last executing test programs: 12.75410567s ago: executing program 0 (id=3628): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00001082c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "9e66e1c0eaccb2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00001092c0)={{0x0, 0x6, 0x3, 0x8, 0x4000000000000, 0x8000000000000001, 0x5, 0x2, 0xd9, 0x6, 0xffff, 0x8, 0x400, 0x9, 0x2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000109340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000010a340)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000010a540)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000010b540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010b740)={0x4f33, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xa, "8e1226ae666fc7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c740)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "800308402623ab"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010d740)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r2}, {r3}, {r4, r5}, {0x0, r6}, {r7, r8}], 0x5, "1c3e129c2fc299"}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x8, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd780000f8ffffff000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r15], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r16 = socket(0x10, 0x3, 0x0) sendmmsg(r16, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 12.348489938s ago: executing program 0 (id=3635): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, 0x0, &(0x7f00000004c0)='%pB \x00'}, 0x20) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r0, @ANYRES32=r3, @ANYRES64=r1, @ANYRESOCT=0x0], 0x1c}}, 0x404c044) write$nci(r1, &(0x7f00000004c0)=ANY=[], 0xb6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4) 9.162007724s ago: executing program 0 (id=3644): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 7.171020963s ago: executing program 0 (id=3649): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x4008001, 0x80) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) sendfile(0xffffffffffffffff, r0, 0x0, 0xf03a0005) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.110009737s ago: executing program 3 (id=3658): socket$igmp(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 5.519986908s ago: executing program 1 (id=3662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg(r2, &(0x7f0000000d00)={&(0x7f0000000400)=@ll={0x11, 0x5, r4, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)="e06c7576cb15e87c58e4ee2920aee51a75f1c61b04397d4078c0c676ad12215bee4c3589640d06b541ab0e4ab1e5673949ee4c4677419bf3b3fd93516ec787b70f386146e184bb7307d67b03ee2a4a13453f0a1af038364579490ef51411f2e3f3755e506fe37766bb19e09d9769732a35b5f90b9f097168445af98e1a4566d56e4f01be208808f9567838de29973f9bba2a9b063feaa9f11ba6b3bfec69a67843bff2c6a8d1f285983b8cf7da9ad87154050c30cd", 0xb5}, {&(0x7f0000000540)="01ab953b111dc5b5d34ecb6468302d1f984d21c385b29141da0c2b73e7332e734ea5231fc4339e7e9f544695af6d0eb2c609e98387737612b00b01b0aebc878ea85b043678fa0ddc11063137f2b628b53a64432e81f3693230be32befc4c24bf11337eb9511afe0549", 0x69}, {&(0x7f00000005c0)="ea3daa96b172c49d1b289afa1a218b06b9c0f7da24db0856c674ddf748a42c504631ad8c8ba9b193e3c4b0a79f8ae52d1555a8c2924e9dcd0f69fd4a6ce357880a83c229d77c0d21b2724f8012b68f9d1d16473fd5e61ebd052612d254f3fb36993bb39f96b67aa5cf838927a63fb8b61ae5f6bc4bf7222e7b36778ba97d878465092f3259b7beaf4a2a708a23c908477e254cb4fb5da68e05409e2d4ca5b890929acbfe73d1de5ab36478bfcf16743329c6c8317d6544d9a8ae3e98ad844bdf4b50f50f144b69dfc29884dd9fbe3a6580976562952724cb0310f51c3dcd977bafea", 0xe2}], 0x3, &(0x7f0000000a40)=[{0x88, 0x107, 0x6, "4e770f06c0fb8b86d1d72b5f46c6808a42f380827861c05c8e74f8faaa5295da5ec4de28039543c7838c5b0246df47821a8d1619f9d13dbaf4e1ea27522ffbeb14975bc86889945ff82e037a90131400b143fdd101a68177be7cf483733c33fe5bc188c43be99df2bb33d4cd3ecd4840f3ab23"}, {0xb0, 0x10f, 0x10, "397278342f669c2a08e86d563b995f0785993ad559fe92c6fb1159c549bccbb49877bc9b4ea87b67add2c03d0e6400811a772bf58b07cedcfa3df8796ad3e346b1579904030f586c60f8a01a39e70ed0d595bc31c01fa9b5436d70e849f8c2488a8bcaf54211b5c70a55496810c79c9284e337731cfd9d221efe66dc8149214afe64a190549cda0a88126a0bbb50decc0cdb7ea52e9e0d1d4e0b84686c3952f1"}, {0x30, 0x114, 0x8, "c2127799fe982a8acbd390ee0c7fc74ef7026eb351e0f831d715a4c154d67333"}, {0xd0, 0xff, 0x6, "1002cdccc2e1eb9736aa4e45d2fcfd67bce235243ac8d87afacd3a9f15e9996c1e75adae3b0de3cecee75f584ef9b3a3feef64f339f6447f64a800ecf080a325c0ba104dbdebad1dfdda2344359aefe398eb4c30930a7a5610b6a0223da2fa7fc42525898960440fbe211b8f1f378d723460edec9900640a4bbec7de7d4a934da49ac6d3122f7c2a41e026c686ef7ab3ee0b17cbe4bfa3e873f37649cdef94f9279bc873765580baf33391a4d903088328175b43b1243e040aceefdadb91ff6c"}, {0x48, 0x88, 0x31f, "a247d6ac0451f6f7b9c3011abe9ed140c26b31081b8864a3b946ef175839feab2131362515304bcb5fec1eab80e95ca71b7244190e55"}, {0x20, 0x11, 0x306e, "8e539e990c4bddfc2bd988c6"}], 0x2a0}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x34}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 5.512206467s ago: executing program 3 (id=3663): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100003f0404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 5.353579468s ago: executing program 3 (id=3664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)) r4 = socket$inet6(0xa, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000280)={r7}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000001080)={r7, 0x2}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "a2284520250453ad", "3db7b4a9cf2242171d6710fef24aca07dcf23770bd27d2445257abe2ff1c4892", "49aca8ae", "1eef2d5b5d6b5148"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) 5.296576893s ago: executing program 1 (id=3665): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x5) (async, rerun: 32) r3 = socket(0x2d, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2d, 0x4e24, @rand_addr=0x64010100}, 0x10) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) (async, rerun: 32) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x50002, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r5, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f00000000c0)) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000140)=0x56a4c5c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x703d2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) (async, rerun: 64) write$ppp(r4, &(0x7f0000000a00)="72490da505", 0x5) (rerun: 64) pwritev(r4, &(0x7f0000001540)=[{&(0x7f0000000280)="f65a61c7a17547656a6edb02471a67824c05", 0x12}], 0x1, 0x1, 0x8) 5.009303983s ago: executing program 2 (id=3666): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="68000000300005060000000d000000000000010054000100500001000900010067617465"], 0x68}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000000000000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000080000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000120010000000000000000000000000000000040000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ac1414000000000000000000000000000000000000000000fc"], 0xec}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@bridge_dellink={0x24, 0x11, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r2, 0x2040, 0x100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 4.844848484s ago: executing program 2 (id=3667): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r1, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) 4.580580005s ago: executing program 2 (id=3669): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x4, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRES64=r0], 0x48}}, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@canfd={0xd, {{0x2, 0x0, 0x1, 0x1}, 0x32, 0x0, 0x0, 0x0, "92f9f5693fdc59e295d578697e6e5bf906f7849ac7dc662622e37a61b8c8eb55f17402c8586d26b9922c254fb759f672de893688526c645bf7d6d5c1870d7c0b"}}}}, 0x0) (rerun: 64) 4.287664435s ago: executing program 3 (id=3671): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000500)=0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"fbffff090800"}}}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x3, 0x0, 0x5, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)={r5, 0xb, 0x7c, "2e17ffa088c1a057c9f3bad3136ca6e9c96bf9ff335eed43b797462878e4892da37a843ea3ba63a3cb8fa331602322364a5a04caf68d8728ac681dfadf36b66a1b679df2af71d4a3ae088f1ec8e5245f2a73c2e0e3b9dbb36e7fed288271ed02857ea73323185246c5afcfd6fb3f247a78d716aeb2e74a95d1bd7515"}, 0x84) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)={r5, 0xb, 0x7c, "2e17ffa088c1a057c9f3bad3136ca6e9c96bf9ff335eed43b797462878e4892da37a843ea3ba63a3cb8fa331602322364a5a04caf68d8728ac681dfadf36b66a1b679df2af71d4a3ae088f1ec8e5245f2a73c2e0e3b9dbb36e7fed288271ed02857ea73323185246c5afcfd6fb3f247a78d716aeb2e74a95d1bd7515"}, 0x84) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe4, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2c8b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8ce}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff61}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 4.286376358s ago: executing program 1 (id=3672): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r3, 0x4, r3}, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000380)="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", 0x20b) 4.215179832s ago: executing program 4 (id=3673): socket$igmp(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 4.115399534s ago: executing program 3 (id=3674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000200)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0x3ff, 0x4) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x4040000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x2c, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 3.91173618s ago: executing program 2 (id=3675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0008a16000008009f000d000000080026000816"], 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x945}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}]}, 0x5c}}, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0008a16000008009f000d000000080026000816"], 0x40}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x945}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}]}, 0x5c}}, 0x4000000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 3.911196335s ago: executing program 4 (id=3676): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r1, &(0x7f0000000b40)=[{&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000023c0)=""/4087, 0xff7}], 0x2) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="180000001600f1fff8ffffffffff00000a000003"], 0x18}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) 3.832280238s ago: executing program 1 (id=3677): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0xffffffffffffff2b, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014) (async) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x60a, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x80}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xb}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4) 3.774103823s ago: executing program 0 (id=3678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r3, 0x0) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32, @ANYBLOB="560609000000000050001980140005004aa0a26cd54dd00216059b4ae508fd03b6cbd87341fd4d6c09000200626f6e64000000001400040013d48dc4a48a8c923281a20249666aa4050002"], 0x70}, 0x1, 0x0, 0x0, 0xe90}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="24002d80"], 0x40}, 0x1, 0x0, 0x0, 0x24881}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x300, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1008, 0x40080}, [@IFLA_BROADCAST={0xa, 0x2, @link_local}]}, 0x2c}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, 0x0, 0x4c) sendmsg$nl_generic(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="480200004200000427bd7000fedbdf2515000000360125806a00e280b90e7bf277d617d06c307bff25162827b331d79cf9c503acdc753af0e8bff291843588219971ed26f47483cc53a1881def2a18c569ca1c8217649270b2e80fb3d053c6c1f0cc227e24b10262564512391acc15c82edb355fc49c921439b1eeb957d80400ac800000a60409000000454a913d7f73d1ab90706db455024058f42470f9b8008bb42a8c95ea8539297d3e1f9eb6fd0ae2072228c6de2dd49cf6c556630de55ab88c59cd42e180b62f8b4fa26ceeccbc7dcc3283f905286493e4dd2aed63767c51627149d7f86bd191bd5367eafae1a6dc1daf824f792d229856d84230a608811a46fdc3a6e94af4baeb242058048f6f95b6e324ea9cc7704a11e72768060d3214016d7411146b146befc7525d420d57d01c5f01dc7509b646a459c54eb896765a8eb6f557ab4406ded6000068209f04a5894bf7fb74a8abc658a3bd5446b91a8d51676bfc8988b4d834a311b0a88cde868b697a70650f424bfaf9b1537ee5f1f42e742cd7b84b6b262594ed434ed01a18dfaebee4adc72be30c559c3480c2e652b18ae49032396c8d222f8571f0bc14b7b9e10c4f1dafd1108b83fddff99b9f3c6a2baab8437b60d9b996c939b8afadc78909feea5c56366d0016808107557addcee03b6ad511e5477f35a71150f0f3faa614004f00ff020000000000000000000000000001c3cfbf40228d45da6ac3da9c4cca954a80509c16b2d983a48674a873aac5cd678dbfaeece6d34b7b6db8bf09ce8d2620711beea648eebfa22ab0b504007f80000000"], 0x248}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) listen(r8, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000040)={r10, r11/1000+60000}, 0x10) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r12, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) accept4(r8, 0x0, 0x0, 0x80800) shutdown(r8, 0x1) 3.315963533s ago: executing program 4 (id=3679): bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pim6reg\x00'}) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x7000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000180)={'gre0\x00', r1, 0x80, 0x8000, 0x0, 0xa2, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp={0x44, 0x8, 0xe8, 0x0, 0x4, [0xfffffff8]}]}}}}}) (async) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 3.31215118s ago: executing program 3 (id=3680): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x29901, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 3.302000422s ago: executing program 0 (id=3681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70fd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4041080) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0xec, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}, @generic="97a9545417211e63079594d3fda1", @generic="759af46ccbaa73cb07346dec4fd92d96a4ed560a20f19e7f566333b87c8465288c4ec084108c740dc10652eb987298441abe78a16ca57f1ddc6b1862fbc2d5ce8d7b909dd786ee2cdd1d79b6fac2fd72639b16bf8dd2558cf8c6198b157f1414daa207713829b0097aaecc2f6535c4a4febc1b7a149e71139a366b1d48e68249d7a9a837ec8b799e995dc29f8620aa390d749905e8444cec226a2bb4d99a85b67104152eedcefd16601f6df71c5c4b53238663f881d44b4c3b19fb70"]}, 0xec}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe) listen(r6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)="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", 0x1ca}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=""/120, 0x78}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/207, 0xcf}, {&(0x7f0000001480)=""/133, 0x85}, {&(0x7f0000001540)=""/147, 0x93}], 0x5}, 0x3}], 0x1, 0x40010100, 0x0) 3.150916189s ago: executing program 2 (id=3682): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000890) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0xfffffffe, 0x2}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xa) close(0x3) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x3, 0xfffffffb, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40410b0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xc0800}, &(0x7f0000000040)=0xc) close(0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x5c81, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xd4, &(0x7f00000005c0)=[@in6={0xa, 0xff00, 0x4, @local, 0x39}, @in6={0xa, 0x4e21, 0x8, @empty, 0x9f9f}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0x3, @private0, 0x1}, @in6={0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x5}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0xbe5}, @in6={0xa, 0x4e23, 0x9, @empty, 0xd02}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000300)={r9, 0x9, 0x2, [0x7, 0x0]}, &(0x7f0000000340)=0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x64, r1, 0x2, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}, 0x1, 0x620b}, 0x20040030) 2.616007455s ago: executing program 1 (id=3683): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.592226342s ago: executing program 4 (id=3684): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000400)={{0xffffffffffffffff, &(0x7f00000000c0)='$\x00', 0x84800, &(0x7f0000000100)={@_ha_fsid={[0x4, 0x4]}, {0xffff, 0xffff, 0x9, 0x1}}, 0xffffffb3, &(0x7f0000000140), &(0x7f0000000180)=0x3}, 0x1, &(0x7f00000003c0)=[{0x3, 0x1, &(0x7f0000000340)='/+{!]%2\x00', &(0x7f0000000380)="0571ee273e7a84898d61f61c466ccf7fc47d84", 0x13, 0x8}]}) mmap(0x0, 0x0, 0x2000003, 0x12, r0, 0x0) socketpair(0xa, 0xa, 0x1, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="52000000100001042df8fb00009cf9273d2a17f8971bbe88b5e564200324832a35200eef9ea366c621e4bd06b690b8c2eccbc210d5fb4c5e5bd0117238c74388866b03c31d637cc297af9ad26fef709cf3124df32b816edd9b719674fe2a4e2eb84f9bdf9be60e5a802dd642929b9e01402e485190839e6a06f124299b3745e4e40777cb4558b1bb7bcc0afb0985428e74770d1b3d5888d154fb97b4979e62115d95959e155e4b81890412ac15f03fafe7838cdc828fc60c000073b11786581d615e3bb03553d68edcb0ae98845f1d5db24ba6970bb9670fb96b17a9117f685a", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280110001006272696467655f736c6176650000000004000580140003007465616d5f736c6176655f3100000000"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0xf1) 2.509186302s ago: executing program 2 (id=3685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r3, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 2.326031772s ago: executing program 1 (id=3686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x4}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x1f, r2}]}, 0x44}}, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) listen(r4, 0x1) sendmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r6, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.325627552s ago: executing program 4 (id=3687): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 0s ago: executing program 4 (id=3688): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0xffffffffffffff34) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) kernel console output (not intermixed with test programs): ow actions may not be safe on all matching packets. [ 405.256472][T15957] openvswitch: netlink: nsh attr 350 is out of range max 3 [ 405.539883][T15970] netlink: 'syz.3.2668': attribute type 2 has an invalid length. [ 405.539910][T15970] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2668'. [ 405.868459][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2669'. [ 405.977777][T15980] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 406.196657][T15986] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2672'. [ 406.239635][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2673'. [ 406.251338][T15984] netlink: 'syz.2.2672': attribute type 1 has an invalid length. [ 406.251618][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2672'. [ 406.297960][T15993] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2673'. [ 406.399999][T15983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 406.713947][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 406.747382][T16006] erspan0: entered promiscuous mode [ 407.056514][ T31] audit: type=1107 audit(1791270953.581:4): pid=16011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='nj9(;/JR%TSUYe(M)Y?>*(<5vFhQ˝M,p!qeGYY<ĺObd#Ef 3^=|<:!K̢"ltд_׆h` Fhl.:Of1' [ 407.376017][T16032] netlink: 'syz.3.2684': attribute type 12 has an invalid length. [ 407.576283][T16029] xt_hashlimit: size too large, truncated to 1048576 [ 407.755534][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2685'. [ 408.533532][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2689'. [ 408.539915][T16058] ipt_rpfilter: unknown options [ 408.588635][T16066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2691'. [ 409.903596][T16079] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 411.468226][T16136] __nla_validate_parse: 1 callbacks suppressed [ 411.468249][T16136] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2707'. [ 411.953567][T16157] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 411.982543][T16157] bond7 (unregistering): Released all slaves [ 412.051011][T16161] tipc: Enabled bearer , priority 11 [ 412.208690][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2718'. [ 412.323245][ T31] audit: type=1800 audit(1791270958.841:5): pid=16169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2719" name=0A dev="tmpfs" ino=2833 res=0 errno=0 [ 412.518926][T16183] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 412.708094][T16197] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 412.941528][T16189] bond0: (slave gretap2): making interface the new active one [ 412.998628][T16189] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 412.998920][T16188] IPVS: Unknown mcast interface: vcan0 [ 413.102888][T16202] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 413.401145][T16211] netlink: 'syz.0.2727': attribute type 83 has an invalid length. [ 413.414306][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 413.513910][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 413.584655][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 413.834793][T16228] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 413.900715][T16228] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2735'. [ 414.014933][T16235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2737'. [ 414.014962][T16235] openvswitch: netlink: Flow actions attr not present in new flow. [ 414.016429][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2737'. [ 414.566239][T16228] 8021q: adding VLAN 0 to HW filter on device .` [ 414.717703][T16228] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 414.721293][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.721407][T10893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.775877][T16249] veth0: entered promiscuous mode [ 415.062992][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'. [ 415.217938][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'. [ 415.425534][T16247] veth0: left promiscuous mode [ 415.728857][T16284] x_tables: duplicate underflow at hook 3 [ 416.614633][T16314] __nla_validate_parse: 3 callbacks suppressed [ 416.614657][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2758'. [ 417.214401][T16336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.800513][T16357] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 417.800554][T16357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.902534][T16357] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 417.902581][T16357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.070058][T16369] netlink: 'syz.0.2768': attribute type 1 has an invalid length. [ 418.070083][T16369] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2768'. [ 418.070102][T16369] netlink: 'syz.0.2768': attribute type 1 has an invalid length. [ 418.070127][T16369] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.2768'. [ 418.115547][T16369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2768'. [ 418.157041][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.158011][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.244805][T16374] pimreg: entered allmulticast mode [ 418.248141][T16374] netlink: 'syz.3.2770': attribute type 3 has an invalid length. [ 418.248162][T16374] netlink: 'syz.3.2770': attribute type 2 has an invalid length. [ 418.343971][T16378] ip_tables: iptables: counters copy to user failed while replacing table [ 418.390177][T16383] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 418.409719][T16377] pimreg: left allmulticast mode [ 418.607647][T16390] ip_tables: iptables: counters copy to user failed while replacing table [ 418.695360][T16393] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2775'. [ 418.940921][T16401] netlink: 'syz.1.2777': attribute type 39 has an invalid length. [ 418.989430][ T59] smc: removing ib device syz2 [ 419.057097][T14183] infiniband syz2: ib_query_port failed (-19) [ 419.257988][T16411] netlink: 'syz.3.2780': attribute type 7 has an invalid length. [ 419.387966][T16411] netlink: 'syz.3.2780': attribute type 7 has an invalid length. [ 419.476439][ T59] smbdirect: ib_dev[syz2] removed [ 419.742582][T16421] netlink: 'syz.4.2783': attribute type 21 has an invalid length. [ 419.742609][T16421] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2783'. [ 419.789526][T16421] netlink: 'syz.4.2783': attribute type 4 has an invalid length. [ 419.789552][T16421] netlink: 'syz.4.2783': attribute type 5 has an invalid length. [ 419.789566][T16421] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2783'. [ 421.027605][T16447] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 422.010304][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 422.047150][T16464] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2799'. [ 422.410429][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'. [ 422.602648][T16482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2802'. [ 422.602675][T16482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2802'. [ 422.916766][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2804'. [ 423.082070][T16482] block nbd296: server does not support multiple connections per device. [ 423.082731][T16482] block nbd296: shutting down sockets [ 423.699988][T16506] geneve3: entered promiscuous mode [ 423.994985][T16515] validate_nla: 2 callbacks suppressed [ 423.995039][T16515] netlink: 'syz.1.2810': attribute type 2 has an invalid length. [ 424.400235][T16533] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 424.502460][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2815'. [ 424.739251][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2818'. [ 424.830786][T16545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2820'. [ 424.830935][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2820'. [ 424.884289][T16547] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.843443][T16573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.065345][T16611] bridge7: entered promiscuous mode [ 427.065876][T16611] bridge7: entered allmulticast mode [ 427.125882][T16611] __nla_validate_parse: 7 callbacks suppressed [ 427.125905][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2839'. [ 427.544241][T16620] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2842'. [ 427.837344][T16628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2844'. [ 427.837374][T16628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2844'. [ 428.049406][T16633] x_tables: duplicate underflow at hook 2 [ 428.212057][T16634] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 428.628229][T16651] xt_l2tp: missing protocol rule (udp|l2tpip) [ 429.657986][T16689] IPv6: addrconf: prefix option has invalid lifetime [ 429.658005][T16689] IPv6: addrconf: prefix option has invalid lifetime [ 430.013972][T16706] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 430.276715][T16706] bond8: entered promiscuous mode [ 430.279956][T16706] 8021q: adding VLAN 0 to HW filter on device bond8 [ 430.386870][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 430.387585][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 430.837363][T16743] Bluetooth: hci0: unsupported parameter 5135 [ 430.837389][T16743] Bluetooth: hci0: unsupported parameter 8192 [ 430.837402][T16743] Bluetooth: hci0: unsupported parameter 5135 [ 430.837416][T16743] Bluetooth: hci0: unsupported parameter 8192 [ 430.870700][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 431.147330][T16760] ip6t_srh: unknown srh match flags 5F28 [ 431.281129][T16752] team0: Device gtp0 is up. Set it down before adding it as a team port [ 431.319671][ T31] audit: type=1800 audit(1791270977.841:6): pid=16771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2876" name=680B20 dev="tmpfs" ino=2941 res=0 errno=0 [ 431.484359][T16758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.598014][T16768] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 431.604585][T16773] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 431.622381][ T12] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 431.622477][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.622603][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.622969][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.029594][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2884'. [ 432.057245][T16797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2884'. [ 432.574863][T16818] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 432.617732][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 433.356916][T16843] bond7: entered promiscuous mode [ 433.357632][T16843] bond7: entered allmulticast mode [ 433.361211][T16843] 8021q: adding VLAN 0 to HW filter on device bond7 [ 433.661377][T16857] netlink: 'syz.0.2903': attribute type 11 has an invalid length. [ 433.803282][T16858] netlink: 'syz.1.2902': attribute type 21 has an invalid length. [ 433.803310][T16858] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2902'. [ 434.031905][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 434.031942][T16868] netlink: 'syz.1.2905': attribute type 1 has an invalid length. [ 434.031956][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 434.035865][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 434.035909][T16868] netlink: 'syz.1.2905': attribute type 1 has an invalid length. [ 434.035924][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 434.037667][T16873] netlink: 'syz.1.2905': attribute type 1 has an invalid length. [ 434.037687][T16873] netlink: 'syz.1.2905': attribute type 4 has an invalid length. [ 434.037702][T16873] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2905'. [ 434.087794][T16872] netlink: 'syz.1.2905': attribute type 1 has an invalid length. [ 434.087849][T16872] netlink: 'syz.1.2905': attribute type 4 has an invalid length. [ 434.087889][T16872] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2905'. [ 435.113965][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2910'. [ 435.611203][T16902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2916'. [ 436.996424][T16942] netlink: 'syz.1.2928': attribute type 4 has an invalid length. [ 437.010153][T16943] netlink: 'syz.1.2928': attribute type 4 has an invalid length. [ 437.460303][T16956] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 437.476292][T16958] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 437.660207][T16973] __nla_validate_parse: 8 callbacks suppressed [ 437.660229][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 437.680904][T16973] Bluetooth: hci0: unsupported parameter 5161 [ 437.680928][T16973] Bluetooth: hci0: unsupported parameter 8192 [ 437.680942][T16973] Bluetooth: hci0: unsupported parameter 5161 [ 437.680954][T16973] Bluetooth: hci0: unsupported parameter 8192 [ 438.312863][T16994] xt_hashlimit: invalid interval [ 438.830928][T17009] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:21 [ 439.040940][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.058904][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.060642][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.073696][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.086665][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.148028][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.148785][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.149430][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.182672][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.217718][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.401296][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 439.401336][T17022] netlink: 'syz.4.2950': attribute type 10 has an invalid length. [ 439.401354][T17022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2950'. [ 439.522494][T17026] xt_TCPMSS: Only works on TCP SYN packets [ 439.544496][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 439.544543][T17035] netlink: 'syz.4.2950': attribute type 10 has an invalid length. [ 439.544561][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2950'. [ 440.115591][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.180272][T17043] sctp: [Deprecated]: syz.2.2953 (pid 17043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.180272][T17043] Use struct sctp_sack_info instead [ 440.208087][T17043] netlink: 'syz.2.2953': attribute type 10 has an invalid length. [ 440.299471][T17043] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2953'. [ 441.166901][T17083] syzkaller0: entered promiscuous mode [ 441.166928][T17083] syzkaller0: entered allmulticast mode [ 441.216165][T17081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.218971][T17083] netlink: 'syz.4.2963': attribute type 2 has an invalid length. [ 441.292404][ T52] Bluetooth: hci5: command tx timeout [ 442.031075][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 442.031116][T17113] netlink: 'syz.4.2968': attribute type 7 has an invalid length. [ 442.031132][T17113] netlink: 'syz.4.2968': attribute type 8 has an invalid length. [ 442.031146][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2968'. [ 442.104054][T17106] netlink: Failed to add helper -22 [ 442.104116][T17106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.138684][T17115] ieee802154 phy1 wpan1: encryption failed: -90 [ 442.255206][T17118] veth0_virt_wifi: mtu less than device minimum [ 442.529229][T17012] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.531523][T17012] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.551570][T17012] bridge_slave_0: entered allmulticast mode [ 442.566117][T17012] bridge_slave_0: entered promiscuous mode [ 442.579144][T17126] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 442.579174][T17126] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 442.608491][T17012] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.608678][T17012] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.608891][T17012] bridge_slave_1: entered allmulticast mode [ 442.633689][T17012] bridge_slave_1: entered promiscuous mode [ 442.695914][T17012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.713226][T17012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.770797][T17012] team0: Port device team_slave_0 added [ 442.780634][T17012] team0: Port device team_slave_1 added [ 442.822955][T17012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.822976][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.823006][T17012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.825131][T17012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.825147][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.825185][T17012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.977726][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 442.993673][T17012] hsr_slave_0: entered promiscuous mode [ 442.994837][T17012] hsr_slave_1: entered promiscuous mode [ 442.995595][T17012] debugfs: 'hsr0' already exists in 'hsr' [ 442.995614][T17012] Cannot create hsr debugfs directory [ 443.065679][T17130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2974'. [ 443.381085][ T52] Bluetooth: hci5: command tx timeout [ 443.528464][T17151] netlink: 'syz.2.2981': attribute type 8 has an invalid length. [ 443.707967][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'. [ 443.730000][T17155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2977'. [ 443.730534][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'. [ 444.178225][T17012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.178267][T17012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.241061][T17161] veth0_to_bond: entered promiscuous mode [ 444.241087][T17161] veth0_to_bond: entered allmulticast mode [ 444.489291][T17180] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2986'. [ 444.883563][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'. [ 444.999388][T17012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.999429][T17012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.347319][T17012] team0: Port device netdevsim1 removed [ 445.388106][T17012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.388147][T17012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.453385][ T52] Bluetooth: hci5: command tx timeout [ 445.459635][T17213] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2994'. [ 445.459659][T17213] tipc: Invalid UDP bearer configuration [ 445.459703][T17213] tipc: Enabling of bearer rejected, failed to enable media [ 445.621487][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 445.733685][T17012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.733726][T17012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.915413][T17228] tipc: Resetting bearer [ 445.955142][T17228] syzkaller0: left promiscuous mode [ 445.955171][T17228] syzkaller0: left allmulticast mode [ 446.203334][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'. [ 446.409216][T17244] netlink: 'syz.4.3000': attribute type 1 has an invalid length. [ 446.434095][T17236] 8021q: adding VLAN 0 to HW filter on device bond9 [ 446.620078][T17243] macvlan2: entered promiscuous mode [ 446.620104][T17243] macvlan2: entered allmulticast mode [ 446.634017][T17243] bond9: entered promiscuous mode [ 446.635444][T17243] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 446.709037][T17243] bond9: left promiscuous mode [ 447.226453][T17012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 447.262310][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.267082][T17012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 447.303980][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.309394][T17012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 447.338893][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.358083][T17012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 447.400280][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.528661][T17284] ip_tables: iptables: counters copy to user failed while replacing table [ 447.534679][ T52] Bluetooth: hci5: command tx timeout [ 447.880879][T17012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.930767][T17294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.961522][T17294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 447.961541][T17294] IPv6: NLM_F_CREATE should be set when creating new route [ 448.005508][T17012] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.038596][T17298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.076014][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.076126][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.119266][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.119383][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.297390][T17301] __nla_validate_parse: 2 callbacks suppressed [ 448.297412][T17301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3015'. [ 448.542081][T17306] netlink: 'syz.4.3018': attribute type 10 has an invalid length. [ 448.668193][T17322] netlink: 'syz.4.3018': attribute type 10 has an invalid length. [ 448.741986][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3021'. [ 448.752936][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.780411][T17306] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 449.633634][T17361] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3027'. [ 452.951378][T17012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.289758][T17012] veth0_vlan: entered promiscuous mode [ 453.330610][T17012] veth1_vlan: entered promiscuous mode [ 453.435003][T17395] xt_cluster: node mask cannot exceed total number of nodes [ 453.497612][T17012] veth0_macvtap: entered promiscuous mode [ 453.549025][T17012] veth1_macvtap: entered promiscuous mode [ 453.669738][T17012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.747278][T17012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.803103][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.804850][ T592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.804896][ T592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.804936][ T592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.327569][T10893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.327592][T10893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.554584][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.554607][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.357628][T17447] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 455.393365][T17447] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.411476][T17447] bond0: (slave team0): Enslaving as an active interface with an up link [ 455.793152][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.798332][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.803992][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.831258][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.840115][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 456.093513][T17456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3053'. [ 456.093540][T17456] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3053'. [ 456.233498][T17456] veth3: entered promiscuous mode [ 456.483789][T17448] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3049'. [ 457.729522][T15912] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.729562][T15912] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.932367][ T52] Bluetooth: hci2: command tx timeout [ 458.425827][T15912] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.425868][T15912] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.771138][T15912] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.771178][T15912] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.807139][T17524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3061'. [ 459.043291][T15912] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.043330][T15912] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.110577][T17534] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 459.110838][T17534] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 459.139541][T17541] netlink: 'syz.3.3064': attribute type 2 has an invalid length. [ 460.012994][ T52] Bluetooth: hci2: command tx timeout [ 460.626670][T15912] dvmrp1: left allmulticast mode [ 461.563795][T15912] bond0 (unregistering): (slave gretap2): Releasing active interface [ 461.942552][T15912]  (unregistering): (slave bridge6): Releasing active interface [ 461.989189][T15912] .` (unregistering): Released all slaves [ 462.006983][T15912] bond1 (unregistering): Released all slaves [ 462.035208][T15912] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 462.037643][T15912] bond2 (unregistering): Released all slaves [ 462.080209][T15912] bond3 (unregistering): Released all slaves [ 462.092487][ T52] Bluetooth: hci2: command tx timeout [ 462.131248][T15912]  (unregistering): Released all slaves [ 462.163623][T15912] bond0 (unregistering): Released all slaves [ 462.189078][T15912] bond4 (unregistering): Released all slaves [ 462.300830][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 462.464115][T17450] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.464695][T17450] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.464895][T17450] bridge_slave_0: entered allmulticast mode [ 462.466763][T17450] bridge_slave_0: entered promiscuous mode [ 462.554606][T15912] tipc: Disabling bearer [ 462.554964][T15912] tipc: Left network mode [ 462.556843][T17450] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.626623][T17450] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.627034][T17450] bridge_slave_1: entered allmulticast mode [ 462.661334][T17450] bridge_slave_1: entered promiscuous mode [ 462.960279][T17611] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3079'. [ 463.055668][T17450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.636448][T17633] netlink: 'syz.0.3082': attribute type 17 has an invalid length. [ 463.636473][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3082'. [ 463.636502][T17633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3082'. [ 463.765095][T17450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.144995][T17450] team0: Port device team_slave_0 added [ 464.172111][ T52] Bluetooth: hci2: command tx timeout [ 464.210178][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 464.248944][T17450] team0: Port device team_slave_1 added [ 464.486494][T17450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.486515][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.486545][T17450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.543208][T17450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.543228][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.543259][T17450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.024672][T17450] hsr_slave_0: entered promiscuous mode [ 465.029505][T17450] hsr_slave_1: entered promiscuous mode [ 465.048065][T17450] debugfs: 'hsr0' already exists in 'hsr' [ 465.048088][T17450] Cannot create hsr debugfs directory [ 465.099088][T15912] hsr_slave_0: left promiscuous mode [ 465.129391][T15912] hsr_slave_1: left promiscuous mode [ 465.474916][T17606] infiniband syz1: set active [ 465.477877][T17606] infiniband syz1: added ipvlan1 [ 465.527790][T17606] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 465.566238][T17606] infiniband syz1: Couldn't open port 1 [ 465.566660][T17606] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 465.566698][T17606] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 465.566743][T17606] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 465.769352][T17675] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3091'. [ 465.928596][T17606] RDS/IB: syz1: added [ 465.928654][T17606] smc: adding ib device syz1 with port count 1 [ 465.928676][T17606] smc: ib device syz1 port 1 has no pnetid [ 466.832834][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 467.039600][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'. [ 467.099045][T17686] bond0: (slave team0): Releasing backup interface [ 467.121299][T17691] netlink: set zone limit has 8 unknown bytes [ 467.236010][T17686] team0 (unregistering): Port device team_slave_0 removed [ 467.259394][T17686] team0 (unregistering): Port device team_slave_1 removed [ 467.376752][T17693] syzkaller0: entered promiscuous mode [ 467.376777][T17693] syzkaller0: entered allmulticast mode [ 467.697952][T15912] IPVS: stop unused estimator thread 0... [ 468.388505][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3096'. [ 469.057936][T17726] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 469.211200][T17734] netlink: zone id is out of range [ 469.211236][T17734] netlink: zone id is out of range [ 469.211248][T17734] netlink: zone id is out of range [ 469.211259][T17734] netlink: zone id is out of range [ 469.211280][T17734] netlink: zone id is out of range [ 469.211294][T17734] netlink: zone id is out of range [ 469.211304][T17734] netlink: zone id is out of range [ 470.385262][T17450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 470.411176][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.428190][T17450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 470.445615][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.449001][T17450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 470.475870][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.478901][T17450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 470.506650][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.907952][T17450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.970894][T17450] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.037022][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.037191][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.125484][T15912] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.125625][T15912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.799732][T17799] schedule_timeout: wrong timeout value fffffffffffffed4 [ 472.799781][T17799] CPU: 0 UID: 0 PID: 17799 Comm: syz.3.3110 Not tainted syzkaller #0 PREEMPT(full) [ 472.799811][T17799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 472.799829][T17799] Call Trace: [ 472.799843][T17799] [ 472.799853][T17799] dump_stack_lvl+0xe8/0x150 [ 472.799894][T17799] schedule_timeout+0x22e/0x2c0 [ 472.799925][T17799] ? __pfx_schedule_timeout+0x10/0x10 [ 472.799973][T17799] ? sk_wait_data+0x20e/0x4d0 [ 472.800002][T17799] wait_woken+0xbc/0x1a0 [ 472.800034][T17799] ? wait_woken+0x39/0x1a0 [ 472.800069][T17799] sk_wait_data+0x29b/0x4d0 [ 472.800105][T17799] ? __pfx_sk_wait_data+0x10/0x10 [ 472.800128][T17799] ? __pfx_woken_wake_function+0x10/0x10 [ 472.800162][T17799] ? smc_accept+0x690/0x9c0 [ 472.800194][T17799] ? __local_bh_enable_ip+0xd6/0x140 [ 472.800231][T17799] smc_accept+0x738/0x9c0 [ 472.800270][T17799] ? __pfx_smc_accept+0x10/0x10 [ 472.800298][T17799] ? __pfx_default_wake_function+0x10/0x10 [ 472.800331][T17799] ? __pfx_aa_sk_perm+0x10/0x10 [ 472.800362][T17799] ? inode_init_always_gfp+0x994/0xd30 [ 472.800398][T17799] ? apparmor_socket_accept+0x12f/0x200 [ 472.800434][T17799] do_accept+0x521/0x750 [ 472.800469][T17799] ? __pfx_do_accept+0x10/0x10 [ 472.800521][T17799] __sys_accept4+0x139/0x230 [ 472.800554][T17799] ? __pfx___sys_accept4+0x10/0x10 [ 472.800593][T17799] __x64_sys_accept4+0x9a/0xb0 [ 472.800625][T17799] do_syscall_64+0x166/0x520 [ 472.800655][T17799] ? trace_irq_disable+0x3b/0x140 [ 472.800679][T17799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.800703][T17799] ? clear_bhb_loop+0x70/0xc0 [ 472.800732][T17799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.800755][T17799] RIP: 0033:0x7f7a6059e199 [ 472.800777][T17799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.800798][T17799] RSP: 002b:00007f7a614a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 472.800824][T17799] RAX: ffffffffffffffda RBX: 00007f7a60825fa0 RCX: 00007f7a6059e199 [ 472.800840][T17799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 472.800854][T17799] RBP: 00007f7a606358e0 R08: 0000000000000000 R09: 0000000000000000 [ 472.800869][T17799] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 472.800882][T17799] R13: 00007f7a60826038 R14: 00007f7a60825fa0 R15: 00007fffc8c6a448 [ 472.800919][T17799] [ 473.093847][T17801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3110'. [ 473.093886][T17801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3110'. [ 473.247219][T17801] erspan0: entered promiscuous mode [ 473.311526][T17801] erspan0: left promiscuous mode [ 474.587577][T17450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.968127][T17450] veth0_vlan: entered promiscuous mode [ 475.010012][T17450] veth1_vlan: entered promiscuous mode [ 475.265427][T17450] veth0_macvtap: entered promiscuous mode [ 475.310705][T17450] veth1_macvtap: entered promiscuous mode [ 475.478510][T17450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.516900][T17450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.753930][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.754950][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.754991][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.755025][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.959538][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3119'. [ 475.977775][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3119'. [ 475.995063][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.995086][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.186866][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.186890][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.315865][T17890] openvswitch: netlink: IPv6 tunnel dst address is zero [ 477.513238][T17898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3123'. [ 477.616499][T17896] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3123'. [ 477.678443][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.679151][T17901] ip_tables: iptables: counters copy to user failed while replacing table [ 477.685442][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.706422][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.722776][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.727408][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.849216][T17890] vcan0: entered promiscuous mode [ 477.849243][T17890] vcan0: entered allmulticast mode [ 478.532725][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 479.274439][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 479.774766][ T52] Bluetooth: hci1: command tx timeout [ 480.273949][T17979] team0: Device gtp1 is up. Set it down before adding it as a team port [ 480.417994][T17986] team0: Device gtp1 is up. Set it down before adding it as a team port [ 481.754575][T18029] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3150'. [ 481.853882][ T52] Bluetooth: hci1: command tx timeout [ 482.520451][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3154'. [ 483.769603][T17897] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.769835][T17897] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.770274][T17897] bridge_slave_0: entered allmulticast mode [ 483.798280][T17897] bridge_slave_0: entered promiscuous mode [ 483.808419][T17897] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.808609][T17897] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.809064][T17897] bridge_slave_1: entered allmulticast mode [ 483.811083][T17897] bridge_slave_1: entered promiscuous mode [ 483.886313][T17897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.889691][T17897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.932134][ T52] Bluetooth: hci1: command tx timeout [ 483.976968][T17897] team0: Port device team_slave_0 added [ 483.980304][T17897] team0: Port device team_slave_1 added [ 484.075543][T17897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.075565][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.075597][T17897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.078199][T17897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.078216][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.078246][T17897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.247235][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3163'. [ 484.380482][T17897] hsr_slave_0: entered promiscuous mode [ 484.390997][T17897] hsr_slave_1: entered promiscuous mode [ 484.400841][T17897] debugfs: 'hsr0' already exists in 'hsr' [ 484.400866][T17897] Cannot create hsr debugfs directory [ 484.538488][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3166'. [ 484.885179][T18102] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3169'. [ 484.921868][T18099] netlink: 'syz.3.3167': attribute type 4 has an invalid length. [ 485.025761][T18105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3170'. [ 485.210699][T18110] x_tables: ip_tables: ah match: only valid for protocol 51 [ 485.305214][T18114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3173'. [ 485.408523][T18122] ip6t_srh: unknown srh match flags 5F28 [ 485.410349][T18123] ip6t_srh: unknown srh match flags 5F28 [ 485.616078][T17897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.616120][T17897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.680575][T18110] veth1_macvtap: left promiscuous mode [ 485.937874][T18136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3178'. [ 486.012192][ T52] Bluetooth: hci1: command tx timeout [ 486.111066][T17897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.111109][T17897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.378320][T18147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3181'. [ 486.790322][T17897] .`: (slave netdevsim1): Releasing backup interface [ 486.833301][T17897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.833344][T17897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.908922][T18164] ip_tables: iptables: counters copy to user failed while replacing table [ 486.924896][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3185'. [ 487.151167][T17897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.151207][T17897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.245944][T17897] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 488.277635][T17897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.280492][T17897] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 488.339432][T17897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.395257][T17897] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 488.508371][T17897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.510298][T17897] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 488.619475][T17897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.187062][T18246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3201'. [ 489.228660][T18246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3201'. [ 489.482746][T17897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.539703][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3204'. [ 489.620351][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 489.819391][T17897] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.820956][T18264] netlink: 'syz.2.3207': attribute type 2 has an invalid length. [ 489.850206][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.850317][ T7494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.929525][T15912] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.929683][T15912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.277630][T18274] syzkaller0: left promiscuous mode [ 490.277659][T18274] syzkaller0: left allmulticast mode [ 490.636819][T18282] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3212'. [ 490.699679][T18282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 490.789523][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 490.789549][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 490.842020][T18282] bond0: left promiscuous mode [ 490.842043][T18282] erspan1: left promiscuous mode [ 490.895655][T18283] netlink: 'syz.0.3212': attribute type 4 has an invalid length. [ 490.895678][T18283] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3212'. [ 491.320927][T18283] .`: renamed from  (while UP) [ 491.840421][T18298] syzkaller1: entered promiscuous mode [ 491.840663][T18298] syzkaller1: entered allmulticast mode [ 492.456090][T18331] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 492.558158][T18331] bond1: entered promiscuous mode [ 492.558598][T18331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.613173][T18331] macvtap1: entered allmulticast mode [ 492.637648][T18331] bond1: (slave bridge1): making interface the new active one [ 492.637673][T18331] bridge1: entered promiscuous mode [ 492.640773][T18331] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 492.775309][T17897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.845221][T18341] IPv6: sit2: Disabled Multicast RS [ 492.851563][T18344] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3227'. [ 493.278338][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'. [ 493.278380][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'. [ 493.278458][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'. [ 493.485136][T18365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 493.671275][T18374] vcan0: Master is either lo or non-ether device [ 493.692948][T18377] vcan0: Master is either lo or non-ether device [ 494.048560][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 494.080723][T18384] netlink: 'syz.3.3238': attribute type 2 has an invalid length. [ 494.091004][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3238'. [ 494.137407][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'. [ 494.214218][T18388] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 494.362427][T17897] veth0_vlan: entered promiscuous mode [ 494.500785][T17897] veth1_vlan: entered promiscuous mode [ 494.755951][T17897] veth0_macvtap: entered promiscuous mode [ 494.801124][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3244'. [ 494.865253][T17897] veth1_macvtap: entered promiscuous mode [ 495.080801][T17897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.152876][T17897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.284371][T10893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.358461][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.375283][T15912] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.391752][T10893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.585384][T18431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 496.006680][ T592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.006705][ T592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.642920][T10893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.642956][T10893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.813719][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.817910][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.841283][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.858604][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.861145][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 498.424584][T18497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3261'. [ 498.668463][T18506] netlink: 'syz.4.3263': attribute type 8 has an invalid length. [ 498.864017][T18513] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3266'. [ 498.990901][T18513] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.991560][T18513] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.777168][T18553] openvswitch: netlink: IPv4 tunnel dst address is zero [ 499.777204][T18553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.919445][T18537] tipc: Started in network mode [ 499.919732][T18537] tipc: Node identity 06588acd811, cluster identity 4711 [ 499.920256][T18537] tipc: Enabled bearer , priority 0 [ 500.014098][ T5619] Bluetooth: hci0: command tx timeout [ 500.119984][T18537] syzkaller0: entered promiscuous mode [ 500.120014][T18537] syzkaller0: entered allmulticast mode [ 500.120688][T18537] tipc: Resetting bearer [ 500.313909][T18535] tipc: Resetting bearer [ 500.451124][T18565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 500.451333][T18565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 500.451530][T18565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 500.451955][T18565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 500.452145][T18565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 500.452329][T18565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 500.452510][T18565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 500.536370][T18565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3275'. [ 501.557664][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.097062][ T5619] Bluetooth: hci0: command tx timeout [ 503.812553][T18535] tipc: Disabling bearer [ 503.918962][T18567] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 503.924370][ T5711] tipc: Node number set to 2269678285 [ 504.172391][ T5619] Bluetooth: hci0: command tx timeout [ 504.211959][T18586] netlink: 'syz.0.3277': attribute type 2 has an invalid length. [ 504.211983][T18586] netlink: 'syz.0.3277': attribute type 11 has an invalid length. [ 504.211997][T18586] __nla_validate_parse: 57 callbacks suppressed [ 504.212009][T18586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3277'. [ 504.613338][T18594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3279'. [ 504.698681][T18598] .`: (slave team0): Releasing backup interface [ 504.748364][T18598] team0 (unregistering): Port device team_slave_0 removed [ 504.776358][T18598] team0 (unregistering): Port device team_slave_1 removed [ 504.827490][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3279'. [ 504.848430][T18602] netlink: 3080 bytes leftover after parsing attributes in process `syz.2.3283'. [ 504.848455][T18602] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3283'. [ 505.005939][T18609] netlink: 'syz.0.3285': attribute type 2 has an invalid length. [ 505.005965][T18609] netlink: 'syz.0.3285': attribute type 11 has an invalid length. [ 505.005995][T18609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3285'. [ 505.661151][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 505.675591][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 505.875165][T18626] macsec1: entered promiscuous mode [ 506.117151][T18633] macsec1: entered promiscuous mode [ 506.230502][T18481] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.244702][T18481] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.244917][T18481] bridge_slave_0: entered allmulticast mode [ 506.250318][T18481] bridge_slave_0: entered promiscuous mode [ 506.252756][ T5619] Bluetooth: hci0: command tx timeout [ 506.303709][T18481] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.304385][T18481] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.304797][T18481] bridge_slave_1: entered allmulticast mode [ 506.389636][T18481] bridge_slave_1: entered promiscuous mode [ 506.478130][T18481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.492103][T18481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.565075][T18481] team0: Port device team_slave_0 added [ 506.568652][T18481] team0: Port device team_slave_1 added [ 506.627449][T18481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.627469][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.627515][T18481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.629697][T18481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.629712][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.629739][T18481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.789062][T18481] hsr_slave_0: entered promiscuous mode [ 506.797947][T18481] hsr_slave_1: entered promiscuous mode [ 506.798816][T18481] debugfs: 'hsr0' already exists in 'hsr' [ 506.798837][T18481] Cannot create hsr debugfs directory [ 506.921275][T18667] netlink: 'syz.3.3298': attribute type 9 has an invalid length. [ 508.467519][T18481] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.484656][T18481] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.909688][T18481] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.909729][T18481] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.949613][T18714] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3309'. [ 509.055466][T18714] netlink: 'syz.3.3309': attribute type 8 has an invalid length. [ 509.055490][T18714] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.3309'. [ 509.205129][T18481] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.205168][T18481] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.258562][T18720] __nla_validate_parse: 2 callbacks suppressed [ 509.258710][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'. [ 509.376635][T18731] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3313'. [ 509.376660][T18731] netlink: 5604 bytes leftover after parsing attributes in process `syz.0.3313'. [ 509.451516][T18732] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3313'. [ 509.734025][T18748] bridge_slave_0: left allmulticast mode [ 509.734056][T18748] bridge_slave_0: left promiscuous mode [ 509.734348][T18748] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.910337][T18748] bridge_slave_1: left allmulticast mode [ 509.910368][T18748] bridge_slave_1: left promiscuous mode [ 509.910622][T18748] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.964150][T18748] bond0: (slave bond_slave_0): Releasing backup interface [ 510.012574][T18748] bond0: (slave bond_slave_1): Releasing backup interface [ 510.070099][T18748] team0: Port device team_slave_0 removed [ 510.130144][T18748] team0: Port device team_slave_1 removed [ 510.140973][T18748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.140998][T18748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.169197][T18748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.169231][T18748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.196962][T18748] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.332780][T18481] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.333902][T18481] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.474980][T18753] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 510.477682][T18753] bond2 (unregistering): Released all slaves [ 511.485778][T18781] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 511.520933][T18481] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.570735][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.610261][T18481] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.636591][T18791] sctp: [Deprecated]: syz.0.3330 (pid 18791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.636591][T18791] Use struct sctp_sack_info instead [ 511.639633][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.671227][T18481] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.688890][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.689907][T18481] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.728769][T18481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 511.765440][T18790] netlink: 'syz.4.3331': attribute type 4 has an invalid length. [ 511.894010][T18788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3329'. [ 511.978640][T18788] veth1_to_team: entered promiscuous mode [ 511.993574][T18807] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 511.999662][T18788] gretap0: entered promiscuous mode [ 512.018708][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3332'. [ 512.018733][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3332'. [ 512.049118][T18788] hsr1: entered promiscuous mode [ 512.114747][T18809] erspan1: entered allmulticast mode [ 512.174811][T18821] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 512.232700][T18822] erspan1: entered allmulticast mode [ 512.331541][T18826] syzkaller1: entered promiscuous mode [ 512.331565][T18826] syzkaller1: entered allmulticast mode [ 512.626335][T18840] netlink: 'syz.4.3339': attribute type 4 has an invalid length. [ 512.896553][T18481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.037387][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 513.094728][T18481] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.237436][T18857] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 513.256060][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.256176][T10893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.343645][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.343820][ T7492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.399068][T18878] tipc: Enabled bearer , priority 9 [ 515.094213][T18903] netlink: 'syz.2.3359': attribute type 2 has an invalid length. [ 515.476367][T18912] netlink: 'syz.0.3362': attribute type 9 has an invalid length. [ 515.570245][T18481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.838869][T18481] veth0_vlan: entered promiscuous mode [ 515.890941][T18481] veth1_vlan: entered promiscuous mode [ 515.913892][T18923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 515.913923][T18923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 515.913992][T18923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 516.152777][T18481] veth0_macvtap: entered promiscuous mode [ 516.180055][T18481] veth1_macvtap: entered promiscuous mode [ 516.318581][T18481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.364348][T18481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.454584][T10893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.454659][T10893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.454698][T10893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.454736][T10893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.947267][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.947289][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.213126][T18953] netlink: 'syz.4.3375': attribute type 10 has an invalid length. [ 517.358007][T18953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.368150][T18953] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 517.407822][T10893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.407844][T10893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.798459][T18960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3378'. [ 517.798490][T18960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3378'. [ 517.798508][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'. [ 518.054000][T18970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3381'. [ 518.056721][T18971] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 518.156179][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3255'. [ 518.323391][T18971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.605778][T18974] bridge1: entered promiscuous mode [ 518.842745][T18985] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 518.842770][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3385'. [ 518.842795][T18985] bond0: option mode: unable to set because the bond device has slaves [ 519.069197][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 519.080685][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 519.089518][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 519.101048][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 519.109635][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 519.609960][T19009] netlink: get zone limit has 4 unknown bytes [ 520.211001][T19021] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3392'. [ 520.530426][T19027] netlink: 'syz.2.3394': attribute type 16 has an invalid length. [ 521.216196][ T5619] Bluetooth: hci3: command tx timeout [ 522.304564][T19092] Bluetooth: MGMT ver 1.23 [ 522.839159][T19107] __nla_validate_parse: 1 callbacks suppressed [ 522.839195][T19107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3409'. [ 523.293123][ T5619] Bluetooth: hci3: command tx timeout [ 523.496753][T19138] netlink: 'syz.4.3417': attribute type 1 has an invalid length. [ 523.500526][T19123] macvtap1: entered promiscuous mode [ 523.500548][T19123] hsr0: entered promiscuous mode [ 523.500935][T19123] macvtap1: entered allmulticast mode [ 523.500951][T19123] hsr0: entered allmulticast mode [ 523.500965][T19123] hsr_slave_0: entered allmulticast mode [ 523.500983][T19123] hsr_slave_1: entered allmulticast mode [ 524.308658][T19139] bridge4: entered promiscuous mode [ 524.335335][T19139] bond1: (slave bridge4): making interface the new active one [ 524.336195][T19139] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 524.401227][T18988] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.401445][T18988] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.419936][T18988] bridge_slave_0: entered allmulticast mode [ 524.430685][T18988] bridge_slave_0: entered promiscuous mode [ 524.455715][T18988] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.455866][T18988] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.456047][T18988] bridge_slave_1: entered allmulticast mode [ 524.458247][T18988] bridge_slave_1: entered promiscuous mode [ 524.561987][T18988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.565558][T18988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.625656][T18988] team0: Port device team_slave_0 added [ 524.628866][T18988] team0: Port device team_slave_1 added [ 524.694363][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3423'. [ 524.878156][T19170] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3426'. [ 524.945666][T18988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.945685][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.945715][T18988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.988765][T18988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.988784][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.988815][T18988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.381989][ T52] Bluetooth: hci3: command tx timeout [ 525.431576][T18988] hsr_slave_0: entered promiscuous mode [ 525.440171][T18988] hsr_slave_1: entered promiscuous mode [ 525.460406][T18988] debugfs: 'hsr0' already exists in 'hsr' [ 525.460431][T18988] Cannot create hsr debugfs directory [ 525.724538][T19185] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3430'. [ 525.724566][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3430'. [ 525.724582][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 526.094083][T19190] netlink: 14372 bytes leftover after parsing attributes in process `syz.2.3431'. [ 526.646103][T18988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.646144][T18988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.703981][T19214] xt_socket: unknown flags 0xc [ 526.719993][T19210] tipc: Enabling of bearer rejected, failed to enable media [ 526.757189][T19216] tipc: Enabling of bearer rejected, failed to enable media [ 526.933043][T19215] netlink: 'syz.4.3438': attribute type 7 has an invalid length. [ 526.937236][T19215] openvswitch: netlink: VLAN attribute unexpected. [ 527.010426][T18988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.010468][T18988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.129014][T19213] ip6gre1: entered allmulticast mode [ 527.165079][T19219] pimreg: entered allmulticast mode [ 527.165453][T19225] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3442'. [ 527.165476][T19225] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3442'. [ 527.341009][T18988] .`: (slave netdevsim1): Releasing backup interface [ 527.386031][T18988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.386073][T18988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.451724][ T52] Bluetooth: hci3: command tx timeout [ 527.604476][T18988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.604516][T18988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.740577][T19236] netlink: 'syz.3.3446': attribute type 8 has an invalid length. [ 527.740602][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 527.740982][T19236] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.741757][T19236] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.920223][T19239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.978931][T19239] __nla_validate_parse: 1 callbacks suppressed [ 527.978954][T19239] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3447'. [ 528.221637][T19244] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 528.431802][ T7492] IPVS: starting estimator thread 0... [ 528.522002][T19251] IPVS: using max 26 ests per chain, 62400 per kthread [ 528.667365][T19260] netlink: 'syz.1.3454': attribute type 1 has an invalid length. [ 528.718908][T19264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3454'. [ 528.774353][T19265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3454'. [ 529.209056][T19274] nbd: must specify a device to reconfigure [ 529.211359][T19274] netlink: 'syz.4.3455': attribute type 1 has an invalid length. [ 529.211382][T19274] netlink: 'syz.4.3455': attribute type 1 has an invalid length. [ 529.211397][T19274] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3455'. [ 529.211415][T19274] netlink: 'syz.4.3455': attribute type 1 has an invalid length. [ 532.101491][T19269] bridge1: entered promiscuous mode [ 532.365377][T19280] netlink: 'syz.1.3457': attribute type 8 has an invalid length. [ 532.371045][T19282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3458'. [ 532.548878][T19284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3458'. [ 532.867340][T19294] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!00000000000000000000006 [ 533.004688][T19306] syz_tun: entered allmulticast mode [ 533.077146][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3459'. [ 533.211457][T19299] ip_tables: iptables: counters copy to user failed while replacing table [ 533.337577][T18988] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.359719][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.361363][T18988] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.392188][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.394666][T18988] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.428713][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.430829][T18988] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 533.515367][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.993592][T19333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.276477][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'. [ 534.298362][T19333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.386577][T19335] erspan0: entered promiscuous mode [ 534.403032][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'. [ 534.510981][T19343] netlink: 'syz.2.3470': attribute type 1 has an invalid length. [ 534.524637][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 534.524669][T19344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3470'. [ 534.561398][T18988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.792112][T18988] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.976649][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.976766][T10893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.165512][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.165628][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.571087][T19370] Bluetooth: MGMT ver 1.23 [ 535.765978][T19382] tipc: Enabling not permitted [ 535.766014][T19382] tipc: Enabling of bearer rejected, failed to enable media [ 536.539486][T19409] netlink: 'syz.1.3487': attribute type 3 has an invalid length. [ 536.775463][T19417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3489'. [ 536.900689][T19421] bridge_slave_0: entered promiscuous mode [ 537.394361][T19437] FAULT_INJECTION: forcing a failure. [ 537.394361][T19437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.394399][T19437] CPU: 0 UID: 0 PID: 19437 Comm: syz.3.3496 Not tainted syzkaller #0 PREEMPT(full) [ 537.394425][T19437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 537.394440][T19437] Call Trace: [ 537.394451][T19437] [ 537.394460][T19437] dump_stack_lvl+0xe8/0x150 [ 537.394501][T19437] should_fail_ex+0x410/0x560 [ 537.394669][T19437] _copy_from_iter+0x1d3/0x1660 [ 537.394770][T19437] ? alloc_pages_noprof+0x140/0x2b0 [ 537.394818][T19437] ? __pfx__copy_from_iter+0x10/0x10 [ 537.394850][T19437] ? __sk_mem_schedule+0x7b/0xf0 [ 537.394879][T19437] ? sk_msg_alloc+0xa53/0xb00 [ 537.394956][T19437] sk_msg_memcopy_from_iter+0x35e/0x700 [ 537.395026][T19437] espintcp_sendmsg+0x46b/0x730 [ 537.395119][T19437] ? __pfx_espintcp_sendmsg+0x10/0x10 [ 537.395148][T19437] ? lock_acquire+0x115/0x350 [ 537.395178][T19437] ? sock_rps_record_flow+0x19/0x350 [ 537.395248][T19437] ? inet_sendmsg+0x298/0x320 [ 537.395271][T19437] ? apparmor_socket_sendmsg+0x98/0x360 [ 537.395302][T19437] ? __pfx_inet_sendmsg+0x10/0x10 [ 537.395327][T19437] sock_sendmsg_nosec+0x10e/0x180 [ 537.395357][T19437] __sys_sendto+0x408/0x5a0 [ 537.395394][T19437] ? __pfx___sys_sendto+0x10/0x10 [ 537.395462][T19437] ? do_user_addr_fault+0xc4c/0x1340 [ 537.395499][T19437] __x64_sys_sendto+0xde/0x100 [ 537.395534][T19437] do_syscall_64+0x166/0x520 [ 537.395566][T19437] ? trace_irq_disable+0x3b/0x140 [ 537.395590][T19437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.395614][T19437] ? clear_bhb_loop+0x70/0xc0 [ 537.395644][T19437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.395667][T19437] RIP: 0033:0x7f7a6055e9ce [ 537.395690][T19437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 537.395711][T19437] RSP: 002b:00007f7a614a4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 537.395736][T19437] RAX: ffffffffffffffda RBX: 00007f7a614a66c0 RCX: 00007f7a6055e9ce [ 537.395753][T19437] RDX: 0000000000000020 RSI: 00007f7a614a5000 RDI: 0000000000000003 [ 537.395767][T19437] RBP: 0000000000000000 R08: 00007f7a614a4f04 R09: 000000000000000c [ 537.395782][T19437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 537.395795][T19437] R13: 00007f7a614a4f58 R14: 00007f7a614a5000 R15: 0000000000000000 [ 537.395830][T19437] [ 537.399025][T19433] veth3: entered allmulticast mode [ 538.020366][T18988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.034848][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3501'. [ 538.074225][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3501'. [ 538.351013][T18988] veth0_vlan: entered promiscuous mode [ 538.366525][T19464] xt_nat: multiple ranges no longer supported [ 538.424603][T18988] veth1_vlan: entered promiscuous mode [ 538.476580][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3503'. [ 538.685910][T18988] veth0_macvtap: entered promiscuous mode [ 538.728142][T18988] veth1_macvtap: entered promiscuous mode [ 538.908378][T18988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.970633][T18988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.080961][T19476] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 539.152225][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.161931][ T7492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.168668][T10893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.168873][T10893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.208670][T19476] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3506'. [ 539.601118][ T592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.601142][ T592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.820484][ T7492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.820507][ T7492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.541538][T19517] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 540.562199][T19518] netlink: 'syz.0.3518': attribute type 2 has an invalid length. [ 540.601991][T19518] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 540.670635][T19520] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 541.191271][T19547] netlink: 'syz.3.3524': attribute type 32 has an invalid length. [ 541.191297][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3524'. [ 541.308133][T19547] bond2: Setting coupled_control to off (0) [ 541.704092][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3522'. [ 542.029526][T19560] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3527'. [ 542.095862][T19564] syzkaller0: entered promiscuous mode [ 542.095886][T19564] syzkaller0: entered allmulticast mode [ 542.144070][T19565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.669035][T19585] netlink: 'syz.3.3535': attribute type 16 has an invalid length. [ 542.669062][T19585] netlink: 'syz.3.3535': attribute type 17 has an invalid length. [ 542.886504][T19594] netlink: 'syz.4.3536': attribute type 28 has an invalid length. [ 542.887654][T19589] pimreg: entered allmulticast mode [ 542.981458][T19585] vcan0: left promiscuous mode [ 542.981488][T19585] vcan0: left allmulticast mode [ 543.069702][T19585] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.069892][T19585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.103261][T19585] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.103440][T19585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.336698][T19585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.448417][T19585] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 543.449089][T19585] hsr1: left promiscuous mode [ 543.470079][T19585] macvtap1: left promiscuous mode [ 543.476609][T19585] macvtap1: left allmulticast mode [ 543.476631][T19585] hsr0: left allmulticast mode [ 543.476645][T19585] hsr_slave_0: left allmulticast mode [ 543.476663][T19585] hsr_slave_1: left allmulticast mode [ 543.480029][T19585] ip6gre1: left allmulticast mode [ 543.533539][T19585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.736441][T19608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.023313][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3543'. [ 544.508137][T19633] bond0: entered allmulticast mode [ 544.508163][T19633] bond_slave_0: entered allmulticast mode [ 544.508182][T19633] bond_slave_1: entered allmulticast mode [ 545.689637][T19682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3560'. [ 546.357113][T19698] syz_tun: entered promiscuous mode [ 547.125690][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 547.158302][T19723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.319059][T19724] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 547.350313][T19724] bond2 (unregistering): Released all slaves [ 547.417458][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3575'. [ 547.459824][T19727] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 547.516503][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3575'. [ 548.143312][T19740] netlink: 'syz.1.3578': attribute type 23 has an invalid length. [ 548.649135][T19759] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 549.072046][T19772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3585'. [ 549.206936][T19778] netlink: 'syz.4.3587': attribute type 13 has an invalid length. [ 549.439277][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3588'. [ 549.439314][T19782] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 549.806858][T19790] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3590'. [ 550.163634][T19798] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.131345][T19816] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.190873][T19816] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.730470][T19834] bond0: (slave ip6tnl0): refused to change device type [ 551.796676][T19837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3604'. [ 552.917559][T19860] batadv0: entered promiscuous mode [ 552.919076][T19860] macsec1: entered promiscuous mode [ 552.940324][T19860] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 552.964872][T19860] batadv0: left promiscuous mode [ 553.335698][T19865] sctp: [Deprecated]: syz.3.3612 (pid 19865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.335698][T19865] Use struct sctp_sack_info instead [ 553.538228][T19868] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3613'. [ 553.650254][T19868] syzkaller1: entered promiscuous mode [ 553.650279][T19868] syzkaller1: entered allmulticast mode [ 553.778499][T19868] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 554.385385][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3616'. [ 555.051462][T19884] team0: Port device team_slave_0 removed [ 555.054699][T19896] netlink: 'syz.2.3619': attribute type 1 has an invalid length. [ 555.216449][T19881] veth0: entered promiscuous mode [ 555.218499][T19876] veth0: left promiscuous mode [ 555.434183][T19896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.670898][T19897] bond3: (slave geneve2): making interface the new active one [ 555.695006][T19897] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 556.125971][T19917] netlink: 'syz.4.3626': attribute type 2 has an invalid length. [ 556.125996][T19917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3626'. [ 556.198573][T19917] : entered promiscuous mode [ 556.296348][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3625'. [ 556.416942][T19926] netlink: 'syz.2.3627': attribute type 2 has an invalid length. [ 556.416967][T19926] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3627'. [ 562.982504][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.051954][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 590.651730][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 610.164389][T19936] netlink: 'syz.0.3628': attribute type 1 has an invalid length. [ 610.270074][T19946] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 610.271171][T19946] netlink: 'syz.3.3633': attribute type 16 has an invalid length. [ 610.271191][T19946] netlink: 'syz.3.3633': attribute type 17 has an invalid length. [ 610.337555][T19946] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.337690][T19946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.340156][T19946] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.340296][T19946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.497703][T19941] netlink: 'syz.1.3629': attribute type 21 has an invalid length. [ 611.387334][T19989] sit1: entered promiscuous mode [ 611.387359][T19989] sit1: entered allmulticast mode [ 611.419854][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3640'. [ 611.647764][T19999] netlink: 'syz.4.3642': attribute type 1 has an invalid length. [ 611.661198][T20002] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3643'. [ 611.729022][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3642'. [ 611.729051][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3642'. [ 611.812831][T19999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 611.885624][T19999] netlink: 'syz.4.3642': attribute type 5 has an invalid length. [ 612.252681][ T5619] Bluetooth: hci0: command 0x0c13 tx timeout [ 612.255123][ T52] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 613.586593][T19955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.885349][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3645'. [ 614.191245][T20017] netlink: 'syz.3.3647': attribute type 21 has an invalid length. [ 615.759597][T20020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3650'. [ 615.870902][T20028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3650'. [ 615.933307][T20020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 615.979481][T20035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3652'. [ 615.979659][T20035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3652'. [ 615.991358][T20032] bridge0: port 3(veth1_to_bridge) entered blocking state [ 616.012672][T20032] bridge0: port 3(veth1_to_bridge) entered disabled state [ 616.013019][T20032] veth1_to_bridge: entered allmulticast mode [ 616.019701][T20032] veth1_to_bridge: entered promiscuous mode [ 616.021602][T20032] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 616.028915][T20032] bridge0: port 3(veth1_to_bridge) entered blocking state [ 616.029028][T20032] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 616.438860][T20047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.386677][T20071] __nla_validate_parse: 1 callbacks suppressed [ 617.386701][T20071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3662'. [ 617.907441][T20092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3666'. [ 617.907472][T20092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3666'. [ 618.742310][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.742363][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.742402][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.742439][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.058789][T20120] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 619.277677][T20141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3677'. [ 619.916987][T20149] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.944848][T20149] bridge0: port 3(veth1_to_bridge) entered disabled state [ 619.962413][T20149] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.023374][T20163] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3681'. [ 620.032651][T20164] netlink: 'syz.3.3680': attribute type 16 has an invalid length. [ 620.032676][T20164] netlink: 'syz.3.3680': attribute type 17 has an invalid length. [ 620.467892][T20164] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.468028][T20164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.504227][T20164] bridge0: port 3(veth1_to_bridge) entered blocking state [ 620.504367][T20164] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 620.507609][T20164] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.507776][T20164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.552795][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 620.553528][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 620.554097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 620.554607][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 620.556846][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 620.557400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 620.557948][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 620.558453][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 621.170986][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3686'. [ 621.441603][ C0] net_ratelimit: 1619 callbacks suppressed [ 621.441715][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 621.442190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.444521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 621.445039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.445454][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 621.445861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.446254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 621.446673][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.447090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 621.447509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.462819][T20145] Bluetooth: hci1: command 0x0406 tx timeout [ 621.462860][T20145] Bluetooth: hci0: command 0x0c13 tx timeout [ 622.152798][T20179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3686'. [ 622.152826][T20179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3686'. [ 624.486752][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.451705][ C1] net_ratelimit: 10681 callbacks suppressed [ 626.451729][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.452221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.452521][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 626.452741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.453057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 626.453268][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.453503][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 626.453784][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.454265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.454780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.461667][ C0] net_ratelimit: 16516 callbacks suppressed [ 631.461692][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 631.461990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.462497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.462956][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 631.462971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.463479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.463503][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 631.463988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.464077][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 631.464494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.321060][ C1] sched: DL replenish lagged too much [ 636.472022][ C1] net_ratelimit: 16453 callbacks suppressed [ 636.472048][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.472091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 636.472534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 636.472600][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.473019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 636.473080][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.473589][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.473983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 636.474065][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.474584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.481794][ C1] net_ratelimit: 16583 callbacks suppressed [ 641.481818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.482341][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.482419][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 641.482864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.483390][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 641.483745][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.483819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 641.484237][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 641.484239][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.484698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.288523][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 646.491780][ C1] net_ratelimit: 16637 callbacks suppressed [ 646.491805][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.492280][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 646.492295][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.492741][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 646.492794][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.493173][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 646.493276][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.493766][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.494232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.494723][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.501603][ C1] net_ratelimit: 16624 callbacks suppressed [ 651.501626][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.502101][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 651.502106][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.502608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.503085][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.503149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 651.503609][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.503653][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 651.504085][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.504159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 656.511763][ C0] net_ratelimit: 17074 callbacks suppressed [ 656.511794][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 656.511823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.512236][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 656.512352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.512656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 656.512809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.513297][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.513687][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 656.513747][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.514204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.521627][ C1] net_ratelimit: 17313 callbacks suppressed [ 661.521650][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.522127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.522595][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.522638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 661.523462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.523628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 661.523894][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.524337][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.524647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 661.524831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.531655][ C0] net_ratelimit: 17532 callbacks suppressed [ 666.531680][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 666.531740][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.532137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.532200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.532574][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.532669][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.533057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 666.533128][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.533480][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 666.533625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.541779][ C1] net_ratelimit: 18386 callbacks suppressed [ 671.541803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.541960][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.542312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.542427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 671.542804][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.542900][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 671.543250][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.543716][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.543841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 671.544199][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.551844][ C0] net_ratelimit: 18198 callbacks suppressed [ 676.551868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 676.551871][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.552352][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.552372][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.552843][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.552864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.553274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 676.553342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.553730][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 676.553852][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.561591][ C1] net_ratelimit: 18287 callbacks suppressed [ 681.561616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.561654][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 681.562059][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.562517][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.562915][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 681.563014][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.563469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.563904][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.564099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 681.564357][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.026062][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.571734][ C0] net_ratelimit: 18326 callbacks suppressed [ 686.571757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 686.571765][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.572230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.572274][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.572659][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.572747][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.573102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 686.573255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.573539][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 686.573726][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.581618][ C0] net_ratelimit: 17873 callbacks suppressed [ 691.581644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.581664][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.582098][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 691.582172][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.582638][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.583141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.583611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.583879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 691.584106][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.584579][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.591922][ C1] net_ratelimit: 17952 callbacks suppressed [ 696.591945][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.592385][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.592854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.593257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.593306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 696.593733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.593826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 696.594171][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.594681][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.594888][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 701.602020][ C1] net_ratelimit: 17599 callbacks suppressed [ 701.602045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.602067][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.602477][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 701.602555][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.602937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 701.603031][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.603549][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.603921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 701.604023][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.604556][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.611637][ C0] net_ratelimit: 18039 callbacks suppressed [ 706.611658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 706.612533][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 706.612779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.613453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.613494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 706.613965][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.614084][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.614392][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.614693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.614842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 711.621608][ C1] net_ratelimit: 18280 callbacks suppressed [ 711.621650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.621862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 711.622123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.622612][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.622826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 711.623080][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.623537][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.623842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 711.624003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.624284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.631736][ C0] net_ratelimit: 18451 callbacks suppressed [ 716.631761][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 716.631862][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.632299][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.632747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 716.632757][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.633220][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.633674][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.633796][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 716.634151][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.634269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.641542][ C1] net_ratelimit: 18359 callbacks suppressed [ 721.641567][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.642002][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.642238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 721.642469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.642982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.643305][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 721.643447][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.643795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.643876][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.644239][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.651657][ C0] net_ratelimit: 18567 callbacks suppressed [ 726.651682][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 726.651916][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.652499][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.652638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 726.653053][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.653102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.653521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.653629][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.653970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 726.654206][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.661794][ C1] net_ratelimit: 18493 callbacks suppressed [ 731.661820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.662002][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 731.662317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.662477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 731.662749][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.663208][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.663579][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 731.663636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.664097][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.664527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.671532][ C1] net_ratelimit: 18886 callbacks suppressed [ 736.671557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.671763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 736.672028][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.672210][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 736.672466][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.672635][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 736.672933][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.673090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:8f:d9:a9:b6:f9, vlan:0) [ 736.673364][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.673824][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.781516][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 736.896009][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20184/1:b..l [ 736.904046][ C1] rcu: (detected by 1, t=10514 jiffies, g=107853, q=1691 ncpus=2) [ 736.912022][ C1] task:syz.4.3688 state:R running task stack:25608 pid:20184 tgid:20184 ppid:17897 task_flags:0x400040 flags:0x00080002 [ 736.925572][ C1] Call Trace: [ 736.928877][ C1] [ 736.931849][ C1] __schedule+0x17db/0x58f0 [ 736.936440][ C1] ? __pfx___schedule+0x10/0x10 [ 736.941333][ C1] ? __lock_acquire+0x747/0x2de0 [ 736.946337][ C1] preempt_schedule_irq+0x4b/0x90 [ 736.951408][ C1] irqentry_exit+0x14f/0x910 [ 736.956041][ C1] ? trace_irq_disable+0x3b/0x140 [ 736.961139][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 736.967160][ C1] RIP: 0010:unwind_next_frame+0x1f6/0x2550 [ 736.973045][ C1] Code: 08 8b 15 1d aa f6 0c 8d 42 ff 44 39 f8 0f 86 6c 04 00 00 44 89 f8 4c 8d 2c 85 34 af c2 91 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 <84> c0 4c 89 e3 0f 85 66 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d [ 736.992684][ C1] RSP: 0018:ffffc90002dd7108 EFLAGS: 00000a03 [ 736.998798][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 8000000000000000 [ 737.006803][ C1] RDX: 00000000000aeaea RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 737.014821][ C1] RBP: ffffffff816e7ae2 R08: ffffffff8177f1df R09: 0000000000000000 [ 737.022832][ C1] R10: ffffc90002dd7258 R11: fffff520005bae4d R12: dffffc0000000000 [ 737.030847][ C1] R13: ffffffff91c4691c R14: ffffc90002dd7208 R15: 0000000000006e7a [ 737.038866][ C1] ? arch_stack_walk+0xe2/0x150 [ 737.043804][ C1] ? unwind_next_frame+0x8f/0x2550 [ 737.048978][ C1] ? unwind_next_frame+0xbe/0x2550 [ 737.054153][ C1] ? arch_stack_walk+0xe3/0x150 [ 737.059041][ C1] ? unwind_next_frame+0x8f/0x2550 [ 737.064199][ C1] __unwind_start+0x514/0x660 [ 737.068920][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 737.075145][ C1] arch_stack_walk+0xe3/0x150 [ 737.079873][ C1] ? arch_stack_walk+0xe3/0x150 [ 737.084767][ C1] stack_trace_save+0xa9/0x100 [ 737.089568][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 737.094998][ C1] save_stack+0x122/0x230 [ 737.099405][ C1] ? __pfx_save_stack+0x10/0x10 [ 737.104314][ C1] ? page_ext_put+0x97/0xc0 [ 737.108868][ C1] __reset_page_owner+0x71/0x1f0 [ 737.113855][ C1] __free_frozen_pages+0xc93/0xd90 [ 737.119017][ C1] __slab_free+0x274/0x2c0 [ 737.123490][ C1] ? qlist_free_all+0x8e/0x100 [ 737.128302][ C1] qlist_free_all+0x99/0x100 [ 737.132927][ C1] ? vm_area_dup+0x28/0x760 [ 737.137498][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 737.143174][ C1] kasan_quarantine_reduce+0x148/0x160 [ 737.148689][ C1] __kasan_slab_alloc+0x22/0x80 [ 737.153618][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 737.159115][ C1] ? __pfx_mmap_region+0x10/0x10 [ 737.164093][ C1] ? vm_area_dup+0x28/0x760 [ 737.168635][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 737.174305][ C1] ? vm_area_dup+0x28/0x760 [ 737.178851][ C1] vm_area_dup+0x28/0x760 [ 737.183220][ C1] ? __split_vma+0x1b7/0xa60 [ 737.187855][ C1] __split_vma+0x1d7/0xa60 [ 737.192332][ C1] ? __pfx___split_vma+0x10/0x10 [ 737.197318][ C1] ? mas_prev_slot+0xb76/0xbf0 [ 737.202286][ C1] vma_modify+0x887/0x1f40 [ 737.206761][ C1] vma_modify_flags+0x2a4/0x3c0 [ 737.211657][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 737.217084][ C1] ? rcu_is_watching+0x16/0xb0 [ 737.221887][ C1] ? percpu_counter_add_batch+0xec/0x1d0 [ 737.227616][ C1] ? __vm_enough_memory+0x11a/0x380 [ 737.232860][ C1] mprotect_fixup+0x51a/0xad0 [ 737.237590][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 737.242854][ C1] ? mas_next_slot+0xc91/0xd70 [ 737.247691][ C1] do_mprotect_pkey+0x8e7/0xd10 [ 737.252600][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 737.258013][ C1] ? vm_mmap_pgoff+0x31c/0x4e0 [ 737.262829][ C1] ? vm_mmap_pgoff+0x35a/0x4e0 [ 737.267647][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 737.273024][ C1] ? rcu_is_watching+0x16/0xb0 [ 737.277843][ C1] __x64_sys_mprotect+0x80/0x90 [ 737.282734][ C1] do_syscall_64+0x166/0x520 [ 737.287543][ C1] ? trace_irq_disable+0x3b/0x140 [ 737.292610][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.298712][ C1] ? clear_bhb_loop+0x70/0xc0 [ 737.303433][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.309365][ C1] RIP: 0033:0x7f72d119df97 [ 737.313818][ C1] RSP: 002b:00007ffec226cc18 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 737.322289][ C1] RAX: ffffffffffffffda RBX: 00007f72d1fad6c0 RCX: 00007f72d119df97 [ 737.330304][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f72d1f8e000 [ 737.338306][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 737.346312][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffec226cd70 [ 737.354326][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 737.362352][ C1]