last executing test programs: 42.955993839s ago: executing program 1 (id=5994): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x38, r2, 0x401, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24008054) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xffffffffffffffad, 0x0, 0x20, 0x70bd22, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x0, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x0, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x3}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 42.726472602s ago: executing program 1 (id=5998): syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c20402"], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000100000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186200000500000000000000345200009df1ffff1000000018600000030000000000000001000100bf91000000000000b7020000010000008500200084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 42.576808216s ago: executing program 1 (id=6001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000440)="2fd87906c4cf47", 0x7, 0x24000000, 0x0, 0x0) recvfrom(r2, 0x0, 0xfffffffffffffe38, 0x99bcb88de02507d2, 0x0, 0xfffffffffffffe98) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000000000000ff4a958ba3aaaa188100f0ff88fb"], 0x16) 42.144430175s ago: executing program 1 (id=6009): r0 = socket(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_smc(0x2b, 0x1, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000280)) 42.081326529s ago: executing program 1 (id=6012): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x63, &(0x7f00000000c0)=""/99, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1a81f, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x0, 0x10, 0x10b}, 0x94) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7}, [@exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x6c, &(0x7f0000000380)=""/108, 0x41100, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2680b, 0xffffffffffffffff, 0x3, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x4, 0x7, 0x4}, {0x2, 0x4, 0x10, 0xc}, {0x0, 0x2, 0x6, 0x6}], 0x10, 0x40}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r1, r0, 0x0, 0x14, 0x0, @void, @value=r2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x8c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd8, r6, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x8}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="63afab1d7b06d19fccc7d5d7c94f4944"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="559914c89ff2f223c4b6ffe12d82593d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bf501f9d4a07dec"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5b3633fb2469af03635b276c824306ad"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "95d843eb7a9502df"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ae92c31fd2159cf1"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a9f83717567ea3b0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "41285f345a528c36"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3c4e626360c9648a"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x4042081) sendto$rose(0xffffffffffffffff, &(0x7f00000009c0)="604dc18c581fee344a83750e842ba2b661e56af06cd4d05538398b72ee36bd2946eab246ee495574ce8e491045ea3264ec167e3fe544156e", 0x38, 0x1, &(0x7f0000000a00)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r6, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x100}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x30, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}, {0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1c, 0x2, "ceb33ae349c67f7d0f5f1689f4575a9eba6247ca14ee6849"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000054}, 0x8080) r8 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d40)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf7, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e80)={'tunl0\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x7, 0x5, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x66, 0x0, 0x2, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@cipso={0x86, 0xe, 0x0, [{0x5, 0x8, "157a4fe65199"}]}, @end, @ssrr={0x89, 0x17, 0xc7, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @multicast2]}, @lsrr={0x83, 0x1b, 0xab, [@loopback, @private=0xa010102, @remote, @multicast1, @rand_addr=0x64010100, @broadcast]}, @noop, @timestamp={0x44, 0x8, 0x4e, 0x0, 0xb, [0x2]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r2, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000ec0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'gretap0\x00', 0x0, 0x20, 0x80, 0x81, 0x7fff, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x3, 0x29, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x14, 0xca, 0x0, 0x3, [0x9, 0x9, 0x6, 0x8]}, @ssrr={0x89, 0x7, 0x86, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001280)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000001480)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)={0x144, r10, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x144}}, 0x44) r16 = accept(r5, &(0x7f00000014c0)=@sco, &(0x7f0000001540)=0x80) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r16, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x68, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x408c4}, 0x24044011) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000016c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001740)={r17, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000001700)=']\'\\*}\'}@%\\\x00'}, 0x30) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001900)={&(0x7f00000017c0)={0x11c, r10, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "f090f31ac3b5dfdad615"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xe1, 0x5, "84127d2ced111e383834d8f6dec1b455357931c3c412b71f35cd1dbcd10b59ed0421a9aa3216b7fa91bf77c933e6af8166594d200077ab009c460010cb3215d8c793354499ef6fc749faf8c254b43c74b2aa22da7622432680028d56b358a8dd225d693908e81da3c4cce086b19490ca2e9cd6c47117c4d0756d7dc5323928f3caa5fd664db6dfe754cd632f54affdf1b8a64d392176307c2fd2d5abdf48b83cff3b52ae0c8e185e4ac8c4d380127b01df502b4b2192bc332f199997a49bc88260b01fa61176accceb07276db1fc723bf3d7b035a5d13424b4a634a37c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4880}, 0x0) sendmsg$netlink(r1, &(0x7f0000001f40)={&(0x7f0000001980)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0), 0x0, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r17}}}, @cred={{0x1c, 0x1, 0x2, {r17}}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r3, r5, r8]}}, @cred={{0x1c, 0x1, 0x2, {r17}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}], 0xc0, 0x8000}, 0xc8020) 42.030541963s ago: executing program 3 (id=6013): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000bc0)={0x0, 0x5, 0x2bb3, 0xe3, 0x94b, 0x7fff}, &(0x7f0000000c00)=0x14) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x64, 0x10, 0x100, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d502, 0x4}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 41.912264621s ago: executing program 1 (id=6014): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x2810) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0xfffffffd, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) (async) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x400c010) (async) sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x400c010) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd7000fcdbdf259d000006009500ce0e00f40500950000040000060095000f0000000600950009000000060095000700"/62], 0x44}}, 0x20044040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) recvmmsg(r5, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/255, 0xff}, {&(0x7f0000000b00)=""/207, 0xcf}, {&(0x7f0000000c00)=""/247, 0xf7}, {&(0x7f0000000d00)=""/217, 0xd9}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000e00)=""/130, 0x82}], 0xa}, 0xfff}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10002, 0x0) (async) recvmmsg(r5, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/255, 0xff}, {&(0x7f0000000b00)=""/207, 0xcf}, {&(0x7f0000000c00)=""/247, 0xf7}, {&(0x7f0000000d00)=""/217, 0xd9}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000e00)=""/130, 0x82}], 0xa}, 0xfff}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10002, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x30a00020}, 0xc, &(0x7f0000000500)={&(0x7f0000000f80)={0x1b8, 0x12, 0x400, 0x70bd26, 0x25dfdbfb, {0x26, 0x9, 0xff, 0x9, {0x4e22, 0x4e21, [0x476d, 0x7, 0xbb00000, 0x3], [0x2, 0x5, 0x4d1, 0x5], 0x0, [0x80, 0x4]}, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x75, 0x1, "0e539c6143a008f9981b6c4df9085f15d10d245d721b1edd9bfe93586ee99fa219e7fb4685ccca71722c78e816fe713d552d5bc30acab0dde702eeac6e5ffb9943e012fac0f0e514ef1d47c305d748a12fcc2ca806eef473e8d5d81fb9ab353766708f21084a58556b52e099f30412ece9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "0d3b395e62dece685c6a8a8b1b404e92d458fb03877135dcb3b4853252a9a9f67b0814072246bd0eab422f81ea685b6df0205f9c186e4a8fc0f6a7e323bc1c453f8d8ffa80cbc92c9215ba4dcc8a5bbbb4d927ef9eff2f6e95159fc61c4dd2d6d31698fa11b0031893d46d851d06538faa172e0d8d156289ce1fd57d9c2bfa581d6296b2baf9da0d0712cf13020fd9b9f832790b0f692711bc13691e2e0913e3f15be2a361d2ed0c9388615da5d73d64ebcce9016099f3828daa26c73ed2d19c691cb6dc95a3c07eb661d288e7b17c052893b6560fb37cc0f5a774f513d18fe878ff146f0e0a98d6f5a95d6895"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x51}, 0x48000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000040010000000000004000020000d5bea2784d005b17"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000040010000000000004000020000d5bea2784d005b17"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcb, &(0x7f0000000040)=""/203, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff79, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10}, 0x94) 41.540224416s ago: executing program 3 (id=6022): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc}}]}, 0x34}}, 0x0) 41.472521935s ago: executing program 4 (id=6023): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_deladdr={0x58, 0x15, 0x20, 0x70bd2d, 0x25dfdbfb, {0xa, 0x8, 0x20, 0xfe, r2}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000884) 41.472101039s ago: executing program 2 (id=6024): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x25f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r4, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000280)={'ip_vti0\x00', {0x2, 0x4e24, @rand_addr=0x64010101}}) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (async) r13 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8015) (async) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r15, 0x5411, &(0x7f0000000a80)) (async) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000304c9db34c0091075fc00000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500180012800e00010077697265677561726400000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 41.432443184s ago: executing program 0 (id=6025): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x4000840) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x180, 0x1170, 0x1398, 0x0, 0x1170, 0x2c0, 0x1398, 0x1398, 0x2c0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'dvmrp1\x00', 'caif0\x00', {}, {}, 0x18, 0x0, 0x6}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@dst={{0x48}, {0x1, 0x4, 0x1, [0x3778, 0x0, 0x8, 0xfffb, 0x100, 0xfff, 0xd3b2, 0x6, 0x1, 0x100, 0x8, 0x7ff, 0x7, 0x6433, 0x2, 0x7], 0x5}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xa0, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b9e8e7fa84daa164d4c271c92beb64b77a92154f3099cf4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c1c15bc0c604344d4959c56e5139e5e701d4bd2d3674bbaa"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0xa0}}, 0x41) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="700701010101"], 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r13, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006a624c90f58fd6b2982d8200df072d0000f0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) 41.277121488s ago: executing program 4 (id=6026): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c6}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 41.184139256s ago: executing program 2 (id=6027): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) 41.180279693s ago: executing program 0 (id=6028): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r1, 0x8, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010000d04040000005c000000", @ANYRES32=0x0, @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800600020001000000140035006d6163766c616e30"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000030000000400000060047866726d30000000000000000000000076657468315f766c616e000000003d862b0e341300006970366772657461703000000000000076657468315f746f5f68737200000000aaaaaaaaaa4100000000ff00aaaaaaaaaa2200ffff00ffff6e00000016010000460100004e464c4f470000000000000000000000000000000000000000000000000000005000000000000000090000000700030000000000a5ecc33c8098bd0cfd5f4b6c99ce611e76187a16838331311491c4572a2e254445042fe6977692743457dab959c48f3fe65c0480f2bd5eb4d27f089cda6251c5000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000feffffff000000000500000005000000000076657468315f746f5f6261746164760076657468305f746f5f7465616d00000070696d367265670000000000000000006e723000000000000000000000000000ffffffffffffff00ff0000ffaaaaaaaaaabbffff000000ffe6000000160100004602000074696d650000000000000000000000000000000000000000000000000018000000000000000400000001ffffff2a3d0000f8310100feffffff03030000636c757374657200000000000000000000000000000000000000000000000000100000000000000072000000000000000900000000000000434c415353494659000000000000000000000000000000000000000000000000080000000000000006000000000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000000100000073797374656d5f753a6f626a6563745f723a6770675f6167656e745f657865635f743a733000"/1052]}, 0x494) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000305000000080001"], 0x1c}}, 0x0) socket$key(0xf, 0x3, 0x2) 41.101326019s ago: executing program 4 (id=6029): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x4, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1001ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x0, 0xfff, 0x3, 0xfffffffd, 0x6, 0x9, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x0, 0x7f, 0x7, 0x2, 0xff, 0x24, 0x5, 0x7, 0x7, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x9, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0xfbf, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0xffe, 0xb3000, 0xf, 0x3, 0x9, 0x8000, 0x94d, 0x9, 0x0, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x2f8, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa256, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffd, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x8, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80100000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x1, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x0, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r11, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @loopback, 0x2002}, 0x1c) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x2, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) (rerun: 32) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x3fffffffffffd14, 0x0) 41.008353165s ago: executing program 2 (id=6030): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b33, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x5, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) syz_emit_ethernet(0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000a7a300000500000088641100f5ff00005f"], 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000200)) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000a6"], 0x48) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x7c, "df25a655ad0d40d8f194b27b147332ac49fb6b70b05190b585445724c70c3caaeb569d626d2b7e14b82215ae1de29fe5858bc82039bc111d83fe587278d6b9884753b61f5dd8f933b43f82a0dcdc7ea31b9bdc21fd215f93284c013a04734eaf8671f086267f74fbda9838930194785eaa18b78d3d403634b656bddf"}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0xc, 0xb44, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x700, 0x8810, 0xb56, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r8, 0x29, 0xff, 0x5, 0x9, 0x1, @mcast1, @mcast1, 0x10, 0x1, 0xfffffe46}}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) 40.953963693s ago: executing program 0 (id=6031): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2c2, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @gre={{0xa, 0x4, 0x2, 0x28, 0x2b0, 0x64, 0x0, 0x0, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xf7, 0x0, 0x4, [0x1000, 0x7ff, 0x4]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa5, 0x3, [0x1, 0x6], "ea715fd31b70134bde3701d9269989ad7b52ec7b33ce781b5d9760e6b7aac171a9656ac3b5c6902c2744ed5f7d8e7dbb3df793f2ca5289e159921259359a440123f95e81648bf930f2c4ea4b1b4c9b450fef6f0d667a1367949cb990c5b49aff1a46683f76fe1ee36482fa1c3282ba80f78b32cf097161f0d2b105a59c90bd2057056005bc0232f9d492fdf50610265305af418e2aa3ce3f091194db4f4739e65b206eebd9"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x400, 0x4], "ec9d0046fb90faa396a61d35fca999bb6ec0b4bc44a6e7739029f649af59dad13c12e299d45dba9e63fecd43f62f4c016b62e12ebd93c020c930c894e02b78d444ecc2ca012a41505ce8f2ab38bcd012dcfdb15fb4370ded45d3dd167c5298f48603a4d106d3da58df406486e061642d"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xd, 0x9f3, 0x7], "fdf6b2f06b36e7bb62caa2e3f12bc0fb1ea84c24bd73d47781b4ac4d44d8f82d913155a0380ba91f6b9aebe64e70066fd644d78df57c9c2353166d96a29cab799f47424ebdfd4c610da94a74bbdd13b095929e74f1e48184cf64454d1a05ae8353112378c4c22b5c4732ccb21aa47fbc48261bceac169ad1de2e09ab082b0b5723c7b7c03add4a2a0704f97424a62922f41475f6789ba1122fdad3b2fa3b6089332db216f7f6631d14978ee01b995bf7791e"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x9, 0x3, 0x0, 0x1, 0x1}, 0x1, {0x4f}}}, {0x8, 0x22eb, 0x4, {{0xa, 0x2, 0x4, 0x1, 0x0, 0x1, 0x6, 0x40}, 0x2, {0x3, 0x7f48, 0x3, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "63eb628ee9030c3bd11a10c4882272b0692557520ff0fec7ec0fda436bfd6a317e6f44a63245bab78e173b3d140a7630c1edc3ac8bcc6da031e3ea0cdd01009d5419cec7e78de3f96b962f9c4363b03ab6d063bc2f5ff6c2801bb3635fff7128eeeeeb200454089e56ebc947a8ab96"}}}}}}, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0) (async) write(r0, &(0x7f0000000300)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) 40.741835727s ago: executing program 0 (id=6032): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty}, @in6={0xa, 0x4e24, 0x0, @empty}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x0, @multicast2}], 0x2c) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001480)={0x0, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000014c0)=0x10) 40.62440269s ago: executing program 4 (id=6033): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@restrict, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, 0x0, 0x4a}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x3, 0x8, 0x7, 0x6, 0x5, 0x0, [{0x100, 0x9, 0x7e90, '\x00', 0x400}, {0x1952, 0x9, 0x8000, '\x00', 0x2}, {0x6, 0x3ff, 0x1, '\x00', 0x1201}, {0x1, 0x9, 0x5, '\x00', 0x3004}, {0xef87, 0x2, 0xffffffff, '\x00', 0x100}]}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet6(r1, 0x0, 0x0, 0x2004c801, &(0x7f00000001c0)={0xa, 0x4e24, 0xfffb, @empty, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x33, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000300)="196cd7337256e039bfa2327c6ce362e9afe3a7e6025d897eb0e663c18f3eff7f9e4227842aa862f4aa8b05d66eb65e727c4d18d28be5f29a8af195f5d3885993f293b60000000000000024ef69573c8c714071af1783733a78a306f71d20c33c00000000", 0x64}, {&(0x7f0000000040)="005633673205000023", 0x9}], 0x2) 40.60048524s ago: executing program 0 (id=6034): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000), 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="3b54a031137113273a55cb86080f4ad1c54e0f041af8fac8cfd740bc2d8237b49a925e9bb332eff60903a7becc3dbf989896f8e56bfb10622fb4582862c37708471487e4974caee2660e8eea1d576d59311f9f5074e4ca122bda315bc668935f542de3c46483d1a5572c10d2819513110359d61897c894087c0b2d653ce43217f365ec765db6748d9f4f3f3fde0faac3ef5d4e7fad9dd52a5109dbd84a6756edaa7dd4073c0053f0ffaf928fdd2cd0ad96d7e6c8b8ef1946b0d66e97418f2de9c9930b69bb19470908bb1f373c7bf14aeea64dd11034c10adbdad228df9ec0c2ff6ade2b33", 0xe5, 0x20008800, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x60280, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x0, 0x1, 0x1, 0x74, 0x81, 0x8, 0x40, 0x8, 0x9, 0x0, 0x7, 0x9, 0x7}, 0xe) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="81ec", 0x2}], 0x1}}], 0x1, 0x4008010) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) 40.575686121s ago: executing program 3 (id=6035): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@default, @bcast}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r2, 0x8) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendto$inet6(r1, &(0x7f00000000c0)="72b609cf40747dfbe97f42c7f4fc5818e456e271894086ff53cd2aa6b3cc5ff6675644868575753a2ee14b2cd7c5f2b5d022c4a24b4585a06cc2e4e2400ba1af8f0a20462f2cdc1730a54eea346bed6a0d5472b45a9ef6883756869809a87000cd4930acd6ad52dc676b247f00faf73beb47eaf6c2abc54146a0f2c63839877a134066188bb5752d560c4cac9757215581bfb50c6c3bda40337020f839f75e0158f93a460d8a60f4957cb87b2745fff18b27c7f25416f008ea187f30549cfdc51590786f0023f5847b2d9af8af7df9fbcbf4df959c0bc1e37ce93f06b0895b7267", 0xe1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfeffffff}, 0x1c) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x57, 0x0}, 0xc45}], 0x400000000000257, 0x10162, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffe9b) syz_init_net_socket$ax25(0x3, 0x3, 0xca) (async) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@default, @bcast}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) listen(r2, 0x8) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) sendto$inet6(r1, &(0x7f00000000c0)="72b609cf40747dfbe97f42c7f4fc5818e456e271894086ff53cd2aa6b3cc5ff6675644868575753a2ee14b2cd7c5f2b5d022c4a24b4585a06cc2e4e2400ba1af8f0a20462f2cdc1730a54eea346bed6a0d5472b45a9ef6883756869809a87000cd4930acd6ad52dc676b247f00faf73beb47eaf6c2abc54146a0f2c63839877a134066188bb5752d560c4cac9757215581bfb50c6c3bda40337020f839f75e0158f93a460d8a60f4957cb87b2745fff18b27c7f25416f008ea187f30549cfdc51590786f0023f5847b2d9af8af7df9fbcbf4df959c0bc1e37ce93f06b0895b7267", 0xe1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfeffffff}, 0x1c) (async) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x57, 0x0}, 0xc45}], 0x400000000000257, 0x10162, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffe9b) (async) 40.260610784s ago: executing program 3 (id=6036): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x8, 0x4) 40.22747001s ago: executing program 3 (id=6037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async) 40.090600248s ago: executing program 4 (id=6038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="140004006e736376663000000000000101000000080005"], 0x50}}, 0x40801) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c00"], 0x38}}, 0x0) 39.944360507s ago: executing program 2 (id=6039): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2, 0x1, 0x0, 0x5}}, 0x2e) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x300008c5}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x207, 0xff1e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41240, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r4, 0x801054db, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r8, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) socket$alg(0x26, 0x5, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r9, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(0x4) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) 39.906202959s ago: executing program 3 (id=6040): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r3, 0x5, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffdc64, 0x7b}}}}}, 0x28}}, 0x20040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c00990eff070000700000001400040073797a6b616c6c657230000000001c000800050004"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x40}}, 0x0) r11 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@netrom, @remote, @netrom, @remote, @default, @default, @rose, @rose]}, &(0x7f0000000000)=0x48, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 39.618253498s ago: executing program 0 (id=6041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000008e00000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbd72500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=r1], 0x84}}, 0x20008004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) gettid() (async) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x3c}}, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000300)={0xf7, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x3) 39.492377231s ago: executing program 4 (id=6042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0xa, 0x4, {{0x14, 0x4, 0x3, 0x9, 0x50, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, {[@ssrr={0x89, 0x13, 0x4d, [@private=0xa010101, @broadcast, @remote, @private=0xa010101]}, @rr={0x7, 0x1b, 0x82, [@multicast2, @multicast1, @remote, @multicast2, @private=0xa010100, @empty]}, @ssrr={0x89, 0xb, 0x25, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd68e4177f0028890020010000000000000000000000000001ff0200ff06fc46ba7170cdc2c91df8d200f4f8a23312a2743b97d98e8c66f64500000000fdfdffffffffffff4fb9e9cbae6d1c21edd9ff38ebd97386806c27d87548210939b8a61715c9ee5bfec3f172b9608727ce1f8c076ed0e21a73898356bdc7f50b266d802f4ac5bc562e6b773159fe21c991c510233d02ce621cfd1dd0f94dc3366845acc0f7e233ec9905bc080993d80063b1ea3123668dcc"], 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x2, 0x5, 0x8, @rand_addr=' \x01\x00', @loopback, 0x8000, 0x20, 0x4, 0x5}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1}}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'geneve1\x00', 0x0}) sendto$packet(r8, &(0x7f00000005c0)="3605bfa9b05d66571e703e7c88a8f90688a8", 0x5b8, 0x40080, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40002041) sendmmsg$inet6(r10, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)='i\f5', 0x3}], 0x1}}], 0x2, 0x4404c880) sendto$inet6(r10, &(0x7f00000003c0)="98f21a", 0x3, 0x43b50, 0x0, 0x0) 39.376854003s ago: executing program 2 (id=6043): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xbb, 0x72, &(0x7f0000000500)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143f98bb67bfe5b308b8d05758115c7ad3c4ec25b37fa7fd60c1b3388440326af55d5d1e68e39a3900ac19f1ba45f8cf5d5958e839114c43277d6a5c1f876e80253bb4ab7ba35f5d71e7c7b6ae3e727e2ff49d0688ac323a1373ce09fd165cbe3a39eaa31820e370d81663e7c2e0ba571b0eceb56c1fc6789ca2a5e1b01c6a6603f20a79cb6be7f136ca34662aaef0f", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc6, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f00000005c0)="bf049f000000003c21d9bcddc4eef9ebb6a0da3eb91c56454e873ed7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bed0200000000000000829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad38c114ff1921a9b466574b10084ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c5269866c15c74856b", 0x0, 0x8000}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8901, &(0x7f0000000040)={r4}) sendmsg$inet(r5, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) sendmsg$nl_netfilter(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x18d6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x2}, 0x48) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) unshare(0xa6030a80) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r10, 0x20, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006991}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000100)=0xa, 0x4) 39.216521046s ago: executing program 2 (id=6044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x8) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendto$ax25(r4, &(0x7f0000000340)="a95003cc065e6a2e9528bb2dbcca72dc1401b205aa9888a27aa87291ee35eb1822d8abb3030f3851e9b6b5dca7d3e46b22a5c6ed6268a65489f4c69641dc02e67a2f732a99c4b13b90985d3aaf7d2c68d84060279af6d4bf91e1ff517a019fd1d9b0a47a7b1d20f2ba8af4c589c8c5bb1687dc44dc5bfbe20715059d9040d3d6c4162ea17c5b99993ff19573", 0x8c, 0x14, &(0x7f0000000400)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @default]}, 0x48) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xe) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000140)={0x80002000}) socket$key(0xf, 0x3, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000240)={@loopback, 0x0}, &(0x7f0000000480)=0x14) bind$xdp(r6, &(0x7f0000000540)={0x2c, 0x9, r7, 0x31, r5}, 0x10) ioctl$int_out(r1, 0x0, &(0x7f0000000180)) 0s ago: executing program 32 (id=6041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000008e00000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbd72500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=r1], 0x84}}, 0x20008004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) gettid() (async) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x3c}}, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000300)={0xf7, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x3) kernel console output (not intermixed with test programs): 2 may have been left with an inconsistent configuration, please check. [ 376.359732][T21182] netlink: 'syz.2.4367': attribute type 12 has an invalid length. [ 376.370341][T21182] netlink: 'syz.2.4367': attribute type 29 has an invalid length. [ 376.388839][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880575fd800: rx timeout, send abort [ 376.397247][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880575fe400: abort rx timeout. Force session deactivation [ 376.679702][T21203] netlink: 'syz.1.4375': attribute type 1 has an invalid length. [ 376.747893][T21203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.781134][T21220] netlink: 'syz.4.4380': attribute type 1 has an invalid length. [ 376.789951][T21203] macvlan2: entered promiscuous mode [ 376.795523][ T3549] tipc: Subscription rejected, illegal request [ 376.837935][T21203] macvlan2: entered allmulticast mode [ 376.847133][T21203] bond1: entered allmulticast mode [ 376.881984][T21203] bond1: entered promiscuous mode [ 376.888917][T21203] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.897105][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880575fd800: abort rx timeout. Force session deactivation [ 376.920884][T21203] team0: Port device macvlan2 added [ 376.966220][T21232] tipc: Started in network mode [ 376.971139][T21232] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 376.989336][T21232] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 377.043679][T21232] tipc: Enabled bearer , priority 10 [ 377.072580][T21224] 9: entered promiscuous mode [ 377.340843][T21256] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 378.018061][T21304] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.029831][T21304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 378.154826][ T9156] tipc: Node number set to 1 [ 378.291823][T21319] tipc: New replicast peer: 255.255.255.255 [ 378.305586][T21319] tipc: Enabled bearer , priority 10 [ 378.360556][T21322] __nla_validate_parse: 18 callbacks suppressed [ 378.360575][T21322] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4408'. [ 378.395079][T21322] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4408'. [ 378.518926][T21327] gretap1: entered promiscuous mode [ 378.798064][T21350] tipc: Enabling of bearer rejected, failed to enable media [ 378.848976][T21354] xt_cluster: you have exceeded the maximum number of cluster nodes (2147483649 > 32) [ 379.033133][T21368] syzkaller1: entered promiscuous mode [ 379.047803][T21368] syzkaller1: entered allmulticast mode [ 379.509189][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4432'. [ 379.553035][T21405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4430'. [ 379.592641][T21405] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4430'. [ 379.598430][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4432'. [ 379.637196][T21406] tipc: Enabled bearer , priority 0 [ 379.645826][T21406] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 379.653343][T21406] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 379.672561][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4433'. [ 379.694896][T21406] syzkaller0: mtu greater than device maximum [ 379.772529][T21422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4437'. [ 379.800234][T21426] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4438'. [ 379.917340][T21428] pim6reg: entered allmulticast mode [ 379.935567][T21429] pim6reg: left allmulticast mode [ 380.001572][T21440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4440'. [ 380.372848][T21468] geneve3: entered promiscuous mode [ 380.935956][T21495] validate_nla: 9 callbacks suppressed [ 380.935969][T21495] netlink: 'syz.3.4456': attribute type 39 has an invalid length. [ 381.305473][T21497] tipc: New replicast peer: 255.255.255.255 [ 381.312434][T21497] tipc: Enabled bearer , priority 10 [ 381.343932][T21500] netlink: 'syz.3.4457': attribute type 33 has an invalid length. [ 381.420965][T21504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.477352][T21509] openvswitch: netlink: Message has 592 unknown bytes. [ 381.485932][T21509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.384988][T21565] x_tables: duplicate underflow at hook 1 [ 382.519057][T21567] tipc: Enabled bearer , priority 0 [ 382.566456][T21567] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 382.720406][T21586] netlink: 'syz.1.4486': attribute type 10 has an invalid length. [ 382.785645][T21580] bond4: (slave gre0): Device is not bonding slave [ 382.798543][T21580] bond4: option active_slave: invalid value (gre0) [ 382.817202][T21580] bond4 (unregistering): Released all slaves [ 383.086577][T21604] ip6tnl0: entered allmulticast mode [ 383.336288][T21627] syzkaller1: entered promiscuous mode [ 383.352975][T21627] syzkaller1: entered allmulticast mode [ 383.368126][T21621] openvswitch: netlink: Flow actions attr not present in new flow. [ 383.551192][T21649] netlink: 'syz.1.4502': attribute type 11 has an invalid length. [ 383.559779][T21649] netlink: 'syz.1.4502': attribute type 4 has an invalid length. [ 383.568809][T21649] __nla_validate_parse: 6 callbacks suppressed [ 383.568825][T21649] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.4502'. [ 384.447770][T21713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4519'. [ 384.491881][T21713] netlink: 'syz.4.4519': attribute type 32 has an invalid length. [ 384.856344][T21742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4527'. [ 384.891042][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4525'. [ 385.057780][T21753] netlink: 'syz.1.4529': attribute type 5 has an invalid length. [ 385.136563][T21755] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 385.149222][T21755] bond4 (unregistering): Released all slaves [ 385.356357][T21772] netlink: 'syz.2.4534': attribute type 10 has an invalid length. [ 385.364816][T21772] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4534'. [ 385.365424][T21780] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4535'. [ 385.569594][T21792] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4539'. [ 385.706185][T21801] IPv6: addrconf: prefix option has invalid lifetime [ 385.758280][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4542'. [ 385.762806][T21806] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4544'. [ 385.878667][T21815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4542'. [ 385.969814][T21822] xt_TPROXY: Can be used only with -p tcp or -p udp [ 386.106748][T21831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.329468][T21855] netlink: 'syz.1.4556': attribute type 8 has an invalid length. [ 386.389211][T21857] xt_policy: too many policy elements [ 386.462901][T21862] veth5: entered promiscuous mode [ 386.477719][T21862] veth5: entered allmulticast mode [ 386.544917][T21859] bond3 (unregistering): Released all slaves [ 386.682885][T21873] syzkaller0: entered promiscuous mode [ 386.691091][T21873] syzkaller0: entered allmulticast mode [ 386.758994][T21882] sctp: [Deprecated]: syz.3.4568 (pid 21882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.758994][T21882] Use struct sctp_sack_info instead [ 387.164057][T21909] xt_CT: No such helper "pptp" [ 388.619839][T21930] netlink: 'syz.3.4582': attribute type 3 has an invalid length. [ 388.625863][T21924] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.665646][T21934] netlink: 'syz.3.4582': attribute type 1 has an invalid length. [ 388.690103][T21935] __nla_validate_parse: 12 callbacks suppressed [ 388.690120][T21935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4583'. [ 388.736610][T21935] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4583'. [ 388.751197][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4584'. [ 388.755532][T21935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4583'. [ 388.869899][T21944] can: request_module (can-proto-0) failed. [ 388.882931][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4583'. [ 388.895257][T21943] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4586'. [ 389.005239][T21946] 8021q: adding VLAN 0 to HW filter on device bond9 [ 389.123658][T21955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4587'. [ 389.367963][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4590'. [ 389.433022][T21955] team0: Cannot enslave team device to itself [ 389.698208][T21988] tipc: Enabling of bearer rejected, already enabled [ 389.817408][T21995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4597'. [ 389.868418][T21995] netlink: 'syz.3.4597': attribute type 2 has an invalid length. [ 389.906140][T21998] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 389.943195][T21998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.116491][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4600'. [ 390.208758][T22015] netem: change failed [ 390.307028][T22019] team0: Device ip6gre3 is up. Set it down before adding it as a team port [ 390.845967][T21940] Bluetooth: hci5: command 0x0406 tx timeout [ 390.957333][T22051] bond0 (unregistering): Released all slaves [ 390.982285][T22068] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 391.223916][T22078] IPVS: Scheduler module ip_vs_sip not found [ 391.347552][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803e59b800: rx timeout, send abort [ 391.856065][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803e59b800: abort rx timeout. Force session deactivation [ 391.982855][T22112] netlink: 'syz.2.4630': attribute type 1 has an invalid length. [ 392.134122][T22112] 8021q: adding VLAN 0 to HW filter on device bond5 [ 392.159877][T22112] bond4: (slave bond5): making interface the new active one [ 392.171038][T22112] bond4: (slave bond5): Enslaving as an active interface with an up link [ 392.189099][T22122] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 392.201690][T22122] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 392.227393][T22126] batman_adv: batadv0: Adding interface: dummy0 [ 392.234133][T22126] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.270838][T22126] batman_adv: batadv0: Interface activated: dummy0 [ 392.287753][T22127] batadv0: mtu less than device minimum [ 392.295196][T22127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.307329][T22127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.319156][T22127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.330940][T22127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.342956][T22127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.354833][T22127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.366719][T22127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.378650][T22127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.613561][T22154] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 392.622362][T22154] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 392.936681][T22176] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 392.946059][T22182] netlink: 'syz.0.4649': attribute type 4 has an invalid length. [ 393.032495][T22188] xt_l2tp: invalid flags combination: 8 [ 393.118498][T22192] tipc: Enabled bearer , priority 0 [ 393.238569][T22192] syzkaller0: entered promiscuous mode [ 393.253171][T22192] syzkaller0: entered allmulticast mode [ 393.260618][T22192] tipc: Resetting bearer [ 393.770316][T22223] xt_hashlimit: size too large, truncated to 1048576 [ 393.784949][ T6233] tipc: Resetting bearer [ 393.865603][T22229] __nla_validate_parse: 10 callbacks suppressed [ 393.865623][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 393.980167][T22190] tipc: Resetting bearer [ 394.126909][T22241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4669'. [ 395.416436][T22190] tipc: Disabling bearer [ 395.709034][T22269] syzkaller0: entered promiscuous mode [ 395.805097][T22269] syzkaller0: entered allmulticast mode [ 395.838208][T22277] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4677'. [ 396.149691][T22306] net_ratelimit: 11 callbacks suppressed [ 396.149709][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.199926][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.214880][T22310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4686'. [ 396.225430][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.246888][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.269040][T22310] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 396.276262][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.316113][ T35] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 396.321293][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.338138][ T35] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 396.370455][ T35] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 396.386711][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.410188][ T35] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 396.412141][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.435819][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.464857][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.658536][T22327] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4689'. [ 396.758169][T22337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4693'. [ 396.810093][T22344] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4695'. [ 396.837755][T22344] x_tables: duplicate underflow at hook 2 [ 396.961612][T22351] netlink: 'syz.4.4698': attribute type 1 has an invalid length. [ 397.007046][T22351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.070803][T22351] bond3: (slave veth5): Enslaving as an active interface with a down link [ 397.169978][T22362] veth7: entered promiscuous mode [ 397.189128][T22362] bond3: (slave veth7): Enslaving as an active interface with a down link [ 397.223803][T22374] x_tables: duplicate underflow at hook 3 [ 397.295660][T22376] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4703'. [ 397.362713][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4705'. [ 397.720329][T22398] IPVS: ip_vs_add_dest(): server weight less than zero [ 398.086699][T22406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4710'. [ 398.100096][T22411] tipc: Trying to set illegal importance in message [ 398.160454][T22414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.294933][T22423] netlink: 'syz.4.4716': attribute type 2 has an invalid length. [ 398.313729][T22425] netlink: 'syz.3.4715': attribute type 3 has an invalid length. [ 399.083559][T22482] netlink: 'syz.0.4734': attribute type 5 has an invalid length. [ 399.261820][T22493] __nla_validate_parse: 10 callbacks suppressed [ 399.261838][T22493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4738'. [ 399.333586][T22500] Bluetooth: MGMT ver 1.23 [ 399.435591][T22502] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 399.452093][T22502] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 399.532840][T22509] netlink: 'syz.4.4744': attribute type 10 has an invalid length. [ 399.533910][T22517] syzkaller0: entered promiscuous mode [ 399.551326][T22517] syzkaller0: entered allmulticast mode [ 399.582441][T22520] xt_hashlimit: size too large, truncated to 1048576 [ 399.778387][T22530] 8021q: VLANs not supported on wg0 [ 399.812022][T22530] tipc: Enabled bearer , priority 23 [ 399.819307][ T1071] page_pool_release_retry() stalled pool shutdown: id 27, 50 inflight 302 sec [ 399.882298][T22533] netlink: 'syz.0.4749': attribute type 1 has an invalid length. [ 399.885929][T22535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4750'. [ 399.960280][T22539] netlink: 'syz.0.4751': attribute type 2 has an invalid length. [ 400.133522][T22554] ipt_REJECT: TCP_RESET invalid for non-tcp [ 400.162304][T22556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4758'. [ 400.180900][T22556] macsec1: entered promiscuous mode [ 400.187732][T22556] macsec1: entered allmulticast mode [ 400.193098][T22556] bridge0: entered allmulticast mode [ 400.199767][T22556] bridge0: port 3(macsec1) entered blocking state [ 400.212605][T22556] bridge0: port 3(macsec1) entered disabled state [ 400.228312][T22556] bridge0: left allmulticast mode [ 400.390746][T22562] netlink: 'syz.2.4760': attribute type 2 has an invalid length. [ 400.739448][T22596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4771'. [ 400.769857][T22592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4770'. [ 400.808841][T22601] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4773'. [ 400.882826][T22601] syzkaller0: entered promiscuous mode [ 400.909902][T22601] syzkaller0: entered allmulticast mode [ 400.987417][T22615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4777'. [ 401.086282][T21940] Bluetooth: hci1: command 0x0406 tx timeout [ 401.089528][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4779'. [ 401.229163][T22634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4783'. [ 401.379830][T22628] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4782'. [ 401.396340][T22628] nbd: couldn't find a device at index 0 [ 401.414863][T22628] net_ratelimit: 65 callbacks suppressed [ 401.414880][T22628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.442916][T22647] netlink: 'syz.0.4784': attribute type 1 has an invalid length. [ 401.461142][T22647] netlink: 'syz.0.4784': attribute type 2 has an invalid length. [ 401.476413][T22647] netlink: 'syz.0.4784': attribute type 1 has an invalid length. [ 401.626980][T22665] veth1_macvtap: entered promiscuous mode [ 401.632923][T22665] macsec3: entered promiscuous mode [ 401.642156][T22665] veth1_macvtap: left promiscuous mode [ 401.950712][ T5150] block nbd1: Receive control failed (result -32) [ 402.388038][T22710] bond3: invalid ARP target 0.0.0.0 specified for addition [ 402.388594][T22716] sctp: [Deprecated]: syz.0.4804 (pid 22716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.388594][T22716] Use struct sctp_sack_info instead [ 402.398461][T22710] bond3: option arp_ip_target: invalid value (0) [ 402.422629][T22710] bond3 (unregistering): Released all slaves [ 403.556679][T22774] team0: Port device dummy0 removed [ 403.602370][T22774] bridge_slave_0: left allmulticast mode [ 403.608738][T22774] bridge_slave_0: left promiscuous mode [ 403.614655][T22774] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.637984][T22774] bridge_slave_1: left allmulticast mode [ 403.643833][T22774] bridge_slave_1: left promiscuous mode [ 403.650042][T22774] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.671100][T22774] bond0: (slave bond_slave_0): Releasing backup interface [ 403.693764][T22774] bond0: (slave bond_slave_1): Releasing backup interface [ 403.717788][T22774] team0: Port device team_slave_0 removed [ 403.735596][T22774] team0: Port device team_slave_1 removed [ 403.746852][T22774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.759430][T22774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.773494][T22774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.786181][T22774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.816911][T22774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.289500][T22829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.289959][T22831] validate_nla: 4 callbacks suppressed [ 404.289975][T22831] netlink: 'syz.3.4842': attribute type 29 has an invalid length. [ 404.370425][T22831] netlink: 'syz.3.4842': attribute type 29 has an invalid length. [ 405.274012][T22862] __nla_validate_parse: 12 callbacks suppressed [ 405.274032][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4851'. [ 405.500419][T22876] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 405.527964][T22881] netlink: 'syz.1.4860': attribute type 10 has an invalid length. [ 405.536069][T22881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4860'. [ 405.545393][T22881] dummy0: entered promiscuous mode [ 405.550977][T22881] batman_adv: batadv0: Interface deactivated: dummy0 [ 405.566675][T22881] batman_adv: batadv0: Removing interface: dummy0 [ 405.592905][T22881] bridge0: port 2(dummy0) entered blocking state [ 405.614888][T22881] bridge0: port 2(dummy0) entered disabled state [ 405.621485][T22881] dummy0: entered allmulticast mode [ 405.762951][T22899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4866'. [ 406.459196][T22948] netlink: 'syz.4.4884': attribute type 1 has an invalid length. [ 406.799789][T22963] syzkaller0: entered promiscuous mode [ 406.808465][T22963] syzkaller0: entered allmulticast mode [ 406.868303][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.882964][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.892037][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.901199][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.912414][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.921863][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.931281][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.940459][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.950744][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.960693][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.969955][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.978783][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.988211][T22966] tipc: Enabling of bearer rejected, already enabled [ 406.997438][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.008486][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.018177][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.027342][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.038738][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.048226][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.076032][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.094844][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.111273][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.131766][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.151140][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.152194][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4892'. [ 407.171765][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.194792][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.210421][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.219796][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.229928][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.249179][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.269408][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.278836][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.287670][T22966] tipc: Enabling of bearer rejected, already enabled [ 407.300203][T22978] netlink: 'syz.0.4894': attribute type 1 has an invalid length. [ 407.527740][T22993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4898'. [ 407.537405][T22993] netlink: 'syz.4.4898': attribute type 1 has an invalid length. [ 407.575062][T22993] netlink: 'syz.4.4898': attribute type 1 has an invalid length. [ 407.594585][T22993] netlink: 'syz.4.4898': attribute type 2 has an invalid length. [ 407.602344][T22993] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4898'. [ 407.659324][T22998] netlink: 576 bytes leftover after parsing attributes in process `syz.0.4900'. [ 407.690407][T23004] syzkaller1: entered promiscuous mode [ 407.697878][T23004] syzkaller1: entered allmulticast mode [ 407.710426][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 407.782178][T23007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4904'. [ 407.851100][T23009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4905'. [ 408.258309][T23039] team_slave_0: entered promiscuous mode [ 408.264033][T23039] team_slave_1: entered promiscuous mode [ 408.271306][T23043] netlink: 'syz.2.4915': attribute type 64 has an invalid length. [ 408.271306][T23042] netlink: 'syz.2.4915': attribute type 64 has an invalid length. [ 408.272893][T23039] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 408.322624][T23039] team0: Device macvtap1 is already an upper device of the team interface [ 408.325618][T23047] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20003 [ 408.340928][T23039] team_slave_0: left promiscuous mode [ 408.346417][T23039] team_slave_1: left promiscuous mode [ 408.533845][T23056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.920670][T23080] xt_CONNSECMARK: invalid mode: 0 [ 409.031023][T23084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.043604][T23084] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 409.059818][T23085] batadv0: entered promiscuous mode [ 409.065216][T23085] batadv0: entered allmulticast mode [ 409.072336][T23085] bond0: (slave batadv0): Releasing backup interface [ 409.093094][T23085] bridge0: port 3(batadv0) entered blocking state [ 409.112350][T23085] bridge0: port 3(batadv0) entered disabled state [ 409.179905][T23098] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 409.257409][ T6222] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 409.267117][ T6222] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 409.316880][ T6233] bridge0: port 3(batadv0) entered disabled state [ 409.360533][ T6233] bridge_slave_1: left allmulticast mode [ 409.371494][ T6233] bridge_slave_1: left promiscuous mode [ 409.382230][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.393539][ T6233] bridge_slave_0: left promiscuous mode [ 409.425204][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.836464][ T6233] bond10 (unregistering): (slave geneve5): Releasing active interface [ 409.866645][ T6233] bond9 (unregistering): (slave geneve4): Releasing active interface [ 409.911133][ T6233] geneve0 (unregistering): left promiscuous mode [ 409.917887][ T6233] geneve0 (unregistering): left allmulticast mode [ 409.930139][ T6233] team0: Port device geneve0 removed [ 409.987370][ T6233] team0: Port device bridge1 removed [ 410.156620][ T6233] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 410.164791][ T6233] bridge5 (unregistering): left promiscuous mode [ 410.342941][ T6233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.352081][ T6233] bond_slave_0: left promiscuous mode [ 410.357826][ T6233] bond_slave_0: left allmulticast mode [ 410.366885][ T6233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.377611][ T6233] bond_slave_1: left promiscuous mode [ 410.383150][ T6233] bond_slave_1: left allmulticast mode [ 410.391270][ T6233] bond0 (unregistering): (slave team0): Releasing backup interface [ 410.401213][ T6233] team0: left promiscuous mode [ 410.406607][ T6233] team_slave_0: left promiscuous mode [ 410.412164][ T6233] team_slave_1: left promiscuous mode [ 410.418873][ T6233] team0: left allmulticast mode [ 410.423720][ T6233] team_slave_0: left allmulticast mode [ 410.429572][ T6233] team_slave_1: left allmulticast mode [ 410.437561][ T6233] bond0 (unregistering): Released all slaves [ 410.534819][ T6233] bond1 (unregistering): Released all slaves [ 410.630802][ T6233] bond2 (unregistering): Released all slaves [ 410.645467][ T6233] bond3 (unregistering): Released all slaves [ 410.743208][ T6233] bond4 (unregistering): Released all slaves [ 410.756170][ T6233] bond5 (unregistering): Released all slaves [ 410.770930][ T6233] bond6 (unregistering): Released all slaves [ 410.785980][ T6233] bond7 (unregistering): Released all slaves [ 410.883145][ T6233] bond8 (unregistering): Released all slaves [ 410.897082][ T6233] bond9 (unregistering): Released all slaves [ 410.989634][ T6233] bond10 (unregistering): Released all slaves [ 411.081107][ T6233] bond11 (unregistering): Released all slaves [ 411.172685][ T6233] bond12 (unregistering): Released all slaves [ 411.186594][ T6233] bond13 (unregistering): Released all slaves [ 411.282029][ T6233] bond14 (unregistering): Released all slaves [ 411.487960][T23141] validate_nla: 4 callbacks suppressed [ 411.487980][T23141] netlink: 'syz.1.4946': attribute type 10 has an invalid length. [ 411.493230][T23139] __nla_validate_parse: 12 callbacks suppressed [ 411.493246][T23139] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.4944'. [ 411.532904][T23141] dummy0: left allmulticast mode [ 411.542217][T23141] dummy0: left promiscuous mode [ 411.548256][T23141] bridge0: port 2(dummy0) entered disabled state [ 411.548865][T23145] netlink: 'syz.1.4946': attribute type 10 has an invalid length. [ 411.580428][T23141] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 411.590736][T23141] team0: Failed to send options change via netlink (err -105) [ 411.598360][T23141] team0: Port device dummy0 added [ 411.611050][T23133] tipc: Enabling of bearer rejected, media not registered [ 411.626778][T23145] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 411.641736][T23140] x_tables: duplicate underflow at hook 1 [ 411.652450][T23148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4944'. [ 411.662548][T23145] team0: Failed to send options change via netlink (err -105) [ 411.673349][T23145] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 411.685766][T23145] team0: Port device dummy0 removed [ 411.699830][T23145] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 411.720347][T23135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4944'. [ 411.950391][T23171] netlink: 'syz.3.4952': attribute type 1 has an invalid length. [ 411.961564][T23172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.491223][T23203] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 412.502162][T23203] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 412.605630][T23205] bond5: Removing last arp target with arp_interval on [ 412.663366][T23214] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 412.673889][T23214] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 413.046530][ T6233] : left promiscuous mode [ 413.161367][ T6233] tipc: Disabling bearer [ 413.180646][ T6233] tipc: Disabling bearer [ 413.216852][ T6233] tipc: Left network mode [ 413.400840][T23257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4979'. [ 413.471144][T23263] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4981'. [ 413.471144][T23261] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4981'. [ 413.499254][T23251] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 413.568450][T23251] bridge: RTM_NEWNEIGH with invalid ether address [ 414.077275][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4990'. [ 414.183404][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4990'. [ 414.227902][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4991'. [ 414.238832][T23302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4992'. [ 414.251867][T23302] netlink: 'syz.2.4992': attribute type 5 has an invalid length. [ 414.849292][T23321] veth0: entered promiscuous mode [ 414.857751][T23328] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 415.067392][ T6233] hsr_slave_0: left promiscuous mode [ 415.073691][ T6233] hsr_slave_1: left promiscuous mode [ 415.080590][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.089931][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.098952][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.107371][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.151633][ T6233] veth0_macvtap: left promiscuous mode [ 415.158374][ T6233] veth1_vlan: left promiscuous mode [ 415.526426][T23346] delete_channel: no stack [ 415.733797][ T6233] team0 (unregistering): Port device team_slave_1 removed [ 415.771135][ T6233] team0 (unregistering): Port device team_slave_0 removed [ 416.120809][T23321] veth0: left promiscuous mode [ 416.215852][T23361] netlink: 'syz.1.5008': attribute type 1 has an invalid length. [ 416.545853][T23382] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 416.575305][T23382] bond3 (unregistering): Released all slaves [ 416.803022][T23402] __nla_validate_parse: 9 callbacks suppressed [ 416.803040][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5019'. [ 416.882139][ T6233] IPVS: stop unused estimator thread 0... [ 417.065449][T23416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5023'. [ 417.125768][T23416] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5023'. [ 417.134982][T23416] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5023'. [ 417.144048][T23416] netlink: 'syz.3.5023': attribute type 6 has an invalid length. [ 417.155289][T23416] netlink: 'syz.3.5023': attribute type 5 has an invalid length. [ 417.163323][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5025'. [ 417.174026][T23416] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5023'. [ 417.343635][T23424] hsr_slave_0 (unregistering): left promiscuous mode [ 417.400597][T23430] pimreg: entered allmulticast mode [ 417.528255][T23443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5029'. [ 417.821531][T23459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5036'. [ 417.999097][T23476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5039'. [ 418.020730][T23476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5039'. [ 418.240790][T23495] netlink: 'syz.4.5042': attribute type 4 has an invalid length. [ 418.257779][T23495] netlink: 'syz.4.5042': attribute type 4 has an invalid length. [ 418.656045][T23530] bond3: option resend_igmp: invalid value (32767) [ 418.662711][T23530] bond3: option resend_igmp: allowed values 0 - 255 [ 418.674770][T23530] bond3 (unregistering): Released all slaves [ 419.080758][T23563] dvmrp0: entered allmulticast mode [ 419.108258][T23560] dvmrp0: left allmulticast mode [ 419.497600][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.676099][T23604] : renamed from hsr0 (while UP) [ 419.939089][T23622] netem: change failed [ 420.159666][T23643] netlink: 'syz.3.5085': attribute type 1 has an invalid length. [ 420.176818][T23643] netlink: 'syz.3.5085': attribute type 3 has an invalid length. [ 420.497647][T23669] netlink: 'syz.3.5093': attribute type 21 has an invalid length. [ 420.506024][T23669] netlink: 'syz.3.5093': attribute type 22 has an invalid length. [ 420.513902][T23669] netlink: 'syz.3.5093': attribute type 23 has an invalid length. [ 420.541959][T23669] netlink: 'syz.3.5093': attribute type 25 has an invalid length. [ 420.628925][T23676] tipc: Enabled bearer , priority 0 [ 420.647630][T23676] syzkaller0: entered promiscuous mode [ 420.655571][T23676] syzkaller0: entered allmulticast mode [ 420.725137][T23676] tipc: Resetting bearer [ 420.749022][T23675] tipc: Resetting bearer [ 420.803644][T23675] tipc: Disabling bearer [ 421.049748][T23713] sctp: [Deprecated]: syz.1.5101 (pid 23713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.049748][T23713] Use struct sctp_sack_info instead [ 421.325576][ T9153] page_pool_release_retry() stalled pool shutdown: id 53, 50 inflight 241 sec [ 421.350129][T23738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.565431][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 421.943264][T23781] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 421.967732][T23781] bond3 (unregistering): Released all slaves [ 422.312165][T23807] __nla_validate_parse: 11 callbacks suppressed [ 422.312184][T23807] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5124'. [ 423.561759][T23798] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 424.076271][T23848] validate_nla: 5 callbacks suppressed [ 424.076289][T23848] netlink: 'syz.2.5139': attribute type 3 has an invalid length. [ 424.100946][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5142'. [ 424.129231][T23848] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5139'. [ 424.149228][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5142'. [ 424.168741][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5142'. [ 424.190575][T23866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5143'. [ 424.211220][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5142'. [ 424.223518][T23865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5143'. [ 424.276476][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5142'. [ 424.296875][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5142'. [ 424.307656][T23871] tipc: Enabled bearer , priority 0 [ 424.323149][T23871] syzkaller0: entered promiscuous mode [ 424.353072][T23871] syzkaller0: entered allmulticast mode [ 424.607573][T23871] tipc: Resetting bearer [ 424.636882][T23897] netlink: 'syz.3.5148': attribute type 5 has an invalid length. [ 424.701805][T23870] tipc: Resetting bearer [ 424.741541][T23870] tipc: Disabling bearer [ 424.923653][T23920] bond0: Error: Cannot enslave bond to itself. [ 425.147076][T23933] siw: device registration error -23 [ 425.388399][T23957] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 425.728568][T23975] netlink: 'syz.1.5171': attribute type 10 has an invalid length. [ 426.370143][T24004] netlink: 'syz.2.5180': attribute type 9 has an invalid length. [ 426.403575][T24003] netlink: zone id is out of range [ 426.418461][T24003] netlink: zone id is out of range [ 426.429358][T24003] netlink: zone id is out of range [ 426.435443][T24003] netlink: zone id is out of range [ 426.440572][T24003] netlink: zone id is out of range [ 426.447439][T24003] netlink: zone id is out of range [ 426.452567][T24003] netlink: zone id is out of range [ 426.459671][T24019] netlink: 'syz.4.5179': attribute type 8 has an invalid length. [ 426.468083][T24003] netlink: zone id is out of range [ 426.473311][T24003] netlink: zone id is out of range [ 426.481219][T24003] netlink: zone id is out of range [ 426.657062][T24025] x_tables: ip_tables: CT target: only valid in raw table, not batadv_slave_0 [ 426.839388][T24047] batadv0: entered promiscuous mode [ 426.841497][T24048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.856274][T24047] debugfs: 'hsr0' already exists in 'hsr' [ 426.862019][T24047] Cannot create hsr debugfs directory [ 426.868370][T24049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.882865][T24047] hsr0: entered allmulticast mode [ 426.888663][T24047] bond0: entered allmulticast mode [ 426.893897][T24047] bond_slave_0: entered allmulticast mode [ 426.904419][T24047] bond_slave_1: entered allmulticast mode [ 426.910172][T24047] batadv0: entered allmulticast mode [ 426.916287][T24047] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 426.927852][T24047] batadv0: left promiscuous mode [ 426.936178][T24049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.962714][T24055] netlink: 'syz.1.5193': attribute type 1 has an invalid length. [ 427.035534][T24055] netlink: 'syz.1.5193': attribute type 2 has an invalid length. [ 427.053563][T24044] syzkaller1: entered promiscuous mode [ 427.070440][T24044] syzkaller1: entered allmulticast mode [ 427.670245][T24115] __nla_validate_parse: 78 callbacks suppressed [ 427.670263][T24115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5208'. [ 428.382978][T24143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5215'. [ 428.444966][T21940] Bluetooth: hci3: command 0x0405 tx timeout [ 428.553372][T24158] x_tables: duplicate underflow at hook 1 [ 428.808305][T24174] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5225'. [ 428.827069][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'. [ 428.828655][T24174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5225'. [ 428.847128][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'. [ 428.857834][T24179] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 428.866412][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5226'. [ 428.887973][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5226'. [ 428.906702][T24175] netlink: 'syz.3.5226': attribute type 5 has an invalid length. [ 428.918028][T24184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5228'. [ 429.255448][T24204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5234'. [ 429.267960][T24206] netlink: 'syz.3.5237': attribute type 21 has an invalid length. [ 429.385907][T24215] netlink: 'syz.2.5241': attribute type 4 has an invalid length. [ 429.434740][T24215] netlink: 'syz.2.5241': attribute type 4 has an invalid length. [ 429.531371][T24224] netlink: 'syz.4.5243': attribute type 10 has an invalid length. [ 430.175684][T24268] Cannot find add_set index 65532 as target [ 430.820162][T24309] syzkaller1: entered promiscuous mode [ 430.834420][T24309] syzkaller1: entered allmulticast mode [ 430.945870][T24313] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 430.987350][T24323] x_tables: unsorted entry at hook 3 [ 431.787475][T24381] netlink: 'syz.1.5295': attribute type 29 has an invalid length. [ 432.107164][T24404] netlink: 'syz.4.5302': attribute type 20 has an invalid length. [ 432.257118][T24404] netlink: 'syz.4.5302': attribute type 20 has an invalid length. [ 433.020300][T24476] __nla_validate_parse: 18 callbacks suppressed [ 433.020319][T24476] netlink: 408 bytes leftover after parsing attributes in process `syz.0.5326'. [ 433.107548][T24480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5325'. [ 433.156582][T24482] pim6reg1: entered promiscuous mode [ 433.164135][T24482] pim6reg1: entered allmulticast mode [ 433.236566][T24486] x_tables: unsorted entry at hook 1 [ 433.245641][T24487] x_tables: unsorted entry at hook 1 [ 433.298410][T24490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5330'. [ 433.390304][T24498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5333'. [ 433.402005][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5333'. [ 433.564009][T24511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5337'. [ 433.576327][T24513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5338'. [ 433.587271][T24513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5338'. [ 433.589920][T24511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5337'. [ 433.791792][T24523] netlink: 'syz.2.5342': attribute type 11 has an invalid length. [ 433.823595][T24523] netlink: 'syz.2.5342': attribute type 4 has an invalid length. [ 433.837133][T24523] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.5342'. [ 434.044933][T24546] netlink: 'syz.3.5346': attribute type 5 has an invalid length. [ 434.262454][T24559] gre0: entered promiscuous mode [ 434.271784][T24559] gre0: entered allmulticast mode [ 434.426189][T24570] gre1: entered promiscuous mode [ 434.437380][T24570] gre1: entered allmulticast mode [ 434.499042][T24582] sctp: [Deprecated]: syz.4.5360 (pid 24582) Use of int in max_burst socket option. [ 434.499042][T24582] Use struct sctp_assoc_value instead [ 434.629652][T24593] netlink: 'syz.1.5362': attribute type 1 has an invalid length. [ 434.713794][T24593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.778627][T24599] bond5: (slave veth5): Enslaving as an active interface with a down link [ 434.813151][T24593] veth7: entered promiscuous mode [ 434.822825][T24593] bond5: (slave veth7): Enslaving as an active interface with a down link [ 434.860120][T24599] vlan3: entered allmulticast mode [ 434.869359][T24599] bond5: entered allmulticast mode [ 434.878556][T24599] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 434.956608][T24608] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 435.548154][T24639] netlink: 'syz.4.5376': attribute type 13 has an invalid length. [ 435.658002][T24642] net_ratelimit: 20 callbacks suppressed [ 435.658067][T24642] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 435.878496][T24639] vlan2: left allmulticast mode [ 435.883662][T24639] mac80211_hwsim hwsim26 wlan0: left allmulticast mode [ 435.914030][T24639] veth2: left promiscuous mode [ 435.919741][T24639] veth2: left allmulticast mode [ 435.927945][T24639] bridge6: left promiscuous mode [ 435.932895][T24639] bridge6: left allmulticast mode [ 435.940472][T24639] mac80211_hwsim hwsim26 syzkaller0: left promiscuous mode [ 435.947816][T24639] mac80211_hwsim hwsim26 syzkaller0: left allmulticast mode [ 435.961986][T24639] veth7: left promiscuous mode [ 435.972062][T24640] bond0: (slave rose0): Error: Device can not be enslaved while up [ 435.997682][T24648] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.015769][T24648] bridge_slave_1: left allmulticast mode [ 436.022208][T24648] bridge_slave_1: left promiscuous mode [ 436.049502][T24648] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.410272][T24680] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 436.425449][T24680] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 436.512946][T24691] xt_l2tp: unknown flags: 10 [ 436.787460][T24711] netlink: 'syz.3.5396': attribute type 1 has an invalid length. [ 437.171901][T24721] syzkaller1: entered promiscuous mode [ 437.232347][T24721] syzkaller1: entered allmulticast mode [ 437.640824][T24740] bond0: option all_slaves_active: invalid value (5) [ 437.901001][T24752] netlink: 'syz.3.5411': attribute type 1 has an invalid length. [ 437.909017][T24752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.341749][T24760] netlink: 'syz.3.5414': attribute type 7 has an invalid length. [ 438.354677][T24760] netlink: 'syz.3.5414': attribute type 8 has an invalid length. [ 438.475267][T24765] __nla_validate_parse: 12 callbacks suppressed [ 438.475286][T24765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5415'. [ 439.525911][T24794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.688432][T24797] netlink: 'syz.1.5426': attribute type 1 has an invalid length. [ 440.181863][T24804] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5429'. [ 440.624935][T24815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5434'. [ 440.712811][T24819] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 441.021087][T24834] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5438'. [ 441.098177][T24834] syzkaller1: entered promiscuous mode [ 441.103710][T24834] syzkaller1: entered allmulticast mode [ 441.122893][T24836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5439'. [ 441.139606][T24836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5439'. [ 441.164995][T24838] bond6: entered promiscuous mode [ 441.170228][T24838] bond6: entered allmulticast mode [ 441.178187][T24838] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.303642][T24849] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.305945][T24841] netlink: 'syz.4.5441': attribute type 1 has an invalid length. [ 441.418999][T24853] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5441'. [ 441.599368][T24864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.600928][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d25d800: rx timeout, send abort [ 442.100504][T24885] sch_fq: defrate 0 ignored. [ 442.116522][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d25d800: abort rx timeout. Force session deactivation [ 442.299116][T24898] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 442.745537][T24914] tipc: Enabled bearer , priority 0 [ 442.791673][T24914] +: renamed from syzkaller0 [ 442.805907][T24917] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 442.839506][T24914] tipc: Disabling bearer [ 442.900120][T24922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5461'. [ 443.196178][T24936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5465'. [ 443.220302][T24938] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5467'. [ 443.318777][T24943] netlink: 'syz.0.5466': attribute type 29 has an invalid length. [ 443.777105][T24955] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 444.171612][T24971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5477'. [ 444.191601][T24975] netlink: 'syz.4.5480': attribute type 1 has an invalid length. [ 444.227115][T24975] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.269337][T24971] bond10 (unregistering): Released all slaves [ 444.349851][T24975] bond7: (slave veth9): Enslaving as an active interface with a down link [ 444.373824][T24981] bond7: entered promiscuous mode [ 444.394876][T24981] bond7: entered allmulticast mode [ 444.692249][T24990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5485'. [ 445.187331][T25017] netlink: 'syz.4.5493': attribute type 39 has an invalid length. [ 445.432104][T25031] bond5: entered allmulticast mode [ 445.441106][T25031] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.453047][T25031] bridge0: port 1(bond5) entered blocking state [ 445.463331][T25031] bridge0: port 1(bond5) entered disabled state [ 445.473454][T25031] bond5: entered promiscuous mode [ 445.721151][T25046] netlink: 'syz.0.5499': attribute type 11 has an invalid length. [ 445.830963][T25051] netlink: 'syz.0.5501': attribute type 11 has an invalid length. [ 446.565146][T25088] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 446.848786][T25107] netlink: 'syz.4.5522': attribute type 1 has an invalid length. [ 446.996616][T25117] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 447.192710][T25130] netlink: 'syz.1.5525': attribute type 8 has an invalid length. [ 447.367432][T25137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5529'. [ 447.425012][T25137] bridge_slave_0: default FDB implementation only supports local addresses [ 447.508682][T25144] netlink: 'syz.2.5532': attribute type 10 has an invalid length. [ 447.552237][T25144] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 447.598445][T25150] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5535'. [ 447.634661][ T6234] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.656015][ T6234] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.675558][T25144] sctp: [Deprecated]: syz.2.5532 (pid 25144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.675558][T25144] Use struct sctp_sack_info instead [ 447.692647][ T6234] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.723703][ T6234] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.160277][T25173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5542'. [ 448.232393][T25180] netlink: 'syz.0.5544': attribute type 4 has an invalid length. [ 448.244130][T25180] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5544'. [ 448.280835][T25180] `: renamed from bond0 (while UP) [ 448.367187][T25186] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5547'. [ 448.379911][T25186] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5547'. [ 448.645320][T25204] netlink: 'syz.1.5552': attribute type 12 has an invalid length. [ 448.668961][T25204] netlink: 'syz.1.5552': attribute type 29 has an invalid length. [ 448.694801][T25204] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5552'. [ 448.738960][T25204] netlink: 59 bytes leftover after parsing attributes in process `syz.1.5552'. [ 449.044966][T25222] bond7 (unregistering): Released all slaves [ 449.595437][T25253] __nla_validate_parse: 3 callbacks suppressed [ 449.595455][T25253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5569'. [ 449.623443][T25251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5568'. [ 449.645892][T25251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5568'. [ 449.784789][T25266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5573'. [ 449.793842][T25266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5573'. [ 449.820232][T25274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5573'. [ 450.091564][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5577'. [ 450.138953][T25291] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 450.485850][T25313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5582'. [ 450.746777][T25317] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004 [ 450.904833][T25327] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 450.915269][T25327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.080393][T25336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5587'. [ 451.155598][T25336] netlink: 'syz.1.5587': attribute type 9 has an invalid length. [ 451.238548][T25347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5592'. [ 451.285777][T25352] tipc: Enabling of bearer rejected, already enabled [ 451.296867][T25355] netlink: 'syz.1.5595': attribute type 1 has an invalid length. [ 451.302532][T25352] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 451.375764][T25358] netlink: 'syz.4.5596': attribute type 1 has an invalid length. [ 451.409410][T25358] bond8: entered promiscuous mode [ 451.417681][T25358] bond8: entered allmulticast mode [ 451.423221][T25358] 8021q: adding VLAN 0 to HW filter on device bond8 [ 451.432187][T25352] tipc: Resetting bearer [ 451.447647][T25367] macvlan2: entered promiscuous mode [ 451.452966][T25367] macvlan2: entered allmulticast mode [ 451.462446][T25367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 451.752978][T25379] tipc: Enabled bearer , priority 0 [ 451.775339][T25379] syzkaller0: entered promiscuous mode [ 451.780842][T25379] syzkaller0: entered allmulticast mode [ 451.816348][T25379] netlink: 'syz.2.5602': attribute type 1 has an invalid length. [ 451.908326][T25387] netlink: 'syz.4.5604': attribute type 1 has an invalid length. [ 452.005685][T25390] bond9: (slave geneve3): making interface the new active one [ 452.013900][T25390] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 452.027931][ T6233] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 452.046425][ T6233] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 452.055836][ T6233] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 452.065883][ T6220] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 452.528448][T25406] syzkaller1: entered promiscuous mode [ 452.534046][T25406] syzkaller1: entered allmulticast mode [ 452.621520][T25378] tipc: Resetting bearer [ 452.666805][T25378] tipc: Disabling bearer [ 453.185966][T25452] ksmbd: Unknown IPC event: 3, ignore. [ 453.513990][T25469] veth0: entered promiscuous mode [ 453.558163][T25471] dvmrp0: entered allmulticast mode [ 453.586979][T25479] syzkaller1: entered promiscuous mode [ 453.597492][T25479] syzkaller1: entered allmulticast mode [ 453.636788][T25469] veth0: left promiscuous mode [ 453.710797][T25493] netlink: 'syz.2.5632': attribute type 11 has an invalid length. [ 454.275893][T25485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.704012][T25543] __nla_validate_parse: 11 callbacks suppressed [ 454.704031][T25543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5645'. [ 454.815591][T25555] x_tables: duplicate underflow at hook 2 [ 455.996137][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5662'. [ 456.019720][T25604] bridge_slave_0: left allmulticast mode [ 456.052185][T25604] bridge_slave_0: left promiscuous mode [ 456.069071][T25604] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.103107][T25614] netlink: 'syz.0.5665': attribute type 1 has an invalid length. [ 456.176651][T25618] blkio.reset_stats is deprecated [ 456.286479][T25622] xfrm1: entered allmulticast mode [ 456.299185][T25625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5669'. [ 456.392674][T25625] bridge_slave_1 (unregistering): left allmulticast mode [ 456.419637][T25625] bridge_slave_1 (unregistering): left promiscuous mode [ 456.440069][T25625] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.656141][T25656] netlink: 'syz.4.5679': attribute type 178 has an invalid length. [ 456.762139][T25662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5680'. [ 456.830425][T25670] netlink: 'syz.2.5682': attribute type 33 has an invalid length. [ 457.060847][T25685] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5688'. [ 457.214711][T25694] netlink: 'syz.1.5692': attribute type 5 has an invalid length. [ 457.245375][T25694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5692'. [ 457.263499][T25697] netlink: 'syz.0.5693': attribute type 10 has an invalid length. [ 457.272229][T25697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5693'. [ 457.497948][T25705] wireguard0: entered promiscuous mode [ 457.503488][T25705] wireguard0: entered allmulticast mode [ 457.515310][T25705] team0: Device wireguard0 is of different type [ 457.885939][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5708'. [ 457.903257][T25741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5708'. [ 457.947655][T25744] netlink: 'syz.0.5709': attribute type 58 has an invalid length. [ 457.955954][T25744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5709'. [ 458.073357][T25747] tipc: Enabled bearer , priority 0 [ 458.227198][T25747] syzkaller0: entered promiscuous mode [ 458.247277][T25747] syzkaller0: entered allmulticast mode [ 458.264844][T25747] tipc: Resetting bearer [ 458.335399][T25750] tipc: Resetting bearer [ 458.391864][T25774] xt_bpf: check failed: parse error [ 458.600352][T25790] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 459.807168][T25750] tipc: Disabling bearer [ 459.837125][T25780] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 459.846311][T25780] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 459.965079][T25796] netlink: 'syz.2.5720': attribute type 4 has an invalid length. [ 460.049132][T25806] __nla_validate_parse: 6 callbacks suppressed [ 460.049151][T25806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5721'. [ 460.209692][T25811] netlink: 'syz.2.5726': attribute type 4 has an invalid length. [ 460.285095][T25512] page_pool_release_retry() stalled pool shutdown: id 27, 50 inflight 362 sec [ 460.286491][T25819] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5727'. [ 460.600828][T25840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5737'. [ 460.638184][T25804] tap0: tun_chr_ioctl cmd 1074025672 [ 460.664373][T25804] tap0: ignored: set checksum disabled [ 460.850023][T25856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5742'. [ 461.075004][T25868] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 461.082783][T25868] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5747'. [ 461.132645][T25869] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 461.141784][T25874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5748'. [ 461.154886][T25869] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5747'. [ 461.177607][T25879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5750'. [ 461.193528][T25876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5749'. [ 461.254943][T25868] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 461.261058][T25868] syzkaller1: linktype set to 823 [ 461.420623][T25900] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5755'. [ 461.921404][T25934] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 461.960978][T25934] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 461.981305][T25934] gretap2: entered promiscuous mode [ 461.987751][T25934] gretap2: entered allmulticast mode [ 462.032655][T25941] sch_tbf: burst 274 is lower than device lo mtu (11337746) ! [ 462.570498][T25977] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 462.579356][T25977] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 462.585423][T25979] netlink: 'syz.0.5781': attribute type 32 has an invalid length. [ 462.622159][T25979] bond0: option coupled_control: invalid value (52) [ 462.631668][T25979] bond0 (unregistering): Released all slaves [ 462.640324][T25982] netlink: 'syz.2.5782': attribute type 17 has an invalid length. [ 462.840037][T25991] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 462.856553][T25991] bond7 (unregistering): Released all slaves [ 463.042111][ T30] audit: type=1804 audit(1764488500.405:13): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5790" name="/newroot/512/cgroup.controllers" dev="tmpfs" ino=2625 res=1 errno=0 [ 463.105387][ T30] audit: type=1800 audit(1764488500.435:14): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5790" name="cgroup.controllers" dev="tmpfs" ino=2625 res=0 errno=0 [ 463.461834][T26030] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 463.879393][T26064] x_tables: duplicate underflow at hook 3 [ 463.890325][T26064] x_tables: duplicate underflow at hook 3 [ 464.093370][T26084] netlink: 'syz.2.5813': attribute type 2 has an invalid length. [ 464.112416][T26083] netlink: 'syz.4.5815': attribute type 1 has an invalid length. [ 464.223089][T26092] netlink: 'syz.2.5817': attribute type 3 has an invalid length. [ 464.248203][T26092] netlink: 'syz.2.5817': attribute type 1 has an invalid length. [ 464.538525][T26114] delete_channel: no stack [ 464.798613][T26132] netlink: 'syz.2.5827': attribute type 1 has an invalid length. [ 464.921597][T26135] bond7: (slave geneve4): making interface the new active one [ 464.945230][T26135] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 464.954362][ T6233] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 464.963649][ T6233] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 464.989086][ T6233] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 465.016978][ T6233] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 465.098557][T26141] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not %at [ 467.858297][T26148] __nla_validate_parse: 17 callbacks suppressed [ 467.858316][T26148] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5830'. [ 467.904989][T26148] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.912707][T26155] netlink: 'syz.2.5830': attribute type 64 has an invalid length. [ 467.952973][T26155] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5830'. [ 468.123898][T26168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5836'. [ 468.176880][T26171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5836'. [ 468.189194][T26170] tipc: Enabling of bearer rejected, already enabled [ 468.223618][T26098] warn_alloc: 1 callbacks suppressed [ 468.223637][T26098] syz.3.5818: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 468.231142][T26175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5836'. [ 468.257116][T26098] ,cpuset=/,mems_allowed=0-1 [ 468.262020][T26098] CPU: 0 UID: 0 PID: 26098 Comm: syz.3.5818 Not tainted syzkaller #0 PREEMPT(full) [ 468.262046][T26098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.262061][T26098] Call Trace: [ 468.262069][T26098] [ 468.262077][T26098] dump_stack_lvl+0x189/0x250 [ 468.262110][T26098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.262134][T26098] ? __pfx__printk+0x10/0x10 [ 468.262155][T26098] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 468.262180][T26098] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 468.262206][T26098] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 468.262239][T26098] warn_alloc+0x214/0x310 [ 468.262272][T26098] ? __pfx_warn_alloc+0x10/0x10 [ 468.262308][T26098] ? __get_vm_area_node+0x28f/0x300 [ 468.262334][T26098] ? hash_netport4_resize+0x235/0x1b60 [ 468.262362][T26098] __vmalloc_node_range_noprof+0x690/0x12d0 [ 468.262387][T26098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.262432][T26098] ? alloc_pages_mpol+0x3cd/0x4a0 [ 468.262453][T26098] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 468.262483][T26098] ? rcu_is_watching+0x15/0xb0 [ 468.262504][T26098] ? hash_netport4_resize+0x235/0x1b60 [ 468.262527][T26098] __kvmalloc_node_noprof+0x674/0x910 [ 468.262553][T26098] ? hash_netport4_resize+0x235/0x1b60 [ 468.262587][T26098] hash_netport4_resize+0x235/0x1b60 [ 468.262608][T26098] ? hash_netport4_uadt+0xc97/0xf30 [ 468.262637][T26098] ? __pfx_hash_netport4_add+0x10/0x10 [ 468.262660][T26098] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 468.262693][T26098] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 468.262726][T26098] call_ad+0x44e/0xb00 [ 468.262755][T26098] ? __pfx_call_ad+0x10/0x10 [ 468.262789][T26098] ? __nla_parse+0x40/0x60 [ 468.262815][T26098] ip_set_ad+0x791/0x930 [ 468.262843][T26098] ? __pfx_ip_set_ad+0x10/0x10 [ 468.262904][T26098] nfnetlink_rcv_msg+0xb4d/0x1130 [ 468.262929][T26098] ? __lock_acquire+0xab9/0xd20 [ 468.262948][T26098] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 468.262993][T26098] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 468.263058][T26098] ? __lock_acquire+0xab9/0xd20 [ 468.263093][T26098] netlink_rcv_skb+0x208/0x470 [ 468.263115][T26098] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 468.263142][T26098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.263175][T26098] ? bpf_lsm_capable+0x9/0x20 [ 468.263196][T26098] ? security_capable+0x7e/0x2e0 [ 468.263234][T26098] nfnetlink_rcv+0x282/0x2590 [ 468.263264][T26098] ? is_bpf_text_address+0x26/0x2b0 [ 468.263293][T26098] ? __kernel_text_address+0xd/0x40 [ 468.263318][T26098] ? unwind_get_return_address+0x4d/0x90 [ 468.263340][T26098] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 468.263363][T26098] ? arch_stack_walk+0xfc/0x150 [ 468.263400][T26098] ? stack_trace_save+0x9c/0xe0 [ 468.263422][T26098] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 468.263447][T26098] ? stack_depot_save_flags+0x40/0x860 [ 468.263480][T26098] ? __lock_acquire+0xab9/0xd20 [ 468.263527][T26098] ? __lock_acquire+0xab9/0xd20 [ 468.263558][T26098] ? netlink_deliver_tap+0x2e/0x1b0 [ 468.263585][T26098] ? netlink_deliver_tap+0x2e/0x1b0 [ 468.263613][T26098] netlink_unicast+0x82f/0x9e0 [ 468.263650][T26098] ? __pfx_netlink_unicast+0x10/0x10 [ 468.263678][T26098] ? netlink_sendmsg+0x642/0xb30 [ 468.263696][T26098] ? skb_put+0x11b/0x210 [ 468.263719][T26098] netlink_sendmsg+0x805/0xb30 [ 468.263756][T26098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.263779][T26098] ? aa_sock_msg_perm+0xf1/0x1d0 [ 468.263808][T26098] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.263826][T26098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.263847][T26098] __sock_sendmsg+0x21c/0x270 [ 468.263875][T26098] ____sys_sendmsg+0x505/0x830 [ 468.263903][T26098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.263935][T26098] ? import_iovec+0x74/0xa0 [ 468.263962][T26098] ___sys_sendmsg+0x21f/0x2a0 [ 468.263986][T26098] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.264049][T26098] ? __fget_files+0x2a/0x420 [ 468.264066][T26098] ? __fget_files+0x3a0/0x420 [ 468.264097][T26098] __x64_sys_sendmsg+0x19b/0x260 [ 468.264120][T26098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.264157][T26098] ? do_syscall_64+0xbe/0xfa0 [ 468.264184][T26098] do_syscall_64+0xfa/0xfa0 [ 468.264207][T26098] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.264238][T26098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.264256][T26098] ? clear_bhb_loop+0x60/0xb0 [ 468.264278][T26098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.264300][T26098] RIP: 0033:0x7fe38578f749 [ 468.264318][T26098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.264334][T26098] RSP: 002b:00007fe38656b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.264354][T26098] RAX: ffffffffffffffda RBX: 00007fe3859e5fa0 RCX: 00007fe38578f749 [ 468.264369][T26098] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000009 [ 468.264382][T26098] RBP: 00007fe385813f91 R08: 0000000000000000 R09: 0000000000000000 [ 468.264394][T26098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.264406][T26098] R13: 00007fe3859e6038 R14: 00007fe3859e5fa0 R15: 00007ffceaac9a68 [ 468.264441][T26098] [ 468.770012][T26098] Mem-Info: [ 468.773373][T26098] active_anon:3874 inactive_anon:0 isolated_anon:0 [ 468.773373][T26098] active_file:3204 inactive_file:40043 isolated_file:0 [ 468.773373][T26098] unevictable:768 dirty:36 writeback:1 [ 468.773373][T26098] slab_reclaimable:12529 slab_unreclaimable:248740 [ 468.773373][T26098] mapped:28937 shmem:1366 pagetables:1231 [ 468.773373][T26098] sec_pagetables:0 bounce:0 [ 468.773373][T26098] kernel_misc_reclaimable:0 [ 468.773373][T26098] free:1160009 free_pcp:20379 free_cma:0 [ 468.826486][T26098] Node 0 active_anon:15496kB inactive_anon:0kB active_file:12816kB inactive_file:159972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115748kB dirty:144kB writeback:4kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14892kB pagetables:4784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 468.890030][T26098] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 468.927510][T26098] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.957916][T26098] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 468.963706][T26098] Node 0 DMA32 free:729584kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15452kB inactive_anon:0kB active_file:12816kB inactive_file:159972kB unevictable:1536kB writepending:148kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:64212kB local_pcp:21244kB free_cma:0kB [ 468.997583][T26098] lowmem_reserve[]: 0 0 0 0 0 [ 469.002336][T26098] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.032948][T26098] lowmem_reserve[]: 0 0 0 0 0 [ 469.037820][T26098] Node 1 Normal free:3895296kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18292kB local_pcp:8352kB free_cma:0kB [ 469.075310][T26098] lowmem_reserve[]: 0 0 0 0 0 [ 469.084128][T26098] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 469.098260][T26098] Node 0 DMA32: 1001*4kB (UM) 636*8kB (UME) 110*16kB (UME) 768*32kB (UME) 97*64kB (UME) 27*128kB (UME) 434*256kB (UME) 262*512kB (UM) 191*1024kB (UM) 9*2048kB (UM) 55*4096kB (UM) = 729636kB [ 469.117161][T26098] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 469.129023][T26098] Node 1 Normal: 188*4kB (UE) 48*8kB (UME) 39*16kB (UME) 85*32kB (UME) 24*64kB (UME) 11*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3895296kB [ 469.132329][T26184] team0: Device gtp1 is up. Set it down before adding it as a team port [ 469.153443][T26098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.166310][T26098] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.175650][T26098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.185381][T26098] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.194984][T26098] 44610 total pagecache pages [ 469.199676][T26098] 0 pages in swap cache [ 469.203826][T26098] Free swap = 124996kB [ 469.208095][T26098] Total swap = 124996kB [ 469.212254][T26098] 2097051 pages RAM [ 469.216112][T26098] 0 pages HighMem/MovableOnly [ 469.220782][T26098] 424124 pages reserved [ 469.225244][T26098] 0 pages cma reserved [ 469.315647][T26194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5845'. [ 469.338203][T26197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5846'. [ 469.351371][T26197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5846'. [ 469.352582][T26196] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5844'. [ 469.378708][T26197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5846'. [ 469.488350][T26197] gtp1: entered promiscuous mode [ 469.493338][T26197] gtp1: entered allmulticast mode [ 469.898472][T26241] tipc: Enabling of bearer rejected, already enabled [ 470.267597][T26260] netlink: 'syz.3.5862': attribute type 1 has an invalid length. [ 470.282988][T26258] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:25 [ 470.292568][T26260] netlink: 'syz.3.5862': attribute type 2 has an invalid length. [ 470.381891][T26263] sctp: [Deprecated]: syz.0.5863 (pid 26263) Use of int in max_burst socket option. [ 470.381891][T26263] Use struct sctp_assoc_value instead [ 470.620941][T26274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.934704][T26298] bond11: (slave gretap0): Device is not bonding slave [ 470.941713][T26298] bond11: option active_slave: invalid value (gretap0) [ 470.951042][T26298] bond11 (unregistering): Released all slaves [ 470.979284][T26301] netlink: 'syz.0.5876': attribute type 25 has an invalid length. [ 471.005401][T26303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.012635][T26303] IPv6: NLM_F_CREATE should be set when creating new route [ 471.019917][T26303] IPv6: NLM_F_CREATE should be set when creating new route [ 471.027189][T26303] IPv6: NLM_F_CREATE should be set when creating new route [ 471.059610][T26298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.405131][T26326] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 471.648691][T26342] tipc: Enabling of bearer rejected, media not registered [ 472.038431][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.048980][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.058232][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.067440][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.075177][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.402438][T26357] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 472.525406][T26360] bond6: entered allmulticast mode [ 472.565249][T26354] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.228145][T26402] vlan4: entered allmulticast mode [ 473.233305][T26402] veth1: entered allmulticast mode [ 473.276322][T26401] __nla_validate_parse: 19 callbacks suppressed [ 473.276341][T26401] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5910'. [ 473.347683][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5910'. [ 473.558111][T26420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5914'. [ 473.635439][T26354] chnl_net:caif_netlink_parms(): no params data found [ 473.717158][T26420] netlink: 'syz.2.5914': attribute type 33 has an invalid length. [ 473.846331][T26439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5918'. [ 474.106281][T26354] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.141508][T21940] Bluetooth: hci4: command tx timeout [ 474.154739][T26354] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.176795][T26354] bridge_slave_0: entered allmulticast mode [ 474.196628][T26354] bridge_slave_0: entered promiscuous mode [ 474.237859][T26354] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.270955][T26354] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.303261][T26354] bridge_slave_1: entered allmulticast mode [ 474.331516][T26354] bridge_slave_1: entered promiscuous mode [ 474.518703][T26354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.572506][T26354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.671822][T26484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5927'. [ 474.731464][T26482] veth0: entered promiscuous mode [ 474.858039][T26354] team0: Port device team_slave_0 added [ 474.868211][T26354] team0: Port device team_slave_1 added [ 474.965301][T26498] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 474.973876][T26498] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 474.983250][T26354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.990696][T26354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.026422][T26354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.067961][T26354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.075693][T26354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.112472][T26354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.174115][T26506] tipc: Enabling of bearer rejected, already enabled [ 475.199360][T26509] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 475.210385][T26509] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 475.255057][T26354] hsr_slave_0: entered promiscuous mode [ 475.262314][T26354] hsr_slave_1: entered promiscuous mode [ 475.269546][T26354] debugfs: 'hsr0' already exists in 'hsr' [ 475.276126][T26354] Cannot create hsr debugfs directory [ 475.576418][T26354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.589081][T26354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.612162][T26354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 475.620190][T26536] sctp: [Deprecated]: syz.2.5943 (pid 26536) Use of int in maxseg socket option. [ 475.620190][T26536] Use struct sctp_assoc_value instead [ 475.634389][T26354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 475.777589][T26354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.791762][T26354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.803151][T26354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 475.815640][T26354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 475.849985][T26542] tipc: Enabled bearer , priority 0 [ 475.897487][T26354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.908453][T26354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.911627][T26544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5947'. [ 475.920182][T26354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 475.939651][T26354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 475.941288][T26545] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5946'. [ 476.037511][T26542] syzkaller0: entered promiscuous mode [ 476.049102][T26542] syzkaller0: entered allmulticast mode [ 476.056404][T26542] tipc: Resetting bearer [ 476.133225][T26354] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.148098][T26354] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.158926][T26354] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 476.169613][T26354] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 476.185247][T26541] tipc: Resetting bearer [ 476.210128][T21940] Bluetooth: hci4: command tx timeout [ 477.586466][T26541] tipc: Disabling bearer [ 477.748661][T26559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5952'. [ 477.847514][T26354] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.880399][T26354] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.920575][T26354] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.950545][T26354] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.224618][T26595] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.227150][T26354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.240484][T26596] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.278288][T26354] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.295704][T21940] Bluetooth: hci4: command tx timeout [ 478.310531][T26594] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 478.320508][T26594] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 478.342681][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.349966][ T6233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.402067][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.409243][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.971877][T26640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.988941][T26642] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 479.011345][T26354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.281049][T26655] bridge_slave_0: left allmulticast mode [ 479.345946][T26655] bridge_slave_0: left promiscuous mode [ 479.353347][T26655] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.390584][T26655] bond0: (slave bond_slave_0): Releasing backup interface [ 479.402020][T26655] bond_slave_0: left promiscuous mode [ 479.428147][T26655] bond_slave_0: left allmulticast mode [ 479.475312][T26672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5977'. [ 479.478228][T26655] bond0: (slave bond_slave_1): Releasing backup interface [ 479.540665][T26655] bond_slave_1: left promiscuous mode [ 479.559189][T26655] bond_slave_1: left allmulticast mode [ 479.588369][T26655] tipc: Resetting bearer [ 479.601515][T26655] tipc: Resetting bearer [ 479.609784][T26655] team0: Port device team_slave_1 removed [ 479.618924][T26655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.627250][T26655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.636052][T26655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.643424][T26655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.653399][T26655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 479.685505][T26662] team0: Mode changed to "loadbalance" [ 479.832483][T26685] xt_hashlimit: size too large, truncated to 1048576 [ 479.851082][T26688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5980'. [ 479.888596][T26688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5980'. [ 479.933488][T26688] bridge0: port 1(vlan2) entered blocking state [ 479.947855][T26688] bridge0: port 1(vlan2) entered disabled state [ 479.964028][T26688] vlan2: entered allmulticast mode [ 479.979161][T26688] bridge0: entered allmulticast mode [ 480.002620][T26688] vlan2: left allmulticast mode [ 480.014997][T26688] bridge0: left allmulticast mode [ 480.155363][T26354] veth0_vlan: entered promiscuous mode [ 480.189023][T26708] xt_l2tp: missing protocol rule (udp|l2tpip) [ 480.207889][T26354] veth1_vlan: entered promiscuous mode [ 480.298667][T26354] veth0_macvtap: entered promiscuous mode [ 480.345588][T26713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5988'. [ 480.365226][T21940] Bluetooth: hci4: command tx timeout [ 480.376649][T26354] veth1_macvtap: entered promiscuous mode [ 480.409598][T26354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.442796][T26354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.480642][ T6222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.503116][ T6222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.531645][ T6222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.588279][T26716] "syz.3.5989" (26716) uses obsolete ecb(arc4) skcipher [ 480.623928][ T6222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.881272][T26749] netlink: 'syz.2.5993': attribute type 13 has an invalid length. [ 480.993491][T26749] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.019899][T26749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.065833][T26757] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5994'. [ 481.091242][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.107214][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.202632][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.221908][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.320920][T26767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6000'. [ 481.439680][T26779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6002'. [ 481.523442][T25510] IPVS: starting estimator thread 0... [ 481.582935][T26790] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6004'. [ 481.596855][T26784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6003'. [ 481.646953][T26787] IPVS: using max 29 ests per chain, 69600 per kthread [ 481.776004][T26808] bridge0: port 3(veth0_to_bridge) entered blocking state [ 481.783750][T26808] bridge0: port 3(veth0_to_bridge) entered disabled state [ 481.807274][T26808] veth0_to_bridge: entered allmulticast mode [ 481.823640][T26808] veth0_to_bridge: entered promiscuous mode [ 481.830895][T26808] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.845545][T26808] bridge0: port 3(veth0_to_bridge) entered blocking state [ 481.853071][T26808] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 481.881336][T26812] sock: sock_timestamping_bind_phc: sock not bind to device [ 481.930553][T26816] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6013'. [ 482.130928][T26833] netlink: zone id is out of range [ 482.159883][T26833] netlink: zone id is out of range [ 482.185470][T26833] netlink: zone id is out of range [ 482.190619][T26833] netlink: zone id is out of range [ 482.284599][ T9156] page_pool_release_retry() stalled pool shutdown: id 53, 50 inflight 302 sec [ 482.294539][T26833] netlink: zone id is out of range [ 482.497939][T26845] sch_fq: defrate 0 ignored. [ 482.757396][T26859] netlink: 'syz.2.6027': attribute type 21 has an invalid length. [ 482.931117][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.948367][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.956646][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.970113][T26868] netlink: 'syz.2.6030': attribute type 1 has an invalid length. [ 482.979718][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.991476][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.027160][T26873] netlink: 'syz.0.6031': attribute type 8 has an invalid length. [ 483.027814][ T6233] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.047583][ T6233] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.112063][T26867] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.191658][ T6233] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.225284][ T6233] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.382661][ T6233] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.415539][ T6233] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.538642][ T6233] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.552446][ T6233] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.656590][ C0] net_ratelimit: 13 callbacks suppressed [ 483.656612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.674643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.687047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.699877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.712264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.724664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.737030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.749431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.761809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.774228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.421097][T26904] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 484.430166][T26904] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 484.702969][T26921] __nla_validate_parse: 66 callbacks suppressed [ 484.702989][T26921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6044'. [ 485.100299][T21940] Bluetooth: hci5: command tx timeout [ 487.178025][T21940] Bluetooth: hci5: command tx timeout [ 488.664411][ C1] net_ratelimit: 14985 callbacks suppressed [ 488.664431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 488.664621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.670773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 488.682677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.694703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 488.706654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.718591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 488.731856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.742422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 488.754354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.567453][T21940] Bluetooth: hci5: command tx timeout [ 492.474525][ C1] sched: DL replenish lagged too much [ 493.274274][ T5150] Bluetooth: hci5: command tx timeout [ 493.674222][ C1] net_ratelimit: 18677 callbacks suppressed [ 493.674243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 493.676007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.680558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 493.692542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.704461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 493.716370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.729922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 493.740316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.752374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 493.764340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.684211][ C1] net_ratelimit: 19035 callbacks suppressed [ 498.684232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 498.684321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.690586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 498.702616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.714549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 498.726477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.738487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 498.750537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.762393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 498.774869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.694295][ C1] net_ratelimit: 19546 callbacks suppressed [ 503.694317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 503.694475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.700579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 503.712543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.724582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 503.736553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.748450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 503.760916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.772262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 503.786105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.704442][ C1] net_ratelimit: 18955 callbacks suppressed [ 508.704462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 508.704527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.710774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 508.722755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.734744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 508.746815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.758640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 508.770577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.782605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 508.794590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.714225][ C1] net_ratelimit: 18903 callbacks suppressed [ 513.714245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 513.716170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.720538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 513.732603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.744494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 513.756501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.768418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 513.780401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.792391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 513.804447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.724428][ C1] net_ratelimit: 19436 callbacks suppressed [ 518.724448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 518.726791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.730730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 518.742842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.754648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 518.766634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.778620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 518.790535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.802539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 518.814624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.818920][ T9149] page_pool_release_retry() stalled pool shutdown: id 27, 50 inflight 423 sec [ 523.734284][ C1] net_ratelimit: 18709 callbacks suppressed [ 523.734304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 523.734423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.740582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 523.752980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.764485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 523.776427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.788311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 523.802451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.812193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 523.824224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.744378][ C1] net_ratelimit: 18740 callbacks suppressed [ 528.744398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 528.746193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.750697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 528.762784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.774550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 528.786560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.798490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 528.810441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.822462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 528.834526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.754404][ C1] net_ratelimit: 18723 callbacks suppressed [ 533.754424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 533.754479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.760724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 533.772724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.784611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 533.797140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.808607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 533.820597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.832424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 533.846762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.764503][ C1] net_ratelimit: 18101 callbacks suppressed [ 538.764523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 538.764561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.770806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 538.785639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.794709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 538.807663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.818559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 538.830546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.842528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 538.854494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.774465][ C0] net_ratelimit: 18296 callbacks suppressed [ 543.774488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.775166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 543.780813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.792787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 543.805153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.816644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 543.828526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.840510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 543.852446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.864390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 548.784213][ C1] net_ratelimit: 18462 callbacks suppressed [ 548.784233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 548.784726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.790502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 548.802985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.814451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 548.826940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.838272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 548.850293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.862219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 548.874264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.794186][ C1] net_ratelimit: 18764 callbacks suppressed [ 553.794207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 553.794313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.800543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 553.813052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.824430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 553.836380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.848359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 553.860311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.872321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 553.884349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.804217][ C1] net_ratelimit: 18544 callbacks suppressed [ 558.804238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 558.804364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.810594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 558.822994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.834472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 558.846897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.858318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 558.870251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.882282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 558.894238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.814461][ C1] net_ratelimit: 18838 callbacks suppressed [ 563.814472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.814481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 563.814855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 563.821131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.832691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 563.844658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.856678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 563.868576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.880517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 563.892295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.824545][ C1] net_ratelimit: 18743 callbacks suppressed [ 568.824566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 568.826070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.830883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 568.843278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.854776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 568.867214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.878748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 568.890629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.902641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 568.914551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.834219][ C1] net_ratelimit: 18823 callbacks suppressed [ 573.834239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 573.834313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.840547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 573.852948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.864454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 573.876864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.888261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 573.900269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.912199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 573.924118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.844498][ C0] net_ratelimit: 18917 callbacks suppressed [ 578.844503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 578.844520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.850845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 578.863281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.874689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 578.887171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.898573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 578.910533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.922485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 578.934438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.854367][ C1] net_ratelimit: 18815 callbacks suppressed [ 583.854389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 583.854501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.860714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 583.873099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.884582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 583.896531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.908474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 583.920436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.932291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 583.944241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.864172][ C0] net_ratelimit: 19116 callbacks suppressed [ 588.864192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.864222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 588.870421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.882454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 588.894459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.906360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 588.918801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.930294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 588.942252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.954172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 591.998996][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 592.404172][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 592.411154][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26911/1:b..l [ 592.419647][ C0] rcu: (detected by 0, t=10503 jiffies, g=91397, q=2106 ncpus=2) [ 592.427472][ C0] task:syz.4.6042 state:R running task stack:25960 pid:26911 tgid:26911 ppid:26354 task_flags:0x400040 flags:0x00080003 [ 592.442120][ C0] Call Trace: [ 592.445408][ C0] [ 592.448349][ C0] __schedule+0x1798/0x4cc0 [ 592.452877][ C0] ? __pfx___schedule+0x10/0x10 [ 592.457751][ C0] ? __pfx___schedule+0x10/0x10 [ 592.462609][ C0] ? preempt_schedule+0xae/0xc0 [ 592.467457][ C0] ? cfg80211_mlme_unregister_socket+0x2ce/0x690 [ 592.473794][ C0] ? preempt_schedule_common+0x83/0xd0 [ 592.479263][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 592.484632][ C0] ? preempt_schedule+0xae/0xc0 [ 592.489494][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 592.495045][ C0] preempt_schedule_common+0x83/0xd0 [ 592.500333][ C0] preempt_schedule+0xae/0xc0 [ 592.505006][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 592.510405][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 592.516478][ C0] preempt_schedule_thunk+0x16/0x30 [ 592.521682][ C0] __local_bh_enable_ip+0x13e/0x1c0 [ 592.526878][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 592.532607][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 592.537820][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 592.543379][ C0] nl80211_netlink_notify+0x46b/0x840 [ 592.548759][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 592.554236][ C0] notifier_call_chain+0x1b6/0x3e0 [ 592.559362][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 592.565082][ C0] netlink_release+0x1280/0x1b40 [ 592.570120][ C0] ? netlink_release+0x108/0x1b40 [ 592.575153][ C0] ? __pfx_netlink_release+0x10/0x10 [ 592.580439][ C0] ? down_write+0x162/0x1f0 [ 592.584938][ C0] ? __pfx_down_write+0x10/0x10 [ 592.589797][ C0] sock_close+0xc3/0x240 [ 592.594049][ C0] ? __pfx_sock_close+0x10/0x10 [ 592.598898][ C0] __fput+0x44c/0xa70 [ 592.602881][ C0] task_work_run+0x1d4/0x260 [ 592.607470][ C0] ? __pfx_task_work_run+0x10/0x10 [ 592.612594][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 592.618062][ C0] exit_to_user_mode_loop+0xe9/0x130 [ 592.623338][ C0] do_syscall_64+0x2bd/0xfa0 [ 592.627929][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.634002][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 592.640156][ C0] ? clear_bhb_loop+0x60/0xb0 [ 592.644835][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.650726][ C0] RIP: 0033:0x7f984ad8f749 [ 592.655143][ C0] RSP: 002b:00007ffd89ebc138 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 592.663561][ C0] RAX: 0000000000000000 RBX: 00007f984afe7da0 RCX: 00007f984ad8f749 [ 592.671530][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 592.679500][ C0] RBP: 00007f984afe7da0 R08: 000000000000020c R09: 0000001e89ebc42f [ 592.687465][ C0] R10: 00007f984afe7cb0 R11: 0000000000000246 R12: 0000000000076742 [ 592.695435][ C0] R13: 00007f984afe6090 R14: ffffffffffffffff R15: 00007ffd89ebc250 [ 592.703423][ C0] [ 592.706436][ C0] rcu: rcu_preempt kthread starved for 1954 jiffies! g91397 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 592.717537][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 592.727502][ C0] rcu: RCU grace-period kthread stack dump: [ 592.733384][ C0] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 592.746872][ C0] Call Trace: [ 592.750148][ C0] [ 592.753082][ C0] __schedule+0x1798/0x4cc0 [ 592.757619][ C0] ? __lock_acquire+0xab9/0xd20 [ 592.762477][ C0] ? __pfx___schedule+0x10/0x10 [ 592.767347][ C0] ? schedule+0x91/0x360 [ 592.771602][ C0] schedule+0x165/0x360 [ 592.775767][ C0] schedule_timeout+0x12b/0x270 [ 592.780628][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 592.785994][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 592.791896][ C0] ? __pfx_process_timeout+0x10/0x10 [ 592.797190][ C0] ? prepare_to_swait_event+0x341/0x380 [ 592.802740][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 592.807597][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.812798][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 592.818953][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 592.824231][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 592.829438][ C0] ? finish_swait+0xcd/0x1f0 [ 592.834037][ C0] rcu_gp_kthread+0x99/0x390 [ 592.838629][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 592.843816][ C0] ? __kthread_parkme+0x7b/0x200 [ 592.848746][ C0] ? __kthread_parkme+0x1a1/0x200 [ 592.853778][ C0] kthread+0x711/0x8a0 [ 592.857848][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 592.863044][ C0] ? __pfx_kthread+0x10/0x10 [ 592.867646][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 592.872859][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.878063][ C0] ? __pfx_kthread+0x10/0x10 [ 592.882666][ C0] ret_from_fork+0x4bc/0x870 [ 592.887255][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 592.892377][ C0] ? __switch_to_asm+0x39/0x70 [ 592.897139][ C0] ? __switch_to_asm+0x33/0x70 [ 592.901898][ C0] ? __pfx_kthread+0x10/0x10 [ 592.906491][ C0] ret_from_fork_asm+0x1a/0x30 [ 592.911272][ C0] [ 592.914285][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 592.920641][ C0] Sending NMI from CPU 0 to CPUs 1: [ 592.925840][ C1] NMI backtrace for cpu 1 [ 592.925864][ C1] CPU: 1 UID: 0 PID: 26924 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 592.925882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.925891][ C1] Workqueue: events_unbound toggle_allocation_gate [ 592.925910][ C1] RIP: 0010:ebt_do_table+0x4cd/0x2820 [ 592.925926][ C1] Code: 89 d6 31 ff 89 de e8 42 bb 97 f7 85 db 4c 89 74 24 48 74 77 e8 f4 b6 97 f7 66 bb 81 00 e9 a1 00 00 00 48 8b 9c 24 18 01 00 00 <48> 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 dd 17 00 00 8b 1b [ 592.925939][ C1] RSP: 0018:ffffc90000a08360 EFLAGS: 00000246 [ 592.925952][ C1] RAX: ffffffff8a284bad RBX: ffffc9000da05028 RCX: 0000000000000100 [ 592.925962][ C1] RDX: ffff8880576abc80 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.925972][ C1] RBP: ffffc90000a08530 R08: 1ffff11029d6e953 R09: 1ffff1102867d388 [ 592.925983][ C1] R10: dffffc0000000000 R11: ffffed102867d389 R12: ffffc9000da05030 [ 592.925993][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.926003][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 592.926015][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.926025][ C1] CR2: 00007f6c15c00218 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 592.926038][ C1] Call Trace: [ 592.926044][ C1] [ 592.926058][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 592.926085][ C1] ? __pfx_ebt_do_table+0x10/0x10 [ 592.926097][ C1] ? stack_trace_save+0x9c/0xe0 [ 592.926120][ C1] ebt_broute+0x1ef/0x760 [ 592.926136][ C1] ? __kasan_save_free_info+0x46/0x50 [ 592.926152][ C1] ? kmem_cache_free+0x19b/0x690 [ 592.926169][ C1] ? ip6_mc_input+0x8de/0xb70 [ 592.926183][ C1] ? NF_HOOK+0x30c/0x3a0 [ 592.926196][ C1] ? __pfx_ebt_broute+0x10/0x10 [ 592.926210][ C1] ? do_xdp_generic+0x11a/0x11a0 [ 592.926229][ C1] ? on_each_cpu_cond_mask+0x3f/0x80 [ 592.926246][ C1] ? arch_jump_label_transform_apply+0x1c/0x30 [ 592.926270][ C1] ? __pfx_ebt_broute+0x10/0x10 [ 592.926285][ C1] br_handle_frame+0x96e/0x14f0 [ 592.926318][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 592.926335][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 592.926354][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 592.926372][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 592.926392][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 592.926411][ C1] __netif_receive_skb_core+0x10b9/0x4380 [ 592.926431][ C1] ? kmem_cache_free+0x19b/0x690 [ 592.926453][ C1] ? ip6_mc_input+0x8de/0xb70 [ 592.926469][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 592.926485][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 592.926503][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 592.926517][ C1] ? NF_HOOK+0x30c/0x3a0 [ 592.926529][ C1] ? skb_orphan+0xaf/0xd0 [ 592.926549][ C1] ? process_backlog+0x2d5/0x14f0 [ 592.926569][ C1] ? process_backlog+0x2d5/0x14f0 [ 592.926590][ C1] __netif_receive_skb+0x72/0x380 [ 592.926609][ C1] ? process_backlog+0x2d5/0x14f0 [ 592.926629][ C1] process_backlog+0x60e/0x14f0 [ 592.926655][ C1] ? __pfx_process_backlog+0x10/0x10 [ 592.926679][ C1] __napi_poll+0xc7/0x360 [ 592.926696][ C1] ? skb_defer_free_flush+0x229/0x250 [ 592.926716][ C1] net_rx_action+0x5f7/0xdf0 [ 592.926728][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.926747][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 592.926770][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 592.926801][ C1] handle_softirqs+0x286/0x870 [ 592.926818][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 592.926835][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 592.926852][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 592.926872][ C1] __irq_exit_rcu+0xca/0x1f0 [ 592.926886][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 592.926905][ C1] irq_exit_rcu+0x9/0x30 [ 592.926919][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 592.926936][ C1] [ 592.926941][ C1] [ 592.926947][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 592.926962][ C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 592.926979][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 e6 73 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 91 6f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 75 6f [ 592.926992][ C1] RSP: 0018:ffffc9000db27640 EFLAGS: 00000293 [ 592.927004][ C1] RAX: ffffffff81b4943b RBX: 1ffff11017108441 RCX: ffff8880576abc80 [ 592.927015][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 592.927024][ C1] RBP: ffffc9000db277c0 R08: ffffffff8f7cf477 R09: 1ffffffff1ef9e8e [ 592.927035][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9e8f R12: ffff8880b8842208 [ 592.927045][ C1] R13: dffffc0000000000 R14: ffff8880b893b240 R15: 0000000000000000 [ 592.927059][ C1] ? smp_call_function_many_cond+0xd4b/0x12d0 [ 592.927083][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 592.927105][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 592.927121][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 592.927138][ C1] ? __kvmalloc_node_noprof+0x170/0x910 [ 592.927157][ C1] ? __pfx___text_poke+0x10/0x10 [ 592.927172][ C1] ? rcu_is_watching+0x15/0xb0 [ 592.927195][ C1] ? trace_contention_end+0x39/0x120 [ 592.927215][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 592.927231][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 592.927248][ C1] smp_text_poke_batch_finish+0x5f9/0x1130 [ 592.927267][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 592.927293][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 592.927311][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 592.927332][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 592.927357][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 592.927376][ C1] static_key_disable_cpuslocked+0xc5/0x1b0 [ 592.927399][ C1] static_key_disable+0x1a/0x20 [ 592.927416][ C1] toggle_allocation_gate+0x1a1/0x240 [ 592.927430][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 592.927445][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 592.927466][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 592.927481][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 592.927497][ C1] process_scheduled_works+0xae1/0x17b0 [ 592.927526][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 592.927549][ C1] worker_thread+0x8a0/0xda0 [ 592.927577][ C1] kthread+0x711/0x8a0 [ 592.927596][ C1] ? __pfx_worker_thread+0x10/0x10 [ 592.927611][ C1] ? __pfx_kthread+0x10/0x10 [ 592.927629][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 592.927646][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.927663][ C1] ? __pfx_kthread+0x10/0x10 [ 592.927680][ C1] ret_from_fork+0x4bc/0x870 [ 592.927696][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 592.927713][ C1] ? __switch_to_asm+0x39/0x70 [ 592.927726][ C1] ? __switch_to_asm+0x33/0x70 [ 592.927738][ C1] ? __pfx_kthread+0x10/0x10 [ 592.927755][ C1] ret_from_fork_asm+0x1a/0x30 [ 592.927776][ C1] [ 593.874345][ C1] net_ratelimit: 16183 callbacks suppressed [ 593.874365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 593.874407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.880628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 593.893609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.904606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 593.916558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.928602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 593.940628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.952418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 593.964429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.884192][ C1] net_ratelimit: 17853 callbacks suppressed [ 598.884212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 598.884352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.890497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 598.903386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.914437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 598.926914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.938259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 598.951163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.962204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:fa:cf:41:5c:cb, vlan:0) [ 598.974188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)