0x8, {0x2, 0x7}}, {0x7, 0x4, {0x3, 0xf}}, {0xff, 0x5, {0x3, 0x8}}, {0x3, 0x38, {0x0, 0xf62}}, {0x8, 0x4, {0x3, 0xd}}, {0xf18, 0x68, {0x2}}, {0x8, 0x8, {0x3, 0x4}}, {0x7, 0x9, {0x2, 0x4}}, {0x0, 0x8, {0x2, 0x4}}, {0x7, 0xb, {0x3, 0x7}}, {0x101, 0x6, {0x0, 0x7}}, {0xd, 0x6, {0x1, 0x4}}, {0xff, 0x0, {0x2, 0x80}}, {0xf85a, 0x9, {0x1, 0x5}}, {0x1000, 0x9c, {0x1, 0x1}}, {0x30c, 0x1ff, {0x0, 0x7fffffff}}, {0x8, 0x8001, {0x0, 0x81}}, {0x40, 0x7, {0x3}}, {0x3, 0x7, {0x1, 0x2}}, {0x4, 0x7, {0x0, 0x1ff}}, {0xf03d, 0x2, {0x3, 0x1}}, {0x7, 0x34c}, {0x8, 0x2, {0x2, 0x5}}, {0xad34, 0x3, {0x2, 0x4}}, {0x6, 0x0, {0x1, 0x79}}, {0xbd6c, 0x6, {0x2, 0x95}}, {0x0, 0x0, {0x2, 0x9}}, {0x1706, 0x9, {0x2, 0x3}}, {0xe, 0x101, {0x2, 0x9}}, {0x0, 0x1, {0x0, 0x1000}}, {0x8520, 0xda, {0x1, 0x7}}, {0x3505, 0x6, {0x1, 0x2}}, {0x4, 0xd, {0x2, 0x4}}, {0x2, 0x0, {0x2, 0x4}}, {0x1, 0x800, {0x0, 0x8}}, {0x400, 0x4c9, {0x2, 0xe46}}, {0xfffa, 0xcc, {0x3, 0x26f}}, {0x0, 0x3, {0x2, 0x8}}, {0x1e0d, 0x3, {0x2, 0x6}}, {0xca, 0x97, {0x3, 0x7fff}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x57, 0x1, 0x0, 0x8, 0xf, 'syz1\x00', "094838d5e9890f0172ecece746db65f17a652b3c501d4498e8262cb33ae13ef5", "b88e0b2b86d605315dcb4223491b286eeea0fd78cad3b852976ceed9f3c767c5", [{0x7, 0x1, {0x1, 0x3}}, {0x3, 0x6, {0x0, 0xc}}, {0x43, 0x0, {0x1, 0x4}}, {0x2, 0x4, {0x1, 0x1}}, {0x7, 0x9, {0x2}}, {0x642c, 0x1be7, {0x3, 0xffffffff}}, {0x3, 0x5, {0x1, 0x8}}, {0x2, 0xe68, {0x1, 0x7e2d8806}}, {0x6, 0xf6b, {0x2, 0x2}}, {0x0, 0x7, {0x3, 0x7}}, {0x3, 0xfffb, {0x1, 0x5}}, {0x0, 0x6, {0x1, 0x4e26}}, {0x200, 0x400, {0x0, 0x1}}, {0x7, 0x1, {0x0, 0x1}}, {0x1, 0x9, {0x3, 0x16}}, {0x1, 0x101, {0x2, 0x3}}, {0x76ac, 0x7f, {0x3}}, {0x5, 0x0, {0x0, 0x3ff}}, {0x1, 0x177, {0x1, 0x68}}, {0x3, 0x1, {0x1, 0x101}}, {0x0, 0x3, {0x1, 0x8}}, {0x0, 0x482, {0x1, 0x2}}, {0x6, 0x2, {0x0, 0x8}}, {0xbf, 0x4, {0x0, 0x3}}, {0x4, 0x3, {0x0, 0x3ff}}, {0x1, 0x2, {0x1, 0x9}}, {0x0, 0x4, {0x2, 0xbdc697a}}, {0x0, 0xc2, {0x1, 0xffffffea}}, {0x4, 0x1, {0x0, 0x5}}, {0x6, 0x5, {0x0, 0xf}}, {0x1, 0x18b3, {0x0, 0x8cf}}, {0x6, 0x8, {0x2}}, {0x0, 0x0, {0x3, 0x3}}, {0x7f, 0x8, {0x3, 0x4}}, {0x8000, 0x0, {0x1, 0x26}}, {0x96, 0x7, {0x0, 0x4}}, {0x4, 0x40, {0xe1c09247e5b4b400, 0x4}}, {0xff, 0x2, {0x1, 0x1}}, {0x6, 0x2, {0x3, 0xf99}}, {0x0, 0x7, {0x0, 0x8}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) recvmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000280)=""/158, 0x9e}, {&(0x7f0000000340)=""/63, 0x3f}], 0x4, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x2) kernel console output (not intermixed with test programs): set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.701681][ T3665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.713580][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8447'. [ 1040.743333][ T5934] netlink: 'syz.5.8447': attribute type 1 has an invalid length. [ 1040.790358][ T5934] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8447'. [ 1040.879105][ T3658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.890418][ T3658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.947646][T10338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.958299][T10338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.091366][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1048.098647][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1053.324029][ T5963] syz_tun: entered allmulticast mode [ 1053.340260][ T5968] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 1053.472424][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8457'. [ 1053.487910][ T5976] netlink: 'syz.4.8458': attribute type 7 has an invalid length. [ 1053.888523][ T5995] h: entered promiscuous mode [ 1054.244744][ T6021] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8474'. [ 1054.264732][ T6020] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8474'. [ 1054.374974][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8475'. [ 1054.501109][ T6026] netlink: 'syz.5.8475': attribute type 2 has an invalid length. [ 1054.630990][ T6038] netlink: 'syz.3.8478': attribute type 1 has an invalid length. [ 1054.775077][ T6038] bond16: entered promiscuous mode [ 1054.844748][ T6038] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1055.285049][ T6076] Unsupported ieee802154 address type: 0 [ 1055.548557][ T6084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1055.585941][ T6084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1055.642058][ T6089] netlink: 'syz.2.8490': attribute type 1 has an invalid length. [ 1055.676847][ T6092] netlink: 'syz.5.8491': attribute type 2 has an invalid length. [ 1055.695680][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8490'. [ 1055.705199][ T6092] netlink: 'syz.5.8491': attribute type 2 has an invalid length. [ 1055.756877][ T6095] netlink: 'syz.5.8491': attribute type 10 has an invalid length. [ 1055.802359][ T6095] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1055.823508][ T6095] bond1: (slave lo): Enslaving as an active interface with an up link [ 1055.834091][ T6095] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1056.026430][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.026430][ T6104] Use struct sctp_assoc_value instead [ 1056.064947][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.064947][ T6104] Use struct sctp_assoc_value instead [ 1056.103592][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.103592][ T6104] Use struct sctp_assoc_value instead [ 1056.131453][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.131453][ T6104] Use struct sctp_assoc_value instead [ 1056.162546][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.162546][ T6104] Use struct sctp_assoc_value instead [ 1056.192817][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.192817][ T6104] Use struct sctp_assoc_value instead [ 1056.212841][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.212841][ T6104] Use struct sctp_assoc_value instead [ 1056.264763][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.264763][ T6104] Use struct sctp_assoc_value instead [ 1056.319587][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.319587][ T6104] Use struct sctp_assoc_value instead [ 1056.359286][ T6104] sctp: [Deprecated]: syz.0.8496 (pid 6104) Use of int in max_burst socket option deprecated. [ 1056.359286][ T6104] Use struct sctp_assoc_value instead [ 1056.422392][ T6030] Bluetooth: hci2: command 0x0405 tx timeout [ 1056.611003][ T6128] netlink: 216 bytes leftover after parsing attributes in process `syz.3.8502'. [ 1056.626682][ T6099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.759568][ T6114] macvlan0: entered promiscuous mode [ 1056.957631][ T6099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.182362][ T6099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.257427][ T6153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.283705][ T6155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.326208][ T6099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.746408][ T3658] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.806985][T11238] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.829985][T11238] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.872452][ T3658] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.917211][ T6191] sit0: Caught tx_queue_len zero misconfig [ 1058.026228][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8519'. [ 1058.051729][ T6195] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8519'. [ 1058.111403][ T6199] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1058.499225][ T6216] syzkaller0: entered promiscuous mode [ 1058.516451][ T6216] syzkaller0: entered allmulticast mode [ 1058.532569][ T6221] hsr0: entered promiscuous mode [ 1059.098836][ T6246] __nla_validate_parse: 4 callbacks suppressed [ 1059.098856][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8534'. [ 1063.730044][ T6260] xt_HMARK: spi-set and port-set can't be combined [ 1063.815963][ T6259] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8536'. [ 1063.835116][ T6259] openvswitch: netlink: Flow key attr not present in new flow. [ 1063.867428][ T6259] netlink: 'syz.0.8536': attribute type 1 has an invalid length. [ 1063.884472][ T6259] netlink: 8048 bytes leftover after parsing attributes in process `syz.0.8536'. [ 1064.041558][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8544'. [ 1064.102695][ T3893] IPVS: starting estimator thread 0... [ 1064.108917][ T6287] IPVS: ip_vs_add_dest(): server weight less than zero [ 1064.224081][ T6288] IPVS: using max 34 ests per chain, 81600 per kthread [ 1064.788605][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8557'. [ 1064.852873][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8558'. [ 1065.025183][ T6339] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1065.192377][ T6339] ipvlan0: entered allmulticast mode [ 1065.205239][ T6339] bond12: entered allmulticast mode [ 1065.267680][ T6347] bond12: (slave ipip0): refused to change device type [ 1065.320172][ T6368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1065.338611][ T6368] netlink: 'syz.2.8567': attribute type 11 has an invalid length. [ 1065.348231][ T6368] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.8567'. [ 1065.374407][ T3658] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1065.455070][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8571'. [ 1065.558670][ T6373] netlink: 'syz.0.8571': attribute type 58 has an invalid length. [ 1065.577916][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8571'. [ 1065.657440][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8573'. [ 1065.744026][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8576'. [ 1065.770288][ T6393] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8575'. [ 1065.795411][ T6393] nbd: illegal input index -8454144 [ 1065.803317][ T6397] netlink: 'syz.4.8576': attribute type 11 has an invalid length. [ 1065.812740][ T6397] netlink: 'syz.4.8576': attribute type 5 has an invalid length. [ 1065.840014][ T6397] netlink: 6548 bytes leftover after parsing attributes in process `syz.4.8576'. [ 1066.051965][ T6412] tipc: MTU too low for tipc bearer [ 1066.104318][ T6414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8583'. [ 1066.116427][ T6416] openvswitch: netlink: IPv4 tun info is not correct [ 1066.142720][ T6416] netlink: 'syz.3.8584': attribute type 11 has an invalid length. [ 1066.232604][ T6414] netlink: 'syz.4.8583': attribute type 5 has an invalid length. [ 1066.557636][ T6414] geneve4: entered promiscuous mode [ 1066.563715][ T6414] geneve4: entered allmulticast mode [ 1066.583513][ T3665] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 1066.614286][ T3665] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 1066.688404][ T3665] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 1066.734411][ T3665] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 1066.775426][ T6452] netlink: 'syz.3.8590': attribute type 7 has an invalid length. [ 1066.796375][ T6452] netlink: 'syz.3.8590': attribute type 7 has an invalid length. [ 1066.796372][ T3665] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.796412][ T3665] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.846256][ T6457] SET target dimension over the limit! [ 1066.870455][ T3665] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.883728][ T6460] netlink: 'syz.5.8593': attribute type 1 has an invalid length. [ 1066.903351][ T3665] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.924716][ T6460] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1067.528580][ T6508] netlink: 'syz.0.8607': attribute type 21 has an invalid length. [ 1067.562159][ T6508] netlink: 'syz.0.8607': attribute type 22 has an invalid length. [ 1067.589825][ T6508] netlink: 'syz.0.8607': attribute type 23 has an invalid length. [ 1067.613804][ T6513] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1068.012887][T29842] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1068.292167][ T6543] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1068.307278][ T6546] bond9: (slave veth0_to_bond): Releasing active interface [ 1068.325229][ T6546] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1068.343334][ T6551] bond13: entered promiscuous mode [ 1068.372042][ T6551] bond13: entered allmulticast mode [ 1068.421045][ T6537] macvlan0: entered promiscuous mode [ 1068.436694][ T6537] macvlan0: entered allmulticast mode [ 1068.455365][ T6537] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1068.542791][ T6560] : entered promiscuous mode [ 1069.294854][ T6616] nbd: must specify an index to disconnect [ 1069.387435][ T6631] 8021q: VLANs not supported on ip6tnl0 [ 1069.684906][ T6654] validate_nla: 6 callbacks suppressed [ 1069.684925][ T6654] netlink: 'syz.4.8644': attribute type 9 has an invalid length. [ 1069.935568][ T6671] __nla_validate_parse: 27 callbacks suppressed [ 1069.935586][ T6671] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8648'. [ 1070.076126][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8652'. [ 1070.166942][ T6683] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8653'. [ 1070.172249][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8654'. [ 1070.195319][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8654'. [ 1070.205856][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8653'. [ 1070.215708][ T6687] openvswitch: netlink: Key type 133 is out of range max 32 [ 1070.244496][ T6689] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.8656'. [ 1070.305903][ T6687] netlink: set zone limit has 4 unknown bytes [ 1070.387162][ T6698] netlink: 'syz.3.8658': attribute type 12 has an invalid length. [ 1070.458392][ T6698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1070.485153][ T6700] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8657'. [ 1070.653442][ T6713] wireguard0: entered promiscuous mode [ 1070.678886][ T6713] wireguard0: entered allmulticast mode [ 1070.723185][ T6724] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1070.775585][ T6729] netlink: 'syz.2.8666': attribute type 8 has an invalid length. [ 1070.822568][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8666'. [ 1070.946375][ T6729] bond0: entered promiscuous mode [ 1070.953158][ T6729] bond_slave_0: entered promiscuous mode [ 1070.959739][ T6729] bond_slave_1: entered promiscuous mode [ 1070.967730][ T6729] bond0: left promiscuous mode [ 1070.973490][ T6729] bond_slave_0: left promiscuous mode [ 1070.979294][ T6729] bond_slave_1: left promiscuous mode [ 1070.999007][ T6726] syzkaller0: entered promiscuous mode [ 1071.005949][ T6726] syzkaller0: entered allmulticast mode [ 1071.059915][ T6736] netlink: 'syz.5.8669': attribute type 1 has an invalid length. [ 1071.068106][ T6736] netlink: 'syz.5.8669': attribute type 1 has an invalid length. [ 1071.090280][ T6736] netlink: 'syz.5.8669': attribute type 8 has an invalid length. [ 1071.113170][ T6738] netlink: 'syz.5.8669': attribute type 1 has an invalid length. [ 1071.240239][ T6748] xt_TCPMSS: Only works on TCP SYN packets [ 1071.285957][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.620776][ T6768] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1071.640290][ T6770] netlink: 'syz.4.8679': attribute type 9 has an invalid length. [ 1071.846183][ T6773] syzkaller1: entered promiscuous mode [ 1071.852865][ T6773] syzkaller1: entered allmulticast mode [ 1072.109363][ T6802] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1072.156612][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.512849][ T6822] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20003 [ 1072.520355][ T6823] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20003 [ 1072.922489][ T6857] netlink: 'syz.0.8706': attribute type 2 has an invalid length. [ 1073.375297][ T6883] netlink: 'syz.4.8715': attribute type 83 has an invalid length. [ 1073.442386][ T6886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1073.455125][ T6883] bond0: (slave bond_slave_1): Releasing backup interface [ 1073.748974][ T6914] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1073.761366][ T6914] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 1073.762720][ T6917] xt_ipcomp: unknown flags 1D [ 1073.934837][ T6920] macvlan0: entered promiscuous mode [ 1073.973039][ T6920] macvlan0: entered allmulticast mode [ 1074.017859][ T6920] bond9: (slave macvlan0): Error -98 calling set_mac_address [ 1074.049201][ T6936] openvswitch: netlink: IP tunnel TTL not specified. [ 1074.188869][ T6946] tipc: Enabled bearer , priority 0 [ 1074.230213][ T6946] syzkaller0: entered promiscuous mode [ 1074.246805][ T6946] syzkaller0: entered allmulticast mode [ 1074.332246][ T6952] tipc: Resetting bearer [ 1074.364423][ T3667] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.389210][ T6945] tipc: Resetting bearer [ 1074.486869][ T6945] tipc: Disabling bearer [ 1074.510300][ T3667] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.534416][ T3667] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.566627][ T3667] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.656587][ T6967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1074.704771][ T6967] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1074.729837][ T6977] validate_nla: 3 callbacks suppressed [ 1074.729851][ T6977] netlink: 'syz.3.8742': attribute type 1 has an invalid length. [ 1074.756503][ T6976] bond2: (slave veth0_to_bond): making interface the new active one [ 1074.770322][ T6976] veth0_to_bond: entered promiscuous mode [ 1074.779254][ T6976] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1074.879393][ T6977] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1074.896629][ T6980] bond15: (slave veth0_to_bond): Releasing active interface [ 1074.934856][ T6980] veth0_to_bond: left promiscuous mode [ 1074.956192][ T6980] veth0_to_bond: left allmulticast mode [ 1075.005677][ T6993] __nla_validate_parse: 19 callbacks suppressed [ 1075.005696][ T6993] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8747'. [ 1075.023641][ T6980] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1075.058185][ T6967] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1075.068282][ T6967] netlink: 'syz.2.8741': attribute type 1 has an invalid length. [ 1075.078084][ T6967] netlink: 'syz.2.8741': attribute type 2 has an invalid length. [ 1075.102192][ T6970] bond17: entered promiscuous mode [ 1075.114347][ T6970] bond17: entered allmulticast mode [ 1075.277079][ T7008] netlink: 'syz.5.8751': attribute type 1 has an invalid length. [ 1075.294752][ T7008] netlink: 'syz.5.8751': attribute type 2 has an invalid length. [ 1075.320460][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8752'. [ 1075.351921][ T7012] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1075.391483][ T7012] team1: entered promiscuous mode [ 1075.407536][ T7012] team1: entered allmulticast mode [ 1075.604787][ T7012] syzkaller0: entered promiscuous mode [ 1075.614182][ T7012] syzkaller0: entered allmulticast mode [ 1075.748506][ T7034] netlink: 'syz.2.8759': attribute type 1 has an invalid length. [ 1075.772148][ T7034] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8759'. [ 1075.797367][ T7034] netlink: 'syz.2.8759': attribute type 1 has an invalid length. [ 1075.811304][ T7034] netlink: 'syz.2.8759': attribute type 8 has an invalid length. [ 1075.841963][ T7034] netlink: 606 bytes leftover after parsing attributes in process `syz.2.8759'. [ 1075.858551][ T7034] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8759'. [ 1076.074022][ T7039] netlink: 'syz.5.8761': attribute type 4 has an invalid length. [ 1078.188838][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.196144][ C0] bridge0: topology change detected, propagating [ 1080.661620][ T7039] tipc: Enabling of bearer rejected, failed to enable media [ 1080.867912][ T7062] netlink: 'syz.3.8766': attribute type 1 has an invalid length. [ 1080.881447][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8767'. [ 1080.952564][ T7062] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1080.979440][ T7072] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1080.991913][ T7060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8767'. [ 1081.004115][ T7061] bond18: (slave geneve3): making interface the new active one [ 1081.017003][ T7061] bond18: (slave geneve3): Enslaving as an active interface with an up link [ 1081.030474][ T3667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.069280][ T3667] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.093848][ T3667] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.141192][ T3667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.227905][ T7080] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8772'. [ 1081.254716][ T7087] netlink: 'syz.3.8774': attribute type 4 has an invalid length. [ 1081.333997][ T7094] netlink: 'syz.3.8774': attribute type 4 has an invalid length. [ 1081.352707][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8774'. [ 1081.420353][ T7097] netlink: 27 bytes leftover after parsing attributes in process `syz.5.8777'. [ 1081.540338][ T7103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1081.556694][ T7104] ip6t_srh: unknown srh match flags 4000 [ 1081.570285][ T7106] ip6t_srh: unknown srh match flags 4000 [ 1081.603956][ T7103] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8779'. [ 1081.666128][ T7104] netlink: 'syz.5.8779': attribute type 1 has an invalid length. [ 1081.676595][ T7104] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8779'. [ 1081.688349][ T7106] netlink: 'syz.5.8779': attribute type 1 has an invalid length. [ 1081.711413][ T7106] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8779'. [ 1081.812675][ T7109] netlink: 'syz.5.8780': attribute type 1 has an invalid length. [ 1081.831264][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8780'. [ 1081.860729][ T7109] netlink: 'syz.5.8780': attribute type 1 has an invalid length. [ 1082.258489][ T7124] netlink: 'syz.4.8782': attribute type 1 has an invalid length. [ 1082.539033][ T7124] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1082.653059][ T7127] bond10: (slave veth15): Enslaving as an active interface with a down link [ 1082.738502][ T7136] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8786'. [ 1082.741781][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1082.782456][ T7128] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1082.857483][ T7136] vlan0: entered allmulticast mode [ 1082.863718][ T7136] gretap0: entered allmulticast mode [ 1083.379560][ T7158] tipc: Started in network mode [ 1083.407038][ T7158] tipc: Node identity b25a3fcbd046, cluster identity 4711 [ 1083.444097][ T7158] tipc: Enabled bearer , priority 0 [ 1083.473582][ T7162] syzkaller0: entered promiscuous mode [ 1083.481744][ T7162] syzkaller0: entered allmulticast mode [ 1083.525582][ T7158] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1083.628255][ T7158] tipc: Resetting bearer [ 1083.646690][ T7156] tipc: Resetting bearer [ 1083.722036][ T7156] tipc: Disabling bearer [ 1083.807184][ T7173] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20000 [ 1083.967587][ T7179] openvswitch: netlink: Key type 4122 is out of range max 32 [ 1084.634344][ T7198] bridge0: port 2(syz_tun) entered blocking state [ 1084.657435][ T7198] bridge0: port 2(syz_tun) entered disabled state [ 1084.682734][ T7198] syz_tun: entered promiscuous mode [ 1084.902848][ T7212] lo: entered promiscuous mode [ 1084.920495][ T7212] netlink: 'syz.5.8809': attribute type 2 has an invalid length. [ 1084.932220][ T7212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1085.130228][ T7218] bond0 (unregistering): Released all slaves [ 1085.186617][ T7226] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 1085.196764][ T7226] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1085.429523][ T7237] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 1085.917723][ T7263] __nla_validate_parse: 5 callbacks suppressed [ 1085.917741][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8822'. [ 1086.166519][ T3667] veth0_to_bond: left promiscuous mode [ 1086.305030][ T7286] xfrm1: entered allmulticast mode [ 1086.329500][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8826'. [ 1086.398073][ T7283] ipvlan2: entered allmulticast mode [ 1086.408012][ T7292] netlink: 'syz.5.8830': attribute type 1 has an invalid length. [ 1086.423573][ T7283] syz_tun: entered allmulticast mode [ 1086.476841][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8832'. [ 1086.543440][ T7292] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1086.596808][ T7300] macvlan4: entered allmulticast mode [ 1086.620844][ T7300] dummy0: entered allmulticast mode [ 1086.665304][ T7300] dummy0: entered promiscuous mode [ 1086.987236][ T7326] netlink: 'syz.5.8837': attribute type 21 has an invalid length. [ 1087.032903][ T7326] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8837'. [ 1087.060205][ T7328] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1087.080117][ T7328] bond3: (slave lo): Enslaving as an active interface with an up link [ 1087.098847][ T7328] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1087.539878][ T7373] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.8851'. [ 1087.555608][ T7377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1087.608922][ T7379] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8852'. [ 1087.631245][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8852'. [ 1087.697361][ T7381] bond3: (slave lo): Releasing backup interface [ 1087.721411][ T7381] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1087.746785][ T7381] bridge_slave_0: left allmulticast mode [ 1087.766450][ T7381] bridge_slave_0: left promiscuous mode [ 1087.787511][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.797971][ T7381] bridge_slave_1: left allmulticast mode [ 1087.804926][ T7381] bridge_slave_1: left promiscuous mode [ 1087.811535][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.825157][ T7381] bond2: (slave veth0_to_bond): Releasing active interface [ 1087.837044][ T7381] bond0: (slave bond_slave_0): Releasing backup interface [ 1087.851885][ T7381] bond0: (slave bond_slave_1): Releasing backup interface [ 1087.877899][ T7381] team0: Port device team_slave_0 removed [ 1087.890482][ T7381] team0: Port device team_slave_1 removed [ 1087.898816][ T7381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.908801][ T7381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.924931][ T7381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.934628][ T7381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.945245][ T7381] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1087.969307][ T7383] ip6gre1: entered allmulticast mode [ 1087.980085][ T7383] team0: Port device ip6gre1 added [ 1088.735582][ T7448] nbd: socks must be embedded in a SOCK_ITEM attr [ 1088.918492][ T7456] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1088.957417][ T7460] netlink: 'syz.0.8873': attribute type 64 has an invalid length. [ 1088.965737][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8873'. [ 1089.009940][ T7462] netlink: 'syz.4.8874': attribute type 1 has an invalid length. [ 1089.057861][ T7468] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1089.128352][ T7473] xt_NFQUEUE: number of total queues is 0 [ 1089.188917][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8874'. [ 1089.209842][ T7473] IPVS: persistence engine module ip_vs_pe_À not found [ 1089.233259][ T7471] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1089.303182][ T7471] bond11: (slave bond12): making interface the new active one [ 1089.331670][ T7471] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1089.355773][ T7474] bond11: (slave gretap3): Enslaving as a backup interface with an up link [ 1089.370408][ T7462] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1089.461615][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8883'. [ 1089.686130][ T7502] syzkaller1: entered promiscuous mode [ 1089.696497][ T7502] syzkaller1: entered allmulticast mode [ 1089.909991][ T7518] netlink: 'syz.0.8889': attribute type 1 has an invalid length. [ 1090.013896][ T7518] bond0: entered promiscuous mode [ 1090.047824][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.075646][ T7525] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1090.229399][ T7511] bond0: (slave bridge2): making interface the new active one [ 1090.254206][ T7511] bridge2: entered promiscuous mode [ 1090.266589][ T7511] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1090.287705][ T7536] netlink: 'syz.4.8894': attribute type 29 has an invalid length. [ 1090.317161][ T7540] Cannot find add_set index 1 as target [ 1090.339272][ T7546] Cannot find add_set index 1 as target [ 1090.489572][ T7557] veth1_macvtap: entered allmulticast mode [ 1090.610094][ T7557] veth1_macvtap (unregistering): left allmulticast mode [ 1091.092677][ T7600] »»»»»» speed is unknown, defaulting to 1000 [ 1091.113795][ T7600] C speed is unknown, defaulting to 1000 [ 1091.123279][ T7602] __nla_validate_parse: 7 callbacks suppressed [ 1091.123297][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8912'. [ 1091.125645][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8913'. [ 1091.189059][ T7602] veth0_to_hsr: entered promiscuous mode [ 1091.226441][ T7614] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8915'. [ 1091.340003][ T7618] netlink: 'syz.0.8917': attribute type 4 has an invalid length. [ 1091.349743][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8917'. [ 1091.478838][ T7600] hsr0 speed is unknown, defaulting to 1000 [ 1091.634342][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8919'. [ 1091.666984][ T7622] netlink: 'syz.0.8919': attribute type 32 has an invalid length. [ 1091.676323][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8919'. [ 1091.711776][ T7622] bond10: Setting coupled_control to off (0) [ 1091.767085][ T7636] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1091.784974][ T7638] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1092.059800][ T7640] bond4 (unregistering): Released all slaves [ 1092.105193][ T7658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8927'. [ 1092.279001][ T3658] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1092.295688][ T3658] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1092.311591][T18153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1092.530417][ T7679] tipc: Enabling of bearer rejected, failed to enable media [ 1092.688416][ T7686] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8938'. [ 1092.698834][ T5642] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1092.865471][ T7686] netlink: 'syz.2.8938': attribute type 1 has an invalid length. [ 1092.892905][T18153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1093.074928][ T7700] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1093.125336][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1093.156579][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8942'. [ 1093.185479][ T7700] mac80211_hwsim hwsim66 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1093.203506][ T7709] netlink: 'syz.2.8945': attribute type 1 has an invalid length. [ 1093.374666][ T7723] netlink: 'syz.5.8948': attribute type 10 has an invalid length. [ 1093.464449][ T7733] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001 [ 1093.505883][ T7734] netlink: 'syz.3.8953': attribute type 5 has an invalid length. [ 1094.357767][ T7794] syzkaller0: entered promiscuous mode [ 1094.376161][ T7794] syzkaller0: entered allmulticast mode [ 1094.522694][ T7799] syzkaller0: entered promiscuous mode [ 1094.534694][ T7799] syzkaller0: entered allmulticast mode [ 1095.374413][ T7852] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1095.655054][ T7868] tipc: Enabled bearer , priority 24 [ 1095.839386][ T7886] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1095.892824][ T7892] netlink: 'syz.3.8990': attribute type 9 has an invalid length. [ 1095.909295][ T7892] netlink: 'syz.3.8990': attribute type 6 has an invalid length. [ 1095.930895][ T3669] wlan1: Trigger new scan to find an IBSS to join [ 1096.042746][ T7895] openvswitch: netlink: IP tunnel dst address not specified [ 1096.145036][ T7898] __nla_validate_parse: 10 callbacks suppressed [ 1096.145055][ T7898] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8994'. [ 1096.164853][ T7900] netlink: 'syz.3.8995': attribute type 1 has an invalid length. [ 1096.169454][ T7901] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1096.292312][ T7900] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1096.316853][ T7907] bond17: (slave veth0_to_bond): Releasing active interface [ 1096.405486][ T7907] bond19: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1096.449904][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9000'. [ 1096.462672][ T7910] bond19: entered promiscuous mode [ 1096.479663][ T7915] openvswitch: netlink: Key 12 has unexpected len 4 expected 2 [ 1096.487505][ T7910] bond19: entered allmulticast mode [ 1096.500924][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.528783][ T7900] macvlan2: entered promiscuous mode [ 1096.545466][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9003'. [ 1096.555470][ T7900] macvlan2: entered allmulticast mode [ 1096.567549][ T7900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1096.598231][ T7929] netlink: 260 bytes leftover after parsing attributes in process `syz.4.9000'. [ 1096.785819][ T5642] tipc: Node number set to 2382105320 [ 1096.884441][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9009'. [ 1096.897529][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9009'. [ 1096.975739][ T7951] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9012'. [ 1096.978863][ T7952] netlink: 'syz.3.9010': attribute type 2 has an invalid length. [ 1097.038640][ T7952] netlink: 'syz.3.9010': attribute type 2 has an invalid length. [ 1097.135522][ T7965] syzkaller0: entered promiscuous mode [ 1097.150054][ T7965] syzkaller0: entered allmulticast mode [ 1097.208800][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9017'. [ 1097.212464][ T7967] netlink: 'syz.0.9016': attribute type 1 has an invalid length. [ 1097.219223][ T7970] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9017'. [ 1097.236438][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9017'. [ 1097.295073][ T7967] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1097.348942][ T7972] bond8: (slave veth0_to_bond): Releasing active interface [ 1097.392868][ T7972] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1097.409118][ T7967] bond11: entered promiscuous mode [ 1097.426310][ T7967] bond11: entered allmulticast mode [ 1097.448344][ T7977] macvlan0: entered promiscuous mode [ 1097.454687][ T7977] macvlan0: entered allmulticast mode [ 1097.462657][ T7977] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1097.779284][ T7997] netlink: 'syz.0.9026': attribute type 1 has an invalid length. [ 1097.909200][ T7997] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1098.072791][ T8002] vlan0: entered allmulticast mode [ 1098.078392][ T8002] bond12: entered allmulticast mode [ 1098.268301][ T8032] netlink: 'syz.2.9032': attribute type 1 has an invalid length. [ 1098.315256][ T8032] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1098.338212][ T8042] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1098.367881][ T8044] Set syz1 is full, maxelem 14 reached [ 1098.377093][ T8032] bond4: entered promiscuous mode [ 1098.391473][ T8032] bond4: entered allmulticast mode [ 1098.483930][ T8032] macvlan3: entered promiscuous mode [ 1098.500256][ T8032] macvlan3: entered allmulticast mode [ 1098.531385][ T8032] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1098.775303][ T8062] syz_tun: entered allmulticast mode [ 1098.906297][ T8072] FAULT_INJECTION: forcing a failure. [ 1098.906297][ T8072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.949276][ T8072] CPU: 0 UID: 0 PID: 8072 Comm: syz.4.9042 Not tainted syzkaller #0 PREEMPT(full) [ 1098.949323][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1098.949333][ T8072] Call Trace: [ 1098.949340][ T8072] [ 1098.949347][ T8072] dump_stack_lvl+0xe8/0x150 [ 1098.949372][ T8072] should_fail_ex+0x412/0x560 [ 1098.949396][ T8072] _copy_from_user+0x2d/0xb0 [ 1098.949418][ T8072] ___sys_sendmsg+0x1c6/0x360 [ 1098.949437][ T8072] ? __lock_acquire+0x6b5/0x2cf0 [ 1098.949456][ T8072] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.949505][ T8072] ? __fget_files+0x2a/0x420 [ 1098.949523][ T8072] ? __fget_files+0x3a0/0x420 [ 1098.949549][ T8072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1098.949572][ T8072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1098.949600][ T8072] ? __pfx_ksys_write+0x10/0x10 [ 1098.949628][ T8072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.949645][ T8072] do_syscall_64+0x15f/0xf80 [ 1098.949665][ T8072] ? trace_irq_disable+0x3b/0x140 [ 1098.949688][ T8072] ? clear_bhb_loop+0x40/0x90 [ 1098.949707][ T8072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.949722][ T8072] RIP: 0033:0x7fb7aef9ce59 [ 1098.949738][ T8072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.949751][ T8072] RSP: 002b:00007fb7afdf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.949768][ T8072] RAX: ffffffffffffffda RBX: 00007fb7af215fa0 RCX: 00007fb7aef9ce59 [ 1098.949779][ T8072] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1098.949787][ T8072] RBP: 00007fb7afdf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.949796][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.949805][ T8072] R13: 00007fb7af216038 R14: 00007fb7af215fa0 R15: 00007ffc87f56da8 [ 1098.949831][ T8072] [ 1099.145828][ T3667] wlan1: Trigger new scan to find an IBSS to join [ 1099.492076][ T8093] netlink: 'syz.3.9050': attribute type 1 has an invalid length. [ 1099.508017][ T8100] IPVS: length: 189 != 14328 [ 1099.517436][ T8101] IPVS: length: 189 != 14328 [ 1099.621480][ T8093] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1099.648720][ T8103] bond19: (slave veth0_to_bond): Releasing active interface [ 1099.679265][ T8103] bond20: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1099.713469][ T8106] bond20: entered promiscuous mode [ 1099.718680][ T8106] bond20: entered allmulticast mode [ 1099.757200][ T8093] macvlan2: entered promiscuous mode [ 1099.767288][ T8093] macvlan2: entered allmulticast mode [ 1099.781274][ T8093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1099.853494][ T6030] Bluetooth: hci2: command 0x0405 tx timeout [ 1099.866741][ T8121] FAULT_INJECTION: forcing a failure. [ 1099.866741][ T8121] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.880373][ T8121] CPU: 0 UID: 0 PID: 8121 Comm: syz.5.9060 Not tainted syzkaller #0 PREEMPT(full) [ 1099.880394][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1099.880405][ T8121] Call Trace: [ 1099.880412][ T8121] [ 1099.880419][ T8121] dump_stack_lvl+0xe8/0x150 [ 1099.880445][ T8121] should_fail_ex+0x412/0x560 [ 1099.880471][ T8121] should_failslab+0xa8/0x100 [ 1099.880497][ T8121] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1099.880519][ T8121] ? __alloc_skb+0x186/0x7d0 [ 1099.880542][ T8121] ? __alloc_skb+0x1d0/0x7d0 [ 1099.880556][ T8121] ? __local_bh_enable_ip+0xd0/0x130 [ 1099.880576][ T8121] __alloc_skb+0x1d0/0x7d0 [ 1099.880611][ T8121] netlink_sendmsg+0x5d4/0xb40 [ 1099.880642][ T8121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.880666][ T8121] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1099.880689][ T8121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1099.880713][ T8121] ____sys_sendmsg+0x972/0x9f0 [ 1099.880735][ T8121] ? __might_fault+0xaf/0x130 [ 1099.880762][ T8121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1099.880792][ T8121] ? import_iovec+0x73/0xa0 [ 1099.880818][ T8121] ___sys_sendmsg+0x2a5/0x360 [ 1099.880838][ T8121] ? __lock_acquire+0x6b5/0x2cf0 [ 1099.880860][ T8121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.880915][ T8121] ? __fget_files+0x2a/0x420 [ 1099.880933][ T8121] ? __fget_files+0x3a0/0x420 [ 1099.880962][ T8121] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1099.880986][ T8121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.881016][ T8121] ? __pfx_ksys_write+0x10/0x10 [ 1099.881046][ T8121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.881061][ T8121] do_syscall_64+0x15f/0xf80 [ 1099.881081][ T8121] ? trace_irq_disable+0x3b/0x140 [ 1099.881101][ T8121] ? clear_bhb_loop+0x40/0x90 [ 1099.881120][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.881134][ T8121] RIP: 0033:0x7fa17379ce59 [ 1099.881149][ T8121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.881162][ T8121] RSP: 002b:00007fa174618028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.881179][ T8121] RAX: ffffffffffffffda RBX: 00007fa173a15fa0 RCX: 00007fa17379ce59 [ 1099.881189][ T8121] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1099.881199][ T8121] RBP: 00007fa174618090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.881208][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.881217][ T8121] R13: 00007fa173a16038 R14: 00007fa173a15fa0 R15: 00007ffd4b8c3788 [ 1099.881245][ T8121] [ 1100.187471][ T8123] netlink: 'syz.2.9062': attribute type 5 has an invalid length. [ 1100.404313][ T3657] wlan1: Creating new IBSS network, BSSID 2a:bb:f5:95:70:26 [ 1100.585064][ T8145] syzkaller1: entered promiscuous mode [ 1100.610318][ T8145] syzkaller1: entered allmulticast mode [ 1100.668697][ T8145] netlink: 'syz.4.9070': attribute type 3 has an invalid length. [ 1100.838873][ T8161] syz_tun: entered allmulticast mode [ 1100.885802][ T8161] tipc: Enabled bearer , priority 0 [ 1100.974663][ T8170] netlink: 'syz.0.9076': attribute type 1 has an invalid length. [ 1101.017350][ T8161] syzkaller0: entered promiscuous mode [ 1101.035958][ T8161] syzkaller0: entered allmulticast mode [ 1101.054932][ T8161] tipc: Resetting bearer [ 1101.116231][ T8181] openvswitch: netlink: IPv4 tun info is not correct [ 1101.123446][ T8170] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1101.178166][ T8172] bond11: (slave veth0_to_bond): Releasing active interface [ 1101.268507][ T8172] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1101.292816][ T8159] tipc: Resetting bearer [ 1105.061545][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1106.577747][ T8159] tipc: Disabling bearer [ 1106.588370][ T8167] bond13: entered promiscuous mode [ 1106.593855][ T8167] bond13: entered allmulticast mode [ 1106.607787][ T8170] macvlan0: entered promiscuous mode [ 1106.613374][ T8170] macvlan0: entered allmulticast mode [ 1106.619971][ T8170] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1106.654047][ T8193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1106.683670][T18152] tipc: Node number set to 1646018507 [ 1106.712320][ T8159] syz_tun: left allmulticast mode [ 1106.855533][ T8212] __nla_validate_parse: 50 callbacks suppressed [ 1106.855554][ T8212] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9083'. [ 1107.005673][ T8215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1107.316166][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1107.787434][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9097'. [ 1107.886765][ T8280] IPv6: NLM_F_CREATE should be specified when creating new route [ 1108.103798][ T8290] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9102'. [ 1108.124058][ T8290] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1108.164327][ T8290] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9102'. [ 1108.258470][ T8299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9105'. [ 1108.338981][ T8309] netem: unknown loss type 8 [ 1108.358893][ T8309] netem: change failed [ 1108.391136][ T8310] netem: unknown loss type 8 [ 1108.402891][ T8310] netem: change failed [ 1108.605310][ T8323] netlink: 'syz.0.9110': attribute type 9 has an invalid length. [ 1108.659106][ T8331] netlink: 'syz.3.9113': attribute type 1 has an invalid length. [ 1108.670169][ T8331] netlink: 'syz.3.9113': attribute type 1 has an invalid length. [ 1108.777716][ T8345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9116'. [ 1108.867059][ T8348] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9117'. [ 1109.051744][T29842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1109.074971][T29842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1109.084296][T29842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1109.102637][T29842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1109.112686][T29842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1109.464264][ T8351] »»»»»» speed is unknown, defaulting to 1000 [ 1109.473643][ T8351] C speed is unknown, defaulting to 1000 [ 1109.594183][ T8351] hsr0 speed is unknown, defaulting to 1000 [ 1109.787739][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.795395][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.803247][ T8351] bridge_slave_0: entered allmulticast mode [ 1109.810423][ T8351] bridge_slave_0: entered promiscuous mode [ 1109.819766][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.827191][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.834932][ T8351] bridge_slave_1: entered allmulticast mode [ 1109.844383][ T8351] bridge_slave_1: entered promiscuous mode [ 1109.872523][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.884415][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.914062][ T8351] team0: Port device team_slave_0 added [ 1109.922749][ T8351] team0: Port device team_slave_1 added [ 1109.953664][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.961492][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.988047][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.001579][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.008571][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.037027][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.079902][ T8351] hsr_slave_0: entered promiscuous mode [ 1110.086839][ T8351] hsr_slave_1: entered promiscuous mode [ 1110.094969][ T8351] debugfs: 'hsr0' already exists in 'hsr' [ 1110.101285][ T8351] Cannot create hsr debugfs directory [ 1110.233421][ T8351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.246170][ T8351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.342465][ T8351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.353334][ T8351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.440848][ T8351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.452274][ T8351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.533895][ T8351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.546621][ T8351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.131244][ T8294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1111.178003][ T8351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1111.211586][ T6030] Bluetooth: hci3: command tx timeout [ 1111.212033][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.254868][ T8351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1111.284459][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.354479][ T8351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1111.367453][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.384744][ T8351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1111.409874][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.444261][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9122'. [ 1111.725274][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.760108][ T8351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.783665][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.791038][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.845879][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.853259][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.867708][ T8405] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.9125'. [ 1112.258755][ T8380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1112.315048][ T8407] netlink: 'syz.5.9126': attribute type 1 has an invalid length. [ 1112.327754][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.333970][ T8407] netlink: 476 bytes leftover after parsing attributes in process `syz.5.9126'. [ 1112.376435][ T8407] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.9126'. [ 1112.523356][ T8351] veth0_vlan: entered promiscuous mode [ 1112.575928][ T8351] veth1_vlan: entered promiscuous mode [ 1112.714295][ T8351] veth0_macvtap: entered promiscuous mode [ 1112.762426][ T8351] veth1_macvtap: entered promiscuous mode [ 1112.774306][ T8442] netlink: 'syz.0.9134': attribute type 1 has an invalid length. [ 1112.834630][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.864993][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.921793][ T3670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.978334][ T3670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.009867][ T3670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.071987][ T3670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.296262][ T6030] Bluetooth: hci3: command tx timeout [ 1113.562482][ T3658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.603772][ T3658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.632700][ T8490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1113.754147][ T3675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.772558][ T3675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.779601][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1113.891777][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9146'. [ 1113.995782][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9148'. [ 1114.418315][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9154'. [ 1114.457449][ T8528] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 1114.507569][ T8536] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9153'. [ 1114.525619][ T8539] netlink: 'syz.0.9157': attribute type 10 has an invalid length. [ 1114.549161][ T8536] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9153'. [ 1114.689825][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.884742][ T8555] netlink: 'syz.4.9164': attribute type 1 has an invalid length. [ 1115.001617][ T8555] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1115.036264][ T8564] vlan3: entered allmulticast mode [ 1115.043363][ T8564] bond13: entered allmulticast mode [ 1115.074393][ T8555] netlink: 'syz.4.9164': attribute type 1 has an invalid length. [ 1115.084877][ T8558] syzkaller0: entered promiscuous mode [ 1115.092109][ T8558] syzkaller0: entered allmulticast mode [ 1115.100205][ T8574] netlink: 'syz.3.9168': attribute type 13 has an invalid length. [ 1115.118433][ T8574] netlink: 'syz.3.9168': attribute type 13 has an invalid length. [ 1115.174451][T10338] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.204300][T10338] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.242775][ T8564] lo: entered allmulticast mode [ 1115.371823][ T6030] Bluetooth: hci3: command tx timeout [ 1115.398190][T10338] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.455381][T10338] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.485483][ T8564] lo: left allmulticast mode [ 1115.521624][ T8595] macsec1: entered allmulticast mode [ 1115.537553][ T8595] veth1_macvtap: entered allmulticast mode [ 1115.572983][ T8595] veth1_macvtap: left allmulticast mode [ 1115.871744][ T8618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.909983][ T8618] bridge0: port 3(bond1) entered blocking state [ 1115.958928][ T8618] bridge0: port 3(bond1) entered disabled state [ 1115.993499][ T8618] bond1: entered allmulticast mode [ 1116.007477][ T8618] bond1: entered promiscuous mode [ 1116.014542][ T8618] bridge0: port 3(bond1) entered blocking state [ 1116.021188][ T8618] bridge0: port 3(bond1) entered forwarding state [ 1116.538973][ T8654] pimreg: entered allmulticast mode [ 1116.559203][T11238] bridge0: port 3(bond1) entered disabled state [ 1116.637681][ T8663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1116.758953][ T8678] xt_TCPMSS: Only works on TCP SYN packets [ 1116.896495][ T8683] bridge0: Caught tx_queue_len zero misconfig [ 1116.935546][ T8689] netlink: 'syz.3.9195': attribute type 1 has an invalid length. [ 1116.944978][ T8691] netlink: 'syz.3.9195': attribute type 1 has an invalid length. [ 1117.088466][ T8696] netlink: 'syz.4.9197': attribute type 64 has an invalid length. [ 1117.107594][ T8696] __nla_validate_parse: 7 callbacks suppressed [ 1117.107613][ T8696] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9197'. [ 1117.118507][ T8698] netlink: 'syz.2.9198': attribute type 1 has an invalid length. [ 1117.338236][ T8698] bond5: entered promiscuous mode [ 1117.397707][ T8698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1117.454337][ T6030] Bluetooth: hci3: command tx timeout [ 1117.482376][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9203'. [ 1117.565772][ T8711] bond5: (slave bridge4): making interface the new active one [ 1117.592829][ T8711] bridge4: entered promiscuous mode [ 1117.610292][ T8711] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1117.830420][ T8730] netlink: 'syz.2.9206': attribute type 1 has an invalid length. [ 1117.865859][ T8730] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9206'. [ 1117.888129][ T8713] syzkaller0: entered promiscuous mode [ 1117.912121][ T8733] xt_hashlimit: size too large, truncated to 1048576 [ 1117.912602][ T8734] xt_hashlimit: size too large, truncated to 1048576 [ 1117.918983][ T8713] syzkaller0: entered allmulticast mode [ 1117.955432][ T8736] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.9207'. [ 1117.990498][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9209'. [ 1118.201746][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9210'. [ 1118.708726][ T8771] xt_CT: No such helper "snmp_trap" [ 1122.982733][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1123.318793][ T8750] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1123.544241][ T8786] netlink: 'syz.2.9213': attribute type 1 has an invalid length. [ 1123.642426][ T8795] netlink: 'syz.4.9215': attribute type 1 has an invalid length. [ 1123.671421][ T8786] bond6: (slave gretap1): making interface the new active one [ 1123.686119][ T8786] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1123.738696][ T8786] netlink: 71 bytes leftover after parsing attributes in process `syz.2.9213'. [ 1123.797866][ T8786] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.9213'. [ 1123.834565][ T8805] netlink: 'syz.4.9218': attribute type 1 has an invalid length. [ 1124.094564][ T8805] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1124.333120][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9225'. [ 1124.775836][ T8856] syzkaller1: entered promiscuous mode [ 1124.793599][ T8856] syzkaller1: entered allmulticast mode [ 1124.958704][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9232'. [ 1125.028023][ T8871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.037560][ T8871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.055357][ T8871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.066606][ T8871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.322249][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9236'. [ 1125.494705][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9236'. [ 1126.147332][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9246'. [ 1126.174812][ T8940] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9246'. [ 1126.203077][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9246'. [ 1126.466733][ T8951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9249'. [ 1126.503140][ T8954] sctp: [Deprecated]: syz.4.9250 (pid 8954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1126.503140][ T8954] Use struct sctp_sack_info instead [ 1127.458044][ T8997] netlink: 'syz.0.9259': attribute type 1 has an invalid length. [ 1127.493590][ T8998] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1128.152670][ T9044] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1128.203880][ T9044] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1128.242809][ T9044] gretap1: entered promiscuous mode [ 1128.250169][ T9044] gretap1: entered allmulticast mode [ 1128.316126][ T9061] veth1_macvtap: left promiscuous mode [ 1128.439691][ T9057] »»»»»» speed is unknown, defaulting to 1000 [ 1128.453261][ T9057] C speed is unknown, defaulting to 1000 [ 1128.476311][ T9064] 0ªX¹¦Dö»: renamed from gretap0 [ 1128.506840][ T9064] 0ªX¹¦Dö»: entered allmulticast mode [ 1128.639127][ T9057] hsr0 speed is unknown, defaulting to 1000 [ 1133.211795][ T3667] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1133.370642][ T6030] Bluetooth: hci5: command 0x0406 tx timeout [ 1138.407768][ T9100] netlink: 'syz.0.9273': attribute type 3 has an invalid length. [ 1138.416184][ T9098] netlink: 'syz.2.9275': attribute type 5 has an invalid length. [ 1138.425754][ T30] audit: type=1804 audit(1779202843.455:20): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9277" name="/newroot/514/cgroup.controllers" dev="tmpfs" ino=2629 res=1 errno=0 [ 1138.478578][ T30] audit: type=1800 audit(1779202843.455:21): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9277" name="cgroup.controllers" dev="tmpfs" ino=2629 res=0 errno=0 [ 1138.540239][ T9102] __nla_validate_parse: 12 callbacks suppressed [ 1138.540258][ T9102] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9277'. [ 1138.631816][ T9107] netlink: 'syz.5.9278': attribute type 1 has an invalid length. [ 1138.634998][ T9110] netlink: 'syz.2.9280': attribute type 1 has an invalid length. [ 1138.689118][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9280'. [ 1138.745027][ T9107] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1138.789271][ T9114] bond13: (slave veth0_to_bond): Releasing active interface [ 1138.842190][ T9114] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1138.857161][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9282'. [ 1138.862174][ T9116] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1138.906218][ T9114] macvlan0: entered promiscuous mode [ 1138.966405][ T9114] macvlan0: entered allmulticast mode [ 1138.996131][ T9114] bond16: entered promiscuous mode [ 1139.021131][ T9114] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1139.029716][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1139.058573][ T9114] bond16: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1139.092454][ T9114] bond16: left promiscuous mode [ 1139.126676][ T9107] bond16: entered promiscuous mode [ 1139.164617][ T9107] bond16: entered allmulticast mode [ 1139.257359][ T9143] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9285'. [ 1139.281881][ T9146] netlink: 'syz.4.9286': attribute type 1 has an invalid length. [ 1139.318858][ T9146] netlink: 'syz.4.9286': attribute type 2 has an invalid length. [ 1139.383479][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9287'. [ 1139.656239][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9292'. [ 1139.753918][ T9175] veth0_macvtap: left promiscuous mode [ 1139.804502][ T9167] Unsupported ieee802154 address type: 0 [ 1140.336952][ T9220] netlink: 13 bytes leftover after parsing attributes in process `syz.0.9301'. [ 1140.723200][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9306'. [ 1140.757951][ T9244] netlink: 7496 bytes leftover after parsing attributes in process `syz.3.9306'. [ 1140.845175][ T9249] netlink: 'syz.2.9307': attribute type 1 has an invalid length. [ 1141.137061][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.203950][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.315932][ T9281] syzkaller1: entered promiscuous mode [ 1141.325395][ T9281] syzkaller1: entered allmulticast mode [ 1143.342021][ T6030] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1143.365359][ T6030] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1143.377489][ T6030] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1143.389169][ T6030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1143.398542][ T6030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1143.687274][ T9368] tipc: Started in network mode [ 1143.729237][ T9368] tipc: Node identity ac14140f, cluster identity 4711 [ 1143.779158][ T9368] tipc: Enabled bearer , priority 10 [ 1143.843959][ T9375] netlink: 'syz.3.9334': attribute type 21 has an invalid length. [ 1143.864308][ T9378] __nla_validate_parse: 4 callbacks suppressed [ 1143.864320][ T9378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9335'. [ 1143.889125][ T9371] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1143.902111][ T9375] netlink: 'syz.3.9334': attribute type 6 has an invalid length. [ 1143.910275][ T9375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9334'. [ 1144.108701][ T3675] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.113064][ T9392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9339'. [ 1144.166319][ T9396] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9339'. [ 1144.195545][ T9396] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9339'. [ 1144.337789][ T3675] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.506505][ T9356] »»»»»» speed is unknown, defaulting to 1000 [ 1144.527527][ T3675] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.563010][ T9356] C speed is unknown, defaulting to 1000 [ 1144.617491][ T3675] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.645699][ T9412] tipc: Resetting bearer [ 1144.776290][ T9428] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 1144.883207][ T1223] tipc: Node number set to 2886997007 [ 1144.989387][ T9356] hsr0 speed is unknown, defaulting to 1000 [ 1145.144176][ T3675] bridge_slave_1: left allmulticast mode [ 1145.151314][ T3675] bridge_slave_1: left promiscuous mode [ 1145.157145][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.168268][ T3675] bridge_slave_0: left allmulticast mode [ 1145.177471][ T3675] bridge_slave_0: left promiscuous mode [ 1145.184736][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.270389][ T9412] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1145.281936][ T9412] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1145.336162][ T3675] erspan0 (unregistering): left promiscuous mode [ 1145.367562][ T3675] gretap0 (unregistering): left promiscuous mode [ 1145.402917][ T3675] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1145.541317][T29842] Bluetooth: hci1: command tx timeout [ 1145.819905][ T3675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.829661][ T3675] bond_slave_0: left allmulticast mode [ 1145.837047][ T3675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.847717][ T3675] bond_slave_1: left allmulticast mode [ 1145.856073][ T3675] bond0 (unregistering): Released all slaves [ 1145.868541][ T3675] bond1 (unregistering): (slave lo): Releasing backup interface [ 1145.877174][ T3675] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1145.889263][ T3675] bond1 (unregistering): Released all slaves [ 1145.905157][ T3675] bond2 (unregistering): Released all slaves [ 1145.923412][ T3675] bond3 (unregistering): Released all slaves [ 1145.939130][ T3675] bond4 (unregistering): Released all slaves [ 1145.962281][ T3675] bond5 (unregistering): Released all slaves [ 1145.977409][ T3675] bond6 (unregistering): Released all slaves [ 1145.993389][ T3675] bond7 (unregistering): Released all slaves [ 1146.009451][ T3675] bond8 (unregistering): Released all slaves [ 1146.039826][ T3675] bond9 (unregistering): Released all slaves [ 1146.062938][ T3675] bond10 (unregistering): Released all slaves [ 1146.089732][ T3675] bond11 (unregistering): Released all slaves [ 1146.117156][ T3675] bond12 (unregistering): Released all slaves [ 1146.148899][ T3675] bond13 (unregistering): Released all slaves [ 1146.175492][ T3675] bond14 (unregistering): Released all slaves [ 1146.204084][ T3675] bond15 (unregistering): Released all slaves [ 1146.233022][ T3675] bond16 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1146.244814][ T3675] bond16 (unregistering): Released all slaves [ 1146.338800][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9352'. [ 1146.478216][ T9412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1146.488082][ T9412] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1146.720665][ T3675] tipc: Left network mode [ 1146.733163][ T9412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1146.740117][ T9412] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1147.085850][ T9399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1147.466587][ T9412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1147.485704][ T9412] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1147.914253][ T9467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1147.948964][ T9479] netlink: 'syz.0.9360': attribute type 1 has an invalid length. [ 1147.973926][ T9482] netlink: 212 bytes leftover after parsing attributes in process `syz.4.9359'. [ 1148.025148][ T9480] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9360'. [ 1148.034890][ T9483] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9360'. [ 1148.053673][ T9472] bond15: entered allmulticast mode [ 1148.128025][ T9472] bond15 (unregistering): Released all slaves [ 1148.197435][ T9479] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1148.266551][ T9482] veth19: entered allmulticast mode [ 1148.518344][ T9508] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9364'. [ 1148.962217][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1149.053213][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.071601][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.084505][ T9356] bridge_slave_0: entered allmulticast mode [ 1149.105241][ T9356] bridge_slave_0: entered promiscuous mode [ 1149.144803][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.157569][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.201456][ T9356] bridge_slave_1: entered allmulticast mode [ 1149.219148][ T9356] bridge_slave_1: entered promiscuous mode [ 1149.343038][ T9533] vlan2: entered promiscuous mode [ 1149.348896][ T9533] bridge0: entered promiscuous mode [ 1149.382899][ T3675] hsr_slave_0: left promiscuous mode [ 1149.389374][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.398341][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.414330][ T3675] pim6reg (unregistering): left allmulticast mode [ 1149.494762][ T9543] netlink: 'syz.3.9374': attribute type 16 has an invalid length. [ 1149.502986][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9374'. [ 1149.546599][ T9547] netlink: 'syz.3.9374': attribute type 1 has an invalid length. [ 1149.554730][ T9547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9374'. [ 1149.594380][T10338] smbdirect: ib_dev[syz1] removed [ 1149.767416][ T9549] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9375'. [ 1149.837794][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.898115][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.007856][ T9356] team0: Port device team_slave_0 added [ 1150.064525][ T9356] team0: Port device team_slave_1 added [ 1150.139284][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.147496][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.192530][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.226406][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.247247][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.295179][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.326590][ T3675] IPVS: stop unused estimator thread 0... [ 1150.385354][ T9356] hsr_slave_0: entered promiscuous mode [ 1150.394363][ T9356] hsr_slave_1: entered promiscuous mode [ 1150.407094][ T9356] debugfs: 'hsr0' already exists in 'hsr' [ 1150.422188][ T9356] Cannot create hsr debugfs directory [ 1150.618812][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1151.157846][ T9356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1151.169294][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1151.178454][ T9356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1151.194595][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1151.203880][ T9356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1151.221960][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1151.239696][ T9356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1151.251140][ T9356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1151.375947][ T9356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.398833][ T9356] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.425863][ T3670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.433067][ T3670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.453920][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.461445][ T3672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.994340][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.295076][ T9356] veth0_vlan: entered promiscuous mode [ 1152.314384][ T9356] veth1_vlan: entered promiscuous mode [ 1152.356411][ T9356] veth0_macvtap: entered promiscuous mode [ 1152.369520][ T9356] veth1_macvtap: entered promiscuous mode [ 1152.398130][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.433956][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.450492][ T3657] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.470718][ T3657] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.485923][ T3657] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.498153][ T3657] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.764770][T10338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.784343][T10338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.830026][T10338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.841788][T10338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.675214][ T9850] netlink: 'syz.5.9378': attribute type 11 has an invalid length. [ 1158.710434][ T9850] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9378'. [ 1158.755667][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1158.936551][ T9874] netlink: 'syz.3.9385': attribute type 21 has an invalid length. [ 1158.946281][ T9874] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9385'. [ 1158.956633][ T9874] netlink: 'syz.3.9385': attribute type 4 has an invalid length. [ 1158.977008][ T9874] netlink: 'syz.3.9385': attribute type 5 has an invalid length. [ 1158.989628][ T9878] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9386'. [ 1158.995065][ T9879] netlink: 'syz.3.9385': attribute type 21 has an invalid length. [ 1159.020477][ T9874] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9385'. [ 1159.027359][ T9879] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9385'. [ 1159.046591][ T9879] netlink: 'syz.3.9385': attribute type 4 has an invalid length. [ 1159.056975][ T9879] netlink: 'syz.3.9385': attribute type 5 has an invalid length. [ 1159.067345][ T9879] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9385'. [ 1159.543510][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9392'. [ 1159.596007][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9392'. [ 1159.787255][ T9930] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9398'. [ 1159.860235][ T9933] netlink: 'syz.0.9399': attribute type 12 has an invalid length. [ 1162.464675][ T9907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.942518][ T9965] netem: incorrect ge model size [ 1163.082358][ T9965] netem: change failed [ 1163.420032][ T9999] vlan2: entered allmulticast mode [ 1163.461463][ T9999] bond0: entered allmulticast mode [ 1163.490244][ T9999] bond_slave_0: entered allmulticast mode [ 1163.520735][ T9999] bond_slave_1: entered allmulticast mode [ 1163.813672][T10026] __nla_validate_parse: 4 callbacks suppressed [ 1163.813691][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9417'. [ 1163.907742][T10026] ipvlan2: entered allmulticast mode [ 1163.973442][T10036] netlink: 'syz.5.9420': attribute type 1 has an invalid length. [ 1163.982506][T10036] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9420'. [ 1163.993706][T10036] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9420'. [ 1164.004372][T10036] netlink: 658 bytes leftover after parsing attributes in process `syz.5.9420'. [ 1164.085594][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9421'. [ 1164.131873][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9421'. [ 1164.247616][T10055] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9423'. [ 1164.435678][T10058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9425'. [ 1164.589082][T10071] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9429'. [ 1164.713265][T10080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1164.873890][T10089] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9434'. [ 1164.949096][T10094] Bluetooth: MGMT ver 1.23 [ 1165.208672][T10111] FAULT_INJECTION: forcing a failure. [ 1165.208672][T10111] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.270704][T10111] CPU: 0 UID: 0 PID: 10111 Comm: syz.3.9439 Not tainted syzkaller #0 PREEMPT(full) [ 1165.270729][T10111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1165.270739][T10111] Call Trace: [ 1165.270746][T10111] [ 1165.270755][T10111] dump_stack_lvl+0xe8/0x150 [ 1165.270781][T10111] should_fail_ex+0x412/0x560 [ 1165.270808][T10111] should_failslab+0xa8/0x100 [ 1165.270832][T10111] ? skb_clone+0x212/0x3a0 [ 1165.270862][T10111] kmem_cache_alloc_noprof+0x87/0x650 [ 1165.270885][T10111] ? __netlink_lookup+0xc6/0x8b0 [ 1165.270913][T10111] skb_clone+0x212/0x3a0 [ 1165.270939][T10111] __netlink_deliver_tap+0x404/0x850 [ 1165.270972][T10111] ? netlink_deliver_tap+0x2e/0x1b0 [ 1165.270994][T10111] netlink_deliver_tap+0x19c/0x1b0 [ 1165.271017][T10111] netlink_unicast+0x730/0x8e0 [ 1165.271044][T10111] netlink_sendmsg+0x813/0xb40 [ 1165.271075][T10111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1165.271099][T10111] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1165.271122][T10111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1165.271147][T10111] ____sys_sendmsg+0x972/0x9f0 [ 1165.271169][T10111] ? __might_fault+0xaf/0x130 [ 1165.271195][T10111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1165.271225][T10111] ? import_iovec+0x73/0xa0 [ 1165.271252][T10111] ___sys_sendmsg+0x2a5/0x360 [ 1165.271272][T10111] ? __lock_acquire+0x6b5/0x2cf0 [ 1165.271293][T10111] ? __pfx____sys_sendmsg+0x10/0x10 [ 1165.271348][T10111] ? __fget_files+0x2a/0x420 [ 1165.271364][T10111] ? __fget_files+0x3a0/0x420 [ 1165.271392][T10111] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1165.271415][T10111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1165.271445][T10111] ? __pfx_ksys_write+0x10/0x10 [ 1165.271474][T10111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.271490][T10111] do_syscall_64+0x15f/0xf80 [ 1165.271511][T10111] ? trace_irq_disable+0x3b/0x140 [ 1165.271531][T10111] ? clear_bhb_loop+0x40/0x90 [ 1165.271551][T10111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.271566][T10111] RIP: 0033:0x7fed5c99ce59 [ 1165.271582][T10111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.271595][T10111] RSP: 002b:00007fed5d8fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.271612][T10111] RAX: ffffffffffffffda RBX: 00007fed5cc15fa0 RCX: 00007fed5c99ce59 [ 1165.271622][T10111] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1165.271633][T10111] RBP: 00007fed5d8fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.271642][T10111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.271650][T10111] R13: 00007fed5cc16038 R14: 00007fed5cc15fa0 R15: 00007ffd4ff94ba8 [ 1165.271676][T10111] [ 1165.593283][T10124] nbd: must specify an index to disconnect [ 1165.719596][T10129] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1165.728934][T10129] syzkaller1: linktype set to 823 [ 1165.789892][T10134] openvswitch: netlink: Flow actions attr not present in new flow. [ 1165.969064][T10143] netlink: 'syz.3.9449': attribute type 4 has an invalid length. [ 1166.827090][T10198] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1166.988238][T10206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1167.047633][T10201] netlink: 'syz.2.9466': attribute type 5 has an invalid length. [ 1167.085287][T10209] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1167.112796][T10209] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1167.128037][T10209] veth1_to_bridge: entered allmulticast mode [ 1167.149387][T10209] veth1_to_bridge: entered promiscuous mode [ 1167.158446][T10209] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1167.173823][T10209] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1167.181145][T10209] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1167.437937][T10240] netlink: 'syz.0.9479': attribute type 8 has an invalid length. [ 1167.542887][T10236] block nbd8: server does not support multiple connections per device. [ 1167.562449][T10236] block nbd8: shutting down sockets [ 1168.028204][T10280] netlink: 'syz.3.9488': attribute type 21 has an invalid length. [ 1168.386557][T10296] syzkaller0: entered promiscuous mode [ 1168.395175][T10296] syzkaller0: entered allmulticast mode [ 1168.453288][T10298] SET target dimension over the limit! [ 1168.563761][T10304] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1168.618312][T10314] netlink: 'syz.0.9498': attribute type 15 has an invalid length. [ 1168.649676][T10314] netlink: 'syz.0.9498': attribute type 15 has an invalid length. [ 1168.651323][T10338] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1168.720800][T10338] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1168.743664][T10338] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1168.762380][T10338] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1168.931493][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.177482][T10330] 0ªX¹¦Dö»: left allmulticast mode [ 1169.210044][T10330] veth1_to_bridge: left allmulticast mode [ 1169.222894][T10330] hsr0: left promiscuous mode [ 1169.228908][T10330] geneve1: left promiscuous mode [ 1169.235088][T10330] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1169.246756][T10330] geneve2: left promiscuous mode [ 1169.252077][T10330] geneve2: left allmulticast mode [ 1169.258025][T10330] geneve3: left promiscuous mode [ 1169.263642][T10330] geneve3: left allmulticast mode [ 1169.269340][T10330] bond1: left promiscuous mode [ 1169.275989][T10330] bond1: left allmulticast mode [ 1169.282873][T10330] geneve4: left promiscuous mode [ 1169.289683][T10330] A link change request failed with some changes committed already. Interface veth5 may have been left with an inconsistent configuration, please check. [ 1169.494714][T10356] __nla_validate_parse: 53 callbacks suppressed [ 1169.494732][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9512'. [ 1169.587169][T10364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9510'. [ 1169.607572][T10354] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1169.611220][T10362] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1169.733140][T10370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9516'. [ 1169.738120][T10362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1169.756037][T10370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9516'. [ 1169.781761][T10362] netlink: 'syz.3.9514': attribute type 7 has an invalid length. [ 1169.801384][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1169.865322][T10380] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9519'. [ 1169.917883][T10376] netlink: 'syz.4.9517': attribute type 1 has an invalid length. [ 1170.056602][T10392] can: request_module (can-proto-0) failed. [ 1170.063738][T10392] netlink: 'syz.5.9523': attribute type 1 has an invalid length. [ 1170.106933][T10376] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1170.138421][T10401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9524'. [ 1170.155322][T10402] netlink: 'syz.3.9525': attribute type 1 has an invalid length. [ 1170.167697][T10401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9524'. [ 1170.214769][T10402] netlink: 'syz.3.9525': attribute type 1 has an invalid length. [ 1170.429244][T10420] openvswitch: netlink: Missing valid actions attribute. [ 1170.436820][T10417] netlink: 'syz.3.9530': attribute type 2 has an invalid length. [ 1170.468010][T10420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.545801][T10427] netlink: 'syz.3.9532': attribute type 14 has an invalid length. [ 1170.557350][T10427] netlink: 'syz.3.9532': attribute type 14 has an invalid length. [ 1170.664091][T10433] netlink: 'syz.0.9533': attribute type 1 has an invalid length. [ 1170.810359][T10438] vlan4: entered allmulticast mode [ 1170.887553][T10442] veth19: entered allmulticast mode [ 1171.377964][T10469] openvswitch: netlink: Flow key attr not present in new flow. [ 1171.576236][T10479] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1171.723086][T10485] netlink: 'syz.3.9551': attribute type 1 has an invalid length. [ 1171.989947][ T6030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1172.008593][ T6030] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1172.018822][ T6030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1172.043693][ T6030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1172.067248][ T6030] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1172.102458][T10485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1172.289617][T10505] erspan0: entered promiscuous mode [ 1172.361734][T10510] vcan0: tx address claim with different name [ 1172.836777][T10542] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1172.918743][T30588] syz_tun (unregistering): left allmulticast mode [ 1172.935974][T30588] syz_tun (unregistering): left promiscuous mode [ 1172.954979][T30588] bridge0: port 2(syz_tun) entered disabled state [ 1173.014753][T10496] »»»»»» speed is unknown, defaulting to 1000 [ 1173.027911][T10496] C speed is unknown, defaulting to 1000 [ 1173.333693][T10562] team0: No ports can be present during mode change [ 1173.554069][T10570] vlan3: entered allmulticast mode [ 1173.564528][T10570] gretap0: entered allmulticast mode [ 1174.182664][ T6030] Bluetooth: hci4: command tx timeout [ 1174.228335][T10605] bond3: option min_links: invalid value (18446744073709551614) [ 1174.237176][T10605] bond3: option min_links: allowed values 0 - 2147483647 [ 1174.262472][T10605] bond3 (unregistering): Released all slaves [ 1174.423670][T10496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.431283][T10496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.439432][T10496] bridge_slave_0: entered allmulticast mode [ 1174.448318][T10496] bridge_slave_0: entered promiscuous mode [ 1174.458833][T10575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1174.459725][T10496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.531251][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.555505][T10496] bridge_slave_1: entered allmulticast mode [ 1174.623825][T10496] bridge_slave_1: entered promiscuous mode [ 1174.689790][T10617] __nla_validate_parse: 16 callbacks suppressed [ 1174.689839][T10617] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9583'. [ 1174.745226][T10496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.839584][T10616] syzkaller0: entered promiscuous mode [ 1174.847779][T10616] syzkaller0: entered allmulticast mode [ 1174.867688][T10496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.915321][T10622] tipc: Failed to obtain node identity [ 1174.923078][T10622] tipc: Enabling of bearer rejected, failed to enable media [ 1175.136266][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9588'. [ 1176.264372][ T6030] Bluetooth: hci4: command tx timeout [ 1178.346172][ T6030] Bluetooth: hci4: command tx timeout [ 1179.318201][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1179.336072][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1179.349389][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1179.362549][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1179.375572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1179.388520][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1179.401762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1179.414847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1179.427935][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1179.441359][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1180.411263][ T6030] Bluetooth: hci4: command tx timeout [ 1182.501253][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1184.320631][ C0] net_ratelimit: 26298 callbacks suppressed [ 1184.320652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.322267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1184.326937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.327140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.341986][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1184.353458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.353704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.353919][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.354133][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.354344][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1187.061860][ C0] sched: DL replenish lagged too much [ 1189.330641][ C0] net_ratelimit: 34208 callbacks suppressed [ 1189.330665][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.330797][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1189.337365][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.337606][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.337837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.351307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1189.362158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.362398][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.362630][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.362910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.340722][ C0] net_ratelimit: 34311 callbacks suppressed [ 1194.340744][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.340782][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1194.347901][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.348203][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.348432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.362160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1194.372873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.373123][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.373427][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.373662][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1197.853045][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1199.350576][ C1] net_ratelimit: 34465 callbacks suppressed [ 1199.350611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1199.350689][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.357650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1199.368938][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.369273][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.369508][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.369728][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.369973][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.383515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1199.394060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.360696][ C0] net_ratelimit: 34592 callbacks suppressed [ 1204.360717][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.360722][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1204.366935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.367215][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.367431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.381066][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1204.391606][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.391874][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.392111][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.392344][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.370713][ C0] net_ratelimit: 34706 callbacks suppressed [ 1209.370758][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.374667][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1209.377172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.390827][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1209.401557][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.401861][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.402096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.402317][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.416491][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1209.427039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.380663][ C1] net_ratelimit: 34227 callbacks suppressed [ 1214.380697][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1214.380722][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.380925][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.387795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1214.399574][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.399849][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.400098][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.400318][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.414010][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1214.424613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.390610][ C0] net_ratelimit: 33755 callbacks suppressed [ 1219.390632][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.390880][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1219.396872][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.397137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.397349][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.410960][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1219.421414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.421653][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.421884][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.422122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.400566][ C0] net_ratelimit: 34818 callbacks suppressed [ 1224.400588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.400797][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1224.406805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.407039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.407247][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.420847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1224.431450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.431677][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.431900][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1224.432131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.410680][ C0] net_ratelimit: 34766 callbacks suppressed [ 1229.410701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.410777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1229.417002][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.417251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.417453][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.430828][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1229.441665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.441918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.442147][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.442369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.420579][ C0] net_ratelimit: 33476 callbacks suppressed [ 1234.420601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.422430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1234.426861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.427083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.440758][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1234.451457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.451770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.452065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.452290][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.465989][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1239.430552][ C0] net_ratelimit: 32669 callbacks suppressed [ 1239.430572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1239.430581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.430793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.437525][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1239.448728][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.450356][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.463490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1239.473994][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.474239][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.474524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.440546][ C1] net_ratelimit: 33810 callbacks suppressed [ 1244.440590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1244.440622][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.447626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1244.458935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.459176][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.459395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.459609][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.459823][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.460017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1244.473604][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1249.450523][ C1] net_ratelimit: 32878 callbacks suppressed [ 1249.450575][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1249.450654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.457791][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1249.468863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.469118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.469410][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.469643][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.469857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1249.483550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1249.493965][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.460737][ C0] net_ratelimit: 33021 callbacks suppressed [ 1254.460830][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.460991][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1254.467220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.467457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.467666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.481251][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1254.491795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.492030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.492264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.492492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.470550][ C1] net_ratelimit: 32761 callbacks suppressed [ 1259.470586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1259.470623][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.470840][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.477689][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1259.488868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.489113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.489346][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.489576][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.489794][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1259.503388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1264.480611][ C1] net_ratelimit: 33539 callbacks suppressed [ 1264.480658][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1264.480728][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.487718][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1264.499329][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.499650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.499955][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.500253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.513763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1264.525380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.525690][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.490624][ C0] net_ratelimit: 32715 callbacks suppressed [ 1269.490654][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.490654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1269.491041][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1269.496960][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.497196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.497415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.511371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1269.521904][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.522147][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.522385][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.500646][ C1] net_ratelimit: 34807 callbacks suppressed [ 1274.500693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1274.500697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.501070][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1274.506966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.507280][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.507483][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.523015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1274.535534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.548903][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1274.560209][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.510510][ C0] net_ratelimit: 33551 callbacks suppressed [ 1279.510523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1279.510531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.510885][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1279.516823][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.517063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.517292][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.530769][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1279.541448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.541688][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.541918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.520501][ C0] net_ratelimit: 34938 callbacks suppressed [ 1284.520521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.520639][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1284.526725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.526940][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.527127][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.540865][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1284.551446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.551652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.551850][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.552046][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.530632][ C0] net_ratelimit: 34478 callbacks suppressed [ 1289.530654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.530696][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1289.536914][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.537132][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.537336][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.550598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1289.561937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.562164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.562379][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.562594][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.540483][ C1] net_ratelimit: 36070 callbacks suppressed [ 1294.540518][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1294.540621][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.547516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1294.558881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.559101][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.559314][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.559529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.559739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.573438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1294.584010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.550593][ C0] net_ratelimit: 35734 callbacks suppressed [ 1299.550615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.550658][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1299.556911][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.557130][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.557333][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.571961][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1299.584434][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.584687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.584908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.586738][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.560642][ C1] net_ratelimit: 35014 callbacks suppressed [ 1304.560662][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.560678][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1304.566997][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.567233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.580861][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1304.592863][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.593110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.593327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.593541][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.593743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1306.170487][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1306.177574][ C0] rcu: (detected by 0, t=10502 jiffies, g=239505, q=2106 ncpus=2) [ 1306.185490][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 2780 (4295067728-4295064948), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1306.199065][ C0] rcu: rcu_preempt kthread starved for 2780 jiffies! g239505 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1306.210546][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1306.220563][ C0] rcu: RCU grace-period kthread stack dump: [ 1306.226502][ C0] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1306.240649][ C0] Call Trace: [ 1306.244048][ C0] [ 1306.247088][ C0] __schedule+0x1821/0x5740 [ 1306.251644][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1306.256647][ C0] ? __pfx___schedule+0x10/0x10 [ 1306.261723][ C0] ? schedule+0x90/0x360 [ 1306.266019][ C0] schedule+0x164/0x360 [ 1306.270232][ C0] schedule_timeout+0x158/0x2c0 [ 1306.275130][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1306.280554][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1306.285918][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1306.291755][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1306.297363][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1306.302636][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1306.308845][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1306.314177][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1306.319414][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1306.325447][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1306.330256][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1306.335499][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1306.341457][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1306.346429][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1306.351515][ C0] kthread+0x389/0x470 [ 1306.355791][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1306.361182][ C0] ? __pfx_kthread+0x10/0x10 [ 1306.365896][ C0] ret_from_fork+0x514/0xb70 [ 1306.370797][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1306.375940][ C0] ? __switch_to+0xc79/0x1410 [ 1306.380667][ C0] ? __pfx_kthread+0x10/0x10 [ 1306.385286][ C0] ret_from_fork_asm+0x1a/0x30 [ 1306.390110][ C0] [ 1306.393150][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1306.399594][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1306.405009][ C1] NMI backtrace for cpu 1 [ 1306.405028][ C1] CPU: 1 UID: 0 PID: 23316 Comm: ipvs-e:17:0 Not tainted syzkaller #0 PREEMPT(full) [ 1306.405046][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1306.405057][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1306.405086][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d b4 ab 60 0c 48 89 de 5b e9 e3 ec 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 98 9b 73 11 65 8b 15 b9 9b 73 [ 1306.405100][ C1] RSP: 0018:ffffc90000a07530 EFLAGS: 00000006 [ 1306.405114][ C1] RAX: ffffffff81b3560f RBX: 000000000003d8de RCX: ffff8880315abd80 [ 1306.405126][ C1] RDX: 0000000000010100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.405136][ C1] RBP: ffff8880b87284a8 R08: ffffffff81b355ed R09: ffffffff9a490588 [ 1306.405147][ C1] R10: ffff8880a1a34308 R11: ffffed1014346863 R12: ffff8880b8728280 [ 1306.405158][ C1] R13: ffffffff8e7829a0 R14: 1ffff110170e5059 R15: 000001300de27703 [ 1306.405170][ C1] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 1306.405182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1306.405193][ C1] CR2: 000055557055fa38 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 1306.405208][ C1] Call Trace: [ 1306.405215][ C1] [ 1306.405220][ C1] ktime_get_update_offsets_now+0x97/0x3e0 [ 1306.405247][ C1] hrtimer_interrupt+0x465/0x950 [ 1306.405280][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1306.405301][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1306.405323][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1306.405340][ C1] RIP: 0010:rcu_lockdep_current_cpu_online+0x8e/0x120 [ 1306.405363][ C1] Code: df e8 b6 de 85 00 48 8b 03 48 8d 98 80 1e 3b 93 48 8d b8 a8 1e 3b 93 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 92 de 85 00 <4c> 8b 7b 28 48 83 c3 20 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 [ 1306.405376][ C1] RSP: 0018:ffffc90000a077c8 EFLAGS: 00000246 [ 1306.405388][ C1] RAX: 1ffff110170e77d5 RBX: ffff8880b873be80 RCX: 0000000080000101 [ 1306.405400][ C1] RDX: ffff8880315abd80 RSI: ffffffff8c28af40 RDI: ffff8880b873bea8 [ 1306.405411][ C1] RBP: 0000000000000001 R08: ffffc90000a07b20 R09: ffffc90000a07b30 [ 1306.405422][ C1] R10: ffffc90000a07980 R11: fffff52000140f32 R12: 0000000000000003 [ 1306.405433][ C1] R13: ffff8880a3c9c4c8 R14: dffffc0000000000 R15: 0000000000000001 [ 1306.405452][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 1306.405475][ C1] rcu_read_lock_held+0x1e/0x50 [ 1306.405495][ C1] ip6_ignore_linkdown+0x66/0x140 [ 1306.405511][ C1] find_match+0x9c/0xb40 [ 1306.405539][ C1] __find_rr_leaf+0x248/0x760 [ 1306.405584][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 1306.405607][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1306.405630][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1306.405650][ C1] fib6_table_lookup+0x3b4/0xa80 [ 1306.405680][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1306.405703][ C1] ip6_pol_route+0x228/0x13d0 [ 1306.405726][ C1] ? ip6_pol_route+0x160/0x13d0 [ 1306.405745][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 1306.405762][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1306.405788][ C1] ? net_generic+0x1e/0x240 [ 1306.405814][ C1] fib6_rule_lookup+0x556/0x730 [ 1306.405831][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1306.405849][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1306.405866][ C1] ? do_xdp_generic+0x168/0x12e0 [ 1306.405882][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1306.405903][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1306.405924][ C1] ? NF_HOOK+0x369/0x3f0 [ 1306.405948][ C1] ip6_route_input+0x730/0xad0 [ 1306.405970][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 1306.405992][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1306.406013][ C1] ? ebt_do_table+0xe4/0x2830 [ 1306.406028][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 1306.406053][ C1] ip6_rcv_finish+0x141/0x280 [ 1306.406075][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1306.406097][ C1] ip_sabotage_in+0x1e1/0x270 [ 1306.406119][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1306.406142][ C1] nf_hook_slow+0xc5/0x220 [ 1306.406167][ C1] NF_HOOK+0x21f/0x3c0 [ 1306.406189][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1306.406210][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1306.406231][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1306.406254][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1306.406279][ C1] ? netif_receive_skb+0x102/0xbf0 [ 1306.406296][ C1] netif_receive_skb+0x278/0xbf0 [ 1306.406310][ C1] ? NF_HOOK+0xfa/0x3a0 [ 1306.406322][ C1] ? lock_acquire+0x106/0x350 [ 1306.406340][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 1306.406357][ C1] ? br_netif_receive_skb+0x126/0x190 [ 1306.406374][ C1] NF_HOOK+0xa4/0x3a0 [ 1306.406386][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1306.406400][ C1] ? NF_HOOK+0xfa/0x3a0 [ 1306.406413][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1306.406427][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1306.406444][ C1] ? br_pass_frame_up+0x275/0x420 [ 1306.406468][ C1] br_handle_frame_finish+0x1541/0x1c80 [ 1306.406491][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1306.406521][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1306.406550][ C1] ? irqentry_exit+0x218/0x760 [ 1306.406571][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1306.406592][ C1] ? nf_hook_slow+0x176/0x220 [ 1306.406615][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1306.406638][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1306.406665][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1306.406688][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1306.406711][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1306.406741][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1306.406763][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 1306.406778][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1306.406806][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1306.406822][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1306.406836][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1306.406853][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1306.406868][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 1306.406894][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1306.406916][ C1] br_handle_frame+0x1277/0x1510 [ 1306.406943][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1306.406967][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1306.406991][ C1] ? __netif_receive_skb_core+0x99f/0x3170 [ 1306.407013][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1306.407035][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 1306.407053][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1306.407082][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1306.407102][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1306.407119][ C1] ? irqentry_exit+0x218/0x760 [ 1306.407140][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1306.407166][ C1] ? process_backlog+0x3eb/0x1950 [ 1306.407187][ C1] ? process_backlog+0x3eb/0x1950 [ 1306.407204][ C1] ? process_backlog+0x3eb/0x1950 [ 1306.407222][ C1] ? process_backlog+0x3eb/0x1950 [ 1306.407239][ C1] process_backlog+0x76d/0x1950 [ 1306.407266][ C1] __napi_poll+0xae/0x340 [ 1306.407281][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1306.407299][ C1] net_rx_action+0x627/0xf70 [ 1306.407325][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1306.407341][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1306.407369][ C1] ? net_tx_action+0x5b6/0xc30 [ 1306.407388][ C1] ? net_tx_action+0xbfb/0xc30 [ 1306.407408][ C1] handle_softirqs+0x22a/0x840 [ 1306.407426][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1306.407445][ C1] __irq_exit_rcu+0xca/0x220 [ 1306.407460][ C1] irq_exit_rcu+0x9/0x30 [ 1306.407474][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1306.407495][ C1] [ 1306.407500][ C1] [ 1306.407506][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1306.407522][ C1] RIP: 0010:kthread_should_stop+0x6b/0xf0 [ 1306.407539][ C1] Code: 00 20 00 31 ff e8 35 a6 35 00 81 e5 00 00 20 00 74 68 e8 e8 a1 35 00 48 81 c3 10 07 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 6b df a0 00 48 8b 1b 48 89 df be 08 00 00 00 e8 [ 1306.407552][ C1] RSP: 0018:ffffc90006207b38 EFLAGS: 00000246 [ 1306.407565][ C1] RAX: 1ffff110062b5892 RBX: ffff8880315ac490 RCX: ffff8880315abd80 [ 1306.407576][ C1] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 1306.407585][ C1] RBP: 0000000000200000 R08: ffff8880315abd9b R09: 1ffff110062b57b3 [ 1306.407596][ C1] R10: dffffc0000000000 R11: ffffed10062b57b4 R12: dffffc0000000000 [ 1306.407607][ C1] R13: 1ffff110062b5ab4 R14: ffff8880315abdac R15: dffffc0000000000 [ 1306.407627][ C1] ? kthread_should_stop+0x58/0xf0 [ 1306.407644][ C1] ip_vs_estimation_kthread+0x2893/0x3950 [ 1306.407666][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1306.407687][ C1] ? ip_vs_estimation_kthread+0x2835/0x3950 [ 1306.407730][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 1306.407751][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1306.407779][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1306.407802][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1306.407823][ C1] kthread+0x389/0x470 [ 1306.407842][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 1306.407863][ C1] ? __pfx_kthread+0x10/0x10 [ 1306.407883][ C1] ret_from_fork+0x514/0xb70 [ 1306.407900][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1306.407916][ C1] ? __switch_to+0xc79/0x1410 [ 1306.407939][ C1] ? __pfx_kthread+0x10/0x10 [ 1306.407958][ C1] ret_from_fork_asm+0x1a/0x30 [ 1306.407986][ C1] [ 1309.570606][ C0] net_ratelimit: 31007 callbacks suppressed [ 1309.570627][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.570733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1309.577076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.577313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.577508][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.591046][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1309.601604][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.601908][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.602129][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.602328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.580605][ C0] net_ratelimit: 35754 callbacks suppressed [ 1314.580627][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.580813][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1314.586906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.587121][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.587320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.600816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:b1:36:10:16:6d, vlan:0) [ 1314.611612][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.611841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.612053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.612250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)