last executing test programs: 30.443679325s ago: executing program 1 (id=6202): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x44, 0x9, 0x3, 0xfe, 0x17, 0x6, 0x1e, 0x81, 0xf9, 0x1, 0x4c, 0x5, 0x20}, 0xe) shutdown(r0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf251000000005001000ab000000000002000200000c08000100d23712bdd1530d10", @ANYRES16=r0, @ANYBLOB="e301000c00000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000440)="f2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="d86c1c4b3000102ae3b13e8c39b80f42533ef3a764d8ad19bc39397c405632704302a171a94f4172409f14cc32428683296be92c59c63ec0680dc0a3d55d67d53bc470169bd7a0c7383fbdab59ef023a394a0f4c867fa158f9f29097627521bddfdb8383e36a6f3b3ec1f4a0e9357676a3345eb97ff80379f6ad391d51749f32f8", 0x81}, {&(0x7f00000002c0)="f657d1f7d7a9abfc3a270814e744799f3e77923466232a2ba263d0db66cdaf2f2730bfca7581da325e85ccb574a58a5b34c0be7f9d6c8872544dd96efa6c025cbb6856d71a641a6b328897", 0x4b}, {&(0x7f0000000080)}, {&(0x7f0000000100)="c8944f7d6de7598e1c9d462990394ac1e22fd5f5c994e26a153bf021d5", 0x1d}, {&(0x7f0000000500)="4724c3f2f0e90a6a295b5c573228593372988c40166d9a0c64e11e3d628c183a817845472669112f7c23286bf937209c78b8d41b8dbf530f6496640a16b9e3365622696bbb9c2c75b6300d36af2d4eefd519cc51bee05b9981d97895cfd01a6ec2b8322f40a020f4071fe64820bdf757bc54eb94b956711919e8a13a204f47941dc08316d1b2a4623f76f7cafcc92d2c4dde63b924", 0x95}], 0x5, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}}, {{&(0x7f0000000480)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000880)=[{&(0x7f00000005c0)="ce331c3c489687520ee2644c8ae4fefb461f5089281a9f2e8f578a8ccc790995ef310823e5417835f9bd863922e8ff62cad5ed5ef9c3ea531837cef333b53c310fd7ea6913cfd16e6606f5cd3b519ff6b41be2d6617fddc6b2f036d060455d5e9ead49020fbd3038f144603540a6e48e1be0d1353743e867b822fef194cce2fa3b3fe74a51e08eca2fbdb93b494239f47b780a668f314ba23ddccfd52657e33112de592bb8faba5852ed71712d45b9c91590e5615240737fb61e10ee123503b1e5b21a001b7eed9b", 0xc8}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000740)="92d785364f8464437f0aba15dc3b051db1c9c181b6daf17311aefe4f7533939fbfa453de6eef899e5e7f8b5b2ab4716af40021f338141c7c4bc4476c8c4bbdd247fe3671e81b0694789c8ba135b764c79405a12794cafc0e552bade140080922b3a022f1cc280895235b2b02", 0x6c}, {&(0x7f00000007c0)="2f6d82533368eabb6ce695b5a9a363761ce293a9154977dc7de1bd51386725b476a7863bcb9b672a2d5275b78d3e341d9ae78a848083bdfc498d64a3118221f6d837952139b14845dc97790d5da09eab2ef8cc4667cc7e4d25d67f3865dfbaa780d2152aae7dc4aa16777dab0f3ebba2fe62f5497109fbe2", 0x78}, {&(0x7f0000001940)="c225df7a2ee7bc3de2c5b1bc3a46e2be0956b3b91a7dae6389e9fc49448d33d588c31f1e0dfc7b7dde622763cc133de2631dec9f8d1e9a896422eec3ce12ef6bbefa1a1d58662deb62398eec0ee92b9243b971a8b8ac5bbb25b4b1a116c431a9deeabca0aa888e491febf080e130590f4b233e083f3dd6222e6e25b81168b0ecfc105da4a5cdf4ec66874e35d8bd893729e193af31217e81f3cf89e8f72e36c4c2c87ad5c6336e41f326147637785a4b58746e9e59ea1c860a2d0960c9770f04da5a440cc2ca6c4577352ffa146e044634ba025b256e71cf85adc197d5475c31fdb0dbcd0ee7db163863325e2df6f2b4205b3d9d0a943dae373571f97da600f3c4f31b3267b60d4d2a4eac332e937d439856938d47a988aa76bea2839981a4c43fb18d23f75768922eb21cf2fea7b89cda22c5dd49c40f364906dec04945ce013a6953c5f1936fb453906c92114d4751c7a4ffce30b6f72aac05de3cd328efd907d64a3bd0577866c342d15ee2a1e5d1af1fb76c0c3c5f147f6f6f54c4613a1325275f4426f00797a4e448172c2217af3b7243f143647148cad477d7d4363d1593539505192622a0752be3a66542f37d314f1437a80e31a5b3dc411a0bb014e6ec8d2cd366eef0beae9ef8066e1fa2bce51a634d2e766b8e36445d389038c93048608f7a8a92f0c403ee977c03bbdc11daa01452e9f07a852c82db0fdb0fb344ed8780f214b11a797ad39d9b26cf1bb781022739cd4e4092ceae0ca97cbcf721551a7789657f3faae32707e85f31fbb122df503852ef23aefafb316a17d426f101b9dc6c5d1cda39e5c6cb88d6c1c279117924f6c35488b8255c8b4e07ac1e0a77a61f2eb5ecf3daf05ec11883b5e6f92fbb8f65b87fbb024fc08c16ec15766e95ce3ec56987ba3d76a7d33b6801439d3111c7ec62c1796bba92a816291b8ed5a9568f9b57714fd48159c185c0ffc981cf05fc4eb274e1485527cdfa6a97ecd167eef0bebf36575190a35d224a64c05f092b966b113c101e2cd3570a6f1f0c9fcd42be081b2363d115847a36f51970f311dc0fc19c0914e4938dd78eaa39809fda5476db8658326eab40f91287365a0cb85c25dadd303824a68433671335d4f512c50fea033994b8c7fda8211781022cdb57759df8d64fc557a4bfdc2fbb62f862feac5e202d065c122d5a5e600989474c3f57e7019bcb126f57bf482ed7b5876c2dab8cacd1a1b307d290bae185f0b7600a3367d73d96699893e15b9a287a25aabddf86bc2011eab46bb28abea5b151915aab888978be034455671c8136037e0784d7b87fd275cdfb2624b964716d5579a925bf514f9cfcd9609695adb0d8d1571940cca52adaa58a2786af9c50689bf11f5afcfb1f4bd7c1fff721848578e587686fbc5c18d4b40275eb832c86ce48111034026c8c6b2ea68c5c4e6d332f0446a7e128e7bfa98a1077333dd19db7b1efee8c1ee9b8fde54aed5b04c39b1c479ae42f8bc8cdefe7c39f8aa287b6f2b90f75133d616fc7cafd2535385ae1b14b8c6bd2002fe89b52b3ef20c2970ccd3d997751964f9bb332deed3c366e134e77cecd316b991b1546e50df2e6184a8f368a946678daed636f61147b0d77d9a645d1d89499e716e77a919f7b408c96da9d05faf53176e0ce0be5e5d6c95fe496b30a6ec709a464b2a4ca0fdd3edd44b015f72b7a9a0d088b9b2a87752c65827ce4fc99d7daab45298c5a9b79194a94aa078de77ef84b612d2a65163d73c513bffd6a30e4c383b55dc17e943b5f22c723aaf74f55d27dd5838e47aa8c159eba5b789fa0ac8b73bc60ed8768121d4d37b4fe0943f5949dc908ffb2dd719dd4be6f1e9fdfad4c5541098d89a710a66983fb2572305041c8d9eb1cbb1aa9f9c19355bffcce7e2f61c440dd4f775c2b52cad4c3289b2d6f0944cd2ee08b7ecbfc17aba7920f53d7ee81095f73d7ffc36cc82006d3f4a70f9cd140bbca1974061bec3fa2fc997f6ab26fa62b6d0a35928e7a05829c47758c7036db3f1e507babfcee8e3c9bb159165f7c3ce038404436d3e92ce3f26255c8a5707622fb8a580c1692cb1d42a3b8276baebc926dba4257b1553addef3000af1842afc2203bf61341c5ba55c56d6e3b195d4be29617a1fb197664505716b86e3c42b8a116e6b0bd9626452a2ece07d5a4f2a37eb46c63f0870c10d522c460fedb10b93a4d1efdc0ce25080c1849109abe786e9226398c0dee3c5a603efadba86ba119cb8d81c8942be269838ee2ecac599c8eee91a69dd57f90dc66d030d0ebbbccf2e76aacc5c95f82cf1b6a0ac4152fb3cedda513c85069b3c99a961e2e3d8feb67544ccedcc35f8910baeb037f70dc8bb8035b54bbfbbc0da54f1810d7e0d9793aa451a2438f7440c592ed6f48a5750b898f2e3f1313b7c92c27b4ed48a9b113af1bcd7476b24a2160fab023cdeee4bab75b2fee707056a6c956b2a91b9214cf1e1da7e8c7b931589a0cb683c9e7c5ffbc40619b7c82a91c62c050bb9fe41be86830c76ce001e0b0296ebe1f205dd2efe682b1f4258e01473b3c56a96914de2f8ecd062999c97303f10c6ef99e0c43049c13d5c6374855792d96f397425bfceca2d3a964ac5120ad3ac59023be5f5ec962985fc9e1eb5c4e8c60d2e4b46982dd2ad6981dbb3c90db097b077cbc44a71cb97a4f7cc913001380d85e5f9e61df37b281ba17b19d0ed8d2697a446b847e9978f1fb5c7446465bae82ea3b44484ac8a7731d044e7c8f12cda21e963f38a41a57891badce965a4903ee2d1bdf51e942396a1bac0a102a6371be3707c4362bbb7222f2cd38e37b6a2733ef58336ac024768174a3f48c5d9648c5ef3114cd02bbfa8b28dd7b563337da37542c0f391ea13fdb91dd4779713858fe72aad1ff6158c8a1710ca3b3ea0c931bd114e8c6cd4811e10d09013c21cd647ddf0ed1d5c39ac2fb8848804b1eade1e03c6ea8b64ef3c7bc4fcbda790d10cef30361d25bb947ce38eb4a5fc5c885fe92db4992faa2166a797e10867711a178bb2edaba595c255cdf42fc0d4348a0b02b40677b9754615706984d3c9839092098226ffa5dd94dcad9ba47259fd96839116355ecd72597640672c4f09f28afde3d65d6e89ee4d9b7391abbdacd0d6b789dd2ef81fb049702c136e1772d1829656df8f1310e05b81fdf7de3fd73c4f4fe08dd65445421920fbef1cf91976c8b2413376ec910f57927d1d6309fb09903e660d5c712ee473c5f4b2e6b6cf096f9c9c7a69cd18545a8316d1aa5f0ff439d600debba53831211739615e8bfedd44a07433f9f02cc8184a440d07d7a58e2ea231627fba1e6a4e2b769e45001b1a3b9b9976305566eb60a332858cc4e839570d01eaea346ee43217896a5cb4b4075f2f4bdb1fca664ea88991c6da49f87be4cdece6597ef9889eaf36208dbc5804639ad1e25df74bf9cf1742ccdd0959211679f133064cbf6497b21733d6698464d132eca3421b54ba08830c4cf53af4ceeb410b0221a406a7c0faf5056d6f76ba916e77f198f332918be11523d00f478419802c3cc96521046b83adaf62e800b4c975d784c48eac3ed9a830b1b6615d7f31b0e0f4f7cb713d89ded45d624ad2ec367a504f714ffb6099ec57bf9fc01c73999e7f6e385eebbc77f124c1a25b61b62b55b9715b0f07e3e843466644ecb3a57fc7ef69c7209c2f0f70619e4c409d7ee2bb013483bc9a3a19e6de0465fa635e97df00dc3733f7410f5e6c506a045bfbcee6e42c87fa2a7460cc2e9a2487f364d080ec5d199c274adfb6aa6266ee0c05523cabddd366db3324ce67caa8926e42d2819e98dcd96c2b263aec4f8a749a3a2df5aa37502bf843d17b40cbe9d2c61cb4ca60913c61c57610b01aed455cbc1ee67703f8bdc739c90d8eef14c6319400b594227e79526888a6fc5aa9f7a982d8161312433c7f32c5e1091f4211bce5a7485a8c0cd39200f5b52a0f6d00b053d87d15974e5371a9bec90d60700b0f2ba9a3b0478f37810044e0b60fb5c702a1af19e07dfe81494f374e75f903017997a0f60bd39fd590412114e432535f5e638c67c10b5656582ff3b18c9dd498475a3dad48b86da5a2911df00ea9c4bb34f3d2eb24597a995f8851d4263006bf69f885d1cfc5afc1c03b4b8b9a3d8d162355480544c4d64d46543f9523c3a24a1c7c2ab783af2b97e1c1195eab6caccac3bca9de6bf7defe33c4ccde68c0791472bdf1372fe0847bbf102a5b5ad59d80adda253bf0a5706ba2b06e0fb276e5373dd8a0dcc36d5d67a75fd86833af7cd12e46079b97867075b54c379ff9c927a350da99421756188febd3ca87f83ce5bba621c6ea250dde28384c0978b1670498058f4f298827b8e25a196aa9ce02dddf71b9bd081bb1e0727a228c3605d9dfb51e86bb2f362d4753a24daabaec255bfb023e5126cd80a82e71df2ac945a5e8b4acdd954d58c5f321c785b9d285d9f02f7b2380a80d8829bda1132b0a57be3984d7b89d715a8281d9750c0042f8e7e252112013db9b4110aec9a4239ec2007279d9c8d51ff4be8c06d97563bff6b21ff2d78b5ed5b8c822d8321bdb003cafd2a73e124478df483f02f584d42b3ab92a7d606e7ce81b5c788e962370f689f50a257402aab6284dcf1c82ed9024aa24edd333432add88a130b432da7496cffe580f4f6128893a205359d1e062728c4943ac4d8af89efc5ea644882fa535c8c426c871b2d6814ac63a3ffdae6cc983aebc51441475b63d70d5801c2316f998d2d90f63827f512a9a2b32eaf2d97890afd18947e6acde417959b696782ea3da2e3718d0b976bba2da644a2f778444d8b2b6a918855aaad4971964cb865ec74305e4ff4b14c740ef8ccfbabdf5f3e10a1d854c2676c28def5903db18bc4a863bfbe95be9c2162fbf2b26a0effab907c1255fd0dd6630a61b5b14d436dd26e05dcb5a574d0538a79e267dc579400be9b9f16b17ab00fd68c259d18e8b5758fa6b41789465f6404cadbb1e38b9e1bf1b24170b2d7acc17ff7afe9b0560c272b3f85c6efa4f5dfabe7ca44912855c292ff37cc91bcbe94f8481092e971eaececb42f55db65a3eb2288f70ca5554b28b001b6644c492a6fec726bb21dcf06bae2f4078d5fa39f4f149138ae88cdff49b5aa905b3f7557b2e06d7ab0fe07f1292c341b8432253d138c4246a09358a50f026e0cfe9ed3aa793abb970f29c9628e035bbed4abc3857bed2d29d79738e36301cca10d556b9082ce2f2cfff39dd3a3bf9bad9d293d2e1a5f8ab26bcb628c36736ab97f6fb9a4ae8d3a0674998700ac40ebda9da0cae72a3896c1e7cec69f0afbcca4deac58addad463fc7d42ee8a44a53a7f37632c0387257fb5423569a8b9a51d24da399b489d1db9dbe69e7ecdd80711b9680e4f65fdc0cae0705747ad4827976084f3685ae33b386af8c7b2e505c55dfc613f72e10622edcc00c241be2d9f9847d62ce24d716dd74f80f6078d5a914f5158bc8c73d5d1714e5d7b4ca809058442e5c093d54c289fa544f1b67548b6b48f114f3687df458373af4e1c0d1951f1c955490ad5c702522cabe81553f96b8eb07885ba00128ee61e3b0f03b02f273d4783e9ed0ae1dec43b81d95a6953fc8ff932048d92869578d2e02da2cb6b2cca98c631a8a7fbff771f4dd432e57774164d2b0c7b500f69bae14a16910045f9cb16442f282091d882085734872c8b7e2b2af4d35ea421e9cc2ff728214dc9544612d3facb992b651a10f2f4c02e501d65dcba99d5bdab99106b46f49e295e541a67b776e5b26f5e767c2e", 0x1000}, {&(0x7f0000000840)="1b4d034d06f9c4bce45d1d9f46505cb3a4a06573addbf082b892", 0x1a}, {&(0x7f0000002940)="e977b74dd354afd01d8c47523c4989330b95237e0cd2c00430684ef3cd815affb48873d4488a4b328ab6738134f2e3366c47780748ed8121cd0eca802856155c203809facd8047a5bbedf6f84ffa5fd101333e03fb22f3fdc1b029ed85fa993c0b15be92232fcaa626883d1f731772c34fd8a31ffd8deb39a75b3f73f30f29d1e71fccf89f484fcbec6fbb343d4517b3a67a41e7e68014ecffb6f48bca01ca0a14791f03a0b8a0c207b5a40dbf0159a09018ea2e581f39805f64e0735016cc2295fcc50d6402e33b1029e5f8b61885db5581f7a1bbd7e44c733d844ae59f8505cdf54a694a", 0xe5}], 0x7}}], 0x4, 0x4080) 30.392173349s ago: executing program 4 (id=6204): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001d00)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="4f0c271a280ea9ba2d94dc3588e23f2f4838671f3affed4ff056b31a725d507d8c067133491deb39a09e1c82e27dae6624915fd890fa7a4bef299a37e1ff37ef88f188b41f7827a02cdfa8ff20", 0x4d}, {&(0x7f0000000180)="8a9a8d625b7144815dda0e932c4d791a502c59c245f5f9bc6e3e244096a183254edf83009ed7ce43627873e4ca2e8479616f60525c7278ad918890dd3e359d3dc68fd59ea47fbc5a50d2addcd04aa34b85ffb60e234f5635e65c7df8dc31b8c1d420a43917b99c00155ef4a2c669af1d19ec84407132bead808d73df76e4a18e4c1aa67e3d1f4a73d2c4b1e21f8166c9f4be7e725f8faf5692d4164ab8f7d840d2b2eb9e3d9ab1a281ae7fcdc6701a48cd484811ff90b9", 0xb7}, {&(0x7f0000000240)="2d43ae38e4ddf495a8b81db510df37a3fedcb167edcf63e7eb16583f18dbcf0098974c6385aacbb4d7383c7f7fa6d80e3c6c4244de85c728cd39e275db0ea37b07852e8fe797dc3406f4bd1e240bef6a6717ff3170fd8dec0ac7624b3b9efe62b278ec09cfb57971e3fd36c93af0d44d26b2db515143dee1dc4a4d13dca014c3b9df9872e7fddb2604ab2444e01015f01afb1ec93de650300b93c4ff14455373ca063c7206d3ceead0b9d7a6e0b9d4bdccff09deb5ea865842b43dc1253d6ef6c6c6107f5dbfa71320b7ac1a9e704504c2a19367bfa14e2afedb72ba0277192f", 0xe0}, {&(0x7f0000000340)="d1245f", 0x3}, {&(0x7f0000000380)="d76d17df28fa36dd1711ca2f7e28a315", 0x10}, {&(0x7f00000003c0)="26cd24f6bd6ddd7e59422282489155cb632e8c2c10bf449947ecd8c42d0a4419f16c8133df7981d0a3716af44b84f4094441c5b281709f87e2284b95a3a821ef37438e674a5040d575953fa4a14427c2e104f008b5387962dd37a3044f2f0367d9529fcb9ff0f93f61b836f50b45c74f9a2bf4b27c25d53d875cbceaa52d", 0x7e}, {&(0x7f0000000440)="db8ef1", 0x3}, {&(0x7f0000000480)="89b775d53eb96d45c75fcccaaefb9bded0616fee63da23244be40cf0bef03b75b780c780dd936605088172206107f7", 0x2f}, {&(0x7f00000004c0)="57ff28ad16aed1624ef8f9fd63a18c0303ca0958e18c0b0588b6e2db90f594f9be2f07657d2a25c730f9d6e200d731a5863124c9a25a2e15534ac70b24c1a61da95e39353327c34cc585772fb949c98b039ecddc2d38a57e3c2b189883d68d9c722fa6c3bac41378e3bbff0b87a3e52793067e426a298f8dc3303315fffae89a9730e966ab14a360d715dcfc3a", 0x8d}], 0x9, &(0x7f0000000640)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xd0, 0x117, 0x2, 0xb7, "fc2d59bbe2ac6ea89732f25480d8a0865666b65c0ec4eb616e627370d02ffe81b46098179b592b457bf06173f2f74810339f897b6b1e9cc3fc4e249da37c95910b4fc980e044a460fe02308078f41420fa93bdb5c130f56f4482dcb50996f30baa1d715aa838db70d3ca14433c2f39aba96982bc799aa543cc599b2486f6f5a5e10c2ba878fc69127b3c94f0b377dc0adaea21fc055a6d50a4280a42869a1871afc6ac7a1225abddc16c713b342a23fbd2c7ace2c364e6"}], 0x10e8, 0x840}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001740)="7166c1ff5b18eb294e", 0x9}, {&(0x7f0000001780)="045091ab421dbe894cf2f3bc9cf3d162641a8c170f7a001fd94b50875f668c7ca0a18959d14c6d108622bd8de3c781e2d99c22d00ec0c7f374b30d43578bcf60a98105b3cffc561cb50d7d4a2a2e72f1175826d941585178d7b85fced431a4af5a27817a88d2ac627d5c3973fdf87584b5c462aa4bf444ecd3e576ef2f6226121019", 0x82}, {&(0x7f0000001840)="f49639df5ba405cec12f9c505e1660eb17d6bfde13ca754a0d5f09f91327cf850e3f15ecb23574ed17a44e49d595021522cc8cc27c2f4ef2e7eec0a6df70dcfe0cc04fceeb964e6af2eb582c7ce11dad0982b7cb018cfdae36239557289052ee4863a85c6aac98d03859d138a1550a4a81998627dcfc44289041", 0x7a}, {&(0x7f00000018c0)="0fa926b6c2a9782046c8", 0xa}, {&(0x7f0000001900)="c9f69a9571d58449947845b81181c3d7f654ba15a511e9f85a190dc3a159768418a315eb44e9c537842f1af8a1e4c8211ca978d3f7281967b838b222daedf8ef81374fda97cc6f4f3156a77e80dc85342e", 0x51}, {&(0x7f0000001980)="29687dfb199e8889ab3692b8ec887cd7b4fc133da1a3cdd5dd8ee249e45315bf2568183642d5359f202ee65e546bccfcf3ce", 0x32}, {&(0x7f00000019c0)="2b33dc7ca554189552ad6dda4b4d8638324ee3f974ccc2c0a211ae80fbca892f765fa52cbdfd4a43d7c541b49ed91f1ab05f20abe383f23d8927c0b5805f0ac37f4f648a628aec7e15e23d11131d4d0494800b23f0bae14006b1d0c82d5f1b2ebca0a7dcd27be2c354f41af0b08e4ef3224b62f339ce714e2697820c123831fe3e68d4bda560dd3beaf2a0f0de2529729fbbcb5329f2739ea2cfcc3a51efab65cb5541edc454494cc485d9502b79b2fe20edb69d539acd85468981455ee919c3d124db7172047bf4d2", 0xc9}, {&(0x7f0000001ac0)="b48bf89b234a641a74ade89949ddaa41a3699dd564ee0fe911c20f588d", 0x1d}, {&(0x7f0000001b00)="006a23c3c3615ab9a410c5228076e6cde52f0caaf5e379f6acfe4708d57180ccf0243f41d6a97d07ab17452fee7886ae339dc55ef0921db82b187b1ce7238b3752a72d078cb0d3a2253282ff08396f8ca9e2c5f3ff264f4f0e0a950357cf873aa91798e91f2354324c92263ddc2b422929e9dc2b185ef5563150c3db542e8056d76c7507e0f21494f376c92b99eaf730137c1a1070519a55da288e182e96748019d38800ead4b73eb0", 0xa9}, {&(0x7f0000001bc0)="b7cc104ef961ddf473", 0x9}], 0xa, &(0x7f0000001cc0)=[@op={0x18}], 0x18}], 0x2, 0x4008800) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001d80)="3174c3cd718e673bd0a1fe2071e0dc5be5de4ba43c535e83bc2b9cc3b7e22890696096dbb36e7956be6e37ee52debc023f81c52c6e9b546e0ee74de8445c18bd66ef9c7f7f57b0084d3b3f5696e854295a8ce04696c220a2ee2c2fb663e67a3d534be3050499bfd7884a8f49d0d4628e62846f17d615c75fd8a5df259b289f477e366d5e00d054c3555d35e0c41dfba0fa87642879ea49068d76af220f7afb586922f31065ec03ae7b20609ceb67851fd1923ebaa1f0da9e95093296ca7090fd7dd8cd661740ee4bf4e02396074f4f5f19c89c0fcdebf5dd246b476671757f4fa9336b8d8e7c97fb4f1a9ee3", 0xec}, {&(0x7f0000001e80)="54bf8c08e27a77080a40b220b823263e106bad9fe3bb54126246e12d1fd1fab8d5919151ffb8642f5819f6cb70c02cac2f85d851ea460b2098d4abd6018f0c231654beaae3a03847c9813821360e3f955956d94f4b72f81c99ccf80010ba69388a306a6a90514953cdbdd934db79e04d6f9e07757a90", 0x76}, {&(0x7f0000001f00)="4558ca041b52f6634f165a3c92166f68d8f26e530c312f1b33724992974cfb954508b18a1b7ea195f37c7e7534725020b3799d76b76d9a024b12cc9316f171f8392b3b0d13a198b383829e10f889773a01234d67289c3a284404143dc3db60674878", 0x62}, {&(0x7f0000001f80)="f1bfdf0b876ed0bee7c729f50c780db62ba382ababefdaebf92e1f060d47727ed06bd580f9f746e1bcfcedd3bb8fa6c447bc0b483655337b646e381dbdcc312875c093ea943bb81151c8927b19692d0aa6b1f685214a5ab784757d517ad3bfe4ece525b9d2601cb0792ddb1b8943ded008fa353c73e42cd0bac86b9b4639fb122c717486eb6e0bdbc82cc495ed8b91f4d2556afef438", 0x96}], 0x4}, 0x20040000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000002100)={0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000002140)={0x0, 0x1}, &(0x7f0000002180)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000021c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000002200)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000002240)={r7, 0x40}, 0x8) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r8, &(0x7f0000002280)="694e35383d1679e66fa012aa1c872aec3d2ab1cb9e0910d368c535ffbc95b53057ed7928d5f8740a5d32e56b780d34587b0d4a668e9d86f1f72456030341505397a2b9723d6cb8fa52f8009dbd729fb0707c5905cabf22301746ad6199e898e04535643b8f592460ee9847757cf5b96c9885475dbac144565fa3d8c5091ebcfe5c21503cdd2126cf2960ed2b72a6c20c5d8baca7e6fb4ff3f0404e119e", 0x9d, 0x24008080, 0x0, 0x0) r9 = accept4$ax25(0xffffffffffffffff, &(0x7f0000002340)={{0x3, @rose}, [@rose, @netrom, @default, @bcast, @bcast, @default, @null, @rose]}, &(0x7f00000023c0)=0x48, 0xc0800) accept4$ax25(r9, &(0x7f0000002400)={{0x3, @bcast}, [@null, @rose, @default, @null, @remote, @rose, @default, @null]}, &(0x7f0000002480)=0x48, 0x80000) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f00000024c0)) getpeername(r8, &(0x7f0000002500)=@x25={0x9, @remote}, &(0x7f0000002580)=0x80) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f00000025c0)) socket$nl_route(0x10, 0x3, 0x0) r11 = accept$inet(0xffffffffffffffff, &(0x7f0000002600)={0x2, 0x0, @dev}, &(0x7f0000002640)=0x10) setsockopt$inet_mreqn(r11, 0x0, 0x7, &(0x7f0000002680)={@multicast2, @multicast1, r1}, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000026c0)={0xfffffffa}, 0x8) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002700)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x8, '\x00', r1, r6, 0x2, 0x1, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000029c0)={'syztnl2\x00', &(0x7f0000002940)={'ip6_vti0\x00', r1, 0x29, 0x1, 0x4, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x10, 0x1, 0x5, 0x5}}) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002a00), 0x4) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000002a40)={0xffffffffffffffff}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000002ac0)=@bloom_filter={0x1e, 0x3, 0x544, 0x0, 0x10, 0x1, 0xba, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x10, &(0x7f0000002780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6c3}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002800)='GPL\x00', 0x6, 0xd0, &(0x7f0000002840)=""/208, 0x40f00, 0x1, '\x00', r13, @fallback=0x2f, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000002bc0)=[r15, r16, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x4, 0x5, 0x8, 0xa}, {0x0, 0x5, 0x5, 0xb}, {0x2, 0x5, 0xd, 0x9}, {0x3, 0x2, 0x7, 0x3}, {0x3, 0x4, 0x10, 0xc}], 0x10, 0x100}, 0x94) 30.367175547s ago: executing program 3 (id=6205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 30.17584896s ago: executing program 4 (id=6206): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0xa, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x8}}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x0, 0x5f, 0x0, 0x5f, 0x0, 0x5f, 0x30]}}, &(0x7f0000000900)=""/4096, 0x72, 0x1000, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x7691, 0x2, 0x2, 0x5c0, 0x1, 0x80000001, '\x00', r3, r4, 0x1, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000380)="d2ffdd934517f3e1450c28e086ddb867599bf39644fec5701676a7d198ba478e4399cc3e133a3af14696ebb515e16c8197b6c443e5a0", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0xeb, @mcast2, 0xfffffffb}], 0x1c) 29.544473888s ago: executing program 4 (id=6211): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r3, &(0x7f0000000440)="7669b39810", 0xfffffffffffffe57, 0x8010, 0x0, 0x0) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x1, 0x22, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/47, 0x2f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)="dd5722a4ada647acf96f7778f3ab8a7dd0ecdc630c69655dff751cbf8e247fdab0058811f721758f4e5671f2093b80", 0x2f}, {&(0x7f00000003c0)="107b5c9b209d083fd0dee19bf2ae62f83fad9168be3cb66dcb11fa2dcac0d3120e5e4a3e38", 0x25}, {&(0x7f0000000500)="15daa9013e28e13b10413e820291e0290267f7ef53a02da4a4630ee72b9e492821e976c377377f00000000000000d91a74c343b40966bc10984104c26417e902971dfad687fb74f44ad340a0d1604e57203142d774b116af1f1666d42395d7b63ad30f7dcc7fa8c84f482b11af2c7a6ad9ee0038c30db222c2ccc50656a6ed2fa3b7383752c67c6226d923895a1595c5d699a58e39e6fb52911efc68ee36a6ba421d55209845073fa57078e7c1150ce13257fee1c297", 0xb6}], 0x4, 0x0, 0x0, 0x200400c4}}, {{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="5b30ecdb78912c5f63943ae01639944f009d718b35dc91434ac170dae8f725869b66b6", 0x23}, {&(0x7f0000000240)="c82a7287c5d17b22540e7fb0fd08a97177b68e1f0a5bea2a67050e2471069e3f56205aa3235a93e194cab3bc9f5d226cf7436386453708e05aa2fb4ac9e327b0f8a8980df9d961d7afe222f42d46fcff8b563da92c35ce2d936b62a7643d24e622cbd0cb34bc7c646b", 0x69}, {&(0x7f00000006c0)="da5ce166d25dac1f8b555ed675c35dfdd16f4c50f1187c81d3a858e4fe72e164f110e6be05c3af3eeec1ec42692da3eac99af7569ac9c7f29284be1a48298e59433b95805be6260d0632f3853be91626e96dc12a5aac89c7f08d7e0b151a88f40e03f0a765144f11a2200d", 0x6b}, {&(0x7f0000000800)="cbb8371b27d923d576288b4e0504dccf8b8c82da89c28886f02d4ee2c16e792dea07a72dcd74669ca36aa01f77061f91143da33b01cae15a954803bf90447e6f1a575e468a5960364287dcb62dc4c9bfc5038b2c77d682b706dacbd6cccb46c27a4877cdf19374e06faecbdeba86105a8fe444780c03dc24d00ab4baa12c67f77ced2ce7b09fe73cbb30135a02398298d019976041fccf81987882a27d80f1921a9a", 0xa2}], 0x4, 0x0, 0x0, 0x40000}}], 0x2, 0xc000) 29.343248095s ago: executing program 3 (id=6214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbff, {0xa, 0x10, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x20040044) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x40480c0) 29.342581464s ago: executing program 1 (id=6215): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'rose0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) 29.268549921s ago: executing program 3 (id=6216): unshare(0x600) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000008000000811175000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 29.089213817s ago: executing program 2 (id=6218): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x0, 0x6, {{0x8, 0x4, 0x3, 0x27, 0x20, 0x67, 0x0, 0x81, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xcb, 0x3, 0x5, [{@multicast1, 0x8001}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x6, 0xb3a8, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x6, 0x80}}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x60014}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xa2, &(0x7f00000002c0)=""/162, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xd, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x0, 0x3, 0x2, 0x4}, {0x4, 0x5, 0x6, 0x2}], 0x10, 0xffff}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r5, 0x25, 0x14, @void}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800470400300000000000059078ac1414ff0a010100860800000002010200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00ff0097d000000000f0ff00"], 0x0) 29.069703315s ago: executing program 3 (id=6219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="00214717a707000000001b8d74030600710a5e31163c48", 0x17}], 0x1, 0x7ce, 0x1) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 28.883966987s ago: executing program 0 (id=6220): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0100001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 28.882864867s ago: executing program 1 (id=6221): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) socket(0x2b, 0x3, 0xec1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket(0xa, 0x3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 28.789684276s ago: executing program 0 (id=6222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)=ANY=[@ANYBLOB="4800000040000100fcff070004000000010000000800cb8004000880200001801c00108018000b8014000100fc0000000000000000000000000000000c0002"], 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB="2e00000010"], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvmsg(r1, &(0x7f0000000840)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000440)=""/134}, {&(0x7f0000000700)=""/218}]}, 0x10122) shutdown(r1, 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) 28.756455783s ago: executing program 2 (id=6223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r4}) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x64, r1, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0x2a}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x448c9}, 0x4004810) 28.539812986s ago: executing program 4 (id=6224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x639, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd902, 0xe280}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xffffff7f00000000}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x639, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd902, 0xe280}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xffffff7f00000000}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x24000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) 28.534004724s ago: executing program 2 (id=6225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0xbc356fb, 0x3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @remote}, &(0x7f0000000340)=0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0xff53, 0x1, ','}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x6}, 0x8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x3, [@datasec={0x5, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x10001, 0x78}], "8f"}]}, {0x0, [0x5f]}}, &(0x7f00000003c0)=""/165, 0x37, 0xa5, 0x1, 0x6678}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x6, 0x0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0xe, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, [@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}]}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x2d, &(0x7f0000000640)=""/45, 0x41000, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x6, 0x8000, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)="616f9fa04ac500025552d86563ddcdd6badb59ed6764bd47d78da8c3f1cc", &(0x7f0000000680), 0x1006, r11}, 0x38) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r12, &(0x7f00000008c0)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r11, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000980)={0x7, [0x9, 0x3, 0x6, 0x50c6, 0x2, 0xbab, 0x6]}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xcf, &(0x7f0000000200)=""/207, 0x40f00, 0x19, '\x00', r3, @fallback=0x11, r8, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xe, 0x80000001}, 0x10, r9, r10, 0x2, &(0x7f0000000780)=[r11], &(0x7f00000007c0)=[{0x5, 0x2, 0x2, 0x8}, {0x3, 0x2, 0x8, 0x2}], 0x10, 0x7f}, 0x94) 28.471911557s ago: executing program 1 (id=6226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0x8, 0xc}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 28.459114676s ago: executing program 3 (id=6227): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x12}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x42}}], 0x60}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="7af7f2182e96", @private, @empty}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 0xd, 0x7, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3ff, 0x6, 0x40, 0x6, 0x0, 0x5, 'team_slave_1\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x6}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1a0010000400000000000080ff0f000001000200", @ANYRES32=r4, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000800)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x0, 0xa, 0x4, 0xffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[r4, r4, r4, r4, r4, r6, r4, r4], &(0x7f0000000c00)=[{0x4, 0x1, 0x2, 0xa}], 0x10, 0xa}, 0x94) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000680)) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000046}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) 28.40447878s ago: executing program 0 (id=6228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000691134000000000085100000020000008502008000000000950048000000000095e2a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRES32, @ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) (async) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, 0x0) 28.373036998s ago: executing program 4 (id=6229): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) close(r2) recvmmsg(r5, 0x0, 0x0, 0x10021, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) accept$packet(r2, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) sendmsg$xdp(r2, 0x0, 0x8000) sendmmsg$sock(r1, 0x0, 0x0, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) 28.272664213s ago: executing program 2 (id=6230): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x5, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4100, 0x1004}], 0x1}}], 0x47, 0x40012282, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) socketpair(0x10, 0x806, 0x400006, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x4, 0xb007}, 0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, '\x00', "2dc9acb4d905ee9efd68f5e35ffa7775", "cd450e52", "d97b59e7db202d5e"}, 0x28) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0xbce, 0xec2a6b1, 0xfffffff8, 0x6, 0x9, 0x5, 0x8000}, 0x1c) writev(r6, &(0x7f0000000380)=[{&(0x7f00000001c0)="d50035053eabaa036f5c769453", 0xd}], 0x1) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000140)=""/93, 0x5d}], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="c000"], 0x0) 28.189352872s ago: executing program 1 (id=6231): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x200000d}, [@generic={0x69, 0x1, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000100)={0x2, &(0x7f00000006c0)=[{@none}, {}]}) getsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0xa, 0x400) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) recvmmsg(r3, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20201}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r7, &(0x7f0000000300)="174f5b0e2dcfc001c1cbb11a2c", 0xd, 0x4000010, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x9, 0xb, 0x6, 0x5508, 0xc33a, 0x3, 0xd, 'syz0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="181e2b416b0c95cecf0000000000000818110000", @ANYRES32, @ANYRESHEX=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.128094659s ago: executing program 0 (id=6232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0100001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 27.971743021s ago: executing program 0 (id=6233): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x80000000) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ppoll(&(0x7f0000001880)=[{r0, 0x81}], 0x1, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a) 27.360024003s ago: executing program 3 (id=6234): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r0 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r2, 0xd371f000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r1, 0x12574000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x54, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1d}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x9}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x18}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x25}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x48004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xff000000}]}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x5, 0x0) listen(r6, 0x100) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x18, 0x4845}, 0x240488d0) getpeername$qrtr(r6, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 27.189028723s ago: executing program 2 (id=6235): syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002bbbbbbf0832a58221a55bbbbbb0800450000000000000200119078000000000000000000003721da1b44c256391b2e5dc298a69a973f809e59a7d79c1242800d52cfd0ac390f8943c85bba7b27f4dad62ff6937692d8caaeb85dc71deb7f951ba55d1628fae0befd7284a15bc4bea8eea23ed98f2c2eeb663a3d15a6448e447241848f03a0c0d4f18b45"], 0x0) 27.096622089s ago: executing program 1 (id=6236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) (async, rerun: 32) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x14, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x64, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x40, 0x80, 0x7, 0x0, 0x0, 0x0, 0xa0}}, [@sec_ctx={0xc, 0x8, {0x8}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x64}}, 0x4004040) 26.813334028s ago: executing program 0 (id=6237): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048045}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000080)='/dev/net/tun\x00', 0x262100, &(0x7f00000000c0)={@_ha_fsid={[0x3]}, {0x101, 0xd, 0x1, 0x401}}, 0x1, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000200)) 26.801472878s ago: executing program 2 (id=6238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c00)={0x38, r1, 0xf2ba78998b52ca37, 0x70bd2c, 0x25dfdbfa, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x20000041) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x20, 0x2f, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x18) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x1c}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r6, r7}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f00000003c0)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfffffffffffffd3f}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x5c}}, 0x0) 26.693208686s ago: executing program 4 (id=6239): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2, 0x80805, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x7}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008440) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3ff, 0x2, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x4, 0x7, 0x0, 0x229c, 0x1, 0x800000000000000, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 0s ago: executing program 32 (id=6236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) (async, rerun: 32) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x14, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8884) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x64, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x40, 0x80, 0x7, 0x0, 0x0, 0x0, 0xa0}}, [@sec_ctx={0xc, 0x8, {0x8}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x64}}, 0x4004040) kernel console output (not intermixed with test programs): mode [ 762.574759][T27331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5297'. [ 762.973527][T27350] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5301'. [ 762.993777][T27347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5300'. [ 763.557886][T27383] tipc: Started in network mode [ 763.562972][T27383] tipc: Node identity 3639c0a8130c, cluster identity 4711 [ 763.571121][T27383] tipc: Enabled bearer , priority 10 [ 763.590363][T27379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5309'. [ 763.905209][T27402] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.5315'. [ 764.374017][T27424] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.5319'. [ 764.611323][ T8658] tipc: Node number set to 624279720 [ 764.691081][T27444] __nla_validate_parse: 1 callbacks suppressed [ 764.691104][T27444] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5324'. [ 764.827836][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 764.835898][ C0] lec:lec_tx_timeout: lec0 [ 764.841046][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 764.878533][T27457] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5328'. [ 765.780296][T27512] xt_TCPMSS: Only works on TCP SYN packets [ 766.845010][T27586] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5359'. [ 766.944585][T27592] netlink: 12910 bytes leftover after parsing attributes in process `syz.3.5359'. [ 767.376251][T27610] syzkaller0: entered promiscuous mode [ 767.382655][T27610] syzkaller0: entered allmulticast mode [ 767.662716][T27621] bond7: option tlb_dynamic_lb: invalid value (3) [ 767.699807][T27621] bond7 (unregistering): Released all slaves [ 768.376746][T27665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5377'. [ 768.465224][T27673] netlink: get zone limit has 4 unknown bytes [ 768.684436][T27678] netlink: 'syz.4.5380': attribute type 4 has an invalid length. [ 768.693720][T27681] netlink: 'syz.4.5380': attribute type 4 has an invalid length. [ 768.706103][T27677] netlink: 'syz.4.5380': attribute type 4 has an invalid length. [ 768.717395][T27680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5381'. [ 768.770038][T27680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5381'. [ 768.965306][T27696] net veth1_virt_wifi : renamed from virt_wifi0 [ 769.306386][T27711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 769.329809][T27713] netlink: 'syz.3.5388': attribute type 8 has an invalid length. [ 769.404506][T27717] netlink: 'syz.1.5386': attribute type 2 has an invalid length. [ 769.442109][T27719] netlink: 'syz.0.5389': attribute type 10 has an invalid length. [ 769.473567][T27719] vxcan1: entered promiscuous mode [ 769.481451][T27719] vxcan1: entered allmulticast mode [ 769.486958][T27719] team0: Device vxcan1 is of different type [ 769.515887][T27723] sctp: [Deprecated]: syz.1.5386 (pid 27723) Use of int in max_burst socket option deprecated. [ 769.515887][T27723] Use struct sctp_assoc_value instead [ 769.544797][T27723] netlink: 'syz.1.5386': attribute type 10 has an invalid length. [ 769.561625][T27723] team0: Cannot enslave team device to itself [ 769.847968][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 769.856053][ C0] lec:lec_tx_timeout: lec0 [ 769.860956][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 769.914595][T27743] xt_HMARK: spi-set and port-set can't be combined [ 769.966034][T27743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5394'. [ 770.128656][T27754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5397'. [ 770.163904][T27754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 770.186801][T27754] macsec2: entered promiscuous mode [ 770.193049][T27754] bond4: entered promiscuous mode [ 770.323769][T27762] syz_tun: entered allmulticast mode [ 770.332745][T27762] team0: Port device syz_tun added [ 770.489543][T27772] syz_tun: left allmulticast mode [ 770.532099][T27772] team0: Port device syz_tun removed [ 770.559291][T27772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 770.637705][T27772] TCP: TCP_TX_DELAY enabled [ 770.662225][T27769] lo speed is unknown, defaulting to 1000 [ 770.670958][T27769] lo speed is unknown, defaulting to 1000 [ 771.104809][T27793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5408'. [ 771.197266][T27793] veth7: entered promiscuous mode [ 772.628083][T27823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5413'. [ 772.829266][T27831] openvswitch: netlink: IPv4 tun info is not correct [ 773.300670][T27847] netlink: 34 bytes leftover after parsing attributes in process `syz.3.5416'. [ 773.345550][T27847] netlink: 34 bytes leftover after parsing attributes in process `syz.3.5416'. [ 773.541354][ T51] Bluetooth: hci1: link tx timeout [ 773.548247][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 773.939646][T27869] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5420'. [ 774.041283][T27869] vlan2: entered allmulticast mode [ 774.046474][T27869] erspan0: entered allmulticast mode [ 774.086619][T27877] x_tables: unsorted underflow at hook 3 [ 774.849601][T27916] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 774.878330][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 774.886547][ C0] lec:lec_tx_timeout: lec0 [ 774.891653][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 775.149383][T27934] netlink: 'syz.2.5438': attribute type 7 has an invalid length. [ 775.157474][T27932] veth0_virt_wifi: entered promiscuous mode [ 775.184427][T27932] veth0_virt_wifi: left promiscuous mode [ 775.195371][T27939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.332630][T27944] netlink: 'syz.2.5440': attribute type 5 has an invalid length. [ 775.609709][T27957] block nbd3: server does not support multiple connections per device. [ 775.636036][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 775.644752][T27957] block nbd3: shutting down sockets [ 775.911611][T27977] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 776.209352][T27999] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5452'. [ 776.236689][T27999] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5452'. [ 778.773342][T27980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.997238][T28037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5463'. [ 779.023261][T28037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5463'. [ 779.047794][T28035] ip6tnl2: entered promiscuous mode [ 779.053222][T28035] ip6tnl2: entered allmulticast mode [ 779.253667][T28047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5466'. [ 779.303247][T28052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5466'. [ 779.314652][T28053] openvswitch: netlink: IP tunnel dst address not specified [ 779.344088][T28047] macvlan1: left allmulticast mode [ 779.365582][T28047] veth1_vlan: left allmulticast mode [ 779.464791][T28071] FAULT_INJECTION: forcing a failure. [ 779.464791][T28071] name failslab, interval 1, probability 0, space 0, times 0 [ 779.478152][T28071] CPU: 1 UID: 0 PID: 28071 Comm: syz.3.5470 Not tainted syzkaller #0 PREEMPT(full) [ 779.478175][T28071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.478186][T28071] Call Trace: [ 779.478193][T28071] [ 779.478200][T28071] dump_stack_lvl+0xe8/0x150 [ 779.478229][T28071] should_fail_ex+0x412/0x560 [ 779.478252][T28071] should_failslab+0xa8/0x100 [ 779.478273][T28071] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 779.478297][T28071] ? netlink_realloc_groups+0x126/0x350 [ 779.478320][T28071] ? netlink_realloc_groups+0x126/0x350 [ 779.478341][T28071] krealloc_node_align_noprof+0x1ae/0x390 [ 779.478362][T28071] netlink_realloc_groups+0x126/0x350 [ 779.478382][T28071] ? aa_sk_perm+0x82d/0x960 [ 779.478402][T28071] netlink_bind+0x2bd/0xd80 [ 779.478425][T28071] ? __pfx_netlink_bind+0x10/0x10 [ 779.478445][T28071] ? apparmor_socket_bind+0xff/0x1d0 [ 779.478463][T28071] ? bpf_lsm_socket_bind+0x9/0x20 [ 779.478482][T28071] __sys_bind+0x2e3/0x410 [ 779.478503][T28071] ? __pfx___sys_bind+0x10/0x10 [ 779.478530][T28071] ? __pfx_ksys_write+0x10/0x10 [ 779.478554][T28071] __x64_sys_bind+0x7a/0x90 [ 779.478574][T28071] do_syscall_64+0x14d/0xf80 [ 779.478597][T28071] ? trace_irq_disable+0x3b/0x150 [ 779.478620][T28071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.478637][T28071] ? clear_bhb_loop+0x40/0x90 [ 779.478657][T28071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.478673][T28071] RIP: 0033:0x7f78a819c629 [ 779.478689][T28071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.478703][T28071] RSP: 002b:00007f78a8f9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 779.478721][T28071] RAX: ffffffffffffffda RBX: 00007f78a8415fa0 RCX: 00007f78a819c629 [ 779.478733][T28071] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000004 [ 779.478743][T28071] RBP: 00007f78a8f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 779.478753][T28071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.478762][T28071] R13: 00007f78a8416038 R14: 00007f78a8415fa0 R15: 00007fff33f78fa8 [ 779.478787][T28071] [ 779.908395][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 779.916460][ C0] lec:lec_tx_timeout: lec0 [ 779.922058][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 779.947495][T28079] lo speed is unknown, defaulting to 1000 [ 779.996965][T28090] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5473'. [ 780.007938][T28090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5473'. [ 780.057616][T28079] lo speed is unknown, defaulting to 1000 [ 780.292209][T28106] openvswitch: netlink: IP tunnel dst address not specified [ 780.524030][T28120] FAULT_INJECTION: forcing a failure. [ 780.524030][T28120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.545827][T28122] veth1_to_bond: mtu less than device minimum [ 780.552616][T28121] veth1_to_bond: mtu less than device minimum [ 780.566039][T28120] CPU: 0 UID: 0 PID: 28120 Comm: syz.3.5484 Not tainted syzkaller #0 PREEMPT(full) [ 780.566067][T28120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 780.566086][T28120] Call Trace: [ 780.566094][T28120] [ 780.566103][T28120] dump_stack_lvl+0xe8/0x150 [ 780.566137][T28120] should_fail_ex+0x412/0x560 [ 780.566166][T28120] _copy_to_user+0x31/0xb0 [ 780.566197][T28120] simple_read_from_buffer+0xe1/0x170 [ 780.566232][T28120] proc_fail_nth_read+0x1bb/0x230 [ 780.566262][T28120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.566293][T28120] ? rw_verify_area+0x2a6/0x4d0 [ 780.566314][T28120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.566342][T28120] vfs_read+0x20c/0xa70 [ 780.566370][T28120] ? __pfx_vfs_read+0x10/0x10 [ 780.566391][T28120] ? bpf_lsm_socket_bind+0x9/0x20 [ 780.566417][T28120] ? __sys_bind+0x306/0x410 [ 780.566444][T28120] ? __pfx___sys_bind+0x10/0x10 [ 780.566475][T28120] ksys_read+0x150/0x270 [ 780.566505][T28120] ? __pfx_ksys_read+0x10/0x10 [ 780.566538][T28120] do_syscall_64+0x14d/0xf80 [ 780.566585][T28120] ? trace_irq_disable+0x3b/0x150 [ 780.566615][T28120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.566637][T28120] ? clear_bhb_loop+0x40/0x90 [ 780.566663][T28120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.566685][T28120] RIP: 0033:0x7f78a815cece [ 780.566704][T28120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 780.566723][T28120] RSP: 002b:00007f78a8f9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 780.566746][T28120] RAX: ffffffffffffffda RBX: 00007f78a8f9e6c0 RCX: 00007f78a815cece [ 780.566761][T28120] RDX: 000000000000000f RSI: 00007f78a8f9e0a0 RDI: 0000000000000005 [ 780.566775][T28120] RBP: 00007f78a8f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 780.566788][T28120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.566800][T28120] R13: 00007f78a8416038 R14: 00007f78a8415fa0 R15: 00007fff33f78fa8 [ 780.566834][T28120] [ 781.921420][T28171] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 782.169807][T28182] lo speed is unknown, defaulting to 1000 [ 782.221394][T28186] : entered promiscuous mode [ 782.226348][T28182] lo speed is unknown, defaulting to 1000 [ 783.269286][ T8597] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.278429][ T8597] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.310223][ T8597] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.353237][ T8597] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.823357][T28259] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5513'. [ 783.910059][T28263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5515'. [ 783.922020][T28264] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.5516'. [ 783.952820][T28263] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5515'. [ 783.971293][T28263] vlan1: entered promiscuous mode [ 783.976385][T28263] geneve1: entered promiscuous mode [ 784.055393][T28267] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5517'. [ 784.084800][T28267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 784.103795][T28271] netlink: 'syz.0.5518': attribute type 6 has an invalid length. [ 784.354480][T28282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5519'. [ 784.622293][T28304] IPv6: Can't replace route, no match found [ 784.641480][T28307] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 784.756432][T28309] lo speed is unknown, defaulting to 1000 [ 784.774562][T28309] lo speed is unknown, defaulting to 1000 [ 784.866553][T28318] netlink: 'syz.2.5528': attribute type 1 has an invalid length. [ 784.874721][T28318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.904063][T28318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5528'. [ 784.938738][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 784.946850][ C0] lec:lec_tx_timeout: lec0 [ 784.951619][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 785.217639][T28329] syz_tun: entered allmulticast mode [ 785.395212][T28340] Cannot find set identified by id 3 to match [ 785.556647][T28327] syz_tun: left allmulticast mode [ 785.900756][T28369] netlink: 'syz.1.5541': attribute type 10 has an invalid length. [ 785.967781][T28369] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5541'. [ 786.216422][T28358] delete_channel: no stack [ 786.259061][T28383] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 786.320093][T28383] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5543'. [ 786.376623][T28383] syzkaller0: entered promiscuous mode [ 786.383612][T28383] syzkaller0: entered allmulticast mode [ 786.474846][T28383] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5543'. [ 786.862318][T28417] syzkaller0: entered promiscuous mode [ 786.871503][T28417] syzkaller0: entered allmulticast mode [ 787.186078][T28436] hsr_slave_0: left promiscuous mode [ 787.203621][T28436] hsr_slave_1: left promiscuous mode [ 787.223945][T28441] netlink: 'syz.3.5555': attribute type 4 has an invalid length. [ 787.338810][T28442] 8021q: adding VLAN 0 to HW filter on device bond6 [ 787.360809][T28442] bond0: (slave bond6): Enslaving as an active interface with a down link [ 787.704043][T28468] netlink: 'syz.1.5562': attribute type 1 has an invalid length. [ 787.753276][T28468] netlink: 'syz.1.5562': attribute type 61 has an invalid length. [ 788.162442][T28502] bond7: option lp_interval: invalid value (0) [ 788.169197][T28502] bond7: option lp_interval: allowed values 1 - 2147483647 [ 788.186813][T28502] bond7 (unregistering): Released all slaves [ 788.786985][T28538] netlink: zone id is out of range [ 788.810675][T28538] netlink: zone id is out of range [ 788.834966][T28538] netlink: zone id is out of range [ 788.844844][T28538] netlink: zone id is out of range [ 788.852851][T28543] netlink: 'syz.2.5578': attribute type 1 has an invalid length. [ 788.875588][T28538] netlink: zone id is out of range [ 788.897910][T28538] netlink: zone id is out of range [ 788.922504][T28538] netlink: zone id is out of range [ 788.951012][T28543] bond5: entered promiscuous mode [ 788.956837][T28543] 8021q: adding VLAN 0 to HW filter on device bond5 [ 788.974608][T28550] __nla_validate_parse: 7 callbacks suppressed [ 788.974623][T28550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5579'. [ 789.044044][T28543] netlink: 428 bytes leftover after parsing attributes in process `syz.2.5578'. [ 789.053633][T28543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5578'. [ 789.075028][T28538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5579'. [ 789.204934][T28556] netlink: 'syz.0.5581': attribute type 1 has an invalid length. [ 789.295732][T28556] 8021q: adding VLAN 0 to HW filter on device bond7 [ 789.410905][T28564] x_tables: unsorted underflow at hook 4 [ 789.918767][T28592] lo speed is unknown, defaulting to 1000 [ 789.960062][T28592] lo speed is unknown, defaulting to 1000 [ 789.968321][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 789.976391][ C0] lec:lec_tx_timeout: lec0 [ 789.981092][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 790.329274][T28613] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5595'. [ 790.540345][T28622] netlink: 'syz.4.5598': attribute type 3 has an invalid length. [ 790.602592][T28623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5597'. [ 790.612813][T28620] lo speed is unknown, defaulting to 1000 [ 790.696058][T28625] netlink: 'syz.0.5599': attribute type 9 has an invalid length. [ 790.789679][T28620] lo speed is unknown, defaulting to 1000 [ 790.795865][T28615] lo speed is unknown, defaulting to 1000 [ 792.942903][T28615] lo speed is unknown, defaulting to 1000 [ 792.989778][T28657] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 793.203098][T28671] netlink: zone id is out of range [ 793.209776][T28671] netlink: zone id is out of range [ 793.224852][T28671] netlink: zone id is out of range [ 793.304883][T28675] netlink: 'syz.0.5610': attribute type 1 has an invalid length. [ 793.434692][T28675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5610'. [ 793.489966][T28679] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 793.544584][T28685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5610'. [ 793.573440][T28679] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 793.689758][T28675] bond8: (slave bridge6): Enslaving as an active interface with a down link [ 793.700614][T28685] 8021q: adding VLAN 0 to HW filter on device bond8 [ 793.995705][T28704] xt_hashlimit: size too large, truncated to 1048576 [ 794.057958][T28708] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5617'. [ 794.343943][T28722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5620'. [ 794.572605][T28731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5623'. [ 794.745232][T28741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5625'. [ 794.838346][T28741] bond7: option primary_reselect: invalid value (4) [ 794.942604][T28741] bond7 (unregistering): Released all slaves [ 794.987811][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 794.995940][ C0] lec:lec_tx_timeout: lec0 [ 795.000834][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 795.527671][T28768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5631'. [ 795.768513][T28781] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5635'. [ 795.805227][T28781] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5635'. [ 796.014999][T28796] netlink: 'syz.0.5638': attribute type 4 has an invalid length. [ 796.046268][T28798] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5639'. [ 796.095238][T28796] netlink: 'syz.0.5638': attribute type 4 has an invalid length. [ 796.096270][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5639'. [ 796.157946][T28798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5639'. [ 796.224822][T28796] batman_adv: batadv0: Interface deactivated: gretap1 [ 797.033916][T28848] tipc: Enabled bearer , priority 0 [ 797.049915][T28848] syzkaller0: entered promiscuous mode [ 797.066043][T28848] syzkaller0: entered allmulticast mode [ 797.120843][T28852] tipc: Resetting bearer [ 797.167195][T28850] lo speed is unknown, defaulting to 1000 [ 797.196610][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 797.208614][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 797.216397][T28845] tipc: Resetting bearer [ 797.223952][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 797.234222][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 797.239369][T28858] net_ratelimit: 140 callbacks suppressed [ 797.239436][T28858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.269745][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 797.285309][T28845] tipc: Disabling bearer [ 797.334369][T28850] lo speed is unknown, defaulting to 1000 [ 797.438992][T28855] lo speed is unknown, defaulting to 1000 [ 797.578884][T28866] syzkaller1: entered promiscuous mode [ 797.593272][T28866] syzkaller1: entered allmulticast mode [ 797.620010][T28869] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 797.877823][T28855] lo speed is unknown, defaulting to 1000 [ 797.995448][T24836] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.018511][T24836] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 34240 - 0 [ 798.097423][T24836] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.110078][T24836] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 34240 - 0 [ 798.235973][T24836] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.268254][T24836] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 34240 - 0 [ 798.429180][T24836] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.440260][T24836] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 34240 - 0 [ 799.193891][T28925] FAULT_INJECTION: forcing a failure. [ 799.193891][T28925] name failslab, interval 1, probability 0, space 0, times 0 [ 799.206310][T28923] netlink: 'syz.2.5671': attribute type 2 has an invalid length. [ 799.209923][T28925] CPU: 0 UID: 0 PID: 28925 Comm: syz.4.5672 Not tainted syzkaller #0 PREEMPT(full) [ 799.210007][T28925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.210042][T28925] Call Trace: [ 799.210064][T28925] [ 799.210093][T28925] dump_stack_lvl+0xe8/0x150 [ 799.210182][T28925] should_fail_ex+0x412/0x560 [ 799.210269][T28925] should_failslab+0xa8/0x100 [ 799.210346][T28925] __kmalloc_noprof+0xe8/0x760 [ 799.210409][T28925] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 799.210515][T28925] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 799.210613][T28925] genl_family_rcv_msg_doit+0xd9/0x330 [ 799.210720][T28925] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 799.210829][T28925] ? __pfx_genl_get_cmd+0x10/0x10 [ 799.210910][T28925] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 799.210986][T28925] ? __pfx_ovs_flow_cmd_dump+0x10/0x10 [ 799.211072][T28925] ? __lock_acquire+0x6b5/0x2cf0 [ 799.211157][T28925] genl_rcv_msg+0x61c/0x7a0 [ 799.211254][T28925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.211330][T28925] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 799.211404][T28925] ? __lock_acquire+0x6b5/0x2cf0 [ 799.211503][T28925] netlink_rcv_skb+0x232/0x4b0 [ 799.211575][T28925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.211661][T28925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 799.211770][T28925] ? down_read+0x272/0x2e0 [ 799.211823][T28925] ? genl_rcv+0xd/0x40 [ 799.211912][T28925] genl_rcv+0x28/0x40 [ 799.211978][T28925] netlink_unicast+0x80f/0x9b0 [ 799.212063][T28925] ? __pfx_netlink_unicast+0x10/0x10 [ 799.212127][T28925] ? netlink_sendmsg+0x650/0xb40 [ 799.212169][T28925] ? skb_put+0x11b/0x210 [ 799.212277][T28925] netlink_sendmsg+0x813/0xb40 [ 799.212389][T28925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.212471][T28925] ? aa_sock_msg_perm+0xf1/0x1b0 [ 799.212537][T28925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 799.212601][T28925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.212673][T28925] ____sys_sendmsg+0xa68/0xad0 [ 799.212773][T28925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 799.212880][T28925] ? import_iovec+0x73/0xa0 [ 799.212961][T28925] ___sys_sendmsg+0x2a5/0x360 [ 799.213056][T28925] ? __pfx____sys_sendmsg+0x10/0x10 [ 799.213230][T28925] ? __fget_files+0x2a/0x420 [ 799.213304][T28925] ? __fget_files+0x3a0/0x420 [ 799.213418][T28925] __x64_sys_sendmsg+0x1bd/0x2a0 [ 799.213506][T28925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 799.213635][T28925] ? __pfx_ksys_write+0x10/0x10 [ 799.213732][T28925] do_syscall_64+0x14d/0xf80 [ 799.213808][T28925] ? trace_irq_disable+0x3b/0x150 [ 799.213884][T28925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.213932][T28925] ? clear_bhb_loop+0x40/0x90 [ 799.213998][T28925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.214046][T28925] RIP: 0033:0x7fe09259c629 [ 799.214099][T28925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.214144][T28925] RSP: 002b:00007fe0933a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 799.214209][T28925] RAX: ffffffffffffffda RBX: 00007fe092815fa0 RCX: 00007fe09259c629 [ 799.214252][T28925] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 799.214274][T28925] RBP: 00007fe0933a4090 R08: 0000000000000000 R09: 0000000000000000 [ 799.214287][T28925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.214299][T28925] R13: 00007fe092816038 R14: 00007fe092815fa0 R15: 00007ffea58b5528 [ 799.214331][T28925] [ 799.389659][T17780] Bluetooth: hci2: command tx timeout [ 799.417003][T28928] netlink: 'syz.2.5671': attribute type 4 has an invalid length. [ 799.645601][T24836] tipc: Disabling bearer [ 800.068271][T24836] bond1 (unregistering): Released all slaves [ 800.083221][T24836] bond2 (unregistering): Released all slaves [ 800.105254][T24836] bond3 (unregistering): Released all slaves [ 800.124588][T24836] bond4 (unregistering): Released all slaves [ 800.139578][T24836] bond0 (unregistering): Released all slaves [ 800.161539][T24836] bond5 (unregistering): Released all slaves [ 800.307982][T24836] tipc: Left network mode [ 800.525720][T28855] chnl_net:caif_netlink_parms(): no params data found [ 800.764070][T28958] __nla_validate_parse: 6 callbacks suppressed [ 800.764090][T28958] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5679'. [ 800.828346][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 800.836452][ C0] lec:lec_tx_timeout: lec0 [ 800.841546][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 801.093534][T28975] bridge5: entered promiscuous mode [ 801.105208][T28975] bridge5: entered allmulticast mode [ 801.125371][T28975] team0: Port device bridge5 added [ 801.151828][T28977] bridge0: port 1(team0) entered blocking state [ 801.178456][T28975] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5680'. [ 801.188856][T28977] bridge0: port 1(team0) entered disabled state [ 801.195838][T28977] team0: entered allmulticast mode [ 801.202611][T28977] team_slave_0: entered allmulticast mode [ 801.208876][T28977] team_slave_1: entered allmulticast mode [ 801.261062][T28977] team0: entered promiscuous mode [ 801.272549][T28977] team_slave_0: entered promiscuous mode [ 801.291276][T28977] team_slave_1: entered promiscuous mode [ 801.339436][T28855] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.361215][T28855] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.380103][T28855] bridge_slave_0: entered allmulticast mode [ 801.393423][T28855] bridge_slave_0: entered promiscuous mode [ 801.468446][T17780] Bluetooth: hci2: command tx timeout [ 801.545753][T28855] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.558832][T28855] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.566162][T28855] bridge_slave_1: entered allmulticast mode [ 801.575625][T29001] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 801.612483][T28855] bridge_slave_1: entered promiscuous mode [ 801.977301][T29019] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5689'. [ 802.102609][T28855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.184984][T29028] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 802.229085][T29028] batman_adv: batadv0: Adding interface: gretap3 [ 802.255461][T29028] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.321706][T29028] batman_adv: batadv0: Interface activated: gretap3 [ 802.355490][T28855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.396535][T24836] hsr_slave_0: left promiscuous mode [ 802.407666][T24836] hsr_slave_1: left promiscuous mode [ 802.416579][T24836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.856474][T29043] vlan1: entered promiscuous mode [ 802.861891][T29043] bridge0: entered promiscuous mode [ 802.913427][T28855] team0: Port device team_slave_0 added [ 803.040097][T28855] team0: Port device team_slave_1 added [ 803.132680][T28855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.177978][T28855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.288454][T28855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.330034][T28855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.337033][T28855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.421417][T28855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.559546][T17780] Bluetooth: hci2: command tx timeout [ 803.842499][T28855] hsr_slave_0: entered promiscuous mode [ 803.894158][T28855] hsr_slave_1: entered promiscuous mode [ 804.229667][T29109] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5708'. [ 804.252254][T29104] tipc: Enabling of bearer rejected, failed to enable media [ 804.420820][T29114] syzkaller0: entered promiscuous mode [ 804.446731][T29114] syzkaller0: entered allmulticast mode [ 804.553922][T29121] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5714'. [ 804.601427][T29121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.633968][T29121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.675565][T29121] bond0 (unregistering): Released all slaves [ 804.957243][T29144] netlink: 'syz.0.5718': attribute type 89 has an invalid length. [ 804.992539][T29144] sctp: [Deprecated]: syz.0.5718 (pid 29144) Use of int in maxseg socket option. [ 804.992539][T29144] Use struct sctp_assoc_value instead [ 805.316552][T29166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.378223][T29165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.484645][T29180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5724'. [ 805.546745][T29184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5724'. [ 805.562478][T29180] macvtap1: entered promiscuous mode [ 805.576484][T29180] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 805.628063][T17780] Bluetooth: hci2: command tx timeout [ 805.655201][T29183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5725'. [ 805.664430][T29183] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5725'. [ 805.702950][T29183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5725'. [ 805.848145][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 805.856231][ C0] lec:lec_tx_timeout: lec0 [ 805.861318][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 806.023759][T29209] netlink: zone id is out of range [ 806.040042][T29209] netlink: zone id is out of range [ 806.050177][T29209] netlink: zone id is out of range [ 806.055337][T29209] netlink: zone id is out of range [ 806.061134][T29209] netlink: zone id is out of range [ 806.066286][T29209] netlink: zone id is out of range [ 806.072825][T29209] netlink: zone id is out of range [ 806.083858][T28855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 806.100983][T28855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 806.139889][T28855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 806.156624][T29217] __nla_validate_parse: 35 callbacks suppressed [ 806.156646][T29217] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5731'. [ 806.197629][T29219] netlink: 'syz.4.5734': attribute type 1 has an invalid length. [ 806.205924][T28855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 806.218353][T29217] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5731'. [ 806.239007][T29219] netlink: 'syz.4.5734': attribute type 2 has an invalid length. [ 806.271226][T29225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5735'. [ 806.531394][T28855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.627566][T28855] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.700714][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.708013][ T8597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.743268][T29258] netlink: 'syz.1.5742': attribute type 13 has an invalid length. [ 806.763299][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.770542][ T8597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.938952][T29258] syzkaller0: entered promiscuous mode [ 806.979610][T29258] syzkaller0: entered allmulticast mode [ 807.032093][T29271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5743'. [ 807.056875][T29271] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 807.232671][T29278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5743'. [ 807.260518][T29278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 807.797158][T29297] netlink: 'syz.2.5746': attribute type 8 has an invalid length. [ 807.856865][T28855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.011443][T28855] veth0_vlan: entered promiscuous mode [ 808.049703][T28855] veth1_vlan: entered promiscuous mode [ 808.145141][T28855] veth0_macvtap: entered promiscuous mode [ 808.179495][T28855] veth1_macvtap: entered promiscuous mode [ 808.242173][T28855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.301811][T28855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.343235][T24836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.389960][T24836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.408480][T24836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.434603][T24836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.642888][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5751'. [ 808.789827][T29310] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5748'. [ 808.825727][T29327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5751'. [ 808.835396][T24839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.858966][T24839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.906541][T24839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.935715][T24839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.221980][T29347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5650'. [ 809.438739][T29355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5650'. [ 809.496803][T29361] syzkaller0: entered promiscuous mode [ 809.502590][T29355] nbd: device at index 64 is going down [ 809.580078][T29361] syzkaller0: entered allmulticast mode [ 809.773344][T29326] udevd[29326]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 809.835051][T29334] udevd[29334]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 810.386224][T29390] "syz.2.5762" (29390) uses obsolete ecb(arc4) skcipher [ 810.417268][T29410] netlink: 'syz.4.5765': attribute type 1 has an invalid length. [ 810.463910][T29409] netlink: 'syz.4.5765': attribute type 1 has an invalid length. [ 810.587067][T29411] lo speed is unknown, defaulting to 1000 [ 810.641270][T29411] lo speed is unknown, defaulting to 1000 [ 810.773021][T29425] macsec0: entered promiscuous mode [ 810.779929][T29425] macsec0: left promiscuous mode [ 810.868303][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 810.876377][ C0] lec:lec_tx_timeout: lec0 [ 810.881263][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 810.943005][T29429] netlink: 'syz.3.5772': attribute type 1 has an invalid length. [ 811.071513][T29430] bond0: entered promiscuous mode [ 811.273581][T29449] __nla_validate_parse: 12 callbacks suppressed [ 811.273602][T29449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5776'. [ 811.453675][T29460] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5778'. [ 811.459486][T29461] netlink: 'syz.2.5779': attribute type 6 has an invalid length. [ 811.664808][T29473] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5782'. [ 812.329381][T29505] netlink: 'syz.2.5786': attribute type 6 has an invalid length. [ 812.353197][T29506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5788'. [ 812.359442][T29505] netlink: 'syz.2.5786': attribute type 6 has an invalid length. [ 812.373619][T29500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5787'. [ 812.398205][T29500] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5787'. [ 812.495417][T29515] netlink: 'syz.0.5789': attribute type 1 has an invalid length. [ 812.568446][T29515] bond9: entered promiscuous mode [ 812.574074][T29515] 8021q: adding VLAN 0 to HW filter on device bond9 [ 812.619704][T29518] 8021q: adding VLAN 0 to HW filter on device bond9 [ 812.626904][T29518] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 812.648308][T29518] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 812.661870][T29518] bond9: (slave gre1): making interface the new active one [ 812.670809][T29518] gre1: entered promiscuous mode [ 812.679521][T29518] bond9: (slave gre1): Enslaving as an active interface with an up link [ 812.724508][T29519] geneve0: entered promiscuous mode [ 812.732674][T29519] geneve0: entered allmulticast mode [ 812.965670][T29539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5794'. [ 813.020635][T29543] netlink: 'syz.0.5794': attribute type 1 has an invalid length. [ 813.589854][T29578] netlink: 'syz.0.5801': attribute type 1 has an invalid length. [ 813.662037][T29584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5802'. [ 813.709870][T29578] bond10: entered promiscuous mode [ 813.715661][T29578] 8021q: adding VLAN 0 to HW filter on device bond10 [ 813.777497][T29576] xt_CT: No such helper "snmp_trap" [ 813.796154][T29584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5802'. [ 813.796908][T24832] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.828580][T24832] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.858185][T24832] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.981545][T24832] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.020555][T29603] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 814.058209][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 814.302220][T29617] lo speed is unknown, defaulting to 1000 [ 814.360804][T29626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.379460][T29617] lo speed is unknown, defaulting to 1000 [ 814.529866][T29627] netlink: 'syz.2.5811': attribute type 1 has an invalid length. [ 815.897792][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 815.905844][ C0] lec:lec_tx_timeout: lec0 [ 815.917902][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 815.984639][T29688] syzkaller0: entered promiscuous mode [ 815.991191][T29688] syzkaller0: entered allmulticast mode [ 818.236261][T29734] __nla_validate_parse: 2 callbacks suppressed [ 818.236281][T29734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5831'. [ 818.266324][T29738] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5833'. [ 818.330909][T29738] netlink: 'syz.2.5833': attribute type 21 has an invalid length. [ 818.356873][T29738] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5833'. [ 818.543130][T29747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5834'. [ 818.585567][T29738] netlink: 'syz.2.5833': attribute type 4 has an invalid length. [ 818.607188][T29738] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5833'. [ 819.185288][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5841'. [ 819.246292][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5841'. [ 819.264209][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5841'. [ 819.298248][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5841'. [ 819.308397][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5841'. [ 819.634545][T29812] netlink: 'syz.0.5846': attribute type 1 has an invalid length. [ 819.697912][T29815] netlink: 'syz.1.5847': attribute type 8 has an invalid length. [ 819.823607][T29812] bond11: entered promiscuous mode [ 819.844333][T29812] 8021q: adding VLAN 0 to HW filter on device bond11 [ 819.952468][T29825] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 820.324283][T29848] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 820.374223][T29848] bond7: (slave macvlan2): Enslaving as an active interface with an up link [ 820.938325][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 820.946480][ C0] lec:lec_tx_timeout: lec0 [ 820.951385][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 820.963802][T29884] vlan0: entered promiscuous mode [ 821.075061][T29880] bond12: Invalid ad_actor_system MAC address. [ 821.092996][T29880] bond12: option ad_actor_system: invalid value (7) [ 821.119813][T29880] bond12 (unregistering): Released all slaves [ 821.282736][T29899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.293334][T29899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.609584][T29913] syzkaller0: entered promiscuous mode [ 821.615225][T29913] syzkaller0: entered allmulticast mode [ 823.871176][T29939] veth9: entered promiscuous mode [ 823.886501][T29956] pimreg: tun_chr_ioctl cmd 1074025677 [ 823.903091][T29956] pimreg: linktype set to 6 [ 824.158597][T29980] __nla_validate_parse: 5 callbacks suppressed [ 824.158619][T29980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5886'. [ 824.320645][T29989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5888'. [ 824.379106][T29991] mac80211_hwsim hwsim40 wlan0: left promiscuous mode [ 824.388276][T29991] geneve2: left promiscuous mode [ 824.402386][T29991] geneve2: left allmulticast mode [ 824.425425][T29998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5889'. [ 824.455626][T29991] vlan2: left promiscuous mode [ 824.474091][T29991] geneve1: left promiscuous mode [ 824.491894][T29998] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5889'. [ 824.513447][T29991] vlan2: left allmulticast mode [ 824.527132][T29991] geneve1: left allmulticast mode [ 824.549118][T29991] bridge1: left allmulticast mode [ 824.561245][T29991] bridge2: left promiscuous mode [ 824.575765][T29991] batadv1: left promiscuous mode [ 824.584711][T29991] batadv1: left allmulticast mode [ 824.593632][T29991] macsec1: left promiscuous mode [ 824.603281][T29991] macsec1: left allmulticast mode [ 824.634004][T29991] erspan1: left promiscuous mode [ 824.651478][T29991] erspan1: left allmulticast mode [ 824.682615][T29991] bond0: left promiscuous mode [ 824.688565][T29983] lo speed is unknown, defaulting to 1000 [ 824.695287][T29989] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 824.704553][T30009] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5892'. [ 824.713636][T29989] netlink: 'syz.2.5888': attribute type 2 has an invalid length. [ 824.746041][T29998] geneve0: entered promiscuous mode [ 824.768224][T29998] geneve0: entered allmulticast mode [ 824.779480][T24832] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.790860][T24832] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.820207][T24832] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.846274][T24832] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.866127][T24832] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.888349][T24832] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.902600][T24832] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.902607][T29983] lo speed is unknown, defaulting to 1000 [ 824.902637][T24832] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.931866][T30015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.270349][T30032] netlink: zone id is out of range [ 825.275537][T30032] netlink: zone id is out of range [ 825.285909][T30032] netlink: zone id is out of range [ 825.292080][T30032] netlink: zone id is out of range [ 825.297411][T30032] netlink: zone id is out of range [ 825.302921][T30032] netlink: zone id is out of range [ 825.312656][T30032] netlink: zone id is out of range [ 825.322516][T30032] netlink: 'syz.4.5896': attribute type 5 has an invalid length. [ 825.397609][T30038] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5896'. [ 825.407629][T30038] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5896'. [ 825.547097][T30045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5898'. [ 825.958370][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 825.966474][ C0] lec:lec_tx_timeout: lec0 [ 825.972730][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 826.146922][T30064] netlink: 'syz.0.5900': attribute type 8 has an invalid length. [ 826.329488][T30073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5903'. [ 826.429157][T30072] 8021q: adding VLAN 0 to HW filter on device bond7 [ 826.558670][T30072] rdma_rxe: rxe_newlink: failed to add bond0 [ 826.569838][T30077] bond7: (slave macvlan3): making interface the new active one [ 826.578875][T30084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5905'. [ 826.580380][T30077] bond7: (slave macvlan3): Enslaving as an active interface with an up link [ 826.763289][T30091] lo: Caught tx_queue_len zero misconfig [ 826.798745][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 826.810627][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 826.822543][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 826.836710][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 826.849753][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 827.046364][T30089] lo speed is unknown, defaulting to 1000 [ 827.081063][T30089] lo speed is unknown, defaulting to 1000 [ 827.101262][T30102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.196824][T24839] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.458538][T24839] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.644429][T30123] lo speed is unknown, defaulting to 1000 [ 827.666976][T24839] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.698156][T30131] netlink: 'syz.4.5914': attribute type 62 has an invalid length. [ 827.733169][T30120] lo speed is unknown, defaulting to 1000 [ 827.759496][T24839] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.074970][T30123] lo speed is unknown, defaulting to 1000 [ 828.258608][T24839] team0: left allmulticast mode [ 828.263542][T24839] team_slave_0: left allmulticast mode [ 828.276347][T24839] team_slave_1: left allmulticast mode [ 828.295354][T24839] bridge5: left allmulticast mode [ 828.308724][T24839] team0: left promiscuous mode [ 828.313565][T24839] team_slave_0: left promiscuous mode [ 828.335244][T24839] team_slave_1: left promiscuous mode [ 828.350251][T24839] bridge5: left promiscuous mode [ 828.355605][T24839] bridge0: port 1(team0) entered disabled state [ 828.908009][T17780] Bluetooth: hci5: command tx timeout [ 828.970184][T30167] openvswitch: netlink: Missing valid actions attribute. [ 828.977446][T30167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.012638][T24839] bond5 (unregistering): (slave bridge0): Releasing backup interface [ 829.021210][T24839] bond5 (unregistering): (slave bridge0): the permanent HWaddr of slave - a2:6d:0e:de:c8:a7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 829.094205][T24839] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 829.141788][T24839] team0: Port device bridge5 removed [ 829.323029][T24839] bond1 (unregistering): Released all slaves [ 829.339421][T24839] bond2 (unregistering): Released all slaves [ 829.355505][T24839] bond3 (unregistering): Released all slaves [ 829.384892][T24839] bond4 (unregistering): Released all slaves [ 829.402832][T24839] bond5 (unregistering): Released all slaves [ 829.418509][T24839] bond6 (unregistering): Released all slaves [ 829.433701][T24839] bond0 (unregistering): Released all slaves [ 829.480597][T30120] lo speed is unknown, defaulting to 1000 [ 829.509631][T30164] __nla_validate_parse: 4 callbacks suppressed [ 829.509653][T30164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5922'. [ 829.606226][T24839] : left promiscuous mode [ 829.733733][T24839] tipc: Left network mode [ 830.039863][T30183] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2275571335/2275571337 [ 830.062599][T30183] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2275571335/2275571336 [ 830.074349][T30183] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2275571335/2275571337 [ 830.084442][T30183] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2275571335/2275571336 [ 830.325391][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5927'. [ 830.413968][T30191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5928'. [ 830.524368][T30089] chnl_net:caif_netlink_parms(): no params data found [ 830.566293][T30199] FAULT_INJECTION: forcing a failure. [ 830.566293][T30199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.607658][T30199] CPU: 1 UID: 0 PID: 30199 Comm: syz.3.5929 Not tainted syzkaller #0 PREEMPT(full) [ 830.607694][T30199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.607707][T30199] Call Trace: [ 830.607716][T30199] [ 830.607725][T30199] dump_stack_lvl+0xe8/0x150 [ 830.607760][T30199] should_fail_ex+0x412/0x560 [ 830.607789][T30199] _copy_from_user+0x2d/0xb0 [ 830.607818][T30199] __copy_msghdr+0x3c5/0x5b0 [ 830.607853][T30199] ___sys_sendmsg+0x213/0x360 [ 830.607890][T30199] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.607927][T30199] ? kstrtouint+0x6e/0xe0 [ 830.607976][T30199] ? __fget_files+0x2a/0x420 [ 830.608016][T30199] ? __fget_files+0x3a0/0x420 [ 830.608056][T30199] __sys_sendmmsg+0x27c/0x4e0 [ 830.608092][T30199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 830.608120][T30199] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 830.608179][T30199] ? ksys_write+0x242/0x270 [ 830.608204][T30199] ? __pfx_ksys_write+0x10/0x10 [ 830.608233][T30199] __x64_sys_sendmmsg+0xa0/0xc0 [ 830.608267][T30199] do_syscall_64+0x14d/0xf80 [ 830.608296][T30199] ? trace_irq_disable+0x3b/0x150 [ 830.608325][T30199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.608347][T30199] ? clear_bhb_loop+0x40/0x90 [ 830.608373][T30199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.608394][T30199] RIP: 0033:0x7f981379c629 [ 830.608415][T30199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.608433][T30199] RSP: 002b:00007f98146de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 830.608457][T30199] RAX: ffffffffffffffda RBX: 00007f9813a15fa0 RCX: 00007f981379c629 [ 830.608473][T30199] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 830.608487][T30199] RBP: 00007f98146de090 R08: 0000000000000000 R09: 0000000000000000 [ 830.608500][T30199] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 830.608514][T30199] R13: 00007f9813a16038 R14: 00007f9813a15fa0 R15: 00007ffc371c9d68 [ 830.608548][T30199] [ 830.988308][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 830.996408][ C0] lec:lec_tx_timeout: lec0 [ 831.002734][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 831.020047][T17780] Bluetooth: hci5: command tx timeout [ 831.535647][T30089] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.543175][T30089] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.560588][T30089] bridge_slave_0: entered allmulticast mode [ 831.571267][T30089] bridge_slave_0: entered promiscuous mode [ 831.617179][T30089] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.626339][T30089] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.635607][T30089] bridge_slave_1: entered allmulticast mode [ 831.646188][T30089] bridge_slave_1: entered promiscuous mode [ 831.761605][T30234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5934'. [ 831.843195][T30089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.930765][T30089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.072772][T30089] team0: Port device team_slave_0 added [ 832.124435][T24839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.234537][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5941'. [ 832.263140][T30255] x_tables: duplicate entry at hook 3 [ 832.766233][T30280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5943'. [ 832.883568][T24839] team0 (unregistering): Port device team_slave_1 removed [ 832.911488][T24839] team0 (unregistering): Port device team_slave_0 removed [ 833.068073][T17780] Bluetooth: hci5: command tx timeout [ 833.117306][T30089] team0: Port device team_slave_1 added [ 833.185364][T30264] macsec2: entered promiscuous mode [ 833.214409][T30264] geneve1: entered promiscuous mode [ 833.221960][T30264] geneve1: left promiscuous mode [ 833.244337][T30256] lec0: mtu less than device minimum [ 833.252394][T30256] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 833.267376][T30254] lec:lec_atm_close: lec0: Shut down! [ 833.362126][T30262] lo speed is unknown, defaulting to 1000 [ 833.395548][T30089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.417958][T30089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.464950][T30089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.487681][T30262] lo speed is unknown, defaulting to 1000 [ 833.519962][T30089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.547667][T30089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.618598][T30089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.705638][T30294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5948'. [ 833.728947][T30296] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5949'. [ 833.865685][T30292] lo speed is unknown, defaulting to 1000 [ 833.925097][T30089] hsr_slave_0: entered promiscuous mode [ 833.949072][T30089] hsr_slave_1: entered promiscuous mode [ 833.955533][T30089] debugfs: 'hsr0' already exists in 'hsr' [ 833.987602][T30089] Cannot create hsr debugfs directory [ 834.066814][T30294] syzkaller1: entered promiscuous mode [ 834.072692][T30294] syzkaller1: entered allmulticast mode [ 834.217814][T24839] IPVS: stop unused estimator thread 0... [ 834.223898][T30292] lo speed is unknown, defaulting to 1000 [ 834.671604][T30332] openvswitch: netlink: Flow actions attr not present in new flow. [ 835.151381][T17780] Bluetooth: hci5: command tx timeout [ 835.190560][T30355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5962'. [ 835.410041][T30365] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 835.745836][T30089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 835.815597][T30089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 835.882900][T30381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5968'. [ 835.907234][T30089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 835.988429][T30089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 836.072752][T30387] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5970'. [ 836.118311][T30387] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5970'. [ 836.256441][T30398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5971'. [ 836.322724][T30089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.342199][T30404] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5972'. [ 836.406171][T30089] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.433476][T24839] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.440701][T24839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.480350][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.487574][ T8597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.720489][T30415] netlink: 'syz.4.5975': attribute type 1 has an invalid length. [ 836.793751][T30415] bond8: entered promiscuous mode [ 836.799467][T30415] bond8: entered allmulticast mode [ 836.805188][T30415] 8021q: adding VLAN 0 to HW filter on device bond8 [ 836.831255][T30415] bridge4: entered promiscuous mode [ 836.836961][T30415] bridge4: entered allmulticast mode [ 836.843707][T30415] bond8: (slave bridge4): Enslaving as a backup interface with an up link [ 836.873431][T30415] bridge5: entered promiscuous mode [ 836.882172][T30415] bridge5: entered allmulticast mode [ 836.888423][T30415] bond8: (slave bridge5): Enslaving as a backup interface with a down link [ 836.908069][ T8597] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 837.078480][T24837] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 837.444137][T30089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.579068][T30447] netlink: 566 bytes leftover after parsing attributes in process `syz.3.5980'. [ 837.633652][T30408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5974'. [ 837.658771][T30089] veth0_vlan: entered promiscuous mode [ 837.698974][T30089] veth1_vlan: entered promiscuous mode [ 837.807323][T30089] veth0_macvtap: entered promiscuous mode [ 837.850850][T30089] veth1_macvtap: entered promiscuous mode [ 837.936021][T30089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.983979][T30089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.000900][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5984'. [ 838.035678][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5984'. [ 838.063266][T24849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.085739][T24849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.120946][T24832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.138986][T24832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.261614][T30476] netlink: 'syz.0.5986': attribute type 4 has an invalid length. [ 838.314021][T30476] netlink: 'syz.0.5986': attribute type 4 has an invalid length. [ 838.395181][T24849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.416680][T24849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.562580][T24837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.571806][T24837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.783420][T30497] netlink: 'syz.0.5990': attribute type 1 has an invalid length. [ 838.827936][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 838.836025][ C0] lec:lec_tx_timeout: lec0 [ 839.170151][T30517] lo speed is unknown, defaulting to 1000 [ 839.189403][T30524] sch_tbf: burst 88 is lower than device ip6_vti0 mtu (1332) ! [ 839.213594][T30517] lo speed is unknown, defaulting to 1000 [ 839.817681][T24849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.825655][T24849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.862660][T30558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.169460][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 840.194411][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 840.203658][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 840.212188][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 840.239081][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 840.434315][T30568] lo speed is unknown, defaulting to 1000 [ 840.470094][T30568] lo speed is unknown, defaulting to 1000 [ 841.079202][T30600] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 841.089063][T30600] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 841.396972][T30607] netlink: 'syz.3.6013': attribute type 2 has an invalid length. [ 841.489355][T30612] netlink: 'syz.1.6014': attribute type 4 has an invalid length. [ 841.521529][T30611] netlink: 'syz.1.6014': attribute type 4 has an invalid length. [ 841.546186][T30613] tipc: Started in network mode [ 841.551552][T30613] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 841.566160][T30613] tipc: Enabled bearer , priority 10 [ 841.568344][T30619] netlink: 'syz.1.6014': attribute type 4 has an invalid length. [ 841.599348][T30620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.786194][T30568] chnl_net:caif_netlink_parms(): no params data found [ 841.828520][T30632] __nla_validate_parse: 45 callbacks suppressed [ 841.828540][T30632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6017'. [ 842.025567][T30632] bond1: Invalid ad_actor_system MAC address. [ 842.046183][T30632] bond1: option ad_actor_system: invalid value (7) [ 842.071759][T30632] bond1 (unregistering): Released all slaves [ 842.267964][ T51] Bluetooth: hci3: command tx timeout [ 842.369872][T30568] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.390089][T30568] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.412575][T30568] bridge_slave_0: entered allmulticast mode [ 842.420514][T30662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6023'. [ 842.432753][T30568] bridge_slave_0: entered promiscuous mode [ 842.455195][T30568] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.462444][T30568] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.470262][T30568] bridge_slave_1: entered allmulticast mode [ 842.478112][T30568] bridge_slave_1: entered promiscuous mode [ 842.568559][T30568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.592693][T30568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.646605][T30668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6024'. [ 842.687413][T30568] team0: Port device team_slave_0 added [ 842.704537][T16429] tipc: Node number set to 10463914 [ 842.716340][T30568] team0: Port device team_slave_1 added [ 842.808763][T30568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.816691][T30568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.886029][T30568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.920027][T30568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.927007][T30568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.993871][T30568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.137365][T30568] hsr_slave_0: entered promiscuous mode [ 843.157144][T30568] hsr_slave_1: entered promiscuous mode [ 843.164108][T30568] debugfs: 'hsr0' already exists in 'hsr' [ 843.173834][T30568] Cannot create hsr debugfs directory [ 843.270912][T30687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6028'. [ 843.519687][T30710] netlink: 'syz.3.6034': attribute type 4 has an invalid length. [ 843.579939][T30714] netlink: 'syz.3.6034': attribute type 4 has an invalid length. [ 843.744710][T30717] syzkaller0: entered promiscuous mode [ 843.750431][T30717] syzkaller0: entered allmulticast mode [ 843.795898][T30721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6037'. [ 843.984427][T30731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6038'. [ 844.285589][T30747] gtp0: entered promiscuous mode [ 844.312844][T30747] IPVS: Unknown mcast interface: vcan0 [ 844.335297][T30747] IPv6: NLM_F_CREATE should be specified when creating new route [ 844.348133][ T51] Bluetooth: hci3: command tx timeout [ 844.490453][T30568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 844.514001][T30568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 844.559690][T30568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 844.606367][T30761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6046'. [ 844.630073][T30761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6046'. [ 844.661577][T30568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 844.711346][T30766] batadv0: entered promiscuous mode [ 844.720226][T30766] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 845.046806][T30568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.082825][T30790] macsec2: entered promiscuous mode [ 845.118909][T30790] geneve1: entered promiscuous mode [ 845.144978][T30790] geneve1: left promiscuous mode [ 845.243552][T30795] netlink: 'syz.3.6053': attribute type 2 has an invalid length. [ 845.266185][T30568] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.286746][T30795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6053'. [ 845.329753][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.336922][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.340522][T30804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6053'. [ 845.436333][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.443612][ T8597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.709908][T30822] syzkaller0: entered promiscuous mode [ 845.742024][T30822] syzkaller0: entered allmulticast mode [ 846.072838][T30837] lo speed is unknown, defaulting to 1000 [ 846.082738][T30837] lo speed is unknown, defaulting to 1000 [ 846.390121][T30568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.427939][ T51] Bluetooth: hci3: command tx timeout [ 846.506510][T30862] macsec2: entered promiscuous mode [ 846.530416][T30862] geneve1: entered promiscuous mode [ 846.550429][T30862] geneve1: left promiscuous mode [ 846.852806][T30875] __nla_validate_parse: 2 callbacks suppressed [ 846.852826][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6068'. [ 846.979142][T30880] netlink: 'syz.1.6069': attribute type 30 has an invalid length. [ 847.183165][T30893] rdma_op ffff8880512a69f0 conn xmit_rdma 0000000000000000 [ 847.554504][T30894] syzkaller0: entered promiscuous mode [ 847.564100][T30894] syzkaller0: entered allmulticast mode [ 847.576859][T30568] veth0_vlan: entered promiscuous mode [ 847.612753][T30908] syzkaller0: entered promiscuous mode [ 847.638676][T30908] syzkaller0: entered allmulticast mode [ 847.699397][T30911] macsec3: entered promiscuous mode [ 847.781705][T30568] veth1_vlan: entered promiscuous mode [ 847.983463][T30568] veth0_macvtap: entered promiscuous mode [ 847.990469][T30926] openvswitch: netlink: Key type 30 is not supported [ 848.010899][T30926] tap0: tun_chr_ioctl cmd 2148553947 [ 848.032981][T30568] veth1_macvtap: entered promiscuous mode [ 848.079111][T30568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.095052][T30932] netlink: 'syz.3.6080': attribute type 21 has an invalid length. [ 848.103841][T30932] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6080'. [ 848.140409][T30937] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 848.171111][T30568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.256193][T24849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.276374][T24849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.347449][T24849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.377656][T24849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.508861][ T51] Bluetooth: hci3: command tx timeout [ 848.774049][T24849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.798048][T24849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.997936][T24849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.024098][T24849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.098596][T30981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6089'. [ 849.280702][T30995] netlink: 'syz.0.6094': attribute type 18 has an invalid length. [ 849.326066][T30997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6092'. [ 849.330096][T30995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6094'. [ 849.760797][T17780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 849.771376][T17780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 849.782045][T17780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 849.799540][T17780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 849.821370][T17780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 850.083398][T24849] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 850.125651][T24849] bond5 (unregistering): (slave gretap3): Releasing active interface [ 850.203691][T24849] bond0 (unregistering): left promiscuous mode [ 850.210236][T24849] : left promiscuous mode [ 850.214914][T24849] bond_slave_1: left promiscuous mode [ 850.222644][T24849] bond0 (unregistering): (slave c5): Releasing backup interface [ 850.233702][T24849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.244724][T24849] bond0 (unregistering): Released all slaves [ 850.256934][T24849] bond1 (unregistering): Released all slaves [ 850.273897][T24849] bond2 (unregistering): (slave bond3): Releasing backup interface [ 850.283439][T24849] bond2 (unregistering): Released all slaves [ 850.301984][T24849] bond3 (unregistering): Released all slaves [ 850.319934][T24849] bond4 (unregistering): Released all slaves [ 850.338129][T24849] bond5 (unregistering): Released all slaves [ 850.475744][T24849] : left promiscuous mode [ 850.649931][T31012] lo speed is unknown, defaulting to 1000 [ 850.866845][T31012] lo speed is unknown, defaulting to 1000 [ 850.876818][T24849] tipc: Left network mode [ 851.132917][T31046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6102'. [ 851.161175][T31048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6103'. [ 851.370698][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6102'. [ 851.422403][T31046] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.430194][T31046] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.564697][T31046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.588368][T31046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.800773][T31052] hsr_slave_0: left promiscuous mode [ 851.808979][T31052] hsr_slave_1: left promiscuous mode [ 851.834080][ T1321] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.859424][ T1321] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.874841][ T51] Bluetooth: hci1: command tx timeout [ 851.940846][ T1321] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.957453][ T1321] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.170854][T31080] FAULT_INJECTION: forcing a failure. [ 852.170854][T31080] name failslab, interval 1, probability 0, space 0, times 0 [ 852.188097][T31080] CPU: 1 UID: 0 PID: 31080 Comm: syz.1.6107 Not tainted syzkaller #0 PREEMPT(full) [ 852.188126][T31080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 852.188139][T31080] Call Trace: [ 852.188148][T31080] [ 852.188157][T31080] dump_stack_lvl+0xe8/0x150 [ 852.188191][T31080] should_fail_ex+0x412/0x560 [ 852.188221][T31080] should_failslab+0xa8/0x100 [ 852.188245][T31080] ? sctp_chunkify+0x5a/0x260 [ 852.188272][T31080] kmem_cache_alloc_noprof+0x87/0x650 [ 852.188323][T31080] sctp_chunkify+0x5a/0x260 [ 852.188352][T31080] _sctp_make_chunk+0x122/0x290 [ 852.188380][T31080] sctp_make_init+0x5e3/0xe00 [ 852.188402][T31080] ? is_bpf_text_address+0x292/0x2b0 [ 852.188435][T31080] ? __pfx_sctp_make_init+0x10/0x10 [ 852.188473][T31080] ? stack_trace_save+0xa9/0x100 [ 852.188494][T31080] ? __pfx_stack_trace_save+0x10/0x10 [ 852.188518][T31080] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 852.188554][T31080] sctp_do_sm+0x238/0x5cf0 [ 852.188574][T31080] ? __pfx_sctp_pname+0x10/0x10 [ 852.188594][T31080] ? kasan_save_track+0x4f/0x80 [ 852.188613][T31080] ? kasan_save_track+0x3e/0x80 [ 852.188631][T31080] ? __kmalloc_cache_noprof+0x31c/0x660 [ 852.188652][T31080] ? sctp_sendmsg+0x1b3d/0x2c10 [ 852.188679][T31080] ? ___sys_sendmsg+0x2a5/0x360 [ 852.188707][T31080] ? __sys_sendmmsg+0x27c/0x4e0 [ 852.188734][T31080] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 852.188761][T31080] ? do_syscall_64+0x14d/0xf80 [ 852.188789][T31080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.188816][T31080] ? __pfx_sctp_do_sm+0x10/0x10 [ 852.188875][T31080] ? __sk_mem_raise_allocated+0x290/0x12c0 [ 852.188895][T31080] ? __genradix_ptr+0x1e1/0x220 [ 852.188933][T31080] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 852.188969][T31080] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 852.188998][T31080] ? __asan_memcpy+0x40/0x70 [ 852.189035][T31080] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 852.189080][T31080] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 852.189111][T31080] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 852.189147][T31080] ? __local_bh_enable_ip+0xd0/0x130 [ 852.189172][T31080] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 852.189194][T31080] ? security_sctp_bind_connect+0x7e/0x2c0 [ 852.189228][T31080] sctp_sendmsg+0x1b3d/0x2c10 [ 852.189272][T31080] ? __pfx_sctp_sendmsg+0x10/0x10 [ 852.189307][T31080] ? aa_sk_perm+0x15a/0x960 [ 852.189331][T31080] ? aa_sk_perm+0x82d/0x960 [ 852.189362][T31080] ? __pfx_aa_sk_perm+0x10/0x10 [ 852.189387][T31080] ? sock_rps_record_flow+0x19/0x400 [ 852.189421][T31080] ? inet_sendmsg+0x2f4/0x370 [ 852.189454][T31080] ____sys_sendmsg+0x894/0xad0 [ 852.189494][T31080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.189534][T31080] ? import_iovec+0x73/0xa0 [ 852.189566][T31080] ___sys_sendmsg+0x2a5/0x360 [ 852.189602][T31080] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.189638][T31080] ? kstrtouint+0x6e/0xe0 [ 852.189688][T31080] ? __fget_files+0x2a/0x420 [ 852.189717][T31080] ? __fget_files+0x3a0/0x420 [ 852.189756][T31080] __sys_sendmmsg+0x27c/0x4e0 [ 852.189792][T31080] ? __pfx___sys_sendmmsg+0x10/0x10 [ 852.189820][T31080] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 852.189880][T31080] ? ksys_write+0x242/0x270 [ 852.189904][T31080] ? __pfx_ksys_write+0x10/0x10 [ 852.189932][T31080] __x64_sys_sendmmsg+0xa0/0xc0 [ 852.189966][T31080] do_syscall_64+0x14d/0xf80 [ 852.189994][T31080] ? trace_irq_disable+0x3b/0x150 [ 852.190042][T31080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.190064][T31080] ? clear_bhb_loop+0x40/0x90 [ 852.190091][T31080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.190113][T31080] RIP: 0033:0x7f0baf19c629 [ 852.190135][T31080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.190153][T31080] RSP: 002b:00007f0baffdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 852.190176][T31080] RAX: ffffffffffffffda RBX: 00007f0baf415fa0 RCX: 00007f0baf19c629 [ 852.190193][T31080] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 852.190206][T31080] RBP: 00007f0baffdc090 R08: 0000000000000000 R09: 0000000000000000 [ 852.190219][T31080] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000002 [ 852.190233][T31080] R13: 00007f0baf416038 R14: 00007f0baf415fa0 R15: 00007ffdc3f36a88 [ 852.190269][T31080] [ 852.940528][T31090] netlink: 'syz.1.6109': attribute type 2 has an invalid length. [ 853.018057][T24849] batadv0: left promiscuous mode [ 853.051891][T24849] hsr_slave_0: left promiscuous mode [ 853.062821][T24849] hsr_slave_1: left promiscuous mode [ 853.095033][T24849] pim6reg (unregistering): left allmulticast mode [ 853.263952][T24849] veth1_to_bond (unregistering): left allmulticast mode [ 853.383005][T24836] smc: removing ib device syz0 [ 853.519989][T31100] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.562203][T31100] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 853.580468][T31100] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.601709][T31100] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 853.694163][T31100] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.707585][T31100] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 853.908362][T31100] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 853.930696][T31100] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 853.953797][ T51] Bluetooth: hci1: command tx timeout [ 854.065381][T31138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6121'. [ 854.076214][T31138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6121'. [ 854.112031][T31138] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6121'. [ 854.295273][T31012] chnl_net:caif_netlink_parms(): no params data found [ 854.884748][T31174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6130'. [ 855.071619][T31012] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.093578][T31012] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.130074][T31012] bridge_slave_0: entered allmulticast mode [ 855.162172][T31012] bridge_slave_0: entered promiscuous mode [ 855.433421][T31012] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.455647][T31012] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.481507][T31012] bridge_slave_1: entered allmulticast mode [ 855.518696][T31012] bridge_slave_1: entered promiscuous mode [ 856.038444][ T51] Bluetooth: hci1: command tx timeout [ 858.111240][ T51] Bluetooth: hci1: command tx timeout [ 858.714427][T31012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.738924][T31012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.776414][T31219] syzkaller1: entered promiscuous mode [ 858.782321][T31219] syzkaller1: entered allmulticast mode [ 858.913938][T31012] team0: Port device team_slave_0 added [ 858.935075][T31012] team0: Port device team_slave_1 added [ 859.000996][T31012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.020099][T31012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.071799][T31012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.094376][T31012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.133834][T31012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.213127][T31012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.310876][T24849] IPVS: stop unused estimator thread 0... [ 859.438752][T31012] hsr_slave_0: entered promiscuous mode [ 859.446438][T31012] hsr_slave_1: entered promiscuous mode [ 859.454401][T31012] debugfs: 'hsr0' already exists in 'hsr' [ 859.460408][T31012] Cannot create hsr debugfs directory [ 859.876373][T31012] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.930398][T31012] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.976164][T31282] netlink: 'syz.4.6151': attribute type 1 has an invalid length. [ 860.047438][T31286] netlink: 'syz.0.6152': attribute type 1 has an invalid length. [ 860.133692][T31012] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.155758][T31292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6152'. [ 860.179841][T31012] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.333810][T31012] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.346861][T31012] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.492694][T31012] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.504511][T31012] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.586175][T31313] netlink: 'syz.4.6156': attribute type 1 has an invalid length. [ 860.599839][T31313] netlink: 174 bytes leftover after parsing attributes in process `syz.4.6156'. [ 860.644762][T31320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6160'. [ 860.862379][T31012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 860.894639][T31012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 860.925929][T31012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 860.963063][T31012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 861.370949][T31012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.403390][T31360] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6166'. [ 861.463161][T31012] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.531605][T31358] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6167'. [ 861.552307][T31358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6167'. [ 861.576120][T31358] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6167'. [ 861.591913][T31358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6167'. [ 861.659497][T24839] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.666745][T24839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.706385][T24849] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.713727][T24849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.057390][T31012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 862.126363][T31012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 862.272193][T31404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6176'. [ 862.373726][T31404] syzkaller0: entered promiscuous mode [ 862.409005][T31404] syzkaller0: entered allmulticast mode [ 862.437386][T31411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6176'. [ 862.894605][T31012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.143400][T31012] veth0_vlan: entered promiscuous mode [ 863.190419][T31012] veth1_vlan: entered promiscuous mode [ 863.327155][T31012] veth0_macvtap: entered promiscuous mode [ 863.366056][T31460] gtp0: entered promiscuous mode [ 863.407497][T31460] gtp0: entered allmulticast mode [ 863.416663][T31012] veth1_macvtap: entered promiscuous mode [ 863.486673][T31012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.500593][T31468] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 863.650217][T31012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.828828][T24835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.854719][T24835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.880534][T24835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.900046][T24835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.129302][T31489] bridge_slave_0: left allmulticast mode [ 864.136976][T31489] bridge_slave_0: left promiscuous mode [ 864.143374][T31489] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.156315][T31489] bridge_slave_1: left allmulticast mode [ 864.163636][T31489] bridge_slave_1: left promiscuous mode [ 864.170806][T31489] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.182920][T31489] bond0: (slave bond_slave_0): Releasing backup interface [ 864.201353][T31489] bond0: (slave bond_slave_1): Releasing backup interface [ 864.245413][T31489] team0: Port device team_slave_0 removed [ 864.285343][T31489] team0: Port device team_slave_1 removed [ 864.299840][T31489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.310335][T31489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.320493][T31489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.329409][T31489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.342749][T31489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 864.365605][T31492] vlan2: entered allmulticast mode [ 864.372283][T31492] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 864.445605][T31500] netlink: 'syz.0.6198': attribute type 1 has an invalid length. [ 864.502009][T31497] x_tables: unsorted entry at hook 3 [ 864.659037][T24835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.683561][T24835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.922989][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.010996][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.542210][T31546] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 865.738094][T31546] bond2 (unregistering): Released all slaves [ 865.775516][T31561] __nla_validate_parse: 4 callbacks suppressed [ 865.775537][T31561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6210'. [ 866.176191][T31567] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.187365][T31578] x_tables: duplicate underflow at hook 1 [ 866.195936][T31576] netlink: 'syz.1.6215': attribute type 39 has an invalid length. [ 866.206472][ T8662] IPVS: starting estimator thread 0... [ 866.317872][T31580] IPVS: using max 26 ests per chain, 62400 per kthread [ 866.387277][T31591] netlink: 'syz.2.6218': attribute type 4 has an invalid length. [ 866.409103][T31591] netlink: 'syz.2.6218': attribute type 4 has an invalid length. [ 866.701781][T31605] bridge0: port 3(veth0_to_bridge) entered blocking state [ 866.739760][T31605] bridge0: port 3(veth0_to_bridge) entered disabled state [ 866.747164][T31605] veth0_to_bridge: entered allmulticast mode [ 866.762462][T31605] veth0_to_bridge: entered promiscuous mode [ 866.769163][T31605] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 866.784728][T31605] bridge0: port 3(veth0_to_bridge) entered blocking state [ 866.792265][T31605] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 866.832113][T31611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6223'. [ 867.099859][T31629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6228'. [ 867.211330][T31638] x_tables: duplicate underflow at hook 2 [ 867.392716][T31648] netlink: 'syz.3.6227': attribute type 21 has an invalid length. [ 867.450905][T31648] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6227'. [ 867.470762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 867.483615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 867.496210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 867.508700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 867.521285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 867.533797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 867.546318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 867.558846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 867.604829][T31651] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 867.624300][T31649] vlan0: entered allmulticast mode [ 867.629912][T31649] team0: entered allmulticast mode [ 867.713799][T31649] team_slave_0: entered allmulticast mode [ 867.773624][T31649] team_slave_1: entered allmulticast mode [ 869.347966][ C1] net_ratelimit: 4581 callbacks suppressed [ 869.347989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 869.366248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.378669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.391125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 869.403492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.415917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.428383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 869.440800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.453224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.465649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 872.361639][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 874.217720][ C0] sched: DL replenish lagged too much [ 874.357773][ C1] net_ratelimit: 12775 callbacks suppressed [ 874.357795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.376186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 874.388529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.400922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.413358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 874.425711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.438127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.450557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 874.462918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.475320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.799601][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 877.807761][ C0] lec:lec_tx_timeout: lec0 [ 879.368064][ C1] net_ratelimit: 12423 callbacks suppressed [ 879.368086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 879.386446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.398923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.411394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 879.423768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.436154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.448581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 879.460983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.473403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.485864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 884.377887][ C1] net_ratelimit: 12452 callbacks suppressed [ 884.377911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 884.396222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.408662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.421118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 884.433515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.445911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.458372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 884.470765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.483178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.495643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 889.387944][ C1] net_ratelimit: 12401 callbacks suppressed [ 889.387966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 889.406290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.418708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.431156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 889.443535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.455973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.468417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 889.480798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.493215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.505628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 894.397873][ C1] net_ratelimit: 12375 callbacks suppressed [ 894.397895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.416486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.428949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 894.441362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.453781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.466251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.478754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 894.491168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.503535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.515998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.407745][ C1] net_ratelimit: 12417 callbacks suppressed [ 899.407768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.426032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.438485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.451036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 899.463435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.475755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.488118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.500568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 899.512928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.525232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.417906][ C1] net_ratelimit: 12956 callbacks suppressed [ 904.417930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.436444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 904.448869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.461320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 904.473667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.486036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.498388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.510802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.523206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 904.535571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.427693][ C1] net_ratelimit: 12472 callbacks suppressed [ 909.427713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 909.446129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.458619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 909.470997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.483344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.495684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.508134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.520912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 909.533311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.545736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 914.437700][ C1] net_ratelimit: 12339 callbacks suppressed [ 914.437728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.456133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 914.468564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.480976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 914.493377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.505841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.518323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 914.530790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.543303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 914.555736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.447966][ C1] net_ratelimit: 12300 callbacks suppressed [ 919.447989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.466561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.478985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 919.491402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.503833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 919.516190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.528568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.540916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.553294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.565725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 924.457804][ C1] net_ratelimit: 13313 callbacks suppressed [ 924.457828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 924.476261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.488753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 924.501193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.513559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 924.525884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.538342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.550832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 924.564230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.576684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 929.468001][ C1] net_ratelimit: 12318 callbacks suppressed [ 929.468024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.486512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 929.498849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.511224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 929.523538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.535961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.548322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 929.560738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.573129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 929.585484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.650663][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 934.477817][ C1] net_ratelimit: 12809 callbacks suppressed [ 934.477838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.496204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 934.508542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.520973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.533381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 934.545738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.558091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 934.570461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.582877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 934.595316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.837686][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 938.845741][ C0] lec:lec_tx_timeout: lec0 [ 939.487928][ C1] net_ratelimit: 13626 callbacks suppressed [ 939.487953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.506251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 939.518609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.532412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.544795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 939.557170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.569533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 939.581874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.594154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 939.606410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.498036][ C1] net_ratelimit: 12900 callbacks suppressed [ 944.498059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.516413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.528857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 944.541289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.553782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 944.566150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.578511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 944.590879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.603527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.616022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 949.507981][ C1] net_ratelimit: 12182 callbacks suppressed [ 949.508004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.526336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 949.538803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.551233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.563691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 949.576166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.588629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 949.601481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.613826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 949.626242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.518000][ C1] net_ratelimit: 12544 callbacks suppressed [ 954.518024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.536471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 954.548937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.561394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 954.573806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.586157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 954.598824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.611357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.623896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 954.636337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.527859][ C1] net_ratelimit: 12627 callbacks suppressed [ 959.527881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.546733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 959.559152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.571539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 959.583916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.596338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.608794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 959.621264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.633773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 959.646254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.537990][ C1] net_ratelimit: 12538 callbacks suppressed [ 964.538010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.556367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 964.568857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.581316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 964.593699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.606080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 964.618491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 964.630859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.643293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.655726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 969.547782][ C1] net_ratelimit: 12938 callbacks suppressed [ 969.547806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.566160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 969.578552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 969.590977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.603371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.615816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 969.628221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.640670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 969.653066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.665456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 974.557964][ C1] net_ratelimit: 12680 callbacks suppressed [ 974.557985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.576382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.588792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 974.601332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.613743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 974.626138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.638492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 974.650922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 974.663347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.675852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.567741][ C1] net_ratelimit: 12294 callbacks suppressed [ 979.567764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 979.586071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 979.598459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.610899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.623382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 979.635862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.648340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.660794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 979.673253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.685691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 984.207669][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 984.214679][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31667/1:b..l [ 984.223268][ C1] rcu: (detected by 1, t=10502 jiffies, g=144861, q=3152 ncpus=2) [ 984.231204][ C1] task:syz.1.6236 state:R running task stack:26120 pid:31667 tgid:31664 ppid:30089 task_flags:0x400140 flags:0x00080000 [ 984.245992][ C1] Call Trace: [ 984.249324][ C1] [ 984.252291][ C1] __schedule+0x1585/0x5340 [ 984.256865][ C1] ? page_table_check_set+0x148/0x610 [ 984.262279][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 984.267258][ C1] ? __pfx___schedule+0x10/0x10 [ 984.272163][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 984.277159][ C1] preempt_schedule_irq+0x4d/0xa0 [ 984.282230][ C1] irqentry_exit+0x599/0x620 [ 984.286868][ C1] ? trace_irq_disable+0x3b/0x150 [ 984.291951][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 984.297981][ C1] RIP: 0010:unwind_next_frame+0x539/0x23c0 [ 984.303838][ C1] Code: 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 ef 48 39 dd 76 a2 76 fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 7c cc 4c 89 ff 48 [ 984.323486][ C1] RSP: 0018:ffffc90004d0f578 EFLAGS: 00000202 [ 984.329600][ C1] RAX: ffffffff90337f80 RBX: ffffffff90337f84 RCX: ffffffff90337f88 [ 984.337604][ C1] RDX: ffffffff90337f84 RSI: ffffffff90b46bb8 RDI: ffffffff8c27a420 [ 984.345614][ C1] RBP: ffffffff90337f88 R08: 0000000000000001 R09: ffffffff8e7602e0 [ 984.353618][ C1] R10: ffffc90004d0f698 R11: ffffffff81b0b130 R12: ffffffff823a05a1 [ 984.361623][ C1] R13: ffffffff90337f84 R14: ffffc90004d0f648 R15: ffffffff90337f84 [ 984.369637][ C1] ? save_stack+0x121/0x230 [ 984.374182][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 984.380386][ C1] ? unwind_next_frame+0xd4/0x23c0 [ 984.385556][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 984.390714][ C1] ? save_stack+0x122/0x230 [ 984.395249][ C1] ? save_stack+0x122/0x230 [ 984.399787][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 984.405978][ C1] arch_stack_walk+0x11b/0x150 [ 984.410814][ C1] ? save_stack+0x122/0x230 [ 984.415407][ C1] stack_trace_save+0xa9/0x100 [ 984.420201][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 984.425612][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 984.430602][ C1] save_stack+0x122/0x230 [ 984.434966][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 984.439940][ C1] ? __pfx_save_stack+0x10/0x10 [ 984.444860][ C1] __reset_page_owner+0x71/0x1f0 [ 984.449835][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 984.455020][ C1] __slab_free+0x263/0x2b0 [ 984.459498][ C1] qlist_free_all+0x97/0x100 [ 984.464124][ C1] kasan_quarantine_reduce+0x148/0x160 [ 984.469625][ C1] __kasan_slab_alloc+0x22/0x80 [ 984.474513][ C1] __kmalloc_noprof+0x316/0x760 [ 984.479571][ C1] ? tomoyo_encode+0x28b/0x550 [ 984.484370][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 984.489427][ C1] tomoyo_encode+0x28b/0x550 [ 984.494055][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 984.499741][ C1] ? tomoyo_path_number_perm+0x219/0x630 [ 984.505410][ C1] tomoyo_path_number_perm+0x246/0x630 [ 984.510912][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 984.516942][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 984.521927][ C1] ? do_futex+0x395/0x420 [ 984.526289][ C1] ? file_init_path+0x434/0x590 [ 984.531204][ C1] ? __fget_files+0x2a/0x420 [ 984.535845][ C1] ? __fget_files+0x2a/0x420 [ 984.540474][ C1] ? __fget_files+0x3a0/0x420 [ 984.545192][ C1] ? __fget_files+0x2a/0x420 [ 984.549819][ C1] security_file_ioctl+0xc3/0x2a0 [ 984.554890][ C1] __se_sys_ioctl+0x47/0x170 [ 984.559521][ C1] do_syscall_64+0x14d/0xf80 [ 984.564155][ C1] ? trace_irq_disable+0x3b/0x150 [ 984.569222][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.575315][ C1] ? clear_bhb_loop+0x40/0x90 [ 984.580033][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.585963][ C1] RIP: 0033:0x7f0baf19c629 [ 984.590435][ C1] RSP: 002b:00007f0baffbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 984.598885][ C1] RAX: ffffffffffffffda RBX: 00007f0baf416090 RCX: 00007f0baf19c629 [ 984.606893][ C1] RDX: 0000200000000000 RSI: 0000000080585882 RDI: 0000000000000003 [ 984.614907][ C1] RBP: 00007f0baf232b39 R08: 0000000000000000 R09: 0000000000000000 [ 984.622915][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.630919][ C1] R13: 00007f0baf416128 R14: 00007f0baf416090 R15: 00007ffdc3f36a88 [ 984.639041][ C1] [ 984.642965][ C1] net_ratelimit: 11265 callbacks suppressed [ 984.642984][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 984.661500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 984.673923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.686414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.700714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 984.713183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.725658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.738122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 984.750612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.763120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 989.648088][ C1] net_ratelimit: 12464 callbacks suppressed [ 989.648112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 989.666426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 989.678769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.691238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.703679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 989.716083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.728526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.740991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0) [ 989.753422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.765867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:ee:0b:63:02:f0, vlan:0)