last executing test programs: 1m18.652249692s ago: executing program 3 (id=7438): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0, 0x35, 0x0, 0x1, 0xffffffff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r2, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000140)="2ae2291b2f388f", 0x7}, {&(0x7f0000000280)="3cc5c48b32b27a215ed6734667e778fd5e31bd2a645c1ad3521f8bb3347afdda1150f0871a3dc29260bd8c43222471588c75a894d31eb4e0a8b9439adf553dd6c343aa6a7cb47d37bfcc1b89ff13a3e68d9ec5751948ea50e29915258db6597fa5c3ed168fe9704d5ecced81fd9dc1400a7b749d9495e6e621", 0x79}], 0x2}, 0x8000880) unshare(0x6a040000) r5 = socket(0x10, 0x3, 0xc0) ioctl$sock_netrom_SIOCADDRT(r5, 0x61d1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd69}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001100010029bd700000000000e9ffffff", @ANYRES32=r4, @ANYBLOB="150000000000000014000300776c616e30"], 0x48}, 0x1, 0x0, 0x0, 0x20004089}, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f00000001c0)={@broadcast, @broadcast}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048044) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket(0x1e, 0x4, 0x0) 1m18.290673922s ago: executing program 4 (id=7442): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) write$tcp_mem(r0, &(0x7f00000003c0)={0x0, 0x20, 0x80000001, 0x20, 0x8000000000006}, 0xfeb0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x40}}, 0x0) 1m17.956262403s ago: executing program 2 (id=7443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x4}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='d', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="100000000000000084000000013fcf3e"], 0x10}}], 0x2, 0x8c044) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}, {&(0x7f0000002380)="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", 0x2f1}], 0x2}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.675462753s ago: executing program 1 (id=7445): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x0, 0x10002, 0x0) 1m17.597857603s ago: executing program 4 (id=7446): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1c", 0x1}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4402}, 0x0) syz_emit_ethernet(0xa4, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "7d35e7", 0x6e, 0x2b, 0x0, @mcast2, @mcast1, {[@srh={0x3b, 0x0, 0x4, 0x0, 0x7, 0x58, 0x6b7}, @dstopts={0x3a}, @hopopts={0x87, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x7}]}], "1ecd00c167a9cbfb3e78ac98eb36cdfab9e96a14dbf07c13f488757b7fe56d85e9095c4cd147f7b6111d4c7e502b98207106d549e91c76cf315eec09711f"}}}}}, 0x0) syz_emit_ethernet(0x87, &(0x7f00000000c0)={@broadcast, @broadcast, @val={@void, {0x8100, 0x3, 0x0, 0x4}}, {@generic={0x88f5, "f2e9ce66529f599b5f4b3e6418960b3c24bd2f65323d1e03e73129de7f056882e7e3d944541d7fe3ef782f934bf03f1a30df561221f6e9ec822c42dbcdadd7a8f477ca8ba183b384aff567cda12862d98e29eaf70e37973a4bcd49f2c9e82ba6c3f32d13b30087378f525267fbb58a516320636ea1"}}}, &(0x7f0000000040)={0x1, 0x2, [0xec5, 0xcdb, 0x1ca, 0x906]}) 1m17.536713958s ago: executing program 1 (id=7447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x8800, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x7, 0x2, 0x1}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0x1fe0000ff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0xd, 0x0, 0x3, 0xb, 0x18000000, 0x200, 0x5, 0x5, 0x38, 0x40}, {0x30}}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) 1m17.20590378s ago: executing program 4 (id=7449): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xf8f5}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0xfffffffffffffde6, &(0x7f0000000100)={&(0x7f0000001000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@nested={0x0, 0x11b, 0x0, 0x1, [@generic="996fb09acf86159c154946ba15a088a5fc9bb98c18210624cbe69c8497bf17b949568e66ac8e800e60619038deee299e7c29f86534815f7fadcf9d44da4a850e65d5525f2a73386421a4b39a36549ec1db6b4197680d38f1edf45ad4ed2cda10df08ff7a5567", @typed={0x0, 0x56, 0x0, 0x0, @u64=0x180000000000000}, @typed={0x0, 0x24, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x0, 0x14, 0x0, 0x1, [@nested={0x0, 0xfa}, @nested={0x0, 0xb8}, @generic="ca02c2beac57e4d4ee66cd7c60757de9d9261b70425a8bbde2a6f00bfdc9bf614b61d7712e7d5e4503e7e93e5f3e9b0722ea96ff78"]}, @nested={0x0, 0x13f, 0x0, 0x1, [@generic="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", @generic="e5cf1f12233b45c11a85d63dd06a039b4f12924760ae82f022e6cd4d72a080537624e1c263272f6ab3c623a975a56aff123b0eec22198f877fc8dd39b4a4c55ee5aff7a5a353a1ec2eeb02a86cc72b8c0ac1fd06f7959ad491bbaf24efa1d47a180c378ed2a3494f6dee21ff0dc26396b156d21dce05a2f4cfd73d9567538747c4c6acca61d5c25c02a9d5f69ad8d1de1aba258721786687043a273bf9717d3ef003e6b6409d63c8725f85a9b3bfefa195600955091834837ac9f22ac754971cf9a4e675f932129e", @nested={0x0, 0x73}]}, @typed={0x0, 0xad, 0x0, 0x0, @pid}, @typed={0x0, 0x39, 0x0, 0x0, @fd}]}]}, 0x18}}, 0x8804) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa030490780300fffe45000000808259600cd9f714560000ffff002f0000ac14140ae00000"], 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x38}}], 0x1, 0xc080) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0xb4, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c4b74d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38d834c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x653c6aec}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d75df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x495ef80}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r10, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x13}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, r10, 0x220, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2000c044) socket$rds(0x15, 0x5, 0x0) socket(0x22, 0x4, 0x7) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r12) 1m17.182888761s ago: executing program 0 (id=7450): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c01000032000100fffffffffddbdf250200000004003880090101"], 0x12c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000000)=[{r1, 0x400}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000000180, 0x0, 0x0, 0x2000000002b6, 0x2000000003fc], 0x1e010000, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0x7ffffffffffffffc}]}, 0x108) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="be4023210eb3d40d7074ac691c75", 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m17.169660236s ago: executing program 1 (id=7451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0) recvmmsg(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4081, 0xff1}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/232, 0xe8}], 0x4}, 0x102}], 0x3, 0x20, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000090601080000000000000000070000000900020073797a31000000000500010007000000240007801800018014000240fe9000000000000000000000000000bb08000940000000"], 0x4c}, 0x1, 0x0, 0x0, 0x30004042}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r4) close(0x4) socket$netlink(0x10, 0x3, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r7, 0x713, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1e9a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x40020) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x88, r7, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEYS={0x60, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "0ac15c21ec0898b286be7be2e3"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x40841}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1m17.168714164s ago: executing program 2 (id=7452): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0xa01, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x40000c0) r3 = socket$inet6(0xa, 0x3, 0x76) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4200, 0x20002}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x3c}}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x2, 0xfffffc00, 0x8, 0x7}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e24, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x2}, 0x8) 1m16.965236903s ago: executing program 2 (id=7453): r0 = socket(0x400000000010, 0x3, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000070000000000000700000a54000000060a0102000000000000000002000000400004803c000180090001007866726d000000000000028008000140000000030500030001000000050003000000000008000240000000020500030001000000140000001100200000000000000000000300000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) unshare(0x22020400) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000300)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x1, "d3"}, 0x4) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7fffffff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40ebe4ec9ca1cb72}, 0x0) (async) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) 1m16.85775884s ago: executing program 3 (id=7454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x1e, 0x21, 0x70bd2b, 0x0, {0x7}, [@nested={0x8, 0xf, 0x0, 0x1, [@typed={0x4, 0x12d}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffa1, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6003}, @val={0x2, 0x1, 0x400, 0xe9c, 0x6, 0xff}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@mpls_uc={0x8847, {[{0x6}, {0x8001, 0x0, 0x1}, {0x6ecc}, {0x2}, {0x83}], @generic="02f40fb46a8836d1529c1d618055357a4edccddc13961dd09fb263178b5ec2f733e9b4"}}}}}, 0x53) (async) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6003}, @val={0x2, 0x1, 0x400, 0xe9c, 0x6, 0xff}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@mpls_uc={0x8847, {[{0x6}, {0x8001, 0x0, 0x1}, {0x6ecc}, {0x2}, {0x83}], @generic="02f40fb46a8836d1529c1d618055357a4edccddc13961dd09fb263178b5ec2f733e9b4"}}}}}, 0x53) 1m16.856357216s ago: executing program 2 (id=7455): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FIONCLEX(r1, 0x5450) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe9, 0x7) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000380)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) connect$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0xfff7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x0, 0x2}, 0xe) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1m16.826639016s ago: executing program 4 (id=7456): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @private=0xa010100}, 0x25a, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x1, 0x7959}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 1m16.667182949s ago: executing program 0 (id=7457): r0 = socket(0x25, 0x4, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000195c0)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [], 0x0, 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x4000000000000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) syz_emit_ethernet(0xa5, &(0x7f0000000340)={@broadcast, @random="fbbf4c644499", @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0xab, 'M\f', "490e48", 0x8100, "536fa739629a6280370081c154aaac2d9ecfcf1ce45f1fc62592bc2b45053c12f77ce323ed3f4c90d598ae77af97c0f2833b4e5e1c9d0ed651e96b5f777f04d4248784aa26e8dadd2a46136359d293ca5c8fb51becef83a9167d1f7d5f0211287d5a43b120ad7683be4e084d35da65ae5c0b118b363f51d1acc08bc7ad5d9bf290d3c3211148"}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) 1m16.395472911s ago: executing program 4 (id=7458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x22020400) shutdown(r0, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m16.265286026s ago: executing program 1 (id=7459): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3}]}}}]}, 0x44}}, 0x44001) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3}]}}}]}, 0x44}}, 0x44001) 1m16.252809083s ago: executing program 3 (id=7460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="2b2379dea925cb507c6a1c18f4bf300ca6ae789066753c1fd8e2ec5cbba594aa5cf3231f18bf10fcb9033fa17e4ba15176e906662ceda4839da946eb8fc364d0e65d749cbbaa03b05c78324d5ab01284efc3d96e151bf23b9ec09d8e351b4a1e5412dfd7bd1f5b5aba113607432cd5e93ddab305539661cbfdb080f158a7787b1203fe54c9ac9f9fe94aea9ae405df55b654039c428aeb54b49e3624fe834400035bc33bdbe371ccf02da5b1a8e849116229", 0xb2}], 0x1, 0x0, 0x0, 0x10}, 0x22000000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20002009}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c001680"], 0x38}}, 0x10) 1m16.240759154s ago: executing program 0 (id=7461): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x4, 0x14, 0xb1, 0x7f, 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x4, 0x14, 0xb1, 0x7f, 0x0, r0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) (async) 1m16.173499714s ago: executing program 2 (id=7462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f1ffffffffffffff00000000070000008608ffffffff0102"], 0x18}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40006, 0x59629}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) 1m16.094698297s ago: executing program 4 (id=7463): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) shutdown(r1, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400000000fbb29756f53175a299502b76ea9dd4b6e681a78f965380509124f94ef00fa8a02954660b07ad9312a7b670b01f18c821f99f2b285d3a2fc3fc36dcdc39000000000000000000000000d246af8e20"], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400000000fbb29756f53175a299502b76ea9dd4b6e681a78f965380509124f94ef00fa8a02954660b07ad9312a7b670b01f18c821f99f2b285d3a2fc3fc36dcdc39000000000000000000000000d246af8e20"], 0x60}}, 0x0) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) (async) bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10001000}, 0x4040080) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x2, 0xa, 0x0, 0x2, 0x6ab]}, &(0x7f0000000280)=0x54) (async) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x2, 0xa, 0x0, 0x2, 0x6ab]}, &(0x7f0000000280)=0x54) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000900000000", @ANYRES32=0x0, @ANYBLOB="0380000040020000140012800b0001006970766c616e0000040002800800", @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m15.854518121s ago: executing program 2 (id=7464): socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0002fdffffff000000007e0000000c0099000600000064000000d352591cc7e52f6f7089b5b522b8df71ba4b5406ae86da018b8249495332d80310baec6e5fec92ac772359b46846aaf9451e161641a78901bf00c12eea0d85eb02fc926e368d1dcc4342d8c488c212a043390693c813f3b768408c93a2512fed3f09"], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r2, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, 0x0, 0x0, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x3, 0x0, 0x8) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250300000008000500070000005400018006000200d200000014000300ac14140c0000000000000000000000000600020040000000080009002b0000000600020000000000080009005d000000060004004e2000000a0006006c626c6372000000080005000500000008000400fbffffff080006000600000008000500080000000800050003000000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x21, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) 1m15.853956545s ago: executing program 3 (id=7465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c020000fdff1061252139023889165d3a938398", @ANYRES32=0x0, @ANYBLOB="9d050700060604003c0012800b00010069703667726500002c00028014000600fe8000000000000000000000000000bb1400070000000000ff0000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x24040054}, 0x20048000) 1m15.777839926s ago: executing program 0 (id=7466): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="030000000640"], 0x20) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) 1m15.776849058s ago: executing program 1 (id=7467): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0xa1, 0x1000}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) close(0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000300)={0x0, 0x26, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x1000) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x700000c, 0x11, 0xffffffffffffffff, 0x180000000) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa}, {0x0, 0x6}, {0x0, 0xffe0}}}, 0x38}}, 0x24000040) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m15.63348207s ago: executing program 3 (id=7468): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000006299a8b8a245463833b3984fad3860d743fba25b2c2792f5facf299314e0b31d9904c15cd61918d623380a11cb6a4ee7d596ba40a52a8b2b772339c953ad7ddd868498d438580838ee391b72bf4a14f14d63c799853fdaccd6bca77b14bade42d68a10562bf1e97bae26cce283ae04126c08c9395fc7cbf6ec7e48145fc205f0d1a2efc7bbb3f15bfc73f3c720aedfd1fb99f062e4b9e6e7a3798a8d3b25708df97ccafe705de90721", @ANYRES16=0x0, @ANYBLOB="000527bd7000fedbdf25160000000c00990021f1ffff400000000a001a0008021100000000000a001a00ffffffffffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x20000020}, 0x20000080) (rerun: 32) 1m15.554176829s ago: executing program 0 (id=7469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) unshare(0x600) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)="05", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, [0x0, 0x4, 0xfffffffffffffffe, 0xba, 0x400, 0x5, 0xcf, 0x0, 0x1, 0x4, 0xfb, 0xfff, 0x41, 0x3, 0x100000001]}, &(0x7f0000000080)=0x100) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt(r5, 0x200, 0x4, &(0x7f0000000300)="a0f86b5dba0e34765e15d802c54026b1fbedd292e556f030c1e7d3ef770feedfa73f22a00954bf112f88389eda8d8bf1ed829977329c59a7243b028452927cc7f2c46fc1bc71cec60f3b99b07945b16db789c1ad2303068e67f318271b307392e808186225533d5166f5373c679b48c3180fec31e2ae43e933747d701e763a534b3cf0cc638a97b5cc9ef3de03d3f0d89daa7f00df1528f9444a3672f811f3bb0b0ba6174f05c0159fd2306b384d20c47f6d7ba282163fcfcb8c6f8939b41e1e116aec416b66f83e88ef4ed2c0519fb8972fc2f80db3b296b72fcc6d3e5e6e71", 0xe0) socket(0x6, 0x2, 0xfffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000065c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080090003400000000020000b801c0001800a0001"], 0xe0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x100, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xe4, 0x16, 0x0, 0x1, [@typed={0xdd, 0x2a, 0x0, 0x0, @binary="f4f75b9e9ddc28970c40f15bfc66a5f3fac64fdc35bcc938070004da3f8d5469036032b06565a939cbbeaf2c6a9dd614a838604891765d1477665b694920e30c9604d2bfe9eacb089d83b3284720dc8fae92afd5453d0b6d43f2bfc2edce37ace787fc0a5945ad24e8fd1e4a3c94628e5238c0337ab0f8f798843209641d91447459c742688ba07148e6b77140fc97b03954f6c5b61dea146d911acf16d1493b42a40faa0b034341b52a0f502465d015abe5ccaf8a4a4be78d04cb17618130594a2703b50589d991f3045e18a65881298b6e820e80fa0639c9"}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80800) write(r8, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa01bbbbbbbbbb0800450c002c00000002830b8f7800000000000000004e2000000018907804000000960000000600000000000000"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) 1m12.860051544s ago: executing program 1 (id=7470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x842, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000800000018110032", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009d744000fcffffff186a000003000000000000004000000018000000040000000000000008000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000030701080000000000000000070000010c00034000000000000000ff0c000340000000000000857f0900010073797a31000000000c000213c66d880000000101"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x400c0c4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000d000000850000002d00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1m3.635360774s ago: executing program 3 (id=7471): mmap(&(0x7f0000656000/0x2000)=nil, 0x2000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000840)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 57.783879328s ago: executing program 0 (id=7472): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d8, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd7000fdffffff02181000", @ANYRES32=r1, @ANYBLOB="08000100ac1e010108000200e000000207004100ac14141e08000400e0000001080009000000010008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30c33d133}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 54.394610922s ago: executing program 32 (id=7464): socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0002fdffffff000000007e0000000c0099000600000064000000d352591cc7e52f6f7089b5b522b8df71ba4b5406ae86da018b8249495332d80310baec6e5fec92ac772359b46846aaf9451e161641a78901bf00c12eea0d85eb02fc926e368d1dcc4342d8c488c212a043390693c813f3b768408c93a2512fed3f09"], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r2, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, 0x0, 0x0, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x3, 0x0, 0x8) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250300000008000500070000005400018006000200d200000014000300ac14140c0000000000000000000000000600020040000000080009002b0000000600020000000000080009005d000000060004004e2000000a0006006c626c6372000000080005000500000008000400fbffffff080006000600000008000500080000000800050003000000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x21, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) 48.9247014s ago: executing program 33 (id=7463): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) shutdown(r1, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400000000fbb29756f53175a299502b76ea9dd4b6e681a78f965380509124f94ef00fa8a02954660b07ad9312a7b670b01f18c821f99f2b285d3a2fc3fc36dcdc39000000000000000000000000d246af8e20"], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400000000fbb29756f53175a299502b76ea9dd4b6e681a78f965380509124f94ef00fa8a02954660b07ad9312a7b670b01f18c821f99f2b285d3a2fc3fc36dcdc39000000000000000000000000d246af8e20"], 0x60}}, 0x0) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) (async) bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10001000}, 0x4040080) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x2, 0xa, 0x0, 0x2, 0x6ab]}, &(0x7f0000000280)=0x54) (async) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x2, 0xa, 0x0, 0x2, 0x6ab]}, &(0x7f0000000280)=0x54) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400000900000000", @ANYRES32=0x0, @ANYBLOB="0380000040020000140012800b0001006970766c616e0000040002800800", @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 42.96152088s ago: executing program 34 (id=7470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x842, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000800000018110032", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009d744000fcffffff186a000003000000000000004000000018000000040000000000000008000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000030701080000000000000000070000010c00034000000000000000ff0c000340000000000000857f0900010073797a31000000000c000213c66d880000000101"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x400c0c4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000d000000850000002d00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 29.824276816s ago: executing program 35 (id=7472): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d8, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd7000fdffffff02181000", @ANYRES32=r1, @ANYBLOB="08000100ac1e010108000200e000000207004100ac14141e08000400e0000001080009000000010008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30c33d133}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 25.066101858s ago: executing program 36 (id=7471): mmap(&(0x7f0000656000/0x2000)=nil, 0x2000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000840)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 0s ago: executing program 6 (id=7474): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700fffd08000a4000b6b8000900020073797a31000000000900010073797a300000000008000540000000071400"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001a000100000000000000000081808000000200000000000014000200fc016155023b00000000000000000000140001"], 0x44}}, 0x0) unshare(0x8040480) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) close(0x3) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={r1, 0x14, 0x5, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000000)=0x3) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x42, 0x0, 0x1, 0xfffffff8}, 0x28) kernel console output (not intermixed with test programs): 6] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.040201][T31576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.194835][T30161] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.239646][T30161] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.314734][T30161] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.350575][T30161] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.568690][ T5820] Bluetooth: hci2: command tx timeout [ 658.842904][ C1] vcan0: j1939_tp_rxtimer: 0xffff888043b88000: rx timeout, send abort [ 658.943438][T31669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6483'. [ 658.970424][T31669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6483'. [ 659.217261][T31686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6489'. [ 659.231987][T31686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6489'. [ 659.343037][ C1] vcan0: j1939_tp_rxtimer: 0xffff888043b8a000: rx timeout, send abort [ 659.351448][ C1] vcan0: j1939_tp_rxtimer: 0xffff888043b88000: abort rx timeout. Force session deactivation [ 659.421140][T31698] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6494'. [ 659.447550][T31698] vlan2: entered promiscuous mode [ 659.456139][T31698] bond0: entered promiscuous mode [ 659.568789][T31705] validate_nla: 3 callbacks suppressed [ 659.568803][T31705] netlink: 'syz.1.6493': attribute type 1 has an invalid length. [ 659.837329][ C1] vcan0: j1939_tp_rxtimer: 0xffff888043b89c00: rx timeout, send abort [ 659.845855][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888043b89c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 659.860700][ C1] vcan0: j1939_tp_rxtimer: 0xffff888043b8a000: abort rx timeout. Force session deactivation [ 659.958687][T31719] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.6499'. [ 660.076393][T31727] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6504'. [ 660.649577][ T5820] Bluetooth: hci2: command tx timeout [ 661.098295][T31753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 661.168967][T31759] veth0: entered promiscuous mode [ 661.177999][T31758] veth0: left promiscuous mode [ 661.273141][T31761] netlink: 'syz.1.6514': attribute type 11 has an invalid length. [ 661.538336][T31787] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.546050][T31787] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.570138][T31793] netlink: 'syz.2.6524': attribute type 10 has an invalid length. [ 661.586908][T31787] bridge0: entered allmulticast mode [ 661.689228][T31800] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.696815][T31800] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.766651][T31800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.783184][T31800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.877710][T31800] geneve2: left promiscuous mode [ 661.896325][T31805] geneve3: entered promiscuous mode [ 661.901720][T31805] geneve3: entered allmulticast mode [ 661.922274][T30161] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 661.939863][T13076] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 661.949981][T13076] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 661.960994][T13076] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 662.466430][T31827] __nla_validate_parse: 5 callbacks suppressed [ 662.466443][T31827] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6532'. [ 662.893030][T31835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6535'. [ 662.935209][T31840] netlink: 'syz.4.6536': attribute type 1 has an invalid length. [ 662.956347][T31840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 662.970626][T31840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6536'. [ 662.982430][T31840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6536'. [ 662.993865][T31840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6536'. [ 664.517494][T31789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.723150][T31856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6542'. [ 664.827608][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6546'. [ 664.861508][T31871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6546'. [ 665.176307][T31882] lo speed is unknown, defaulting to 1000 [ 666.325982][T31916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6558'. [ 668.036415][T31885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.233917][T31929] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6563'. [ 668.266956][T31934] netlink: 'syz.0.6564': attribute type 5 has an invalid length. [ 668.426735][T31943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6565'. [ 668.442856][T31944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6567'. [ 668.454069][T31944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6567'. [ 668.469706][T31944] xfrm1: entered promiscuous mode [ 668.474783][T31944] xfrm1: entered allmulticast mode [ 668.481098][T31944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6567'. [ 668.516667][T31943] sctp: [Deprecated]: syz.4.6565 (pid 31943) Use of int in maxseg socket option. [ 668.516667][T31943] Use struct sctp_assoc_value instead [ 668.565412][T31943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6565'. [ 668.733916][T31969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.797937][T31971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.877710][T31971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.928292][T31971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.943349][T31981] lo speed is unknown, defaulting to 1000 [ 669.020853][T31971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.175276][T13079] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.228875][T13074] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.302027][T13074] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.318613][T13074] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.940259][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880572b5000: rx timeout, send abort [ 669.948991][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572b5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 670.185588][T32018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6590'. [ 670.218554][T32018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6590'. [ 670.475072][T32022] lo speed is unknown, defaulting to 1000 [ 670.521617][T32031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6591'. [ 670.579562][T32027] lo speed is unknown, defaulting to 1000 [ 670.638228][T32045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6591'. [ 670.795193][T32050] netlink: 'syz.1.6589': attribute type 16 has an invalid length. [ 670.964565][T32055] bridge0: port 3(macvtap1) entered blocking state [ 670.998671][T32055] bridge0: port 3(macvtap1) entered disabled state [ 671.021358][T32055] macvtap1: entered allmulticast mode [ 671.051889][T32055] bridge0: entered allmulticast mode [ 671.071510][T32055] macvtap1: left allmulticast mode [ 671.077607][T32055] bridge0: left allmulticast mode [ 671.151002][T32059] bridge0: port 3(macvtap1) entered blocking state [ 671.157620][T32059] bridge0: port 3(macvtap1) entered disabled state [ 671.171937][T32059] macvtap1: entered allmulticast mode [ 671.177359][T32059] bridge0: entered allmulticast mode [ 671.185520][T32059] macvtap1: left allmulticast mode [ 671.190997][T32059] bridge0: left allmulticast mode [ 671.448155][T32070] tipc: Enabled bearer , priority 0 [ 671.455519][T32068] syzkaller0: entered promiscuous mode [ 671.461408][T32068] syzkaller0: entered allmulticast mode [ 671.471911][T32074] syzkaller0: entered promiscuous mode [ 671.477432][T32074] syzkaller0: entered allmulticast mode [ 671.542885][T32070] tipc: Resetting bearer [ 671.561572][T32069] tipc: Resetting bearer [ 671.601100][T32088] netlink: 'syz.0.6607': attribute type 1 has an invalid length. [ 671.609629][T32069] tipc: Disabling bearer [ 671.779407][T32091] bond5: entered promiscuous mode [ 671.799331][T32091] bond5: entered allmulticast mode [ 671.809314][T32091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 671.816823][T32100] tipc: MTU too low for tipc bearer [ 672.746117][T32116] netlink: 'syz.4.6613': attribute type 5 has an invalid length. [ 672.769318][T13076] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.788912][T13076] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 672.799712][T13076] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.828875][T13076] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 672.845721][T13076] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.862413][T13076] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 672.892834][T13076] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.922463][T13076] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 673.133373][T32146] lo speed is unknown, defaulting to 1000 [ 673.149715][T32152] netlink: 'syz.1.6623': attribute type 5 has an invalid length. [ 673.186716][T32153] netlink: 'syz.1.6623': attribute type 5 has an invalid length. [ 673.252000][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067caa800: rx timeout, send abort [ 673.260599][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888067caa800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 673.402624][T32157] __nla_validate_parse: 8 callbacks suppressed [ 673.402643][T32157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6624'. [ 673.565709][T32165] tipc: Enabling of bearer rejected, failed to enable media [ 673.725138][T32181] sit0: entered promiscuous mode [ 673.736359][T32181] netlink: 'syz.2.6633': attribute type 1 has an invalid length. [ 673.744972][T32181] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6633'. [ 673.858917][T32192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6633'. [ 673.867964][T32192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6633'. [ 673.900770][T32192] netlink: 'syz.2.6633': attribute type 1 has an invalid length. [ 674.035782][T32214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6642'. [ 674.045504][T32214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6642'. [ 674.057981][T32215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6642'. [ 674.067750][T32215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6642'. [ 674.232680][T32222] IPVS: Unknown mcast interface: /net/tun [ 674.307805][T32228] netlink: 'syz.0.6646': attribute type 1 has an invalid length. [ 674.318849][T32228] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6646'. [ 674.330949][T32228] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6646'. [ 674.341624][T32228] netlink: 'syz.0.6646': attribute type 2 has an invalid length. [ 674.454798][T32240] netlink: 'syz.4.6650': attribute type 1 has an invalid length. [ 674.492738][T32240] bond3: entered promiscuous mode [ 674.497786][T32240] bond3: entered allmulticast mode [ 674.503355][T32240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.521472][T32240] macvlan2: entered promiscuous mode [ 674.526867][T32240] macvlan2: entered allmulticast mode [ 674.850600][T32263] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 674.887928][T32267] macvtap1: entered promiscuous mode [ 674.921865][T32267] mac80211_hwsim hwsim96 wlan1: entered promiscuous mode [ 674.953849][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067ec2000: rx timeout, send abort [ 674.968560][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888067ec2000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 675.092256][T32280] netlink: 'syz.1.6664': attribute type 21 has an invalid length. [ 675.104697][T32280] netlink: 'syz.1.6664': attribute type 4 has an invalid length. [ 675.178606][T32280] netlink: 'syz.1.6664': attribute type 3 has an invalid length. [ 675.219392][T32280] syzkaller0: entered promiscuous mode [ 675.224909][T32280] syzkaller0: entered allmulticast mode [ 675.323605][T32280] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 675.582919][T32315] syzkaller0: entered promiscuous mode [ 675.588816][T32315] syzkaller0: entered allmulticast mode [ 677.623379][T32355] vlan0: entered promiscuous mode [ 678.029097][T32373] netlink: 'syz.0.6693': attribute type 13 has an invalid length. [ 678.047558][T32373] netlink: 'syz.0.6693': attribute type 17 has an invalid length. [ 678.224520][T32373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.254154][T32373] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.268006][T32373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.883306][T32411] sctp: [Deprecated]: syz.3.6704 (pid 32411) Use of int in max_burst socket option deprecated. [ 678.883306][T32411] Use struct sctp_assoc_value instead [ 678.976275][T32420] xt_hashlimit: max too large, truncated to 1048576 [ 678.996679][T32420] xt_hashlimit: overflow, try lower: 13/0 [ 679.019458][T32420] __nla_validate_parse: 7 callbacks suppressed [ 679.019476][T32420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6707'. [ 679.040090][T32420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6707'. [ 679.133811][T32430] batman_adv: batadv0: Adding interface: macvtap2 [ 679.141367][T32430] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.167373][T32430] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 679.228577][T32434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6712'. [ 679.240466][T32435] xt_bpf: check failed: parse error [ 679.347196][T32440] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6713'. [ 679.460797][T32446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6715'. [ 679.481607][T32447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6716'. [ 679.588343][T32451] bond3: option miimon: invalid value (18446744073709551607) [ 679.596297][T32451] bond3: option miimon: allowed values 0 - 2147483647 [ 679.609566][T32451] bond3 (unregistering): Released all slaves [ 679.887542][T32475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6721'. [ 679.962811][T32475] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.6721'. [ 679.972255][T32475] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.6721'. [ 679.981845][T32475] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6721'. [ 679.992238][T32475] tc_dump_action: action bad kind [ 680.049139][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809ea08000: rx timeout, send abort [ 680.057544][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88809ea08000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 680.124252][T32486] batadv_slave_0: entered promiscuous mode [ 680.146109][T32487] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 680.146721][T32484] batadv_slave_0: left promiscuous mode [ 680.175887][T32489] netlink: 'syz.4.6728': attribute type 1 has an invalid length. [ 680.220025][T32489] bond4: entered promiscuous mode [ 680.225121][T32489] bond4: entered allmulticast mode [ 680.260145][T32489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 680.296230][T32496] erspan1: entered allmulticast mode [ 680.440462][T32510] team0 (unregistering): Failed to send options change via netlink (err -105) [ 680.459441][T32510] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 680.475589][T32510] team0 (unregistering): Port device team_slave_0 removed [ 680.490079][T32510] team0 (unregistering): Failed to send options change via netlink (err -105) [ 680.499705][T32510] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 680.518021][T32510] team0 (unregistering): Port device team_slave_1 removed [ 680.540420][T32502] bond0: (slave dummy0): Releasing backup interface [ 680.543708][T32522] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 680.563360][T32502] dummy0: left promiscuous mode [ 680.582421][T32502] batman_adv: batadv0: Adding interface: dummy0 [ 680.598771][T32502] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 680.731763][T32534] xt_hashlimit: max too large, truncated to 1048576 [ 680.768588][T32534] xt_hashlimit: overflow, try lower: 13/0 [ 680.894981][T32551] bond1: left promiscuous mode [ 680.900043][T32551] bond1: left allmulticast mode [ 680.905528][T32551] vlan2: left promiscuous mode [ 680.911247][T32551] bond0: left promiscuous mode [ 680.923063][T32551] hsr_slave_0: left promiscuous mode [ 680.929363][T32551] hsr_slave_1: left promiscuous mode [ 683.617771][T32527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.900709][T32564] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 683.969621][T32564] bond3 (unregistering): Released all slaves [ 684.806981][T32591] __nla_validate_parse: 10 callbacks suppressed [ 684.807004][T32591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6745'. [ 684.953064][T32605] bond3: entered promiscuous mode [ 685.142826][T32609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6754'. [ 685.425151][T32630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6761'. [ 685.460431][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6762'. [ 685.484975][T32636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6763'. [ 685.635990][T32638] lo speed is unknown, defaulting to 1000 [ 685.777568][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.786482][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 686.003612][T32668] netlink: 'syz.0.6772': attribute type 1 has an invalid length. [ 686.034133][T32668] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6772'. [ 686.295998][ T979] hid-generic 0005:0B56:7FFF.0001: item fetching failed at offset 0/1 [ 686.320916][ T979] hid-generic 0005:0B56:7FFF.0001: probe with driver hid-generic failed with error -22 [ 686.343062][T32674] lo speed is unknown, defaulting to 1000 [ 686.452028][T32685] lo speed is unknown, defaulting to 1000 [ 687.116588][T32733] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 687.389690][T32745] xt_hashlimit: max too large, truncated to 1048576 [ 687.413447][T32749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6789'. [ 687.423176][T32745] xt_hashlimit: overflow, try lower: 13/0 [ 687.529410][T32755] 8021q: VLANs not supported on ip6tnl0 [ 688.074689][ T309] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.091410][ T308] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.129643][ T309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6794'. [ 688.154156][ T308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6794'. [ 688.183568][ T319] netlink: 'syz.2.6799': attribute type 2 has an invalid length. [ 688.402563][ T330] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6803'. [ 688.756551][ T362] netlink: 'syz.0.6813': attribute type 1 has an invalid length. [ 688.771053][ T362] ip6gre1: left promiscuous mode [ 688.777373][ T362] xfrm1: left promiscuous mode [ 688.785453][ T362] bond5: left promiscuous mode [ 688.795065][ T362] netlink: 'syz.0.6813': attribute type 1 has an invalid length. [ 689.271751][ T382] lo speed is unknown, defaulting to 1000 [ 689.500451][ T385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 689.553978][ T392] netlink: 'syz.1.6821': attribute type 5 has an invalid length. [ 690.277193][ T415] geneve4: entered promiscuous mode [ 690.294708][T13076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.336613][T13076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.369710][ T415] : renamed from veth0_to_bond [ 690.374528][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880316af000: rx timeout, send abort [ 690.374735][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880316af000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 690.430838][T13076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.454069][T13076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.661044][ T401] __nla_validate_parse: 4 callbacks suppressed [ 690.661060][ T401] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6824'. [ 690.808407][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 690.816598][ C1] lec:lec_tx_timeout: lec0 [ 690.844688][ T451] 0: reclassify loop, rule prio 0, protocol 800 [ 690.856985][ T447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6836'. [ 690.930233][T13519] lec:lec_start_xmit: lec0:No lecd attached [ 691.152451][ T470] lo speed is unknown, defaulting to 1000 [ 691.386009][ T495] netlink: 'syz.3.6847': attribute type 4 has an invalid length. [ 691.543306][ T496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6848'. [ 691.637378][ T504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6850'. [ 691.716124][ T507] xt_hashlimit: max too large, truncated to 1048576 [ 691.727787][ T507] xt_hashlimit: overflow, try lower: 13/0 [ 691.863107][ T510] lo speed is unknown, defaulting to 1000 [ 692.074628][ T517] openvswitch: netlink: IP tunnel dst address not specified [ 692.183392][ T493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 692.200646][ T493] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 692.293668][ T493] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 692.305192][ T493] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 692.313083][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d101400: rx timeout, send abort [ 692.321616][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d101400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 692.381289][ T493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 692.387235][ T493] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 692.607361][ T493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 692.622084][ T493] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 692.765446][ T552] tipc: Started in network mode [ 692.771008][ T552] tipc: Node identity 166efdbf6355, cluster identity 4711 [ 692.785704][ T552] tipc: Enabled bearer , priority 0 [ 692.837391][ T552] syzkaller0: entered promiscuous mode [ 692.846203][ T552] syzkaller0: entered allmulticast mode [ 692.983278][ T552] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 693.045533][ T568] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 693.072015][ T572] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6870'. [ 693.081485][ T572] nbd: socks must be embedded in a SOCK_ITEM attr [ 693.088343][ T558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.106142][ T552] tipc: Resetting bearer [ 693.127706][ T551] tipc: Resetting bearer [ 693.161275][ T551] tipc: Disabling bearer [ 693.210834][ T583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6873'. [ 693.237658][ T585] netlink: 'syz.4.6873': attribute type 1 has an invalid length. [ 693.237690][ T583] netlink: 'syz.4.6873': attribute type 1 has an invalid length. [ 693.456840][ T594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6875'. [ 693.472750][ T594] nbd: couldn't find device at index 536870912 [ 693.480058][ T597] netlink: 'syz.4.6876': attribute type 1 has an invalid length. [ 693.598988][ T599] netlink: 'syz.0.6878': attribute type 6 has an invalid length. [ 693.786448][ T612] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6880'. [ 693.796488][ T611] batadv_slave_1: entered promiscuous mode [ 693.876139][ T616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6882'. [ 693.935389][ T611] batadv_slave_1: left promiscuous mode [ 693.989177][ T618] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 694.059263][ T620] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.6883'. [ 694.078566][ T620] tc_dump_action: action bad kind [ 694.260723][ T632] bond0: Device is already in use. [ 694.491180][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.533800][ T657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.572770][ T669] sctp: [Deprecated]: syz.0.6895 (pid 669) Use of int in maxseg socket option. [ 694.572770][ T669] Use struct sctp_assoc_value instead [ 694.620432][ T671] netlink: 'syz.1.6899': attribute type 8 has an invalid length. [ 694.722801][ T673] netlink: zone id is out of range [ 694.727957][ T673] netlink: zone id is out of range [ 694.734179][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.745872][ T673] netlink: zone id is out of range [ 694.760440][ T673] netlink: zone id is out of range [ 694.770685][ T673] netlink: zone id is out of range [ 694.774754][ T677] bridge_slave_0: left allmulticast mode [ 694.775905][ T673] netlink: zone id is out of range [ 694.788983][ T677] bridge_slave_0: left promiscuous mode [ 694.794884][ T677] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.796143][ T673] netlink: zone id is out of range [ 694.813824][ T677] bridge_slave_1: left allmulticast mode [ 694.823819][ T680] xt_bpf: check failed: parse error [ 694.829379][ T677] bridge_slave_1: left promiscuous mode [ 694.835805][ T677] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.846367][ T681] xt_TCPMSS: Only works on TCP SYN packets [ 694.852284][ T673] netlink: zone id is out of range [ 694.927597][ T677] bond0: (slave bond_slave_0): Releasing backup interface [ 694.964771][ T677] bond0: (slave bond_slave_1): Releasing backup interface [ 694.990961][ T677] team0: Port device team_slave_0 removed [ 695.013016][ T677] team0: Port device team_slave_1 removed [ 695.029513][ T677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.037518][ T677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.057284][ T677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.065706][ T677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.085374][ T691] netlink: 'syz.2.6906': attribute type 29 has an invalid length. [ 695.116543][ T694] hsr_slave_1 (unregistering): left promiscuous mode [ 695.180804][ T700] netlink: 'syz.1.6908': attribute type 3 has an invalid length. [ 695.189031][ T700] netlink: 'syz.1.6908': attribute type 1 has an invalid length. [ 695.206622][ T700] NCSI netlink: No device for ifindex 808464432 [ 695.239887][ T700] ip6tnl0: entered promiscuous mode [ 695.326133][ T708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 695.482622][ T715] syzkaller0: entered promiscuous mode [ 695.488963][ T715] syzkaller0: entered allmulticast mode [ 695.528245][T13076] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.551752][T13076] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.576101][T13076] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.595325][T13076] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.938496][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 695.946576][ C1] lec:lec_tx_timeout: lec0 [ 696.070487][ T5820] block nbd4: Receive control failed (result -32) [ 696.330604][ T771] __nla_validate_parse: 15 callbacks suppressed [ 696.330627][ T771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6932'. [ 696.392624][ T774] xt_hashlimit: max too large, truncated to 1048576 [ 696.416001][ T774] xt_hashlimit: overflow, try lower: 13/0 [ 696.433710][ T774] FAULT_INJECTION: forcing a failure. [ 696.433710][ T774] name failslab, interval 1, probability 0, space 0, times 1 [ 696.464291][ T774] CPU: 1 UID: 0 PID: 774 Comm: syz.1.6931 Not tainted syzkaller #0 PREEMPT(full) [ 696.464318][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.464330][ T774] Call Trace: [ 696.464338][ T774] [ 696.464346][ T774] dump_stack_lvl+0xe8/0x150 [ 696.464375][ T774] should_fail_ex+0x412/0x560 [ 696.464405][ T774] should_failslab+0xa8/0x100 [ 696.464431][ T774] __kvmalloc_node_noprof+0x178/0x8a0 [ 696.464454][ T774] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 696.464483][ T774] __nf_hook_entries_try_shrink+0x328/0x700 [ 696.464515][ T774] __nf_unregister_net_hook+0x4cc/0x6f0 [ 696.464545][ T774] nf_unregister_net_hooks+0xcb/0x140 [ 696.464568][ T774] nf_ct_netns_put+0x36d/0x520 [ 696.464587][ T774] ? __pfx_xt_cluster_mt_destroy+0x10/0x10 [ 696.464610][ T774] cleanup_entry+0x15f/0x360 [ 696.464634][ T774] ? __pfx_cleanup_entry+0x10/0x10 [ 696.464663][ T774] ? xt_find_match+0x1f7/0x250 [ 696.464692][ T774] translate_table+0x1ecd/0x20b0 [ 696.464735][ T774] ? __pfx_translate_table+0x10/0x10 [ 696.464753][ T774] ? __might_fault+0xaf/0x130 [ 696.464774][ T774] ? __might_fault+0xaf/0x130 [ 696.464813][ T774] ? _copy_from_user+0x94/0xb0 [ 696.464837][ T774] do_ip6t_set_ctl+0x9fe/0xe10 [ 696.464861][ T774] ? rcu_is_watching+0x15/0xb0 [ 696.464881][ T774] ? trace_contention_end+0x39/0x100 [ 696.464903][ T774] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 696.464944][ T774] ? __pfx___mutex_lock+0x10/0x10 [ 696.464966][ T774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 696.464996][ T774] ? __pfx_aa_sk_perm+0x10/0x10 [ 696.465024][ T774] nf_setsockopt+0x26f/0x290 [ 696.465047][ T774] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 696.465068][ T774] do_sock_setsockopt+0x17c/0x1b0 [ 696.465093][ T774] __x64_sys_setsockopt+0x13d/0x1b0 [ 696.465119][ T774] do_syscall_64+0x14d/0xf80 [ 696.465140][ T774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.465157][ T774] ? trace_irq_disable+0x37/0x100 [ 696.465175][ T774] ? clear_bhb_loop+0x40/0x90 [ 696.465202][ T774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.465220][ T774] RIP: 0033:0x7f924519bf79 [ 696.465236][ T774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.465250][ T774] RSP: 002b:00007f9246009028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 696.465273][ T774] RAX: ffffffffffffffda RBX: 00007f9245415fa0 RCX: 00007f924519bf79 [ 696.465287][ T774] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 696.465298][ T774] RBP: 00007f9246009090 R08: 00000000000004c0 R09: 0000000000000000 [ 696.465309][ T774] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 696.465321][ T774] R13: 00007f9245416038 R14: 00007f9245415fa0 R15: 00007ffcceef5878 [ 696.465352][ T774] [ 697.031231][ T794] xt_hashlimit: max too large, truncated to 1048576 [ 697.037953][ T794] xt_hashlimit: overflow, try lower: 13/0 [ 697.325187][ T811] lo speed is unknown, defaulting to 1000 [ 697.349135][ T816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6943'. [ 697.547182][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049a72000: rx timeout, send abort [ 697.555842][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888049a72000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 697.986495][ T841] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 698.388836][ T5820] block nbd5: Receive control failed (result -32) [ 698.431365][ T851] xt_hashlimit: max too large, truncated to 1048576 [ 698.481199][ T851] xt_hashlimit: overflow, try lower: 13/0 [ 698.636038][ T857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6952'. [ 698.717746][ T860] lo speed is unknown, defaulting to 1000 [ 698.758053][ T865] netlink: 'syz.1.6955': attribute type 8 has an invalid length. [ 698.828780][ T866] netlink: 'syz.1.6955': attribute type 8 has an invalid length. [ 698.953690][ T873] geneve2: entered promiscuous mode [ 699.064363][ T877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6958'. [ 699.175266][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6961'. [ 699.313014][ T893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6964'. [ 699.386345][ T895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6965'. [ 699.501174][ T905] netlink: 25 bytes leftover after parsing attributes in process `syz.4.6969'. [ 699.584638][ T918] veth0: entered promiscuous mode [ 699.638168][ T929] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 699.665354][ T921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6972'. [ 699.689336][T27079] net_ratelimit: 25 callbacks suppressed [ 699.689355][T27079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.761205][ T917] veth0: left promiscuous mode [ 700.034812][ T950] netlink: 'syz.1.6976': attribute type 1 has an invalid length. [ 700.100818][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d9b1400: rx timeout, send abort [ 700.109883][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d9b1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 700.732448][T27079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.487455][ T950] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 701.618336][ T961] syzkaller0: entered promiscuous mode [ 701.648535][ T961] syzkaller0: entered allmulticast mode [ 701.770898][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.044980][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6985'. [ 702.091490][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.809942][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.636902][ T1015] pimreg3: entered allmulticast mode [ 703.670375][ T1014] pimreg3: left allmulticast mode [ 703.733798][ T1025] netlink: 'syz.0.6992': attribute type 3 has an invalid length. [ 703.849332][T27079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.876514][ T1041] syzkaller0: entered promiscuous mode [ 703.883314][ T1041] syzkaller0: entered allmulticast mode [ 703.895348][ T1041] 0: reclassify loop, rule prio 0, protocol 800 [ 703.991854][ T1046] netlink: 'syz.4.6994': attribute type 15 has an invalid length. [ 704.078518][ T1056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7001'. [ 704.164036][ T1056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 704.217502][ T1067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7003'. [ 704.245057][ T1067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7003'. [ 704.422709][ T1073] macvtap3: entered promiscuous mode [ 704.429922][ T1073] macvtap3: entered allmulticast mode [ 704.436521][ T1073] dummy0: entered allmulticast mode [ 704.456696][ T1073] dummy0: entered promiscuous mode [ 704.476205][ T1073] team0: Device macvtap3 failed to register rx_handler [ 704.495529][ T1073] dummy0: left allmulticast mode [ 704.505641][ T1073] dummy0: left promiscuous mode [ 704.574835][ T1079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7007'. [ 704.636858][ T1079] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 704.638905][ T5909] IPVS: starting estimator thread 0... [ 704.656998][ T1082] gretap1: entered promiscuous mode [ 704.758543][ T1086] IPVS: using max 35 ests per chain, 84000 per kthread [ 704.891099][T27079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.020934][ T1106] netlink: 'syz.2.7015': attribute type 4 has an invalid length. [ 705.092538][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7015'. [ 705.129936][ T1108] syzkaller1: entered promiscuous mode [ 705.131074][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.135629][ T1108] syzkaller1: entered allmulticast mode [ 705.254412][ T1113] xt_hashlimit: max too large, truncated to 1048576 [ 705.261562][ T1113] xt_hashlimit: overflow, try lower: 13/0 [ 705.323725][ T1117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7019'. [ 705.332799][ T1117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7019'. [ 705.431949][ T1120] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 705.554687][ T1126] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 705.757010][ T1143] openvswitch: netlink: Flow actions attr not present in new flow. [ 705.814810][ T1144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7027'. [ 705.928989][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.997376][ T1152] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7031'. [ 706.373351][ T1164] syzkaller0: entered promiscuous mode [ 706.379228][ T1164] syzkaller0: entered allmulticast mode [ 706.444473][ T1167] 0: reclassify loop, rule prio 0, protocol 800 [ 706.485719][ T1164] pim6reg: entered allmulticast mode [ 706.492371][ T1164] pim6reg: left allmulticast mode [ 706.512023][ T1169] tipc: New replicast peer: 172.20.20.27 [ 706.518110][ T1169] tipc: Enabled bearer , priority 26 [ 706.713131][ T1171] xfrm1: left allmulticast mode [ 706.724942][ T1171] bond5: left allmulticast mode [ 706.786567][T30161] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.801622][T30161] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.823694][T30161] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.851304][T30161] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.925413][ T1188] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 706.958966][T30161] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.967668][T30161] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.976824][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.995855][T30161] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.036391][T30161] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.327527][ T1215] __nla_validate_parse: 13 callbacks suppressed [ 707.327547][ T1215] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7052'. [ 707.386995][ T1220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7053'. [ 707.474144][ T1225] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 707.485187][ T1225] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 707.494541][ T1225] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 707.529914][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.576070][ T1232] xt_hashlimit: max too large, truncated to 1048576 [ 707.582848][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032e47400: rx timeout, send abort [ 707.584156][ T1232] xt_hashlimit: overflow, try lower: 13/0 [ 707.592037][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032e47400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 707.694430][ T1236] ip6tnl2: entered promiscuous mode [ 707.711504][ T1238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7060'. [ 707.720608][ T1236] ip6tnl2: entered allmulticast mode [ 707.736852][ T1241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7059'. [ 707.748009][ T1241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7059'. [ 707.750115][ T1238] ip6t_srh: unknown srh match flags 4000 [ 707.775851][ T1241] tipc: Enabling of bearer rejected, failed to enable media [ 708.009214][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.021382][ T1255] netlink: 'syz.2.7063': attribute type 1 has an invalid length. [ 708.064837][ T1255] bond4: entered promiscuous mode [ 708.067204][ T1258] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7064'. [ 708.070059][ T1255] bond4: entered allmulticast mode [ 708.070498][ T1255] 8021q: adding VLAN 0 to HW filter on device bond4 [ 708.131376][ T1255] bridge2: entered promiscuous mode [ 708.142568][ T1255] bridge2: entered allmulticast mode [ 708.157789][ T1255] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 708.169412][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.169631][T30161] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 708.255911][ T1262] bond6: Removing last arp target with arp_interval on [ 708.276372][ T1263] bridge3: entered promiscuous mode [ 708.282071][ T1263] bridge3: entered allmulticast mode [ 708.288031][ T1263] bond4: (slave bridge3): Enslaving as a backup interface with a down link [ 708.377972][ T1273] geneve5: entered promiscuous mode [ 708.384015][ T1273] geneve5: entered allmulticast mode [ 708.401682][ T1271] xt_hashlimit: max too large, truncated to 1048576 [ 708.424874][ T1277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7072'. [ 708.435575][ T1271] xt_hashlimit: overflow, try lower: 13/0 [ 708.627401][ T1291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7076'. [ 708.641073][ T1291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7076'. [ 708.796725][ T1313] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7083'. [ 708.864566][ T1317] ieee802154 phy0 wpan0: encryption failed: -126 [ 708.896244][ T1317] lo speed is unknown, defaulting to 1000 [ 708.975907][ T1324] netlink: 'syz.3.7086': attribute type 1 has an invalid length. [ 708.995422][ T1327] xt_hashlimit: max too large, truncated to 1048576 [ 709.002876][ T1327] xt_hashlimit: overflow, try lower: 13/0 [ 709.031703][ T1324] bond5: entered promiscuous mode [ 709.042426][ T1324] bond5: entered allmulticast mode [ 709.057192][ T1324] 8021q: adding VLAN 0 to HW filter on device bond5 [ 709.076581][ T1319] macvlan2: entered promiscuous mode [ 709.083318][ T1319] macvlan2: entered allmulticast mode [ 709.094033][ T1319] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 709.364516][ T1344] ksmbd: Unknown IPC event: 1, ignore. [ 709.483452][ T1351] ..0ªî{X¹¦: renamed from gretap0 [ 709.515193][ T1351] ..0ªî{X¹¦: entered allmulticast mode [ 709.641934][ T1370] netlink: 'syz.2.7099': attribute type 2 has an invalid length. [ 709.678292][ T1371] tipc: Started in network mode [ 709.693527][ T1371] tipc: Node identity ba012f1b8c21, cluster identity 4711 [ 709.709999][ T1371] tipc: Enabled bearer , priority 0 [ 709.726030][ T1371] syzkaller0: entered promiscuous mode [ 709.733266][ T1371] syzkaller0: entered allmulticast mode [ 709.801265][ T1371] tipc: Resetting bearer [ 709.821477][ T1368] tipc: Resetting bearer [ 709.890125][ T1368] tipc: Disabling bearer [ 710.041732][ T1391] lo speed is unknown, defaulting to 1000 [ 710.089482][ T979] net_ratelimit: 4 callbacks suppressed [ 710.089500][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.299771][ T1408] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 710.583653][ T1426] lo speed is unknown, defaulting to 1000 [ 711.129255][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.216594][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.337788][ T1480] block nbd3: NBD_DISCONNECT [ 711.357659][ T1480] block nbd3: Send disconnect failed -110 [ 711.387407][ T1480] block nbd3: shutting down sockets [ 711.645016][ T1503] netlink: 'syz.4.7135': attribute type 5 has an invalid length. [ 711.685725][ T1503] geneve4: entered promiscuous mode [ 711.706959][ T1503] geneve4: entered allmulticast mode [ 711.725717][T30161] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 33732 - 0 [ 711.775806][T30161] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 33732 - 0 [ 711.779487][ T1512] x_tables: duplicate underflow at hook 2 [ 711.794463][T30161] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 33732 - 0 [ 711.835147][T30161] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 33732 - 0 [ 712.169752][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.394308][ T1535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.413984][ T1537] syzkaller0: entered promiscuous mode [ 712.430305][ T1537] syzkaller0: entered allmulticast mode [ 712.631153][ T1537] __nla_validate_parse: 16 callbacks suppressed [ 712.631173][ T1537] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7144'. [ 712.664316][ T1544] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 712.703137][T30161] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.713537][T30161] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.766909][T30161] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.923671][T30161] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.974114][T13079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.000528][ T1560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7149'. [ 713.065399][ T1560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7149'. [ 713.239045][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.411646][ T1575] lo speed is unknown, defaulting to 1000 [ 713.429790][ T1570] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7152'. [ 713.819769][ T1593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7159'. [ 713.851486][ T1593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7159'. [ 713.912636][ T1598] netlink: 'syz.2.7161': attribute type 15 has an invalid length. [ 713.919086][ T1589] syzkaller0: entered promiscuous mode [ 713.965503][ T1587] syzkaller0: left promiscuous mode [ 713.974066][ T1604] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7161'. [ 714.140292][ T1613] ieee802154 phy0 wpan0: encryption failed: -22 [ 714.209679][ T1618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7165'. [ 714.251207][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.269153][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.382546][ T1624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7166'. [ 714.809517][ T1648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7171'. [ 715.065713][ T1659] syzkaller1: entered allmulticast mode [ 715.232858][ T1676] syzkaller1: entered promiscuous mode [ 715.265057][ T1676] syzkaller1: entered allmulticast mode [ 715.289181][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.414853][ T1690] ip6gre2: entered promiscuous mode [ 715.421195][ T1690] ip6gre2: entered allmulticast mode [ 715.489779][ T1697] netlink: 'syz.3.7180': attribute type 4 has an invalid length. [ 715.777569][ T1717] xt_hashlimit: max too large, truncated to 1048576 [ 715.814723][ T1717] xt_hashlimit: overflow, try lower: 13/0 [ 716.029872][ T1727] nbd: nbd64 already in use [ 716.071788][ T1229] block nbd64: NBD_DISCONNECT [ 716.333961][ T1229] udevd[1229]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 716.344790][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.439984][ T29] audit: type=1804 audit(1771330470.571:22): pid=1755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7194" name="memory.events" dev="tmpfs" ino=1177 res=1 errno=0 [ 716.441201][ T1746] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.490783][ T29] audit: type=1800 audit(1771330470.591:23): pid=1755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7194" name="memory.events" dev="tmpfs" ino=1177 res=0 errno=0 [ 716.499568][ T1752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.521164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.575082][ T1752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.587995][T30162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.603658][ T1767] xt_hashlimit: max too large, truncated to 1048576 [ 716.608684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.616235][ T1767] xt_hashlimit: overflow, try lower: 13/0 [ 716.676320][T13073] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.689197][T13073] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.698141][T13073] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.735658][ T1757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.744501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.888936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.083839][ T1790] sit0: entered promiscuous mode [ 717.108724][ T1790] netlink: 'syz.4.7207': attribute type 1 has an invalid length. [ 717.222039][ T1803] veth0_to_bridge: entered promiscuous mode [ 717.361860][ T1802] veth0_to_bridge: left promiscuous mode [ 717.551032][ T1827] syzkaller0: entered promiscuous mode [ 717.597996][ T1834] xt_hashlimit: size too large, truncated to 1048576 [ 717.598964][ T1827] syzkaller0: entered allmulticast mode [ 717.676160][ T1836] __nla_validate_parse: 10 callbacks suppressed [ 717.676177][ T1836] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7222'. [ 717.736078][ T1836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7222'. [ 717.793174][ T1844] IPVS: length: 24 != 412310568984 [ 718.093786][ T1853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7226'. [ 719.427018][ T1839] ¾x9ÿ: renamed from bridge_slave_0 [ 719.601572][ T1855] bond0: (slave rose0): Enslaving as an active interface with an up link [ 719.804289][ T1879] ..0ªî{X¹¦: left allmulticast mode [ 719.830292][ T1879] sit0: left promiscuous mode [ 719.857353][ T1879] vlan0: left promiscuous mode [ 719.910291][ T1886] netlink: 712 bytes leftover after parsing attributes in process `syz.2.7235'. [ 719.910415][ T1879] geneve3: left promiscuous mode [ 719.920697][ T1886] netlink: 5504 bytes leftover after parsing attributes in process `syz.2.7235'. [ 719.924733][ T1879] geneve3: left allmulticast mode [ 719.939543][ T1886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7235'. [ 719.975668][ T1879] bond3: left promiscuous mode [ 719.983756][ T1879] bond3: left allmulticast mode [ 719.994653][ T1879] mac80211_hwsim hwsim96 wlan1: left promiscuous mode [ 720.001896][ T1879] macvtap1: left promiscuous mode [ 720.013037][ T1879] bond4: left promiscuous mode [ 720.017846][ T1879] bond4: left allmulticast mode [ 720.027245][ T1879] erspan1: left allmulticast mode [ 720.069543][ T1879] geneve4: left promiscuous mode [ 720.074667][ T1879] geneve4: left allmulticast mode [ 720.100975][T13073] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.111009][T13073] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.128660][T13073] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 33732 - 0 [ 720.137167][T13073] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.152382][T13073] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.161720][T13073] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 33732 - 0 [ 720.171990][T13073] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.190610][T13073] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.207831][T13073] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 33732 - 0 [ 720.227048][ T1886] bridge0: port 3(veth0_to_bridge) entered blocking state [ 720.247524][ T1886] bridge0: port 3(veth0_to_bridge) entered disabled state [ 720.272298][ T1886] veth0_to_bridge: entered allmulticast mode [ 720.287852][ T1886] veth0_to_bridge: entered promiscuous mode [ 720.296244][ T1886] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.314846][ T1886] bridge0: port 3(veth0_to_bridge) entered blocking state [ 720.322161][ T1886] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 720.334610][ T5889] net_ratelimit: 8 callbacks suppressed [ 720.334626][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.370273][T13073] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.391430][ T1901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7238'. [ 720.412003][T13073] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.457820][T13073] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 33732 - 0 [ 720.493525][ T1898] netlink: 'syz.4.7239': attribute type 12 has an invalid length. [ 720.498679][T27079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.501966][ T1898] netlink: 'syz.4.7239': attribute type 29 has an invalid length. [ 720.518068][ T1898] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7239'. [ 720.538588][ T1898] netlink: 59 bytes leftover after parsing attributes in process `syz.4.7239'. [ 720.548464][ T1907] ªªªªªª5gæ¹Q[Ô: entered allmulticast mode [ 720.558203][ T1907] ªªªªªª5gæ¹Q[Ô: left allmulticast mode [ 720.647669][ T1919] syzkaller0: entered promiscuous mode [ 720.667058][ T1919] syzkaller0: entered allmulticast mode [ 720.683377][ T1917] tipc: Enabled bearer , priority 0 [ 720.884782][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7250'. [ 721.067998][ T1951] netlink: 'syz.3.7249': attribute type 1 has an invalid length. [ 721.145457][ T1949] pimreg: entered allmulticast mode [ 721.152461][ T1949] pimreg: left allmulticast mode [ 721.172920][ T1946] xt_bpf: check failed: parse error [ 721.531680][T27079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.609749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.725663][ T1993] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 721.784651][ T1996] netlink: 'syz.0.7267': attribute type 1 has an invalid length. [ 721.820392][T27079] tipc: Node number set to 1658343086 [ 721.838335][ T1984] lo speed is unknown, defaulting to 1000 [ 721.874316][ T1996] 8021q: adding VLAN 0 to HW filter on device bond7 [ 721.885244][ T2006] netlink: 'syz.1.7270': attribute type 1 has an invalid length. [ 721.957746][ T2004] veth7: entered promiscuous mode [ 721.969793][ T2004] bond7: (slave veth7): Enslaving as an active interface with an up link [ 722.029118][ T2006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 722.151970][ T2021] netlink: 'syz.1.7275': attribute type 1 has an invalid length. [ 722.209955][ T2021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.252843][ T2027] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 722.292347][ T2027] bond2: (slave batadv1): making interface the new active one [ 722.304214][ T2027] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 722.454606][ T2035] batadv_slave_1: entered promiscuous mode [ 722.544984][ T2035] netlink: 'syz.0.7280': attribute type 10 has an invalid length. [ 722.554231][ T2034] batadv_slave_1: left promiscuous mode [ 722.583659][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.848664][ T2065] ieee802154 phy0 wpan0: encryption failed: -126 [ 723.000218][ T2071] __nla_validate_parse: 5 callbacks suppressed [ 723.000237][ T2071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7290'. [ 723.214600][ T2084] netlink: 'syz.1.7295': attribute type 1 has an invalid length. [ 723.278157][ T2093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7295'. [ 723.290880][ T2084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 723.310390][ T2093] bond3 (unregistering): Released all slaves [ 723.365294][ T2095] netlink: 'syz.2.7298': attribute type 1 has an invalid length. [ 723.366966][ T2088] tipc: Enabled bearer , priority 0 [ 723.381580][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.475270][ T2103] xt_hashlimit: max too large, truncated to 1048576 [ 723.482745][ T2103] xt_hashlimit: overflow, try lower: 13/0 [ 723.486746][ T2095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7298'. [ 723.552397][ T2100] bond5: (slave geneve2): making interface the new active one [ 723.592077][ T2100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.609197][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.637836][ T2100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.674419][ T2100] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 723.772222][ T2095] 8021q: adding VLAN 0 to HW filter on device bond5 [ 723.781902][T13073] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 723.793004][T13073] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 723.804084][ T2111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.865291][ T2123] gre1: entered allmulticast mode [ 723.870963][T13073] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 723.899384][ T2087] tipc: Disabling bearer [ 723.916105][T13073] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 723.943455][ T2127] syzkaller1: entered promiscuous mode [ 723.978638][ T2127] syzkaller1: entered allmulticast mode [ 724.071549][ T2138] xt_hashlimit: max too large, truncated to 1048576 [ 724.080191][ T2138] xt_hashlimit: overflow, try lower: 13/0 [ 724.154620][ T2142] netlink: 'syz.0.7312': attribute type 1 has an invalid length. [ 724.223797][ T2146] netlink: 'syz.3.7313': attribute type 83 has an invalid length. [ 724.278917][ T2142] bond8: entered promiscuous mode [ 724.284490][ T2142] 8021q: adding VLAN 0 to HW filter on device bond8 [ 724.359379][ T2147] 8021q: adding VLAN 0 to HW filter on device bond8 [ 724.371552][ T2147] bond8: (slave wireguard1): The slave device specified does not support setting the MAC address [ 724.389962][ T2147] bond8: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 724.406618][ T2147] bond8: (slave wireguard1): making interface the new active one [ 724.415244][ T2147] wireguard1: entered promiscuous mode [ 724.422763][ T2147] bond8: (slave wireguard1): Enslaving as an active interface with an up link [ 724.451302][ T2156] bond8: (slave wireguard2): The slave device specified does not support setting the MAC address [ 724.467392][ T2156] bond8: (slave wireguard2): Enslaving as a backup interface with an up link [ 724.691984][ T2188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7321'. [ 724.719251][ T2190] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7322'. [ 724.785196][ T2193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7323'. [ 724.844922][ T2196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7324'. [ 725.142680][ T2220] netlink: 159920 bytes leftover after parsing attributes in process `syz.2.7329'. [ 725.144265][ T2210] gtp0: entered promiscuous mode [ 725.188048][ T2203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7324'. [ 725.203633][ T2203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7324'. [ 725.615101][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c288c00: rx timeout, send abort [ 725.690578][T27079] net_ratelimit: 9 callbacks suppressed [ 725.690592][T27079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.853534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.904233][T30162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.115196][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c28ac00: rx timeout, send abort [ 726.123930][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c288c00: abort rx timeout. Force session deactivation [ 726.420116][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.616166][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c28a400: rx timeout, send abort [ 726.624745][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c28a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 726.639281][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c28ac00: abort rx timeout. Force session deactivation [ 726.710605][ T2251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.719396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.739665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 726.752911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 726.766119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 726.779401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 728.608208][ T2270] __nla_validate_parse: 2 callbacks suppressed [ 728.608228][ T2270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7342'. [ 728.659386][ T2272] netlink: 'syz.1.7342': attribute type 1 has an invalid length. [ 729.102606][T13073] bond3 (unregistering): (slave bridge3): Removing an active aggregator [ 729.112419][T13073] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 729.121392][T13073] bond3 (unregistering): (slave bridge3): the permanent HWaddr of slave - c6:92:72:e2:a5:af - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 729.145776][T13073] bridge3 (unregistering): left promiscuous mode [ 729.152797][T13073] bridge3 (unregistering): left allmulticast mode [ 729.223483][T13073] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 729.233652][T13073] bridge4 (unregistering): left promiscuous mode [ 729.242325][T13073] bridge4 (unregistering): left allmulticast mode [ 729.484924][T13073] bond0 (unregistering): left promiscuous mode [ 729.491464][T13073] dummy0: left promiscuous mode [ 729.504527][T13073] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 729.537621][T13073] bond0 (unregistering): Released all slaves [ 729.559525][T13073] bond1 (unregistering): (slave lo): Releasing backup interface [ 729.569940][T13073] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 729.583828][T13073] bond1 (unregistering): Released all slaves [ 729.602670][T13073] bond2 (unregistering): Released all slaves [ 729.623137][T13073] bond3 (unregistering): Released all slaves [ 729.653330][T13073] bond4 (unregistering): (slave veth11): Releasing active interface [ 729.673215][T13073] bond4 (unregistering): Released all slaves [ 729.709238][ T2257] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 730.095998][ T5909] lo speed is unknown, defaulting to 1000 [ 730.117033][T13073] tipc: Left network mode [ 730.136071][ T2282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7345'. [ 730.296057][ T2287] netlink: 'syz.3.7346': attribute type 1 has an invalid length. [ 730.320984][ T2287] netlink: 'syz.3.7346': attribute type 2 has an invalid length. [ 730.342019][ T2287] netlink: 'syz.3.7346': attribute type 1 has an invalid length. [ 730.385333][ T2287] netlink: 'syz.3.7346': attribute type 3 has an invalid length. [ 730.698903][ C0] net_ratelimit: 3774 callbacks suppressed [ 730.698923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 730.718328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 730.731704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 730.744892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 730.758567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 730.771920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 730.785272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 730.798705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 730.812146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 730.818856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.651448][ T2311] ip6tnl0: left promiscuous mode [ 731.730387][ T2311] bridge0: left allmulticast mode [ 732.842542][ T2311] geneve2: left promiscuous mode [ 732.931301][ T2311] ip6tnl2: left promiscuous mode [ 732.943733][ T2311] ip6tnl2: left allmulticast mode [ 733.015322][ T2311] gre1: left allmulticast mode [ 733.262172][T30161] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.308536][T30161] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.333858][T30161] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.379673][T30161] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.444733][ T2338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7355'. [ 733.530460][T30161] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.562502][T30161] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.618567][T30161] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.698818][T30161] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.719027][ T2350] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 733.857306][ T2345] lo speed is unknown, defaulting to 1000 [ 734.093400][ T2363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7360'. [ 734.302666][ T2347] lo speed is unknown, defaulting to 1000 [ 734.517434][ T2371] batadv_slave_1: entered promiscuous mode [ 734.753365][ T2370] batadv_slave_1: left promiscuous mode [ 735.708718][ C0] net_ratelimit: 4164 callbacks suppressed [ 735.708739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 735.727836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 735.741145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 735.754530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 735.768888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 735.782209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 735.795683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 735.809259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 735.822616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 735.835961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 736.751062][T13073] batadv0: left promiscuous mode [ 736.815764][T13073] hsr_slave_0: left promiscuous mode [ 736.862696][T13073] hsr_slave_1: left promiscuous mode [ 737.134182][T13073] pim6reg (unregistering): left allmulticast mode [ 739.120473][ T2472] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7381'. [ 739.340865][ T2479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7382'. [ 739.910601][T13073] IPVS: stop unused estimator thread 0... [ 739.931351][ T2509] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7389'. [ 739.949363][ T2503] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7390'. [ 740.007217][ T2512] syzkaller0: entered promiscuous mode [ 740.048126][ T2512] syzkaller0: entered allmulticast mode [ 740.172198][ T2517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7392'. [ 740.235048][ T5820] block nbd3: Receive control failed (result -1) [ 740.718531][ C0] net_ratelimit: 4498 callbacks suppressed [ 740.718552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.737751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.751041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.768154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.781695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.795126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.808636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.822088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.835624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.849081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 740.887151][ T2542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7398'. [ 740.917736][ T2544] syzkaller0: entered promiscuous mode [ 740.948253][ T2544] syzkaller0: entered allmulticast mode [ 741.075932][ T2542] syzkaller0: entered promiscuous mode [ 741.105164][ T2542] syzkaller0: entered allmulticast mode [ 741.765398][ T2569] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 742.342792][ T2599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7409'. [ 742.656390][ T2612] FAULT_INJECTION: forcing a failure. [ 742.656390][ T2612] name failslab, interval 1, probability 0, space 0, times 0 [ 742.697754][ T2612] CPU: 1 UID: 0 PID: 2612 Comm: syz.1.7411 Not tainted syzkaller #0 PREEMPT(full) [ 742.697781][ T2612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.697793][ T2612] Call Trace: [ 742.697801][ T2612] [ 742.697809][ T2612] dump_stack_lvl+0xe8/0x150 [ 742.697838][ T2612] should_fail_ex+0x412/0x560 [ 742.697866][ T2612] should_failslab+0xa8/0x100 [ 742.697897][ T2612] __kvmalloc_node_noprof+0x178/0x8a0 [ 742.697918][ T2612] ? __nf_register_net_hook+0x232/0x930 [ 742.697937][ T2612] ? nf_hook_entries_grow+0x288/0x720 [ 742.697964][ T2612] nf_hook_entries_grow+0x288/0x720 [ 742.697997][ T2612] __nf_register_net_hook+0x2c9/0x930 [ 742.698027][ T2612] nf_register_net_hook+0xb2/0x190 [ 742.698048][ T2612] nf_register_net_hooks+0x44/0x1b0 [ 742.698070][ T2612] nf_ct_netns_do_get+0x212/0x5c0 [ 742.698092][ T2612] ? rcu_is_watching+0x15/0xb0 [ 742.698112][ T2612] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 742.698130][ T2612] ? trace_contention_end+0x39/0x100 [ 742.698159][ T2612] ? nf_ct_netns_get+0xe9/0x320 [ 742.698186][ T2612] xt_cluster_mt_checkentry+0x138/0x290 [ 742.698211][ T2612] xt_check_match+0x430/0xaf0 [ 742.698231][ T2612] ? __pfx___mutex_lock+0x10/0x10 [ 742.698256][ T2612] ? __pfx_xt_check_match+0x10/0x10 [ 742.698291][ T2612] ? xt_find_match+0x1f7/0x250 [ 742.698318][ T2612] translate_table+0x1547/0x20b0 [ 742.698357][ T2612] ? __pfx_translate_table+0x10/0x10 [ 742.698382][ T2612] ? __might_fault+0xaf/0x130 [ 742.698403][ T2612] ? __might_fault+0xaf/0x130 [ 742.698441][ T2612] ? _copy_from_user+0x94/0xb0 [ 742.698465][ T2612] do_ip6t_set_ctl+0x9fe/0xe10 [ 742.698489][ T2612] ? rcu_is_watching+0x15/0xb0 [ 742.698509][ T2612] ? trace_contention_end+0x39/0x100 [ 742.698530][ T2612] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 742.698569][ T2612] ? __pfx___mutex_lock+0x10/0x10 [ 742.698591][ T2612] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 742.698629][ T2612] nf_setsockopt+0x26f/0x290 [ 742.698656][ T2612] rawv6_setsockopt+0x276/0x5f0 [ 742.698681][ T2612] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 742.698700][ T2612] ? aa_sock_opt_perm+0xff/0x1a0 [ 742.698724][ T2612] ? sock_common_setsockopt+0x36/0xc0 [ 742.698742][ T2612] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 742.698761][ T2612] do_sock_setsockopt+0x17c/0x1b0 [ 742.698785][ T2612] __x64_sys_setsockopt+0x13d/0x1b0 [ 742.698811][ T2612] do_syscall_64+0x14d/0xf80 [ 742.698832][ T2612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.698849][ T2612] ? trace_irq_disable+0x37/0x100 [ 742.698867][ T2612] ? clear_bhb_loop+0x40/0x90 [ 742.698889][ T2612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.698906][ T2612] RIP: 0033:0x7f924519bf79 [ 742.698923][ T2612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.698938][ T2612] RSP: 002b:00007f9246009028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 742.698958][ T2612] RAX: ffffffffffffffda RBX: 00007f9245415fa0 RCX: 00007f924519bf79 [ 742.698972][ T2612] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 742.698983][ T2612] RBP: 00007f9246009090 R08: 00000000000004b0 R09: 0000000000000000 [ 742.698994][ T2612] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 742.699006][ T2612] R13: 00007f9245416038 R14: 00007f9245415fa0 R15: 00007ffcceef5878 [ 742.699037][ T2612] [ 743.120400][ T2612] xt_cluster: cannot load conntrack support for proto=10 [ 743.403564][ T2627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7415'. [ 743.696358][ T2642] netlink: 'syz.0.7413': attribute type 1 has an invalid length. [ 743.953299][ T2653] netlink: 'syz.3.7419': attribute type 2 has an invalid length. [ 743.972963][ T2653] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7419'. [ 744.006676][ T2656] x_tables: duplicate underflow at hook 1 [ 744.086801][ T2655] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 744.303070][ T2670] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 744.443110][ T2674] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7423'. [ 744.681131][ T2678] netlink: 'syz.3.7425': attribute type 83 has an invalid length. [ 744.867198][ T2689] FAULT_INJECTION: forcing a failure. [ 744.867198][ T2689] name failslab, interval 1, probability 0, space 0, times 0 [ 744.934453][ T2689] CPU: 1 UID: 0 PID: 2689 Comm: syz.0.7426 Not tainted syzkaller #0 PREEMPT(full) [ 744.934479][ T2689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.934491][ T2689] Call Trace: [ 744.934499][ T2689] [ 744.934507][ T2689] dump_stack_lvl+0xe8/0x150 [ 744.934535][ T2689] should_fail_ex+0x412/0x560 [ 744.934563][ T2689] should_failslab+0xa8/0x100 [ 744.934588][ T2689] __kvmalloc_node_noprof+0x178/0x8a0 [ 744.934609][ T2689] ? __nf_register_net_hook+0x232/0x930 [ 744.934633][ T2689] ? nf_hook_entries_grow+0x288/0x720 [ 744.934660][ T2689] nf_hook_entries_grow+0x288/0x720 [ 744.934693][ T2689] __nf_register_net_hook+0x2c9/0x930 [ 744.934723][ T2689] nf_register_net_hook+0xb2/0x190 [ 744.934744][ T2689] nf_register_net_hooks+0x44/0x1b0 [ 744.934766][ T2689] nf_ct_netns_do_get+0x212/0x5c0 [ 744.934787][ T2689] ? rcu_is_watching+0x15/0xb0 [ 744.934806][ T2689] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 744.934824][ T2689] ? trace_contention_end+0x39/0x100 [ 744.934854][ T2689] ? nf_ct_netns_get+0xe9/0x320 [ 744.934875][ T2689] xt_cluster_mt_checkentry+0x138/0x290 [ 744.934899][ T2689] xt_check_match+0x430/0xaf0 [ 744.934920][ T2689] ? __pfx___mutex_lock+0x10/0x10 [ 744.934946][ T2689] ? __pfx_xt_check_match+0x10/0x10 [ 744.934982][ T2689] ? xt_find_match+0x1f7/0x250 [ 744.935010][ T2689] translate_table+0x1547/0x20b0 [ 744.935052][ T2689] ? __pfx_translate_table+0x10/0x10 [ 744.935071][ T2689] ? __might_fault+0xaf/0x130 [ 744.935091][ T2689] ? __might_fault+0xaf/0x130 [ 744.935127][ T2689] ? _copy_from_user+0x94/0xb0 [ 744.935151][ T2689] do_ip6t_set_ctl+0x9fe/0xe10 [ 744.935174][ T2689] ? rcu_is_watching+0x15/0xb0 [ 744.935282][ T2689] ? trace_contention_end+0x39/0x100 [ 744.935307][ T2689] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 744.935344][ T2689] ? __pfx___mutex_lock+0x10/0x10 [ 744.935366][ T2689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 744.935401][ T2689] nf_setsockopt+0x26f/0x290 [ 744.935427][ T2689] rawv6_setsockopt+0x276/0x5f0 [ 744.935456][ T2689] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 744.935476][ T2689] ? aa_sock_opt_perm+0xff/0x1a0 [ 744.935500][ T2689] ? sock_common_setsockopt+0x36/0xc0 [ 744.935520][ T2689] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 744.935539][ T2689] do_sock_setsockopt+0x17c/0x1b0 [ 744.935562][ T2689] __x64_sys_setsockopt+0x13d/0x1b0 [ 744.935586][ T2689] do_syscall_64+0x14d/0xf80 [ 744.935607][ T2689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.935624][ T2689] ? trace_irq_disable+0x37/0x100 [ 744.935640][ T2689] ? clear_bhb_loop+0x40/0x90 [ 744.935658][ T2689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.935673][ T2689] RIP: 0033:0x7f4a8239bf79 [ 744.935688][ T2689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.935703][ T2689] RSP: 002b:00007f4a832c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 744.935722][ T2689] RAX: ffffffffffffffda RBX: 00007f4a82615fa0 RCX: 00007f4a8239bf79 [ 744.935735][ T2689] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 744.935746][ T2689] RBP: 00007f4a832c5090 R08: 00000000000004b0 R09: 0000000000000000 [ 744.935757][ T2689] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 744.935768][ T2689] R13: 00007f4a82616038 R14: 00007f4a82615fa0 R15: 00007ffcc4689558 [ 744.935797][ T2689] [ 745.307674][ T2689] xt_cluster: cannot load conntrack support for proto=10 [ 745.577778][ T2704] xt_hashlimit: max too large, truncated to 1048576 [ 745.617330][ T2704] xt_hashlimit: overflow, try lower: 13/0 [ 745.728800][ C0] net_ratelimit: 6420 callbacks suppressed [ 745.728822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 745.747724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.760183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.773400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 745.786317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.786729][ T2718] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.7435'. [ 745.798853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.801074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 745.833253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.845733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.858751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 745.877388][ T2722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7437'. [ 745.939869][ T2728] netlink: 'syz.1.7439': attribute type 13 has an invalid length. [ 745.965096][ T2724] netlink: 'syz.1.7439': attribute type 13 has an invalid length. [ 746.010597][ T2724] netlink: 'syz.1.7439': attribute type 17 has an invalid length. [ 746.033059][ T2728] netlink: 'syz.1.7439': attribute type 17 has an invalid length. [ 746.247763][ T2743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7438'. [ 746.315227][ T2724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.351150][ T2724] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.654688][ T2750] syzkaller0: entered promiscuous mode [ 746.661491][ T2750] syzkaller0: entered allmulticast mode [ 746.927515][ T2759] xt_hashlimit: max too large, truncated to 1048576 [ 746.954126][ T2759] xt_hashlimit: overflow, try lower: 13/0 [ 747.244055][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.254144][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 747.303687][ T2778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7450'. [ 747.313083][ T2777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7451'. [ 747.335243][ T2778] netlink: 261 bytes leftover after parsing attributes in process `syz.0.7450'. [ 747.345048][ T2777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7451'. [ 747.395772][ T2780] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 747.712438][ T2800] netlink: 'syz.2.7455': attribute type 11 has an invalid length. [ 747.794370][ T2800] netlink: 'syz.2.7455': attribute type 23 has an invalid length. [ 747.900567][ T2805] netlink: 'syz.0.7457': attribute type 6 has an invalid length. [ 747.924908][ T2800] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7455'. [ 750.738497][ C1] net_ratelimit: 12723 callbacks suppressed [ 750.738518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.738537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 750.744788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.757354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.769005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.780735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.792574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.804635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.816760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.829091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 751.917610][ C0] sched: DL replenish lagged too much [ 752.819365][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5560 ms [ 752.827406][ C1] lec:lec_tx_timeout: lec0 [ 755.748688][ C1] net_ratelimit: 20614 callbacks suppressed [ 755.748707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.748894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.755134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.766973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.778932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.790846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.802987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.815226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 755.826695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.839085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.082103][T13519] lec:lec_start_xmit: lec0:No lecd attached [ 760.758552][ C1] net_ratelimit: 20747 callbacks suppressed [ 760.758572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.758699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 760.764900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.777303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.788966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.800855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.812637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.824757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.836773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.849203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 762.819053][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 762.827090][ C1] lec:lec_tx_timeout: lec0 [ 765.768685][ C1] net_ratelimit: 21617 callbacks suppressed [ 765.768706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.769078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 765.774975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.787448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.799077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.811222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.823498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.835458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.847545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.859889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 770.778548][ C0] net_ratelimit: 20512 callbacks suppressed [ 770.778569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.778578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.778951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.785339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 770.797487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.809774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.821267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.833486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.845561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.857220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.788663][ C1] net_ratelimit: 20278 callbacks suppressed [ 775.788685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.788686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 775.789351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.795790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.807056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.819051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.831074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.844337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.855708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 775.867346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.798603][ C0] net_ratelimit: 14318 callbacks suppressed [ 780.798625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.798626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.798925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.805061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.817891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.829039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.840882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.853425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 780.865863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.877490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.808747][ C1] net_ratelimit: 14245 callbacks suppressed [ 785.808767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.808888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 785.815018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.827643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.840132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.851250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.863107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.875041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.888540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.899942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 790.818394][ C1] net_ratelimit: 14074 callbacks suppressed [ 790.818416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 790.818674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.825194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.836692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.848760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.861133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 790.873473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 790.885258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.897641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.909193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.828622][ C0] net_ratelimit: 15673 callbacks suppressed [ 795.828643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.828826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.835313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.848458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.862564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.872188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.884738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 795.896361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 795.908538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.920705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.732557][ T2898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 798.827831][ T2898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 798.904113][ T2898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 800.831642][ T2898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 800.839017][ C0] net_ratelimit: 17219 callbacks suppressed [ 800.839037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.839167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 800.839972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.840187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 800.840494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.841095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.841362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.841584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.841862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.841952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.518121][ T2903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 801.681672][ T2903] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 802.790695][ T2903] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 802.863510][T19797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 803.868239][T19797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 805.848905][ C1] net_ratelimit: 17267 callbacks suppressed [ 805.848926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.848982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.855230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.867302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.879625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 805.891344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.903894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.915864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 805.927452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.939878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.202053][ T2898] Bluetooth: hci6: Opcode 0x0c38 failed: -110 [ 806.741765][T19797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 808.351622][ T2899] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 809.208354][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.566622][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 810.858360][ C1] net_ratelimit: 17504 callbacks suppressed [ 810.858381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.858405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.865387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.876825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.889249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.901520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 810.912843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.925233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.936915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 810.948799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.864078][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 815.868494][ C0] net_ratelimit: 17553 callbacks suppressed [ 815.868514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 815.872135][ C1] lec:lec_tx_timeout: lec0 [ 815.878859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.890696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 815.895345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.907727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.919398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.931517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.944024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 815.955882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.967589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.878336][ C1] net_ratelimit: 16907 callbacks suppressed [ 820.878356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.878498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.884937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.897282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.909689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.920986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.933129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.945524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 820.956927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.969462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.725355][T19797] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 822.439676][T19797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 822.487532][ T2903] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 822.772726][ T5820] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 823.667857][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 823.965077][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 824.114579][ T5820] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 824.382566][ T5820] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 824.483159][ T5820] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 824.496193][ T2903] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 824.782650][T13519] lec:lec_start_xmit: lec0:No lecd attached [ 824.969310][ T2916] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 825.057926][ T2916] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 825.209814][ T2916] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 825.889860][ C1] net_ratelimit: 16599 callbacks suppressed [ 825.889881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 825.890618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 825.896509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.908678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.920162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.932265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.944535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.956276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.968326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.980867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 826.312647][T19797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 826.514325][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 828.180439][T19797] Bluetooth: hci8: command tx timeout [ 829.857469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 829.865766][ C1] lec:lec_tx_timeout: lec0 [ 830.276992][ T5820] Bluetooth: hci8: command tx timeout [ 830.898482][ C1] net_ratelimit: 16862 callbacks suppressed [ 830.898506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 830.899079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 830.905237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.917331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.929127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.941245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.953477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.965054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.977494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.989907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 831.087584][T19797] Bluetooth: hci3: command tx timeout [ 831.767053][T19797] Bluetooth: hci7: command tx timeout [ 832.372647][T19797] Bluetooth: hci8: command tx timeout [ 833.795123][ T5820] Bluetooth: hci3: command tx timeout [ 833.887704][ T5820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 834.040088][ T5820] Bluetooth: hci7: command tx timeout [ 834.436466][ T5820] Bluetooth: hci8: command tx timeout [ 835.092174][ T5820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 835.325962][ T5820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 835.637633][ T5820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 835.745056][ T5820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 835.908337][ C1] net_ratelimit: 15231 callbacks suppressed [ 835.908358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 835.908455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 835.915090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.927249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.938827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.951130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.963361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.974872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 835.987052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 835.999598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 836.061423][T19797] Bluetooth: hci3: command tx timeout [ 837.019320][T19797] Bluetooth: hci7: command tx timeout [ 838.156148][T19797] Bluetooth: hci3: command tx timeout [ 839.589464][ T5820] Bluetooth: hci7: command tx timeout [ 840.918365][ C1] net_ratelimit: 16114 callbacks suppressed [ 840.918385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.918526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.924990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 840.936960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.949920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 840.960981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 840.973073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.986182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 840.997645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 841.010252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.533956][ T2898] Bluetooth: hci6: command tx timeout [ 844.678277][T19797] Bluetooth: hci6: command tx timeout [ 845.928610][ C1] net_ratelimit: 16671 callbacks suppressed [ 845.928632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 845.928860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 845.935907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 845.947857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.959635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.971560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.983555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 845.995515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 846.007767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 846.020558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 846.745320][ T2898] Bluetooth: hci6: command tx timeout [ 848.908225][ T2898] Bluetooth: hci6: command tx timeout [ 850.938569][ C1] net_ratelimit: 15757 callbacks suppressed [ 850.938589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 850.938850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.945399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.957844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.968879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.980827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 850.993559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.005475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 851.017338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 851.030342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.948421][ C1] net_ratelimit: 14066 callbacks suppressed [ 855.948442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.948525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 855.955027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 855.967348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.979913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 855.992048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.002974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.014988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 856.027094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 856.039519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 860.959022][ C1] net_ratelimit: 14535 callbacks suppressed [ 860.959042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.959550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.965387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.977357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.989863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.001783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 861.013226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 861.025557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 861.038041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 861.049018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.968330][ C1] net_ratelimit: 15230 callbacks suppressed [ 865.968351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.968512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.974619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.987398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 865.999093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.010933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 866.022713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 866.035198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.048156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 866.060226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.291548][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.978404][ C1] net_ratelimit: 15039 callbacks suppressed [ 870.978425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.978852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 870.984771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.997387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 871.009534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.021974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.034228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.047080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.059448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 871.070734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.945921][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 875.988365][ C1] net_ratelimit: 14732 callbacks suppressed [ 875.988386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 875.989446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.995069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.006779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.019059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.031636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 876.043633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.055501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 876.067088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.079053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.961295][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 876.969366][ C1] lec:lec_tx_timeout: lec0 [ 880.998484][ C1] net_ratelimit: 15206 callbacks suppressed [ 880.998506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 880.998822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.005771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 881.017400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.029664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.042008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 881.053467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.065974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 881.077544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:4c:15:cb:45:01, vlan:0) [ 881.089518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.863498][T19797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 883.281870][T19797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 883.741486][T19797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 884.280244][T19797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 884.641593][T19797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 885.459248][ C1] ------------[ cut here ]------------ [ 885.465201][ C1] ODEBUG: free active (active state 0) object: ffff88803e0c7490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 885.478139][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: kworker/u8:4/69 [ 885.488795][ C1] Modules linked in: [ 885.493354][ C1] CPU: 1 UID: 0 PID: 69 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 885.502710][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 885.512830][ C1] Workqueue: bat_events batadv_tt_purge [ 885.518436][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 885.524882][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 885.544642][ C1] RSP: 0018:ffffc90000a08b88 EFLAGS: 00010246 [ 885.550764][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4def28 RCX: 0000000000000000 [ 885.558789][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 885.566778][ C1] RBP: ffffffff8bcf4a00 R08: ffff88803e0c7490 R09: ffffffff8bcf5d20 [ 885.574988][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88803e0c7600 [ 885.583033][ C1] R13: ffffffff901b4570 R14: ffff88803e0c7000 R15: ffff88803e0c7490 [ 885.591154][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 885.600224][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 885.606915][ C1] CR2: 00007f5a1a4b1000 CR3: 000000006569e000 CR4: 00000000003526f0 [ 885.615040][ C1] Call Trace: [ 885.618360][ C1] [ 885.621214][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 885.626887][ C1] kfree+0x13a/0x610 [ 885.630846][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 885.636096][ C1] rose_timer_expiry+0x4cb/0x600 [ 885.641101][ C1] ? call_timer_fn+0x178/0x5a0 [ 885.645889][ C1] call_timer_fn+0x192/0x5a0 [ 885.650525][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 885.656003][ C1] ? call_timer_fn+0xd4/0x5a0 [ 885.660724][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 885.665866][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 885.671106][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 885.676590][ C1] __run_timer_base+0x652/0x8b0 [ 885.681501][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 885.686895][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 885.691893][ C1] run_timer_softirq+0xb7/0x170 [ 885.696765][ C1] handle_softirqs+0x22a/0x7c0 [ 885.701582][ C1] ? do_softirq+0x76/0xd0 [ 885.705940][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 885.710937][ C1] do_softirq+0x76/0xd0 [ 885.715120][ C1] [ 885.718058][ C1] [ 885.721025][ C1] __local_bh_enable_ip+0xf8/0x130 [ 885.726155][ C1] batadv_tt_purge+0x4d1/0x9e0 [ 885.730981][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 885.736730][ C1] process_scheduled_works+0xaec/0x17a0 [ 885.742437][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 885.748479][ C1] ? assign_work+0x3d5/0x5e0 [ 885.753100][ C1] worker_thread+0xa50/0xfc0 [ 885.757746][ C1] kthread+0x388/0x470 [ 885.761873][ C1] ? __pfx_worker_thread+0x10/0x10 [ 885.767108][ C1] ? __pfx_kthread+0x10/0x10 [ 885.771765][ C1] ret_from_fork+0x51e/0xb90 [ 885.776409][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 885.781585][ C1] ? __switch_to+0xc7d/0x1400 [ 885.786372][ C1] ? __pfx_kthread+0x10/0x10 [ 885.791021][ C1] ret_from_fork_asm+0x1a/0x30 [ 885.795826][ C1] [ 885.798890][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 885.806181][ C1] CPU: 1 UID: 0 PID: 69 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 885.815650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 885.825714][ C1] Workqueue: bat_events batadv_tt_purge [ 885.831898][ C1] Call Trace: [ 885.835187][ C1] [ 885.838037][ C1] vpanic+0x1e0/0x670 [ 885.842040][ C1] panic+0xc5/0xd0 [ 885.845762][ C1] ? __pfx_panic+0x10/0x10 [ 885.850187][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 885.855146][ C1] __warn+0x315/0x4a0 [ 885.859142][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 885.864871][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 885.870596][ C1] __report_bug+0x29a/0x540 [ 885.875116][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 885.880961][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 885.886693][ C1] ? __pfx___report_bug+0x10/0x10 [ 885.891897][ C1] ? kfree+0x1c1/0x610 [ 885.895980][ C1] ? rose_timer_expiry+0x4c3/0x600 [ 885.901104][ C1] ? call_timer_fn+0x192/0x5a0 [ 885.905865][ C1] ? __run_timer_base+0x652/0x8b0 [ 885.911057][ C1] ? run_timer_softirq+0xb7/0x170 [ 885.916092][ C1] ? handle_softirqs+0x22a/0x7c0 [ 885.921043][ C1] ? do_softirq+0x76/0xd0 [ 885.925383][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 885.930759][ C1] ? process_scheduled_works+0xaec/0x17a0 [ 885.936505][ C1] ? worker_thread+0xa50/0xfc0 [ 885.941374][ C1] ? kthread+0x388/0x470 [ 885.945721][ C1] ? ret_from_fork+0x51e/0xb90 [ 885.950500][ C1] report_bug_entry+0x19a/0x290 [ 885.955413][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 885.961885][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 885.967725][ C1] handle_bug+0xca/0x200 [ 885.971994][ C1] exc_invalid_op+0x1a/0x50 [ 885.976641][ C1] asm_exc_invalid_op+0x1a/0x20 [ 885.981531][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 885.987886][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 886.007607][ C1] RSP: 0018:ffffc90000a08b88 EFLAGS: 00010246 [ 886.013787][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4def28 RCX: 0000000000000000 [ 886.021948][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 886.030077][ C1] RBP: ffffffff8bcf4a00 R08: ffff88803e0c7490 R09: ffffffff8bcf5d20 [ 886.039188][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88803e0c7600 [ 886.047535][ C1] R13: ffffffff901b4570 R14: ffff88803e0c7000 R15: ffff88803e0c7490 [ 886.055803][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 886.061210][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 886.067126][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 886.073062][ C1] kfree+0x13a/0x610 [ 886.077069][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 886.082304][ C1] rose_timer_expiry+0x4cb/0x600 [ 886.087444][ C1] ? call_timer_fn+0x178/0x5a0 [ 886.092274][ C1] call_timer_fn+0x192/0x5a0 [ 886.097160][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 886.102813][ C1] ? call_timer_fn+0xd4/0x5a0 [ 886.107588][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 886.112717][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.117943][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 886.123447][ C1] __run_timer_base+0x652/0x8b0 [ 886.128318][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 886.133713][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 886.138688][ C1] run_timer_softirq+0xb7/0x170 [ 886.143559][ C1] handle_softirqs+0x22a/0x7c0 [ 886.148323][ C1] ? do_softirq+0x76/0xd0 [ 886.152687][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 886.157637][ C1] do_softirq+0x76/0xd0 [ 886.161804][ C1] [ 886.165165][ C1] [ 886.168083][ C1] __local_bh_enable_ip+0xf8/0x130 [ 886.173194][ C1] batadv_tt_purge+0x4d1/0x9e0 [ 886.177976][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 886.183716][ C1] process_scheduled_works+0xaec/0x17a0 [ 886.189336][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 886.195345][ C1] ? assign_work+0x3d5/0x5e0 [ 886.199956][ C1] worker_thread+0xa50/0xfc0 [ 886.204579][ C1] kthread+0x388/0x470 [ 886.208653][ C1] ? __pfx_worker_thread+0x10/0x10 [ 886.213771][ C1] ? __pfx_kthread+0x10/0x10 [ 886.218390][ C1] ret_from_fork+0x51e/0xb90 [ 886.223020][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 886.228154][ C1] ? __switch_to+0xc7d/0x1400 [ 886.232882][ C1] ? __pfx_kthread+0x10/0x10 [ 886.237506][ C1] ret_from_fork_asm+0x1a/0x30 [ 886.242389][ C1] [ 886.246135][ C1] Kernel Offset: disabled [ 886.250445][ C1] Rebooting in 86400 seconds..