last executing test programs: 1m42.133289153s ago: executing program 4 (id=8458): poll(&(0x7f0000000040), 0x55, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}, {&(0x7f0000000040)="a9021d70b72ca502e4217cd09f5effcbb7f4a0e5d563c8ef9e0d5f7d17cded76c40833b36a1306a40e7582c8d24694c619d6c81ee887cc9556a4e6960204e845a6e119058d31b43f1d52cef4dce4e5ef47362d87bb68d9464cc8f82e036556e569b5b951faf2fd5d482d49ddd1b79c9a2b3210db664c02eaf3f1474ae572264a1f8e7e2b820886981f1177c85f601354417600fc360794385c82164dff78decb17453a922aea40277fd798ae8158fa80d847a627dc78d4c404ee232bf58a9007bada1ac66421d584a9930f5678ffad5371b61db2e8dc2d16f335b35751900df33131c10f93de", 0xe6}, {&(0x7f0000000180)="004af6c20d71eed226bb09dfaea481d0dab3bb02078780e0e1cb9cd7d4ed9da55e5544d078e36581fc885d4870c252127255e335e2edbb7343b4d05e15ee55de013dbc3aab84dcf3c6a9d249c460a520e5069931b76e0fe259ba855c6dd50fe158219d99f4b856ec6a566f1ffd6b2046ae86143c20db5556e158ec170b5c26e0b39cc6a18b007cd406310a8cb5567433459e16309a2396304133c97c904917480af7812c91bb2d2b623465", 0xab}], 0x3}, 0x44448) 1m42.026333096s ago: executing program 4 (id=8462): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(0x4) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400eaff2c006c090000ffff0800000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m41.780276909s ago: executing program 4 (id=8468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x22020600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000440)=""/4096, 0x5af}], 0x3) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = socket(0x29, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4, 0x16}]}]}}]}, 0x3c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f000b"], 0x40}}, 0x0) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x40, r10, 0x20, 0x0, 0x3, {{0x2}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x20004004) 1m41.502199832s ago: executing program 2 (id=8472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd4a00000008000300020000000e0048006e657464657673696d0000000f0002006e657464657673696d3000009c48734c984b51ae63de94c321a271a5dcd32f9a3a45432c37945029fb4597ad455e0771cc911d9b2517742689fd6db3d6c4b74abecd6c248310c4913b90173e27166d45a9b3ac8c53d185"], 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r5, 0x110, 0x7, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="020900000000d879ac8dffffffff00020000", @ANYRES32=0x0, @ANYBLOB="0815010021100000280012800b00010069703667726500001800028014000700fc01000000000000000000000000000108000a00", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x101, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m40.525839103s ago: executing program 3 (id=8476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="326fc36b22e60207b740278150a8c54480a79b0a6582e9728185004be7d381e083f24f33e3d45cec37de4b17e3ce580ac2ad2fa83eb3afb79d1fde317cb4976557beb55a2c84273a5e1ace9c4ed194261012e42b225e64ac2165ddaf637b659321f7dcb569fdf822fe2c5e692d0502c3d20320f91eebcee84a25f8", 0x7b}, {&(0x7f00000000c0)="238c657c5c70d62b2e1768debb906b2d36372a575107290d5989b4dbb375f82535dfe1c76894b0cea1a5103e3faaa24b4f5dfff139691b3ede14eb21620ed1ac2d6ca044618cdd59a40451769730cbc5ec41d0178a6bc06504d801c4d8169e17845e3b7fb75900841095b5568c152a6510362366526086856b038333d427b77ed38343492f20e0fe4e4000cd0abffeb3399ffdb70715514647bc77e30dddbf43eabff5d4fac79ec208938ac59eb8d7d85ac927ed308a8eba6e38ce583ea805b8fc09faa1b69909b774ef8a5d61ed3c4bb235cd4878bd94ed376fe14d66db2b4bdebe8510", 0xe4}], 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="326fc36b22e60207b740278150a8c54480a79b0a6582e9728185004be7d381e083f24f33e3d45cec37de4b17e3ce580ac2ad2fa83eb3afb79d1fde317cb4976557beb55a2c84273a5e1ace9c4ed194261012e42b225e64ac2165ddaf637b659321f7dcb569fdf822fe2c5e692d0502c3d20320f91eebcee84a25f8", 0x7b}, {&(0x7f00000000c0)="238c657c5c70d62b2e1768debb906b2d36372a575107290d5989b4dbb375f82535dfe1c76894b0cea1a5103e3faaa24b4f5dfff139691b3ede14eb21620ed1ac2d6ca044618cdd59a40451769730cbc5ec41d0178a6bc06504d801c4d8169e17845e3b7fb75900841095b5568c152a6510362366526086856b038333d427b77ed38343492f20e0fe4e4000cd0abffeb3399ffdb70715514647bc77e30dddbf43eabff5d4fac79ec208938ac59eb8d7d85ac927ed308a8eba6e38ce583ea805b8fc09faa1b69909b774ef8a5d61ed3c4bb235cd4878bd94ed376fe14d66db2b4bdebe8510", 0xe4}], 0x2) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) (async) 1m40.439849562s ago: executing program 2 (id=8478): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x4e23, @multicast2}}}, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r0, 0xc08bb000) 1m40.306625638s ago: executing program 1 (id=8479): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060086dd"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$ax25_int(r0, 0x101, 0x2, 0x0, 0x0) 1m40.20695745s ago: executing program 3 (id=8480): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x8, 0x2}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m40.051172216s ago: executing program 2 (id=8481): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r2, 0x1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xea17}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048040) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000200)=0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800020000000000000000000000000095000000000000009bacbc1d388017ed981f891f5c8d7217a29a5475bb7db5bdc863590537948847a381e0385b10a49f51bb16df194b5fcbad0d3fbfcfd2d76b1a4ea52185dd4e84034749c91f2e4800380e50e04ba2d68f63bd6185e37aeb150282b24a933714a81d948cb23fcb02865da09a6a7aaccc79d4b768fa43"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000200", @ANYRES16=r4, @ANYBLOB="100029bd7000ffdbdf250a00000008000b000600000005003800010000000500350007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) 1m39.923269911s ago: executing program 0 (id=8482): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x80, 0x80800) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x0, 0x4001}, 0xc) (async) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x0, 0x4001}, 0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x200}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r1, 0x3ff, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0xa8}, 0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0xa8}, 0x8) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x9, r2, 0x3f}, 0x10) connect$qrtr(r0, &(0x7f0000000340)={0x2a, 0x4, 0x7ffe}, 0xc) (async) connect$qrtr(r0, &(0x7f0000000340)={0x2a, 0x4, 0x7ffe}, 0xc) r3 = accept$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x9b, "affae8b539822c83936b268c8d5789b5bca43aa5e18d9e7e6335369615a4bc1a463da65ab53be8f49db067d466f3b38456a8ed09c28350cd9f37d88a2e11009fa4fac04f750c0a18fcf54ace7efc0559be02bc91e738663dc380193a1b2d17eac079d6175704df05ab981cd409b841543b21227576b8ee97530b9df309f27699bf20ca03578513c24f68422dfe926a00a70f59c43b993c22f3009a"}, &(0x7f00000004c0)=0xbf) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000500)) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000500)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa0, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5d9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x4008880) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa0, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5d9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x4008880) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={r1, @in={{0x2, 0x4e20, @remote}}, 0xfc, 0x4, 0xe, 0x4, 0x81, 0x8, 0x5}, 0x9c) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000840)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0xffff, 0xad6f, 0xfffffffffffffffa, 0xbf0d]}, &(0x7f00000008c0)=0x78) (async) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000840)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0xffff, 0xad6f, 0xfffffffffffffffa, 0xbf0d]}, &(0x7f00000008c0)=0x78) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6e}, @void, @val={0xc, 0x99, {0x1, 0x1e}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x3c}}, 0x2080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x228400, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000a80)) close(r6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000ac0)={0x3, 'veth0\x00', {0x2d4}, 0x9}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000b00)={0x0, 0x0, 0x2, [0x81, 0x1800]}, &(0x7f0000000b40)=0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000b80)={0x3, [0x0, 0x0, 0x3]}, &(0x7f0000000bc0)=0xa) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000b80)={0x3, [0x0, 0x0, 0x3]}, &(0x7f0000000bc0)=0xa) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000c00)={r1, 0x6}, &(0x7f0000000c40)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) socket$xdp(0x2c, 0x3, 0x0) 1m39.902879718s ago: executing program 1 (id=8483): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0xffffff44}], 0x10}}], 0x2, 0x0) r2 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080)=0x1, 0x4) 1m39.690199509s ago: executing program 0 (id=8484): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8881) write$rfkill(0xffffffffffffffff, &(0x7f0000000240)={0x10000, 0x5, 0x2, 0x0, 0x1}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, 0x0, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffc0}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffff001}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40800) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000500)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000007c0)) getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000800), &(0x7f0000000840)=0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r15, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x20000880) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000009c0)) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r7, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008844) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000ec0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), 0xffffffffffffffff) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000001540)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001500)={&(0x7f0000001000)={0x4c4, r16, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x16, 0x24, 0x6c, 0x5, 0x48, 0x30, 0x0, 0x5, 0x60, 0x48, 0x6c, 0x6c, 0x2, 0x30, 0x12, 0x6c, 0x12, 0xb, 0xb, 0x5, 0x24, 0x18, 0x5, 0x1, 0x9, 0x16, 0x4, 0xb, 0x48, 0xc, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x92b4, 0xd, 0x0, 0x0, 0x3, 0x6, 0x3, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x3}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x6}, {0x4, 0x7}, {0x4, 0x4}, {0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x4, 0x6}, {0x7, 0x9}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x3, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x6}, {0x1, 0x4}, {0x4, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x6, 0x1}, {0x2, 0x3}, {0x6, 0x4}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x4}, {0x1, 0x8}, {}, {0x5, 0x2}, {}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x1}, {0x4, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x16, 0x16, 0x16, 0xc, 0x4, 0x47, 0x1b, 0x4, 0xb, 0x18, 0x24, 0x1b, 0x2, 0x18, 0x16, 0x3, 0x18, 0x18, 0x1b, 0x0, 0x12, 0x24, 0x3, 0x0, 0x1b, 0x9, 0x48, 0x16, 0x9, 0x60]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x6c, 0x1, 0x1, 0x48, 0x3, 0x36, 0x3, 0x36, 0x4, 0x2, 0x24, 0x30, 0x48, 0x1b, 0x6c, 0x6, 0x6, 0x6, 0x24, 0x2, 0x9, 0x60, 0x3f, 0x16, 0x0, 0x6c, 0x30, 0x9, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x7fff, 0x7, 0x4, 0x10, 0xc8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7, 0x8ab, 0xc, 0x9bf3, 0x3ff, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0xb, 0x6, 0x48, 0x30, 0x12, 0x48, 0x18]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x3, 0x12, 0x60, 0x9, 0x48, 0xc, 0x24, 0x1b, 0x5, 0x5, 0x48, 0x18, 0x17, 0x6, 0x1b, 0x2, 0x6, 0x3, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x3, 0x6e, 0x7, 0xfff8, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0xb, 0x9, 0x30, 0x12, 0x6c, 0x24, 0x30, 0x3, 0x6, 0x16, 0x60, 0x4, 0x16, 0x48, 0x24, 0x6c, 0x2, 0x30, 0x5, 0x3, 0xc, 0x1, 0x3, 0x6, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xd99e, 0x1, 0x1000, 0x2, 0xfb64, 0x401, 0x15]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0x9}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x8}, {0x0, 0x5}, {0x3}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x3}, {}, {0x1, 0x2}, {0x2, 0x6}, {0x4, 0x7}, {0x7, 0x5}, {0x4, 0x6}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0xc}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0xa}, {0x1}, {0x5, 0x2}, {0x7, 0x8}, {0x3, 0xa}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0x7}, {0x6, 0x1}, {0x3, 0x9}, {0x7, 0x6}, {0x5, 0x8}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {0x0, 0x4}, {0x2, 0x3}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x9}, {0x7, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0x1}, {0x5, 0x9}, {0x2, 0x5}, {0x0, 0x8}, {0x7, 0x4}, {0x3, 0x8}, {0x4}, {0x4, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x7, 0x6}, {}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x6}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x2}, {0x6, 0x3}, {0x4, 0x2}, {0x4, 0x7}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0x1}, {0x1}, {0x7}, {0x5, 0x1}, {0x5, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x100, 0x5, 0x80, 0xb4cf, 0x4, 0xdfa4, 0x8a4]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0x4}, {0x7, 0x3}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x5}, {0x1, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x2, 0x2, 0xc, 0x5, 0xc, 0x3, 0x30, 0x19, 0x2, 0x0]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x7}, {0x4, 0x1}, {0x4, 0x8}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0x2, 0x4b, 0x6, 0xffff, 0x56, 0xba]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0xc, 0x9ded, 0x6, 0x4, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0xc, 0x4, 0x2, 0x6c, 0x4, 0x12, 0x6, 0x30, 0x36, 0x30, 0x30]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x4, 0x6c, 0x30, 0x1b, 0x4, 0x6c, 0x16, 0x3, 0x2, 0x60, 0x24, 0x6, 0x48, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x3, 0x1b, 0x60, 0x48, 0x24, 0x30, 0xc, 0xa, 0x9, 0x24, 0x24, 0xb, 0x4, 0x1b, 0x5e, 0x39, 0x3, 0x24, 0xc, 0x6]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x88, 0x1, 0x46b0, 0x8a2, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x0, 0x4, 0x188, 0x3f68, 0xffff, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7ff, 0x8, 0x3, 0x0, 0x0, 0x10, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8000, 0x1000, 0x400, 0x7, 0x3, 0x1, 0x1]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xa7, 0x7, 0x101, 0xfffd, 0x5, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x6c, 0x60, 0x6, 0x6, 0x16, 0x1b, 0x60, 0x4, 0x16, 0x5, 0x12, 0x48, 0x1b, 0xb, 0x60, 0x2, 0x30, 0x5, 0x30, 0x3, 0xc, 0x60, 0x16, 0x31, 0x18, 0xb, 0x5, 0x2, 0x12, 0x5, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0x1, 0x5, 0x0, 0x4, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0x2}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4f54, 0xb, 0x20, 0x53, 0x8, 0xe, 0xa0a1]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x6c, 0x6, 0x61, 0x16, 0x12, 0x0, 0xc, 0x12, 0xb, 0x4, 0x16, 0x1b, 0x24, 0x5, 0x6, 0x6c, 0x60, 0x6, 0x2, 0xb, 0xc, 0x24, 0x18, 0x9, 0x24, 0x1, 0xc, 0x9, 0x24, 0x12, 0x1b]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x7}, {0x2, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x7, 0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0x4}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x2, 0x5, 0xfff6, 0x80c1, 0x8, 0x40]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0xb, 0x65, 0x10, 0x16, 0xc, 0x48, 0x4, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x53, 0x5, 0x1000, 0x8, 0x143, 0xfc, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x840}, 0x20000054) 1m39.680937497s ago: executing program 1 (id=8485): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xffffd000) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) readv(r1, &(0x7f0000000300), 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="0500ffffffff0c0000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340001010101010100000800490001ac0f0006006600060800000a00"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x6) listen(r1, 0xa) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(r6, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x13, &(0x7f0000000100)=0xd, 0x4) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) 1m39.675369181s ago: executing program 2 (id=8486): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000700)={{0xffffffffffffffff, &(0x7f0000000480)='\x00', 0x80001, &(0x7f00000004c0)={@_ha_fsid={[0x7, 0xf]}, {0x5, 0xa, 0x9, 0x81}}, 0x5, &(0x7f0000000500), &(0x7f0000000540)=0x8}, 0x1, &(0x7f00000006c0)=[{0x1, 0x80000001, &(0x7f0000000580)='syzkaller\x00', &(0x7f00000005c0)="09197dacb10e5300fa6fbf77a71842d9d0d3689f696b116d128d11fd098aea5c65a51f85dc3b84fa6bca5199234ca2eb2ad2abeb68e8d70726465beeda75259c3593b87645fd97f5ef619b51e48a11dab6c0f30043210c3bbf2ae44a07a40bf953ad23f1cec8f12cf08d5cfab58947a5a94029a64d4105d4ddffa527d27360aeca45a0c4ec3117a9911eaeebc87cfa6de7f5f35695a70c0dcaf6a2dd8989bd5e96bd3f3f4630f16c7acbf16597446a783193ed4cc0951e197b279ee7c48dd9205cc4ba53ff4047b62b8dd28971096f5eb2976b353568eec01031749faba5f43dc490b2ce531e2bee9cc17cf44fe092", 0xef, 0x28}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x3a, &(0x7f00000001c0)=""/58, 0x41000, 0x0, '\x00', 0x0, 0x18, r4, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xf, 0x8, 0x9}, 0x10, 0x4c8c, r0, 0x2, 0x0, &(0x7f0000000380)=[{0x4, 0x1, 0xf, 0x3}, {0x0, 0x1, 0x8, 0xb}], 0x10, 0x7}, 0x94) close(0x4) 1m39.463249987s ago: executing program 0 (id=8487): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'bond_slave_1\x00', 0x7}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getpeername$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) 1m39.413342303s ago: executing program 1 (id=8488): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m39.234330985s ago: executing program 0 (id=8489): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x8}, {0xffff, 0xffff}, {0xf, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0xffff}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000000)='fw\x00', 0x82, &(0x7f0000000040)={@align=0x3, {0xfffc, 0x1, 0xfff}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x10000}, {[0x307e, 0x3da, 0x9, 0x4]}, 0x7fff, 0x2b, &(0x7f0000000140)=""/43}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000540)={{r0, &(0x7f0000000240)='sfq\x00', 0x810100, &(0x7f0000000400)={@_ha_fsid={[0x4, 0xffffffff]}, {0x8c7, 0x4, 0x7f, 0x3}}, 0x9, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xf797}, {[0xf, 0x4, 0x52f, 0x80000001]}, 0x980, 0x6e, &(0x7f00000004c0)=""/110}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet6(0xa, 0x3, 0x100) sendmmsg$inet6(r6, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000005c0)=r5, 0x4) 1m39.167471401s ago: executing program 1 (id=8490): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff25bd7000f7d9de25000000", @ANYRES32=0x0, @ANYBLOB="13280000212c0000080005006940b91c8535d1f00ed0b7820c8058c7877b3f325cbaec26fb8d521978c7b4dfdf0eecbea49d6e60fa6fa5f99776171fdd85791a6acfe410c5e775530b41546c0f84d78e49adddd0fd24cb73426d478de7afebfd704b49998d39dbb9a03f00788376724e06d25dcead42250550094acc0c919f11c68d2b363abe21952e1309"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000240)='GPL\x00', 0x1}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r0, 0x0, 0x3b) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x24044015) socket$inet(0x2, 0x2, 0x1) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x80000) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) pipe(0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180900000000000000000000000060b432bea99ac2a04a12450000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000a850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m39.089556963s ago: executing program 3 (id=8491): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x64, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x80df}, {0x5, 0x9, 0xb, 0x2, 0x2, 0x1, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x10}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x10}}]}}]}, 0xac}}, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r4, 0x9, 0x2, 0xfffffff9}, &(0x7f0000000140)=0x10) listen(r0, 0xfffffffc) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1m37.205509723s ago: executing program 4 (id=8492): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1e, &(0x7f0000000c00)=0x80000001, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1m37.072033146s ago: executing program 2 (id=8493): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept(r0, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000080)=0x80) recvmsg$can_j1939(r1, &(0x7f0000001380)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4, &(0x7f0000001340)=""/35, 0x23}, 0x0) connect$netrom(r1, &(0x7f00000013c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast, @null, @null]}, 0x48) connect$netrom(r0, &(0x7f0000001440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f00000014c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001540)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000001580)=0x7, 0x12) read(r2, &(0x7f00000015c0)=""/4096, 0x1000) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000025c0)={0x77359400}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)=@flushpolicy={0x24, 0x1d, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x12}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) bind$netrom(r2, &(0x7f0000002700)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000002780)=0x1000) writev(r0, &(0x7f0000002c40)=[{&(0x7f00000027c0)="70b0bbe3673b2a310449e65351e65c439ad34e166ed187b8b5fdccdf771909667eb2a2981f4fdcb325a26044675a88ff4edf2d399153556cbe45bbc7643beefdb908bd7a1f0f8f2c699e3ab60a633b9c07c278654d4b45d26b9a5ca6af019ce39981ef7129b0a2664f7fe14ca672cd098cde65196b73d5711507b2cbd028481fb1ff0f3f31faf556b44ebb", 0x8b}, {&(0x7f0000002880)="ff5e4e5d2d7a61d270b3987bac5c51efd6bf2b6989bf4a18", 0x18}, {&(0x7f00000028c0)="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", 0xff}, {&(0x7f00000029c0)="54991908fef81a9a9ab26ae4a7a8c07fd3197f4f57639970b7be8e37680f8188f945a4e0e241395a2b3aba1423913022ab49edd90e934e452aa2fbdccabb13da000d2894b79d67d2abb2e3e3758b1ba403320bfcff9cf8b5345e94d56fb66340dafd6d7d2d50bff32c958d4c4f2f", 0x6e}, {&(0x7f0000002a40)="3139d0202670fc11e4f15fd8f10bd2aff92d6c1ad65effc9f8a35674dda4d36f9c75c03cbc67cf3186a6f019f28f9718f56996e47417c2592beeb0a45b32a83ab0ce80048d706116cf8d8868e82fb280803cf51b121a4f18168505cf658f46e16d4809f2489b396101cba23c8fc60dc3cc66bf26960a834adf9a9c8f1e4138d9fdf05a094e5478939c96f921aa6ef8b3214943d72432335ae44d1f48e4bf421e5636fca280e78cc34b54d03326", 0xad}, {&(0x7f0000002b00)="46e689db35c8b3db2b93004d70c14d59218ec391e150788b252f11c9714c171bc4494c276cc0", 0x26}, {&(0x7f0000002b40)="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", 0xfc}], 0x7) r4 = socket$l2tp(0x2, 0x2, 0x73) sendfile(r4, r2, 0x0, 0xd2a) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000002cc0), 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000002d00)={'veth0_to_bridge\x00'}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002d80), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0xc3d7f2d152c3175f}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}}, 0x20004004) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000002e80)={0x0, 0x5}, &(0x7f0000002ec0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000002f00)={r7}, &(0x7f0000002f40)=0x8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002fc0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x22404021}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x54, r8, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x78, r9, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6a}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8080) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000003280)) 1m37.071541379s ago: executing program 1 (id=8494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x9, 0x1, "0e"}, 0x9) sendto$inet6(r0, &(0x7f0000000100)="ac", 0x1, 0x2400c801, &(0x7f0000000140)={0xa, 0x4c23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1m37.067453203s ago: executing program 3 (id=8495): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcff000009"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) listen(r0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xc, [@enum64={0xc, 0x6, 0x0, 0x13, 0x1, 0x0, [{0x3, 0x8, 0x5}, {0xe, 0x5, 0xfffffff9}, {0x1, 0x11c2}, {0x6, 0x4, 0xfffffffb}, {0x9, 0x30, 0xa}, {0xc, 0x8, 0x81}]}, @const={0x9, 0x0, 0x0, 0xa, 0x1}, @volatile={0x1, 0x0, 0x0, 0x9, 0x5}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x1}]}, {0x0, [0x20, 0x2e, 0x2e, 0x2e, 0x2e, 0x61, 0x0, 0x5f, 0x0, 0x0]}}, &(0x7f0000000400)=""/101, 0xa0, 0x65, 0x0, 0xfe, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0x35, 0x7f, 0x9222, r2, 0x3ff, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x2, @value=r4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) getsockopt$SO_COOKIE(r0, 0x1, 0x2a, 0x0, &(0x7f0000000240)=0xfffffdd6) 1m37.06679818s ago: executing program 4 (id=8496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff2b, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x400, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x122, 0x1400}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffffb}}]}]}]}, 0x48}}, 0x24040800) 1m36.892558186s ago: executing program 0 (id=8497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r2 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 32) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) read(r2, &(0x7f0000000100)=""/19, 0x13) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getspdinfo={0x14, 0x25, 0x8, 0x70bd2c, 0x25dfdbfc, 0x6, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1m36.805883616s ago: executing program 2 (id=8498): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000280)=""/237, 0xed, 0x0, &(0x7f00000001c0)=""/17, 0x11}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x5, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) r9 = socket$packet(0x11, 0x2, 0x300) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x1405, 0x2, 0x70bd2b, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20040000) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r11, 0x4) ioctl$FIOCLEX(r9, 0x5451) 1m36.743076264s ago: executing program 4 (id=8499): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x204, @loopback, 0x7}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000300)="00f0e105e23d", 0x6, 0x2002c144, &(0x7f00000001c0)={0xa, 0x2, 0x0, @loopback, 0xd}, 0x1c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) shutdown(r1, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@local}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x96, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m36.741559274s ago: executing program 3 (id=8500): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111dc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8844}, 0x40000) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m36.47282029s ago: executing program 0 (id=8501): syz_init_net_socket$ax25(0x3, 0x2, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="340000000108010800000000000000fd0500000a050003008400000004000480050003003a0000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[], 0x10}}, 0x8001) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800"], 0x150}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mmap(&(0x7f0000361000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f08000000", @ANYBLOB="0000000000000000b702000014000000bf030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x15, 0x3, 'fo\x00', 0x20, 0x4, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 1m36.286538814s ago: executing program 3 (id=8502): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xd) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x404c810}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x300, 0x0, 0x40408c1}, 0x2004a8d0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1810efb723eeb8968ca00000002500010324bd5502fffcdf25010000000400ae4deffcbb032df210423d7416a12cdaee7bc645b0798f3f6acadd"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f00000029c0)=""/4099, 0x1003}, {&(0x7f0000000240)=""/171, 0xab}], 0x6}, 0x22120) recvmmsg(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10102, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000c40)=ANY=[@ANYBLOB="d130f6feffffffff18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000009000000000000005200000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b789c10000000000b7080000000000007b8af8ff00000000b7080000f8ffffff7b8af0ff00000000bfa1000000000000074c0400f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000cff3cec9f5e3a56272f08cc8708201135166438a9c50254cb316384e577a6a7869d2b3", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018410000f8ffffff0000000000000000"], &(0x7f0000000340)='GPL\x00', 0x8000, 0x4a, &(0x7f0000000900)=""/74, 0x41100, 0x5c, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x7, 0xffff, 0x7ba}, 0x10, 0x14fe3, r2, 0x4, &(0x7f0000000980)=[r2, r2], &(0x7f00000009c0)=[{0x3, 0x4, 0x5, 0x1}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x3, 0xb79e4048d77240b6}, {0x1, 0x4, 0xe, 0x6}], 0x10, 0x1314}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x20}) r4 = socket(0x18, 0x6, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x4800) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newtfilter={0xd24, 0x2c, 0xd27, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xe, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xcf8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_POLICE={0xcec, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1ff, 0x6, 0x5, 0x10, 0x7, 0x0, 0x20, 0x4, 0x5, 0x9c, 0x7ff, 0x8, 0x1, 0x2, 0x0, 0x80000000, 0x0, 0x78, 0x1ff, 0x5, 0x1, 0x4, 0x347, 0x40, 0x97, 0xe1, 0x0, 0x7, 0xb, 0x1, 0x3, 0x2, 0x6, 0x1, 0x77, 0x6, 0x6, 0x4, 0x8, 0x7, 0x1200000, 0x6, 0x80, 0x0, 0x5, 0xc0cb, 0xcca, 0x9, 0x0, 0x81, 0x7, 0x78, 0x1ff, 0x872c, 0x6, 0x47, 0x2375, 0xf7, 0x6, 0x5, 0x0, 0x4, 0x10000, 0x4, 0x2a24000, 0x7f, 0x4, 0x3, 0x7ff, 0x7fffffff, 0x7, 0x0, 0x0, 0x1, 0x7, 0x6, 0x6, 0x2, 0x4, 0x9, 0x10, 0x3ff, 0xfd, 0x7, 0x5, 0x6, 0x400, 0x6, 0x7, 0x80000001, 0xfe, 0x10000, 0xfffff000, 0x1, 0x0, 0x5, 0xfffffff8, 0x82, 0x2, 0x5, 0x401, 0x36c, 0x7, 0x3da6, 0x4, 0x316, 0xfffffff9, 0x4, 0x4, 0xdf, 0x2, 0x7ff, 0x7, 0x8, 0x1, 0x9, 0x2, 0x2, 0x91, 0xc7000000, 0x4, 0x9, 0x10, 0xffff, 0x3, 0x6, 0x6, 0x0, 0x24f249de, 0x8, 0xadf, 0x9, 0x6, 0xfff, 0xf9, 0x80000000, 0x9, 0x0, 0x4, 0x6, 0x8, 0x10, 0x206, 0x2, 0x5, 0xb8a9, 0x7, 0x2119, 0x800, 0x763, 0x8, 0x100, 0x0, 0xffff7fff, 0x1, 0x410, 0xc, 0x6, 0xfffffff8, 0x10, 0xa, 0xff, 0x7f0d, 0xfaf1, 0x4fbc, 0x0, 0x4, 0xc0c, 0xffffffff, 0xfffffff6, 0xdd58, 0x4, 0x6, 0x6, 0x7, 0x2, 0x7, 0xce91, 0x5, 0x9, 0x7fff, 0xff7ffffe, 0x4, 0x5, 0x2, 0x7fffffff, 0x8, 0x6, 0xd, 0x3, 0x9, 0xfff, 0x251e, 0x13, 0x5, 0x683, 0x40, 0x401, 0x0, 0x1, 0xfff, 0x562e633a, 0x6, 0x3, 0xfc6, 0x8, 0x298, 0x6, 0xb6a8, 0x8, 0x6, 0x5, 0x2, 0x4, 0x22, 0x9ab, 0x5, 0x0, 0x7ff, 0x6, 0x0, 0x3, 0x8001, 0x81, 0x1, 0x9, 0x5, 0xf7, 0xffffffff, 0x5d5, 0x2, 0x0, 0x0, 0x5, 0x2, 0x3, 0x1d6, 0x80000000, 0xffffffff, 0x7, 0x3, 0x2, 0x0, 0x5, 0xe, 0x6, 0x40, 0x800, 0x6, 0x58, 0x7, 0x40, 0x9, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x6, 0x8, 0x6, {0x6, 0x0, 0x7, 0x6, 0x3f, 0x9}, {0x9d, 0x0, 0x8, 0x3, 0xa, 0x7}, 0x5, 0xc, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0x7, 0x4, 0x8, {0x1, 0x2, 0x513, 0x9, 0x2, 0x80000001}, {0x2, 0x2, 0x6, 0x5, 0x200, 0x4}, 0x2, 0x9, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x7, 0x7fffffff, 0x3, {0xc, 0x2, 0x0, 0x5, 0x8, 0xfffffffe}, {0x5, 0x1, 0x38dc, 0x7fff, 0x7, 0x80000001}, 0x0, 0x3, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xc2e, 0x1, 0xdd74, 0x4, 0x1, 0x7fffffff, 0x9, 0x33a, 0x7fff, 0x9e, 0x4, 0xffff3ab5, 0x100, 0x3caf, 0x2, 0x8, 0x3000, 0x7, 0x0, 0x6, 0x7, 0x16, 0x72, 0x34b, 0x7, 0xff, 0x1, 0x9, 0x44, 0x8, 0xffffff00, 0x40, 0x9, 0x3, 0xb, 0xc, 0x9, 0x5, 0x5, 0xc26, 0x7, 0x4, 0x5, 0x257, 0x3, 0x4, 0xa60, 0x101, 0x2, 0x1, 0x8001, 0x6, 0x1, 0xb78, 0x5, 0x88, 0x10, 0x416, 0x2, 0x0, 0x2, 0x4, 0xa37, 0x0, 0x6, 0x1000, 0xc65, 0xe9b1, 0x3, 0x100, 0x2, 0x9eb, 0x4, 0xffff82a2, 0xff, 0x6, 0x5, 0xfffffffd, 0x7, 0xf, 0x7ff, 0xff, 0x1ff, 0xfffffffa, 0xb, 0x1, 0x9, 0x2, 0x100, 0x2, 0x2, 0x1, 0x6, 0x3ff, 0x5, 0x2, 0x7, 0x9, 0xa, 0x8, 0xb13, 0x6, 0xaf, 0x5d8e, 0x100000, 0x8, 0x0, 0x3, 0x1, 0xffffffff, 0xffffffff, 0x7f, 0x9, 0xa6e9, 0x5, 0x8, 0x7, 0x2, 0x4, 0x7fff, 0x0, 0x988c, 0x7, 0x7, 0xf94, 0x80, 0x7ff, 0xe02d, 0x1, 0x14b42221, 0x8001, 0x208, 0x6d, 0x9, 0x2, 0x7, 0x5, 0xffffffff, 0x6, 0x3ff, 0x1ff, 0x7, 0x7, 0x2, 0x5, 0xfffffffb, 0x2, 0x4, 0x8, 0x49, 0x6, 0x2, 0x5, 0x0, 0x80000001, 0x6, 0xfd7, 0x80000001, 0xfff, 0x9, 0x4, 0xcf, 0x8, 0x2, 0x5, 0x7, 0x200, 0x10, 0x8001, 0x9e, 0x4, 0x9, 0xca, 0xd9e, 0x6, 0x9, 0xffffffff, 0x4, 0x5, 0x1, 0x7, 0x1, 0x401, 0x8, 0x5, 0x7, 0x4, 0x6, 0x7, 0x8, 0x8c63, 0x10000, 0x6, 0x6, 0x100, 0xde53, 0x401, 0x4, 0x4b, 0x1, 0x8, 0x0, 0x0, 0x3af, 0x4, 0x6, 0x6, 0x2, 0x71b, 0x6, 0xffffffff, 0x7fff, 0xaac3, 0x9, 0x3, 0x96a, 0x6, 0x4, 0x0, 0x0, 0x6, 0x8, 0x9, 0xffff8000, 0x7, 0xa, 0x1, 0x80000001, 0x8, 0xffff, 0x1ff, 0x7, 0x8, 0x5, 0xfffffff8, 0x1, 0x8, 0x4, 0x3, 0x8, 0x80, 0x4, 0x3ff, 0x9, 0x9, 0x4, 0x4000000, 0xb37e, 0x8, 0xadfd, 0x5, 0x1, 0xfff, 0x80, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x9b6, 0xffffff84, 0x3, 0x2, 0x9, 0xe363, 0xd997, 0xb, 0x2, 0x2a2b, 0xa783, 0x9, 0x7, 0xb2, 0x1ff, 0x8, 0x7, 0x8, 0x81, 0x2, 0x3, 0x4, 0xed7, 0x7, 0x8, 0x4, 0x4, 0xfffffff9, 0x4, 0xabce, 0x401, 0xe, 0xfffffff1, 0x7, 0x9, 0x7, 0xa, 0x100, 0x98, 0x0, 0x6, 0x2, 0x3, 0x800, 0x6, 0x8d, 0xd, 0xfffffff9, 0xfffffffb, 0x4, 0x101, 0x2, 0x5, 0x43, 0x9cd, 0x3, 0x0, 0x800, 0xe, 0x113, 0x9, 0x8, 0x6, 0x7, 0x2, 0x0, 0x2, 0x7, 0x17, 0x7ff, 0x10000, 0x101, 0x1, 0x6, 0x5, 0x3, 0x8, 0x8, 0xae8, 0x0, 0xc, 0x3ff, 0x9, 0x303, 0xffe00000, 0x8, 0x1, 0x1, 0x9, 0x3ff, 0x1ff, 0xd, 0x7, 0x6, 0x52e, 0x8, 0x3, 0xc414, 0x8, 0x8, 0x9, 0x4, 0x7ff, 0xa148, 0x7, 0x8, 0x4, 0x9, 0x9, 0x9, 0x2, 0xf, 0x6, 0x6, 0x80, 0x10000, 0x0, 0x5, 0x6, 0x4, 0x1, 0x6, 0x0, 0x39, 0xd, 0x2, 0xfff, 0xfffffffa, 0x3, 0x1, 0x3, 0x6, 0x6, 0x306, 0x8, 0x8, 0xfff, 0x1, 0xfffffffb, 0xe, 0x0, 0x81, 0xc0000000, 0xc, 0x9, 0x0, 0x4, 0x7, 0x664, 0xfff, 0x7, 0x4, 0xfffffffe, 0x4, 0x10000, 0x3, 0x9, 0x1, 0xa7, 0x1e8, 0x6, 0x4, 0x287, 0x1000, 0x3, 0x3, 0xa6a1, 0x8, 0x2, 0xd5, 0x1, 0xfffffff9, 0x200, 0x7, 0x80000001, 0xffffff41, 0x10, 0xfffffffc, 0x8, 0x3, 0x5, 0xa, 0x6, 0x3, 0x9, 0xfffffffc, 0x2ca73e3, 0x1, 0x1, 0xdcb, 0x5, 0x7, 0xf, 0xe, 0xe, 0x3, 0x7, 0xe1, 0x81, 0x4, 0x1, 0x8, 0x1, 0x10000, 0xff, 0xffffffff, 0x0, 0x2e85, 0x5, 0x100, 0x6, 0x1, 0x0, 0x400, 0x0, 0x7, 0x401, 0x6, 0x4, 0x40, 0xca14, 0x4, 0xfffffffc, 0xffff, 0x7fffffff, 0x400, 0x0, 0x8, 0x4dea3952, 0xb, 0x7, 0x8304, 0xa48, 0x3, 0x0, 0x1, 0x8, 0xe5, 0x1, 0x0, 0xd, 0x400000, 0xfffffc00, 0x3, 0x2d, 0x6, 0x5, 0x81, 0x0, 0x8, 0x5, 0x0, 0x6, 0x1]}]}]}}]}, 0xd24}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd121a35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x50) socket$netlink(0x10, 0x3, 0x8000000004) 0s ago: executing program 32 (id=8501): syz_init_net_socket$ax25(0x3, 0x2, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="340000000108010800000000000000fd0500000a050003008400000004000480050003003a0000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[], 0x10}}, 0x8001) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800"], 0x150}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mmap(&(0x7f0000361000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f08000000", @ANYBLOB="0000000000000000b702000014000000bf030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x15, 0x3, 'fo\x00', 0x20, 0x4, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) kernel console output (not intermixed with test programs): 2.624206][ T3056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 682.733602][ T3056] bond2: (slave bridge5): making interface the new active one [ 682.748622][ T3056] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 682.828007][ T3072] 8021q: VLANs not supported on gre0 [ 683.094190][ T3053] sctp: [Deprecated]: syz.1.6943 (pid 3053) Use of int in maxseg socket option. [ 683.094190][ T3053] Use struct sctp_assoc_value instead [ 683.152999][ T3089] netlink: 'syz.0.6952': attribute type 1 has an invalid length. [ 683.159596][ T3091] __nla_validate_parse: 6 callbacks suppressed [ 683.159614][ T3091] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6953'. [ 683.248614][ T3045] lec:lec_atm_close: lec0: Shut down! [ 683.320430][ T3100] netlink: 'syz.0.6952': attribute type 4 has an invalid length. [ 683.333915][ T3089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 683.414636][ T3096] bond2: (slave veth3): Enslaving as an active interface with a down link [ 683.442136][ T3098] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6953'. [ 683.527976][ T3100] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 683.556103][ T3100] bond2: (slave batadv1): making interface the new active one [ 683.606361][ T3100] batadv1: entered promiscuous mode [ 683.623216][ T3100] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 683.842837][ T3129] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6959'. [ 683.853513][ T3129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'. [ 683.869099][ T3129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'. [ 683.935810][ T3135] netlink: 'syz.0.6960': attribute type 1 has an invalid length. [ 684.239893][ T3157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6965'. [ 684.321072][ T3165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.153662][ T3206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6974'. [ 685.204949][ T3210] IPv6: NLM_F_CREATE should be specified when creating new route [ 686.892557][ T3135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.090185][ T3218] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6979'. [ 687.795323][ T3274] sctp: [Deprecated]: syz.1.6990 (pid 3274) Use of int in maxseg socket option. [ 687.795323][ T3274] Use struct sctp_assoc_value instead [ 688.055808][ T3290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6995'. [ 688.245800][ T3300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6997'. [ 688.379684][ T3307] bridge0: port 3(ipvlan0) entered blocking state [ 688.386238][ T3307] bridge0: port 3(ipvlan0) entered disabled state [ 688.396957][ T3313] netlink: 'syz.0.7000': attribute type 1 has an invalid length. [ 688.408060][ T3307] ipvlan0: entered allmulticast mode [ 688.413637][ T3307] bridge0: entered allmulticast mode [ 688.431172][ T3307] ipvlan0: left allmulticast mode [ 688.436246][ T3307] bridge0: left allmulticast mode [ 688.509627][ T3319] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7000'. [ 688.554469][ T3313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.744545][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 688.775381][ T3319] bond3: (slave batadv2): making interface the new active one [ 688.808470][ T3319] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 688.877952][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 688.885855][ T3330] bond1: Unable to set down delay as MII monitoring is disabled [ 688.886038][ C1] lec:lec_tx_timeout: lec0 [ 688.899201][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 688.929802][ T3330] bond1 (unregistering): Released all slaves [ 689.155068][ T3363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7014'. [ 689.481796][ T3390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7020'. [ 689.610273][ T3392] IPVS: Scheduler module ip_vs_sip not found [ 690.226224][ T3457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.502876][ T3479] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7038'. [ 690.696370][ T3484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7039'. [ 690.963500][ T3508] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.7044'. [ 691.401661][ T3539] tipc: Started in network mode [ 691.406579][ T3539] tipc: Node identity 061a16735227, cluster identity 4711 [ 691.425499][ T3539] tipc: Enabled bearer , priority 0 [ 691.506980][ T3539] syzkaller0: entered promiscuous mode [ 691.514142][ T3539] syzkaller0: entered allmulticast mode [ 691.521396][ T3539] tipc: Resetting bearer [ 691.590908][ T3538] tipc: Resetting bearer [ 693.626530][ T3538] tipc: Disabling bearer [ 693.652765][ T3583] vlan3: entered allmulticast mode [ 693.664625][ T5891] tipc: Node number set to 1413289587 [ 693.726032][ T3591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7061'. [ 693.906531][ T3601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.913853][ T3601] IPv6: NLM_F_CREATE should be set when creating new route [ 693.927554][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 693.935616][ C1] lec:lec_tx_timeout: lec0 [ 693.941162][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 693.966201][ T3601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7064'. [ 694.052125][ T3601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.120862][ T3601] rdma_op ffff8880785099f0 conn xmit_rdma 0000000000000000 [ 694.144959][ T3610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7066'. [ 694.220851][ T3610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7066'. [ 694.245455][ T7531] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.294216][ T7531] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.308763][ T7531] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.366419][ T7531] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.465201][ T3628] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 694.673440][ T3628] xt_socket: unknown flags 0x50 [ 694.718391][ T3644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7073'. [ 694.838138][ T6542] batadv1: left promiscuous mode [ 694.993638][ T3663] netlink: 'syz.4.7075': attribute type 21 has an invalid length. [ 695.002994][ T3663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7075'. [ 695.033887][ T3664] IPv6: sit1: Disabled Multicast RS [ 695.052069][ T3664] sit1: entered allmulticast mode [ 697.579207][ T3640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.723145][ T3697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.764621][ T3698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7083'. [ 697.798378][ T3698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7083'. [ 697.831209][ T3711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7085'. [ 697.946756][ T3719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7087'. [ 698.114165][ T3728] netlink: 'syz.1.7090': attribute type 2 has an invalid length. [ 698.171583][ T3735] netlink: 'syz.3.7093': attribute type 5 has an invalid length. [ 698.840636][ T3778] __nla_validate_parse: 8 callbacks suppressed [ 698.840660][ T3778] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7106'. [ 698.868306][ T3778] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7106'. [ 698.900077][ T3778] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 698.947955][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 698.956034][ C1] lec:lec_tx_timeout: lec0 [ 699.140775][ T3798] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 699.211066][ T3803] mac80211_hwsim hwsim72 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 699.705339][ T3848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7118'. [ 699.785262][ T3857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7124'. [ 699.805547][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7123'. [ 699.833694][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7123'. [ 699.877240][ T3856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7123'. [ 700.089294][ T3875] netlink: 'syz.4.7128': attribute type 18 has an invalid length. [ 700.439305][ T3895] openvswitch: netlink: Message has -2 unknown bytes. [ 700.543075][ T3904] nbd: must specify a device to reconfigure [ 700.784086][ T3914] tipc: Started in network mode [ 700.790190][ T3914] tipc: Node identity ba6fd7d776bd, cluster identity 4711 [ 700.805854][ T3914] tipc: Enabled bearer , priority 0 [ 700.835210][ T3910] netlink: 'syz.4.7136': attribute type 13 has an invalid length. [ 700.953198][ T3914] syzkaller0: entered promiscuous mode [ 700.983850][ T3914] syzkaller0: entered allmulticast mode [ 701.014854][ T3914] tipc: Resetting bearer [ 701.254716][ T3934] pimreg3: entered allmulticast mode [ 701.259082][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7143'. [ 701.300309][ T3916] tipc: Resetting bearer [ 701.918788][ T6542] wlan1: Trigger new scan to find an IBSS to join [ 703.201018][ T3916] tipc: Disabling bearer [ 703.228843][ T9] tipc: Node number set to 3436369879 [ 703.311316][ T3978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7148'. [ 703.423859][ T3990] netlink: 'syz.0.7150': attribute type 1 has an invalid length. [ 703.454551][ T3990] netlink: 476 bytes leftover after parsing attributes in process `syz.0.7150'. [ 703.870342][ T4023] netlink: 'syz.0.7159': attribute type 8 has an invalid length. [ 703.987273][ T4037] __nla_validate_parse: 3 callbacks suppressed [ 703.987293][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7161'. [ 704.176427][ T4045] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 704.206329][ T4045] bond5 (unregistering): Released all slaves [ 704.335583][ T4061] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7168'. [ 704.516847][ T4074] Bluetooth: MGMT ver 1.23 [ 704.556218][ T4069] dvmrp0: entered allmulticast mode [ 704.879326][ T6542] wlan1: Trigger new scan to find an IBSS to join [ 705.097601][ T4108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7180'. [ 705.325188][ T4122] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7185'. [ 705.469619][ T4130] Cannot find del_set index 49151 as target [ 705.629855][ T4146] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7191'. [ 705.719241][ T4155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7192'. [ 705.755425][ T4155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7192'. [ 705.808199][ T4159] xt_ecn: cannot match TCP bits for non-tcp packets [ 705.862830][ T4161] netlink: 'syz.2.7195': attribute type 3 has an invalid length. [ 705.889286][ T4161] netlink: 'syz.2.7195': attribute type 1 has an invalid length. [ 705.921673][ T4161] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7195'. [ 705.961160][ T4155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7192'. [ 705.970861][ T4163] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7195'. [ 706.261499][ T4185] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 707.033933][ T4241] syzkaller1: entered allmulticast mode [ 707.276165][ T4259] sctp: [Deprecated]: syz.1.7217 (pid 4259) Use of int in maxseg socket option. [ 707.276165][ T4259] Use struct sctp_assoc_value instead [ 707.386636][ T4264] macvlan2: entered promiscuous mode [ 707.399074][ T4264] macvlan2: entered allmulticast mode [ 707.411101][ T4264] bridge0: entered promiscuous mode [ 707.499228][ T4264] team0: Port device macvlan2 added [ 707.720312][ T4284] netlink: 'syz.1.7222': attribute type 3 has an invalid length. [ 707.918417][T20167] wlan1: Trigger new scan to find an IBSS to join [ 708.021657][ T4304] netlink: 'syz.1.7226': attribute type 12 has an invalid length. [ 708.156446][ T4304] bond0: option primary_reselect: invalid value (255) [ 708.183342][ T4304] bond0 (unregistering): Released all slaves [ 708.546883][ T4335] netlink: 'syz.3.7239': attribute type 4 has an invalid length. [ 708.853973][T20167] wlan1: Creating new IBSS network, BSSID fe:92:c1:02:8b:eb [ 709.065709][ T4377] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 709.074332][ T4378] IPVS: set_ctl: invalid protocol: 0 172.20.20.51:20002 [ 709.310223][ T4396] team0: Device ip6gre1 is of different type [ 709.517886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.679225][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.812130][ T4435] __nla_validate_parse: 22 callbacks suppressed [ 709.812151][ T4435] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7259'. [ 709.881099][ T4442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.890519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.971265][ T4442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.979752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.577110][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7269'. [ 710.680864][ T4503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7269'. [ 710.730316][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.799844][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.966276][ T4523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7274'. [ 711.075994][ T4523] lo: Caught tx_queue_len zero misconfig [ 711.262124][ T4535] smc: net device wlan0 applied user defined pnetid SYZ0 [ 711.303156][ T4538] tipc: Failed to remove unknown binding: 66,0,0/0:689803488/689803489 [ 711.362138][ T4540] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7279'. [ 711.669068][ T4557] gretap0: entered promiscuous mode [ 711.772922][ T1208] net_ratelimit: 2 callbacks suppressed [ 711.772942][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.161209][ T4589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.170511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.198944][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7287'. [ 712.610198][ T4606] team0: Device gtp0 is up. Set it down before adding it as a team port [ 712.799376][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.837882][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.848691][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.620346][ T4557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.870042][ T4632] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7294'. [ 714.891782][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.098692][ T4652] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7301'. [ 715.108115][ T4652] netlink: 'syz.3.7301': attribute type 9 has an invalid length. [ 715.130298][ T4652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7301'. [ 715.179849][ T4656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7302'. [ 715.261535][ T4659] netlink: 'syz.3.7303': attribute type 2 has an invalid length. [ 715.824192][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 715.919449][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.954919][ T4697] netlink: 'syz.4.7311': attribute type 1 has an invalid length. [ 715.958634][ T4701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7314'. [ 715.979470][ T4703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7314'. [ 716.019915][ T4710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7311'. [ 716.030127][ T4710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7311'. [ 716.243074][ T4716] netlink: 208 bytes leftover after parsing attributes in process `syz.0.7316'. [ 716.356956][ T4720] openvswitch: netlink: Message has 6 unknown bytes. [ 716.416064][ T4724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.479861][ T4725] netlink: 'syz.2.7319': attribute type 1 has an invalid length. [ 716.611733][ T4732] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 716.724790][ T4732] netlink: 'syz.2.7319': attribute type 1 has an invalid length. [ 716.729548][ T4725] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 716.877904][ T9] net_ratelimit: 4 callbacks suppressed [ 716.877922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.960053][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.053506][ T4769] bridge0: entered promiscuous mode [ 717.077256][ T4769] macsec2: entered promiscuous mode [ 717.096501][ T4769] macsec2: entered allmulticast mode [ 717.108462][ T4777] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 717.111054][ T4769] bridge0: entered allmulticast mode [ 717.133440][ T4769] bridge0: port 3(macsec2) entered blocking state [ 717.149949][ T4769] bridge0: port 3(macsec2) entered disabled state [ 717.171917][ T4769] bridge0: left allmulticast mode [ 717.179612][ T4769] bridge0: left promiscuous mode [ 717.571636][ T4810] syzkaller0: entered promiscuous mode [ 717.597224][ T4810] syzkaller0: entered allmulticast mode [ 717.849694][ T4826] netlink: 'syz.0.7346': attribute type 10 has an invalid length. [ 717.920474][ T4826] team0 (unregistering): Port device team_slave_0 removed [ 717.965761][ T4826] team0 (unregistering): Port device team_slave_1 removed [ 718.004277][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.159425][ T4844] netlink: 'syz.4.7352': attribute type 11 has an invalid length. [ 718.204721][ T4848] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 718.545718][ T4867] netlink: 'syz.0.7361': attribute type 12 has an invalid length. [ 718.714085][ T4867] bond5: option primary_reselect: invalid value (255) [ 718.777366][ T4867] bond5 (unregistering): Released all slaves [ 719.037846][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.343745][ T4923] netlink: 'syz.1.7373': attribute type 1 has an invalid length. [ 719.490496][ T4929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.574487][ T4929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.701922][ T9] IPVS: starting estimator thread 0... [ 719.704293][ T4942] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 719.793756][ T4935] syzkaller1: entered promiscuous mode [ 719.808595][ T4948] IPVS: using max 32 ests per chain, 76800 per kthread [ 719.826152][ T4935] syzkaller1: entered allmulticast mode [ 719.918528][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.937337][ T4958] __nla_validate_parse: 18 callbacks suppressed [ 719.937357][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7378'. [ 719.984817][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7378'. [ 720.077939][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.164764][ T4966] netlink: 'syz.1.7380': attribute type 1 has an invalid length. [ 720.184093][ T4971] netlink: 'syz.4.7381': attribute type 8 has an invalid length. [ 720.386678][ T4979] ip6tnl0: Caught tx_queue_len zero misconfig [ 720.443937][ T4987] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7384'. [ 720.666856][ T5003] xt_CONNSECMARK: invalid mode: 0 [ 720.701556][ T5008] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.7392'. [ 720.870847][ T5016] netlink: 'syz.1.7396': attribute type 1 has an invalid length. [ 720.879456][ T5019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.906912][ T5016] netlink: 'syz.1.7396': attribute type 4 has an invalid length. [ 720.918215][ T5016] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.7396'. [ 721.128737][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.140770][ T5042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7399'. [ 721.935520][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7414'. [ 722.091963][ T5108] macvtap1: entered allmulticast mode [ 722.124280][ T5108] veth0_macvtap: entered allmulticast mode [ 722.157907][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.294130][ T5118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.303014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.430323][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7421'. [ 722.711378][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aa86800: rx timeout, send abort [ 722.803627][ T5148] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.7426'. [ 722.830783][ T5148] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 722.959943][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.037089][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7429'. [ 723.199948][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.211496][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aa87400: rx timeout, send abort [ 723.220397][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aa86800: abort rx timeout. Force session deactivation [ 723.382699][ T5197] bond0: entered promiscuous mode [ 723.396170][ T5197] bond_slave_0: entered promiscuous mode [ 723.403261][ T5197] bond_slave_1: entered promiscuous mode [ 723.461129][ T5197] bond0: left promiscuous mode [ 723.466038][ T5197] bond_slave_0: left promiscuous mode [ 723.472848][ T5197] bond_slave_1: left promiscuous mode [ 723.611544][ T5210] sctp: [Deprecated]: syz.3.7441 (pid 5210) Use of int in max_burst socket option. [ 723.611544][ T5210] Use struct sctp_assoc_value instead [ 723.691390][ T5214] netlink: 'syz.2.7440': attribute type 11 has an invalid length. [ 723.719779][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aa87400: abort rx timeout. Force session deactivation [ 723.758300][T26810] Bluetooth: hci5: command 0x0406 tx timeout [ 724.294797][ T5245] netlink: 'syz.4.7451': attribute type 21 has an invalid length. [ 724.355848][ T5247] vlan5: entered allmulticast mode [ 724.409081][ T5247] bond0: entered allmulticast mode [ 724.427654][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.549417][ T5255] xt_socket: unknown flags 0xe4 [ 724.581328][ T5248]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.624227][ T5248]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.704427][ T5248]  (unregistering): Released all slaves [ 725.021182][ T5283] netlink: 'syz.1.7460': attribute type 7 has an invalid length. [ 725.037185][ T5284] __nla_validate_parse: 15 callbacks suppressed [ 725.037204][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7459'. [ 725.056547][ T5282] xt_HMARK: proto mask must be zero with L3 mode [ 725.089738][ T5290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7460'. [ 725.341963][ T5302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7466'. [ 725.372246][ T5309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7467'. [ 725.438994][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.542600][ T5313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.555807][ T5313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.652842][ T5313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.665696][ T5313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.777346][ T5313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.788583][ T5313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.824949][ T5326] netlink: 196 bytes leftover after parsing attributes in process `syz.4.7471'. [ 725.834512][ T5326] netlink: 196 bytes leftover after parsing attributes in process `syz.4.7471'. [ 725.861886][ T5326] netlink: 19 bytes leftover after parsing attributes in process `syz.4.7471'. [ 725.950518][ T5313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.961484][ T5313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.999521][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.040143][ T5332] netlink: 'syz.3.7473': attribute type 1 has an invalid length. [ 726.143541][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7474'. [ 726.172388][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.270292][ T5341] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 726.274305][ T6530] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.319291][ T6530] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.462288][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7477'. [ 726.585254][ T5364] bond4 (unregistering): Released all slaves [ 726.705703][ T6526] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.735833][ T6526] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.873935][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.890601][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.910676][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.959963][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.000470][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.008089][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.170037][ T5402] syzkaller0: entered promiscuous mode [ 727.180500][ T5402] syzkaller0: entered allmulticast mode [ 727.435861][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7488'. [ 727.518276][ T43] net_ratelimit: 1 callbacks suppressed [ 727.518294][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.859389][ T5452] syzkaller0: entered promiscuous mode [ 727.864954][ T5452] syzkaller0: entered allmulticast mode [ 727.944331][ T5467] netlink: 'syz.3.7499': attribute type 1 has an invalid length. [ 727.947709][ T5452] bond2: option all_slaves_active: invalid value (222) [ 727.973254][ T5452] bond2 (unregistering): Released all slaves [ 727.980486][ T5470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.245888][ T5462] delete_channel: no stack [ 728.410528][ T5473] bond5: (slave ip6gretap1): making interface the new active one [ 728.424754][ T5473] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 728.445827][ T5473] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 728.458686][ T5473] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 728.560706][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.633548][ T5502] syzkaller1: entered promiscuous mode [ 728.667606][ T5502] syzkaller1: entered allmulticast mode [ 728.723783][ T5518] netlink: 'syz.1.7508': attribute type 15 has an invalid length. [ 728.826596][ T5525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.835125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.845936][ T5525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.038234][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.426751][ T5508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.441024][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.461444][ T5525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.149626][ T5571] netlink: 'syz.3.7517': attribute type 13 has an invalid length. [ 730.772833][ T5615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 730.789426][ T5617] tipc: Enabling of bearer rejected, failed to enable media [ 730.896315][ T5624] __nla_validate_parse: 2 callbacks suppressed [ 730.896338][ T5624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7528'. [ 731.698148][ T5691] IPVS: set_ctl: invalid protocol: 192 224.0.0.1:20001 [ 731.890787][ T5695] netlink: 188892 bytes leftover after parsing attributes in process `syz.1.7543'. [ 732.130931][ T5717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7548'. [ 732.150721][ T5717] bond0: Caught tx_queue_len zero misconfig [ 732.157073][ T5717] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7548'. [ 732.228332][ T5714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7548'. [ 732.244834][ T5714] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7548'. [ 732.499823][ T5746] Cannot find add_set index 65532 as target [ 732.596317][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7560'. [ 732.718601][ T43] net_ratelimit: 9 callbacks suppressed [ 732.718618][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.750031][ T5715] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 732.784136][ T5715] syzkaller0: entered promiscuous mode [ 732.797176][ T5715] syzkaller0: entered allmulticast mode [ 733.561823][ T5816] netlink: 'syz.2.7572': attribute type 1 has an invalid length. [ 733.582068][ T5816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.760567][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.025487][ T5866] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7580'. [ 734.102772][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.111145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.685831][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7588'. [ 734.797830][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.975692][ T5934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7590'. [ 735.118313][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.472119][ T5957] syzkaller0: entered promiscuous mode [ 735.482433][ T5957] syzkaller0: entered allmulticast mode [ 735.758353][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.842692][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.913122][ T5992] x_tables: duplicate underflow at hook 2 [ 736.877741][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.904867][ T6057] netlink: 'syz.2.7616': attribute type 1 has an invalid length. [ 736.928283][ T6058] __nla_validate_parse: 5 callbacks suppressed [ 736.928301][ T6058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7616'. [ 737.519868][ T6092] bond5: (slave gre0): Device is not bonding slave [ 737.526549][ T6092] bond5: option active_slave: invalid value (gre0) [ 737.535157][ T6092] bond5 (unregistering): Released all slaves [ 737.928242][T31791] net_ratelimit: 1 callbacks suppressed [ 737.928262][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.158128][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.879118][T21046] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 738.957836][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.210161][ T6023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.375067][ T6100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.630224][ T6110] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7626'. [ 739.634009][ T6120] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 739.730445][ T6130] netlink: 'syz.2.7630': attribute type 1 has an invalid length. [ 739.733062][ T6128] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.7626'. [ 739.742884][ T6130] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7630'. [ 739.761592][ T6131] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 739.781037][ T6133] netlink: 'syz.2.7630': attribute type 1 has an invalid length. [ 739.789730][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7629'. [ 739.818328][ T6128] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.7626'. [ 739.830877][ T6133] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7630'. [ 739.842725][ T6128] netlink: 89 bytes leftover after parsing attributes in process `syz.4.7626'. [ 739.999873][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.024653][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7635'. [ 740.045017][ T6143] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 740.074065][ T6143] openvswitch: netlink: Message has 8 unknown bytes. [ 740.091844][ T6143] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 740.337674][ T6161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.346459][ T6161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.354877][ T6161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.805405][ T6193] tipc: Enabling of bearer rejected, failed to enable media [ 740.890555][ T6202] geneve2: entered promiscuous mode [ 740.895805][ T6202] geneve2: entered allmulticast mode [ 740.933688][ T6201] netlink: 'syz.0.7650': attribute type 18 has an invalid length. [ 740.997804][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7650'. [ 741.052506][ T6212] ipvlan0: entered allmulticast mode [ 741.113013][ T6212] batadv_slave_1: entered allmulticast mode [ 741.162330][ T6212] batman_adv: batadv0: Adding interface: ipvlan0 [ 741.177179][ T6212] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.211275][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.224123][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.236147][ T6212] batman_adv: batadv0: Interface activated: ipvlan0 [ 741.281491][ T6222] erspan1: entered allmulticast mode [ 741.333141][ T6231] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 741.448226][ T6241] xt_TCPMSS: Only works on TCP SYN packets [ 741.720831][ T6265] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 741.744072][ T6265] netlink: 'syz.4.7663': attribute type 8 has an invalid length. [ 741.963640][ T6281] __nla_validate_parse: 4 callbacks suppressed [ 741.963659][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7669'. [ 742.029666][ T6288] netlink: 'syz.0.7671': attribute type 21 has an invalid length. [ 742.039658][ T6288] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7671'. [ 742.123384][ T6287] vlan0: entered allmulticast mode [ 742.147551][ T6295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7670'. [ 742.189799][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7672'. [ 742.210131][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7672'. [ 742.371537][ T6311] netlink: 'syz.2.7675': attribute type 3 has an invalid length. [ 742.408287][ T6311] netlink: 'syz.2.7675': attribute type 1 has an invalid length. [ 742.437027][ T6311] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7675'. [ 742.915528][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7684'. [ 742.933182][ T6357] xt_TCPMSS: Only works on TCP SYN packets [ 743.102491][ T6366] xt_CONNSECMARK: invalid mode: 0 [ 743.129390][ T1208] net_ratelimit: 53 callbacks suppressed [ 743.129408][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.215707][ T6376] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7691'. [ 743.278166][ T6380] xt_TCPMSS: Only works on TCP SYN packets [ 743.289013][ T6380] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7692'. [ 743.719298][ T6409] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 743.836980][ T6418] netlink: 'syz.0.7699': attribute type 32 has an invalid length. [ 743.847147][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7699'. [ 743.933585][ T6418] bond5: Setting coupled_control to off (0) [ 744.028249][ T6428] netlink: 'syz.2.7700': attribute type 4 has an invalid length. [ 744.116100][ T6428] `: renamed from bond0 (while UP) [ 744.162265][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.188314][ T6431] nbd3: detected capacity change from 0 to 127 [ 744.200455][ T5833] block nbd3: Receive control failed (result -32) [ 744.213377][ T6049] block nbd3: Dead connection, failed to find a fallback [ 744.237779][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.303271][ T6049] block nbd3: shutting down sockets [ 744.349444][ T6049] blk_print_req_error: 136 callbacks suppressed [ 744.349463][ T6049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.415208][ T6049] buffer_io_error: 138 callbacks suppressed [ 744.415226][ T6049] Buffer I/O error on dev nbd3, logical block 0, async page read [ 744.466155][ T6440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.475255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.490239][ T6049] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.522274][ T6049] Buffer I/O error on dev nbd3, logical block 1, async page read [ 744.554728][ T6049] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.595305][ T6049] Buffer I/O error on dev nbd3, logical block 2, async page read [ 744.627928][ T6049] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.674455][ T29] audit: type=1800 audit(1772185425.560:10): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7707" name="memory.events" dev="tmpfs" ino=1920 res=0 errno=0 [ 744.698715][ T6049] Buffer I/O error on dev nbd3, logical block 3, async page read [ 744.706542][ T6049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.751229][ T6049] Buffer I/O error on dev nbd3, logical block 0, async page read [ 744.785492][ T6049] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.827992][ T6049] Buffer I/O error on dev nbd3, logical block 1, async page read [ 744.859506][ T6049] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.893975][ T6049] Buffer I/O error on dev nbd3, logical block 2, async page read [ 744.937288][ T6049] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.975987][ T6049] Buffer I/O error on dev nbd3, logical block 3, async page read [ 745.001034][ T6049] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 745.033889][ T6049] Buffer I/O error on dev nbd3, logical block 0, async page read [ 745.065761][ T6049] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 745.086572][ T6049] Buffer I/O error on dev nbd3, logical block 1, async page read [ 745.111753][ T6049] ldm_validate_partition_table(): Disk read failed. [ 745.157634][ T6496] sctp: [Deprecated]: syz.2.7715 (pid 6496) Use of int in maxseg socket option. [ 745.157634][ T6496] Use struct sctp_assoc_value instead [ 745.161966][ T6049] Dev nbd3: unable to read RDB block 0 [ 745.198094][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.222990][ T6049] nbd3: unable to read partition table [ 745.251512][ T6049] ldm_validate_partition_table(): Disk read failed. [ 745.266997][ T6049] Dev nbd3: unable to read RDB block 0 [ 745.278506][ T6049] nbd3: unable to read partition table [ 745.357839][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.416483][ T6503] syzkaller0: entered promiscuous mode [ 745.422232][ T6503] syzkaller0: entered allmulticast mode [ 745.898286][ T6529] xt_l2tp: unknown flags: 10 [ 746.023099][ T6522] netlink: 'syz.1.7721': attribute type 16 has an invalid length. [ 746.038399][ T6522] netlink: 'syz.1.7721': attribute type 3 has an invalid length. [ 746.253391][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.254276][ T6537] netlink: 'syz.0.7723': attribute type 2 has an invalid length. [ 746.280538][ T6537] netlink: 'syz.0.7723': attribute type 2 has an invalid length. [ 746.293647][ T6537] netlink: 'syz.0.7723': attribute type 2 has an invalid length. [ 746.311992][ T6537] netlink: 'syz.0.7723': attribute type 1 has an invalid length. [ 746.325439][ T6537] netlink: 'syz.0.7723': attribute type 2 has an invalid length. [ 747.284911][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 747.286320][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.318474][ T1208] net_ratelimit: 1 callbacks suppressed [ 748.318497][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.449125][ T6612] x_tables: duplicate underflow at hook 1 [ 748.516365][ T6613] syzkaller0: entered promiscuous mode [ 748.522005][ T6613] syzkaller0: entered allmulticast mode [ 748.547116][ T6617] __nla_validate_parse: 9 callbacks suppressed [ 748.547134][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7737'. [ 748.585232][ T6616] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7738'. [ 748.594349][ T6616] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7738'. [ 748.607613][ T6616] netlink: 'syz.0.7738': attribute type 5 has an invalid length. [ 748.633404][ T6616] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7738'. [ 748.681336][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7737'. [ 748.744613][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7738'. [ 748.759655][ T6616] bond6: option all_slaves_active: invalid value (222) [ 748.781792][ T6616] bond6 (unregistering): Released all slaves [ 748.922392][ T6646] netlink: 'syz.4.7743': attribute type 2 has an invalid length. [ 749.177374][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7746'. [ 749.265275][ T6666] syzkaller0: entered promiscuous mode [ 749.277677][ T6666] syzkaller0: entered allmulticast mode [ 749.368570][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.380425][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 749.576068][ T6682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 749.776476][ T6685] IPv6: NLM_F_REPLACE set, but no existing node found! [ 750.318035][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.400073][T31791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.434694][ T6711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.444080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.496516][ T6730] xt_hashlimit: size too large, truncated to 1048576 [ 750.541567][ T6735] sctp: [Deprecated]: syz.0.7757 (pid 6735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 750.541567][ T6735] Use struct sctp_sack_info instead [ 750.609487][ T6736] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 750.988260][ T6748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.995559][ T6748] IPv6: NLM_F_CREATE should be set when creating new route [ 751.028989][ T6752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7763'. [ 751.040405][ T6755] sctp: [Deprecated]: syz.2.7767 (pid 6755) Use of int in maxseg socket option. [ 751.040405][ T6755] Use struct sctp_assoc_value instead [ 751.097771][ T6756] sctp: [Deprecated]: syz.2.7767 (pid 6756) Use of int in maxseg socket option. [ 751.097771][ T6756] Use struct sctp_assoc_value instead [ 751.123474][ T6759] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 751.134001][ T6761] netlink: 'syz.0.7766': attribute type 1 has an invalid length. [ 751.144091][ T6759] bond6 (unregistering): Released all slaves [ 751.173597][ T6761] nbd: error processing sock list [ 751.323106][ T6769] .: renamed from bridge_slave_1 (while UP) [ 751.364737][ T6769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7769'. [ 751.446485][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.638012][ T6785] bridge0: entered allmulticast mode [ 751.671051][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7775'. [ 751.984472][ T6807] bond0: entered promiscuous mode [ 752.007018][ T6807] bond_slave_0: entered promiscuous mode [ 752.023780][ T6807] bond_slave_1: entered promiscuous mode [ 752.061347][ T6807] bond0: left promiscuous mode [ 752.078128][ T6807] bond_slave_0: left promiscuous mode [ 752.102587][ T6807] bond_slave_1: left promiscuous mode [ 752.170674][ T6821] tipc: Enabling of bearer rejected, failed to enable media [ 752.315166][ T6829] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 752.470284][ T6835] bond0: entered promiscuous mode [ 752.479484][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.757175][ T6863] netlink: 'syz.3.7790': attribute type 29 has an invalid length. [ 752.798531][T26810] block nbd4: Receive control failed (result -32) [ 752.873976][ T6865] netlink: 'syz.4.7791': attribute type 1 has an invalid length. [ 752.887453][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 752.895491][ C1] lec:lec_tx_timeout: lec0 [ 752.900546][ T6865] netlink: 'syz.4.7791': attribute type 2 has an invalid length. [ 753.246235][ T6888] tipc: Enabling of bearer rejected, failed to enable media [ 753.357939][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.464722][ T6907] netlink: 'syz.4.7801': attribute type 4 has an invalid length. [ 753.518029][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.534285][ T6907] .`: renamed from bond0 [ 753.842429][ T6928] netlink: 'syz.4.7807': attribute type 21 has an invalid length. [ 753.870020][ T6928] netlink: 'syz.4.7807': attribute type 6 has an invalid length. [ 753.885690][ T6928] __nla_validate_parse: 116 callbacks suppressed [ 753.885707][ T6928] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7807'. [ 753.974598][T12046] lec:lec_start_xmit: lec0:No lecd attached [ 754.050810][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804900a400: rx timeout, send abort [ 754.373852][ T6954] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7811'. [ 754.550934][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804900ac00: rx timeout, send abort [ 754.559447][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804900a400: abort rx timeout. Force session deactivation [ 754.570719][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.625789][ T6968] netlink: 'syz.3.7816': attribute type 12 has an invalid length. [ 754.960999][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.028958][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7822'. [ 755.059237][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804900ac00: abort rx timeout. Force session deactivation [ 755.140828][ T7005] tipc: Started in network mode [ 755.145863][ T7005] tipc: Node identity 6e2b1b7a4fc1, cluster identity 2047 [ 755.177708][ T7005] tipc: Enabled bearer , priority 0 [ 755.206443][ T7013] syzkaller0: entered promiscuous mode [ 755.224344][ T7013] syzkaller0: entered allmulticast mode [ 755.245949][ T7015] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 755.326151][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7828'. [ 755.329536][ T7005] tipc: Resetting bearer [ 755.369372][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7828'. [ 755.369388][ T6998] tipc: Resetting bearer [ 755.421483][ T6998] tipc: Disabling bearer [ 755.442118][T20165] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.487590][ T7024] team0: Port device dummy0 removed [ 755.510329][ T7024] bridge_slave_0: left allmulticast mode [ 755.516454][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.538054][ T7024] .: left allmulticast mode [ 755.542697][ T7024] .: left promiscuous mode [ 755.547500][ T7024] bridge0: port 2(.) entered disabled state [ 755.588145][ T7024] team0: Port device team_slave_0 removed [ 755.601469][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.625592][ T7024] team0: Port device team_slave_1 removed [ 755.642369][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.651005][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.660952][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.686759][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.710141][ T7024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 755.897181][T20165] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.961024][ T7035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.114785][T20165] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.140226][T20165] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.272216][ T7055] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7834'. [ 756.333041][ T7067] netlink: 'syz.4.7836': attribute type 1 has an invalid length. [ 756.364213][ T7067] netlink: 'syz.4.7836': attribute type 2 has an invalid length. [ 756.396243][ T7069] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7837'. [ 756.405852][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.406269][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7836'. [ 756.446807][ T7070] netlink: 'syz.4.7836': attribute type 11 has an invalid length. [ 756.481403][ T7070] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7836'. [ 756.610431][ T7078] nbd: nbd1 already in use [ 756.632188][ T7078] block nbd1: NBD_DISCONNECT [ 756.640146][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.649845][ T7078] block nbd1: Send disconnect failed -32 [ 756.691523][ T7078] block nbd1: shutting down sockets [ 756.770566][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7840'. [ 757.339596][ T7123] ip6tnl0: Caught tx_queue_len zero misconfig [ 757.710446][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.994327][ T7165] x_tables: unsorted entry at hook 2 [ 758.722780][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.883294][ T7226] syzkaller0: entered promiscuous mode [ 758.891891][ T7226] syzkaller0: entered allmulticast mode [ 758.898671][ T7228] __nla_validate_parse: 6 callbacks suppressed [ 758.898690][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7870'. [ 758.998034][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 759.006183][ C1] lec:lec_tx_timeout: lec0 [ 759.110723][ T7244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.119999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.145850][ T7245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.154663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.276958][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7875'. [ 759.414501][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7879'. [ 759.438078][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.704165][ T7277] tipc: Enabled bearer , priority 0 [ 759.768926][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.881589][ T7295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7886'. [ 759.900701][ T7277] syzkaller0: entered promiscuous mode [ 759.908944][ T7277] syzkaller0: entered allmulticast mode [ 759.917280][ T7277] tipc: Resetting bearer [ 759.948922][ T7276] tipc: Resetting bearer [ 760.783279][ T7317] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7888'. [ 760.803165][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.839616][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.858558][ T7276] tipc: Disabling bearer [ 761.896967][ T10] tipc: Node number set to 568990586 [ 761.990363][ T7322] netlink: 'syz.4.7889': attribute type 9 has an invalid length. [ 762.057941][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.068181][ T7326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7890'. [ 762.325226][ T7350] netlink: 'syz.2.7896': attribute type 1 has an invalid length. [ 762.353957][ T7350] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7896'. [ 762.379165][ T7356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7895'. [ 762.582048][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7898'. [ 762.662290][ T7372] netlink: 'syz.0.7900': attribute type 1 has an invalid length. [ 762.689914][ T7372] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7900'. [ 763.280846][ T7411] netlink: 'syz.4.7909': attribute type 1 has an invalid length. [ 763.701156][ T7441] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 763.922682][ T43] net_ratelimit: 5 callbacks suppressed [ 763.922699][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.560553][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.569002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.589632][ T7522] __nla_validate_parse: 6 callbacks suppressed [ 764.589649][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7934'. [ 764.618334][ T7522] veth0_virt_wifi: entered promiscuous mode [ 764.699733][ T7530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.718283][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 764.746452][ T7530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.771419][ T7538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.791861][ T7538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.800994][ T7538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.804386][ T7536] netlink: 'syz.3.7937': attribute type 1 has an invalid length. [ 764.809886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.810053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.836463][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7937'. [ 765.140527][ T7549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.430601][ T7566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7942'. [ 765.741856][ T7583] netlink: 'syz.1.7947': attribute type 1 has an invalid length. [ 765.890954][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7950'. [ 765.951632][ T7602] sctp: [Deprecated]: syz.1.7950 (pid 7602) Use of int in maxseg socket option. [ 765.951632][ T7602] Use struct sctp_assoc_value instead [ 765.961593][ T7597] bond4: Invalid ad_actor_system MAC address. [ 765.972841][ T7597] bond4: option ad_actor_system: invalid value (1) [ 765.973159][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7951'. [ 765.991934][ T7597] bond4 (unregistering): Released all slaves [ 766.118251][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7952'. [ 766.153972][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7952'. [ 766.226258][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7953'. [ 766.239872][ T7606] bond7: entered promiscuous mode [ 766.253064][ T7606] 8021q: adding VLAN 0 to HW filter on device bond7 [ 766.320331][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7955'. [ 766.699032][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7959'. [ 766.848947][ T7661] netlink: 'syz.4.7962': attribute type 1 has an invalid length. [ 766.908456][ T7661] xt_TCPMSS: Only works on TCP SYN packets [ 766.922629][ T7658] veth1_macvtap: left promiscuous mode [ 766.938925][ T7658] sctp: [Deprecated]: syz.2.7961 (pid 7658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 766.938925][ T7658] Use struct sctp_sack_info instead [ 767.092571][ T7673] netlink: 'syz.2.7967': attribute type 1 has an invalid length. [ 767.826518][T21046] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.849037][T21046] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.869582][T21046] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.955084][ T6526] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.096928][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.117779][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.138551][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.209736][ T7734] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 768.270812][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.299466][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.307192][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.339527][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.406373][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.436967][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.451281][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.583984][ T7734] wg1 speed is unknown, defaulting to 1000 [ 768.884248][ T7788] netlink: 'syz.0.7988': attribute type 9 has an invalid length. [ 769.053172][ T7798] syzkaller0: entered promiscuous mode [ 769.072518][ T7798] syzkaller0: entered allmulticast mode [ 769.124672][ T43] net_ratelimit: 668 callbacks suppressed [ 769.124690][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.223226][ T7798] sctp: [Deprecated]: syz.0.7991 (pid 7798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.223226][ T7798] Use struct sctp_sack_info instead [ 769.270129][ T7798] sctp: [Deprecated]: syz.0.7991 (pid 7798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.270129][ T7798] Use struct sctp_sack_info instead [ 769.443549][ T7815] sch_tbf: burst 0 is lower than device hsr0 mtu (1508) ! [ 769.954731][ T7842] wg1 speed is unknown, defaulting to 1000 [ 770.112753][ T7862] __nla_validate_parse: 8 callbacks suppressed [ 770.112771][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8002'. [ 770.158237][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.731076][ T7890] wg1 speed is unknown, defaulting to 1000 [ 770.946983][ T7904] sock: sock_timestamping_bind_phc: sock not bind to device [ 770.962434][ T7904] sock: sock_timestamping_bind_phc: sock not bind to device [ 771.042361][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8010'. [ 771.178948][ T7914] 8021q: adding VLAN 0 to HW filter on device bond3 [ 771.198028][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.214303][ T7922] veth1_macvtap: left promiscuous mode [ 771.231683][ T7922] macsec0: entered promiscuous mode [ 771.261453][ T7922] macsec0: entered allmulticast mode [ 771.424051][ T7940] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8017'. [ 771.702464][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8020'. [ 771.758067][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.766471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.812885][ T7960] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8017'. [ 771.858361][ T7926] veth1_macvtap: entered promiscuous mode [ 771.864205][ T7926] veth1_macvtap: entered allmulticast mode [ 771.875494][ T7926] macsec0: left promiscuous mode [ 771.900262][ T7926] macsec0: left allmulticast mode [ 771.905620][ T7926] veth1_macvtap: left allmulticast mode [ 772.146121][ T7972] veth3: entered allmulticast mode [ 772.237941][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.248000][ T7986] netlink: 'syz.2.8023': attribute type 1 has an invalid length. [ 772.269634][ T7986] syzkaller0: entered promiscuous mode [ 772.275144][ T7986] syzkaller0: entered allmulticast mode [ 772.425327][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8028'. [ 772.436799][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8027'. [ 772.501494][ T7994] macvtap1: entered allmulticast mode [ 772.523976][ T7994] veth0_macvtap: entered allmulticast mode [ 772.604023][ T8000] lo: Caught tx_queue_len zero misconfig [ 772.880784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.918597][ T8015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.927041][ T8012] dvmrp6: entered allmulticast mode [ 772.927606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.947384][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8033'. [ 773.124671][ T8024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8036'. [ 773.226085][ T8026] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 773.236353][ T8026] bond8: option packets_per_slave: allowed values 0 - 65535 [ 773.236435][ T8033] netlink: 'syz.2.8039': attribute type 1 has an invalid length. [ 773.254552][ T8026] bond8 (unregistering): Released all slaves [ 773.275416][ T8033] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8039'. [ 773.287745][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.303086][ T8037] netlink: 'syz.2.8039': attribute type 1 has an invalid length. [ 773.543282][ T8050] netlink: 'syz.2.8042': attribute type 39 has an invalid length. [ 774.321284][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.620392][ T8065] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 774.798025][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.806316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.901696][ T8086] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 774.911419][ T8081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.930622][ T8078] delete_channel: no stack [ 775.360756][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.500229][ T8112] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 775.536672][ T8117] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 775.593140][ T8122] __nla_validate_parse: 6 callbacks suppressed [ 775.593159][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8058'. [ 775.654672][ T8122] bond0: entered promiscuous mode [ 775.699057][ T8122] gretap0: entered promiscuous mode [ 775.706081][ T8122] debugfs: 'hsr1' already exists in 'hsr' [ 775.713254][ T8122] Cannot create hsr debugfs directory [ 775.719018][ T8122] hsr1: entered promiscuous mode [ 775.857576][ T29] audit: type=1800 audit(1772185456.740:11): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8062" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1515 res=0 errno=0 [ 775.950641][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8064'. [ 776.399680][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.404775][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8070'. [ 776.451883][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.464457][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8070'. [ 776.476930][ T8167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8068'. [ 776.484812][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8067'. [ 776.518257][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8067'. [ 776.552116][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8067'. [ 776.588377][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8067'. [ 776.734359][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8074'. [ 776.928739][ T8201] netlink: 'syz.1.8076': attribute type 1 has an invalid length. [ 777.272743][ T8226] team0: Device gtp0 is up. Set it down before adding it as a team port [ 777.527179][ T8250] netlink: 'syz.0.8087': attribute type 75 has an invalid length. [ 779.518058][ T1208] net_ratelimit: 9 callbacks suppressed [ 779.518072][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.371277][ T8236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.398929][ T8260] netlink: 'syz.3.8091': attribute type 1 has an invalid length. [ 780.537324][ T8277] ip6gre1: entered allmulticast mode [ 780.568302][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.580512][ T8280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.588946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.040149][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.048543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.244448][ T8334] netlink: 'syz.3.8112': attribute type 5 has an invalid length. [ 781.263383][ T8334] __nla_validate_parse: 6 callbacks suppressed [ 781.263402][ T8334] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8112'. [ 781.453337][ T8346] x_tables: unsorted underflow at hook 2 [ 781.597722][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.625025][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8120'. [ 781.659429][ T8368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.688572][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8123'. [ 781.708091][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8120'. [ 781.717310][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8120'. [ 781.734088][ T8369] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8123'. [ 781.818033][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8120'. [ 781.842883][ T8376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 781.847779][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8120'. [ 781.869934][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8120'. [ 781.918165][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8120'. [ 782.045762][ T8382] wg1 speed is unknown, defaulting to 1000 [ 782.047074][ T8389] netlink: 'syz.0.8127': attribute type 12 has an invalid length. [ 782.063885][ T8389] netlink: 'syz.0.8127': attribute type 12 has an invalid length. [ 782.329632][ T8403] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 782.604466][ T8414] wg1 speed is unknown, defaulting to 1000 [ 782.669085][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.923938][ T8423] netlink: 'syz.1.8134': attribute type 10 has an invalid length. [ 782.962185][ T8423] team0: Port device vxcan1 added [ 783.650008][ T8490] netlink: 'syz.3.8145': attribute type 3 has an invalid length. [ 783.729993][ T6530] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 784.078551][ T8523] netlink: 'syz.2.8150': attribute type 4 has an invalid length. [ 784.093477][ T8523] netlink: 'syz.2.8150': attribute type 9 has an invalid length. [ 784.314856][ T8534] tipc: Started in network mode [ 784.330170][ T8534] tipc: Node identity , cluster identity 4711 [ 784.348368][ T8534] tipc: Failed to set node id, please configure manually [ 784.363938][ T8534] tipc: Enabling of bearer rejected, failed to enable media [ 784.603906][ T8554] syzkaller0: entered promiscuous mode [ 784.637987][ T8554] syzkaller0: entered allmulticast mode [ 784.718998][ T1208] net_ratelimit: 6 callbacks suppressed [ 784.719016][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.991309][ T8589] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 785.028952][ T8586] sctp: [Deprecated]: syz.1.8166 (pid 8586) Use of int in max_burst socket option. [ 785.028952][ T8586] Use struct sctp_assoc_value instead [ 785.249910][ T8602] netlink: 'syz.3.8170': attribute type 1 has an invalid length. [ 785.408430][ T8612] tipc: Enabled bearer , priority 0 [ 785.579719][ T8627] netlink: 'syz.0.8177': attribute type 9 has an invalid length. [ 785.757964][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.379341][ T8668] __nla_validate_parse: 142 callbacks suppressed [ 786.379362][ T8668] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8183'. [ 786.409498][ T8647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.422329][ T8647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.580561][ T8647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.593126][ T8647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.647670][ T9] tipc: Node number set to 1679424373 [ 786.680530][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8187'. [ 786.691559][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8187'. [ 786.799381][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.809583][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.810453][ T8647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.818094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.855117][ T8647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.962774][ T8647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.978841][ T8647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.141608][ T8704] tipc: Enabled bearer , priority 11 [ 787.253045][ T6526] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.287961][ T6526] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.332298][ T6526] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.348270][ T6526] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.395465][ T6526] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.408087][ T6526] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.455470][ T6526] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.476320][ T6526] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.713896][ T8732] sctp: [Deprecated]: syz.3.8198 (pid 8732) Use of int in maxseg socket option. [ 787.713896][ T8732] Use struct sctp_assoc_value instead [ 787.838395][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.851253][ T8743] x_tables: duplicate underflow at hook 2 [ 787.991873][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8203'. [ 788.244627][T21046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.324173][ T8771] syzkaller1: entered promiscuous mode [ 788.346147][ T8771] syzkaller1: entered allmulticast mode [ 788.352575][ T8776] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 788.374704][ T8771] xt_hashlimit: overflow, rate too high: 0 [ 788.483722][ T8784] IPv6: sit3: Disabled Multicast RS [ 788.500447][ T8784] sit3: entered allmulticast mode [ 788.552261][ T8790] netlink: 484 bytes leftover after parsing attributes in process `syz.0.8215'. [ 788.819834][ T8809] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8220'. [ 788.841841][ T8809] netlink: Unknown conntrack attr (0) [ 788.879229][ T6542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.887911][ T6542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.908572][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8221'. [ 789.003518][ T8814] netlink: 'syz.3.8222': attribute type 9 has an invalid length. [ 789.035386][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8224'. [ 789.055967][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8224'. [ 789.085691][ T8819] bond0 (unregistering): Released all slaves [ 789.115609][ T8825] netlink: 'syz.3.8225': attribute type 1 has an invalid length. [ 789.124310][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8225'. [ 789.143550][T26810] Bluetooth: hci0: link tx timeout [ 789.150559][T26810] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 789.493433][ T8846] Cannot find set identified by id 1 to match [ 789.917813][ T43] net_ratelimit: 6 callbacks suppressed [ 789.917830][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.005593][ T8862] 8021q: adding VLAN 0 to HW filter on device bond8 [ 790.056474][ T8882] macvlan1: entered allmulticast mode [ 790.165588][ T8883] veth1_vlan: entered allmulticast mode [ 790.221882][ T8883] macvlan1: entered promiscuous mode [ 790.674851][ T8914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.683894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.775352][ T8919] netlink: 'syz.4.8244': attribute type 5 has an invalid length. [ 790.882974][ T8927] vlan3: entered allmulticast mode [ 790.903508][ T8927] mac80211_hwsim hwsim71 wlan0: entered allmulticast mode [ 790.968981][ T8937] openvswitch: netlink: Actions may not be safe on all matching packets [ 790.971556][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.981028][ T8937] block nbd1: Unsupported socket: should be TCP or UNIX. [ 791.200131][T26810] Bluetooth: hci0: command 0x0405 tx timeout [ 791.369387][ T8963] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 791.398352][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.581743][ T8973] __nla_validate_parse: 14 callbacks suppressed [ 791.581762][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8256'. [ 791.618018][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8256'. [ 791.636661][ T8979] netlink: 'syz.3.8256': attribute type 3 has an invalid length. [ 791.918347][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.926723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.004968][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.475677][ T9029] syzkaller0: entered promiscuous mode [ 792.489164][ T9029] syzkaller0: entered allmulticast mode [ 792.824654][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8276'. [ 792.985306][ T9074] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.8278'. [ 793.702278][T21045] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.728702][T21045] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.744116][T21045] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.753713][T21045] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.793192][T21045] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.840038][T21045] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.861954][T21045] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.890557][T21045] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.063050][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8287'. [ 794.664824][ T9169] SET target dimension over the limit! [ 796.912895][ T9109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 797.090092][ T9196] ipt_REJECT: TCP_RESET invalid for non-tcp [ 797.136703][ T9196] net_ratelimit: 4 callbacks suppressed [ 797.136723][ T9196] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 797.213327][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8301'. [ 797.236877][ T9204] bridge_slave_0: left promiscuous mode [ 797.259537][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.292942][ T9204] bridge_slave_1: left allmulticast mode [ 797.300278][ T9204] bridge_slave_1: left promiscuous mode [ 797.320229][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.334605][ T9204] bond0: (slave bond_slave_0): Releasing backup interface [ 797.351602][ T9204] bond0: (slave bond_slave_1): Releasing backup interface [ 797.369252][ T9204] team0: Port device team_slave_0 removed [ 797.393060][ T9204] team0: Port device team_slave_1 removed [ 797.405749][ T9204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.416260][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.434810][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8303'. [ 797.453428][ T9204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.479533][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.521173][ T9204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 797.523051][ T9228] netlink: 264 bytes leftover after parsing attributes in process `syz.0.8303'. [ 797.552346][ T9206] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8299'. [ 797.572228][ T9206] bridge_slave_1: default FDB implementation only supports local addresses [ 797.652107][ T9226] netlink: 'syz.4.8304': attribute type 12 has an invalid length. [ 797.682465][ T9226] netlink: 'syz.4.8304': attribute type 29 has an invalid length. [ 797.721496][ T9226] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8304'. [ 797.742961][ T9226] netlink: 51 bytes leftover after parsing attributes in process `syz.4.8304'. [ 797.819228][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8308'. [ 797.864610][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8307'. [ 797.899880][ T9248] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 797.910309][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8307'. [ 797.959083][ T9242] netlink: 'syz.0.8307': attribute type 15 has an invalid length. [ 798.144855][ T9265] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8313'. [ 798.190701][ T9265] .: default FDB implementation only supports local addresses [ 798.741676][ T9312] netlink: 'syz.3.8323': attribute type 1 has an invalid length. [ 798.827348][ T9312] 8021q: adding VLAN 0 to HW filter on device bond9 [ 799.075679][ T9335] netlink: 'syz.3.8328': attribute type 32 has an invalid length. [ 799.195929][ T9335] bond10: option coupled_control: invalid value (52) [ 799.249878][ T9335] bond10 (unregistering): Released all slaves [ 799.353681][ T9354] syzkaller0: entered promiscuous mode [ 799.362053][ T9354] syzkaller0: entered allmulticast mode [ 799.618003][ T9367] syzkaller1: entered promiscuous mode [ 799.637749][ T9367] syzkaller1: entered allmulticast mode [ 799.650513][ T9370] 8021q: VLANs not supported on wg0 [ 799.746396][ T9381] xt_NFQUEUE: number of total queues is 0 [ 799.909182][ T9390] syzkaller0: entered promiscuous mode [ 799.914701][ T9390] syzkaller0: entered allmulticast mode [ 800.135430][ T9406] netlink: 'syz.1.8346': attribute type 4 has an invalid length. [ 800.330902][ T9417] netlink: 'syz.2.8349': attribute type 3 has an invalid length. [ 800.597221][ T9441] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 803.876495][ T9617] bridge0: port 3(veth0_to_bridge) entered blocking state [ 803.897300][ T9617] bridge0: port 3(veth0_to_bridge) entered disabled state [ 803.936738][ T9617] veth0_to_bridge: entered allmulticast mode [ 803.959536][ T9617] veth0_to_bridge: entered promiscuous mode [ 804.005208][ T9617] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.070958][ T9617] bridge0: port 3(veth0_to_bridge) entered blocking state [ 804.078793][ T9617] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 804.114028][ T9644] __nla_validate_parse: 10 callbacks suppressed [ 804.114048][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8384'. [ 804.151705][ T9643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.431362][ T9659] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.8386'. [ 804.471503][ T9659] openvswitch: netlink: Message has 6 unknown bytes. [ 804.660379][ T9677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 804.701005][ T9615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.849332][ T9684] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8389'. [ 804.884890][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8388'. [ 805.003079][ T9692] syzkaller0: entered promiscuous mode [ 805.008745][ T9692] syzkaller0: entered allmulticast mode [ 805.016722][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8390'. [ 805.404566][ T9728] netlink: 'syz.3.8397': attribute type 1 has an invalid length. [ 805.434072][ T9728] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8397'. [ 805.451062][ T9728] netlink: 'syz.3.8397': attribute type 1 has an invalid length. [ 805.460289][ T9728] netlink: 'syz.3.8397': attribute type 8 has an invalid length. [ 805.478608][ T9728] netlink: 606 bytes leftover after parsing attributes in process `syz.3.8397'. [ 805.543414][ T9730] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 805.545713][ T9730] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8399'. [ 805.731215][ T9750] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8404'. [ 805.871427][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8407'. [ 805.896782][ T9767] netlink: 'syz.0.8408': attribute type 24 has an invalid length. [ 806.106969][ T9776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.154325][ T9783] netlink: 'syz.3.8413': attribute type 3 has an invalid length. [ 806.203045][ T9779] netlink: 'syz.2.8412': attribute type 1 has an invalid length. [ 806.205929][ T9783] netlink: 'syz.3.8413': attribute type 2 has an invalid length. [ 806.399322][ T9795] openvswitch: netlink: Actions may not be safe on all matching packets [ 806.776079][ T9816] netlink: 'syz.1.8419': attribute type 83 has an invalid length. [ 807.349057][ T9854] ipt_REJECT: TCP_RESET invalid for non-tcp [ 807.373911][ T9854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.412965][ T9858] openvswitch: netlink: Missing key (keys=40, expected=100) [ 807.431295][ T9862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 807.482322][ T9866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 807.646813][ T9878] sctp: [Deprecated]: syz.4.8434 (pid 9878) Use of int in max_burst socket option deprecated. [ 807.646813][ T9878] Use struct sctp_assoc_value instead [ 807.859572][ T9891] syzkaller0: entered promiscuous mode [ 807.865278][ T9891] syzkaller0: entered allmulticast mode [ 808.030753][ T9908] batman_adv: batadv0: Adding interface: dummy0 [ 808.044211][ T9908] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.108282][ T9908] batman_adv: batadv0: Interface activated: dummy0 [ 808.125109][ T9914] nbd: illegal input index -8454144 [ 808.277666][ T9914] batadv0: mtu less than device minimum [ 808.284666][ T9914] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 808.296933][ T9914] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 808.308620][ T9914] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 808.320275][ T9914] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 808.435037][ T9931] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 808.463703][ T9931] team0: Port device batadv1 added [ 808.572203][ T9939] macvtap1: entered allmulticast mode [ 808.600204][ T9939] veth0_macvtap: entered allmulticast mode [ 808.689586][ T9951] xt_ipcomp: unknown flags 1D [ 808.726018][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 809.231255][ T9991] netlink: 'syz.4.8458': attribute type 11 has an invalid length. [ 809.476418][T10011] __nla_validate_parse: 54 callbacks suppressed [ 809.476436][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8464'. [ 809.906542][T10047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8473'. [ 810.023029][T10056] netlink: 'syz.2.8472': attribute type 1 has an invalid length. [ 810.079231][ C1] net_ratelimit: 15 callbacks suppressed [ 810.079250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.097952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.110947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.123550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.135967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.148568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.161001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.173665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.186132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.198675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.714719][T10065] dvmrp6: entered allmulticast mode [ 810.972061][T10082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8477'. [ 811.251472][T10091] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.8479'. [ 813.917512][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 813.925543][ C1] lec:lec_tx_timeout: lec0 [ 814.067184][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8489'. [ 814.480691][T10144] netlink: 'syz.1.8494': attribute type 21 has an invalid length. [ 814.552441][T10144] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8494'. [ 814.681920][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8500'. [ 814.691435][T20165] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 814.716227][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8500'. [ 814.794144][T10157] netlink: 'syz.2.8498': attribute type 16 has an invalid length. [ 814.817250][T10157] netlink: 'syz.2.8498': attribute type 17 has an invalid length. [ 814.937035][T10161] xt_l2tp: v2 doesn't support IP mode [ 814.956303][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8501'. [ 815.087670][ C1] net_ratelimit: 14894 callbacks suppressed [ 815.087675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.087691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.088087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.094006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.106119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.118235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.130117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.141895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.153800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.165906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.097690][ C1] net_ratelimit: 18150 callbacks suppressed [ 820.097711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.097723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.098155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.104072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.116289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.128231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.140009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.152197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.164189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.175980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.487566][ C1] sched: DL replenish lagged too much [ 821.744886][T10157] 8021q: adding VLAN 0 to HW filter on device ` [ 825.107656][ C1] net_ratelimit: 17945 callbacks suppressed [ 825.107677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.107717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.114173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.126065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.138103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.150223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.162067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.173877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.186049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.198053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.117877][ C0] net_ratelimit: 18006 callbacks suppressed [ 830.117899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.117911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.118397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.124268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.136244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.148531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.160324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.172171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.184223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.196240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.128177][ C0] net_ratelimit: 18223 callbacks suppressed [ 835.128200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.128382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.134738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.146698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.158476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.170595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.182734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.194687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.206311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.218639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.137506][ C0] net_ratelimit: 17806 callbacks suppressed [ 840.137528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.137788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.144133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.155941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.167873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.179840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.192004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.203797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.216002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.227863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.147544][ C1] net_ratelimit: 17899 callbacks suppressed [ 845.147565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.147814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.154094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.166077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.178034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.190188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.202917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.213833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.226039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.237940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.157529][ C0] net_ratelimit: 17849 callbacks suppressed [ 850.157550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.157548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.158121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.163942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.176025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.188457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.199842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.211835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.223805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.236011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.167499][ C1] net_ratelimit: 17903 callbacks suppressed [ 855.167522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.167573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.174093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.185978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.197917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.209705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.221756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.233869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.245725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.257520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.177508][ C1] net_ratelimit: 17762 callbacks suppressed [ 860.177520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.177528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.178071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.183913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.196226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.208088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.219855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.231705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.243635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.255821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.187760][ C0] net_ratelimit: 17839 callbacks suppressed [ 865.187793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.187950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.194219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.206653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.218406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.230486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.242169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.254366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.266363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.288662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.197503][ C1] net_ratelimit: 17826 callbacks suppressed [ 870.197524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.197966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.203980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.216038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.228128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.240099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.252006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.263709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.275785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.287878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.207528][ C0] net_ratelimit: 17651 callbacks suppressed [ 875.207534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.207549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.207977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.214117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.226243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.238021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.249911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.262016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.274079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.285970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.217534][ C0] net_ratelimit: 18308 callbacks suppressed [ 880.217555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.217554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.218145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.224055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.235999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.247861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.259827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.272009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.283928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.295726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.427675][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 885.227669][ C0] net_ratelimit: 18092 callbacks suppressed [ 885.227691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.227748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.234269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.246038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.258053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.270083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.282162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.294080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.305761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.317900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.922523][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 889.930620][ C1] lec:lec_tx_timeout: lec0 [ 890.237550][ C1] net_ratelimit: 17720 callbacks suppressed [ 890.237571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.237758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.243941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.256209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.268001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.279785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.291998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.303863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.315681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.327669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.247449][ C1] net_ratelimit: 17642 callbacks suppressed [ 895.247471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.247695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.254043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.265971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.278433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.289771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.301715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.313939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.325729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.337578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.257467][ C1] net_ratelimit: 17647 callbacks suppressed [ 900.257489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.257524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.264041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.275997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.287862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.299792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.311990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.323999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.335925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.347918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.267472][ C1] net_ratelimit: 18166 callbacks suppressed [ 905.267496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.267834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.273939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.285980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.297776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.309554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.321737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.333602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.345389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.357339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.277556][ C1] net_ratelimit: 15674 callbacks suppressed [ 910.277578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.277761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.288284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.296056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.307953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.319770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.331951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.343930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.355777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.367662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.287562][ C0] net_ratelimit: 15218 callbacks suppressed [ 915.287584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.287779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.293972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.306073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.318091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.331852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.341669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.353756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.365837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.377630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.297718][ C0] net_ratelimit: 15229 callbacks suppressed [ 920.297740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.298703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.304397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.316240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.328140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.340183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.352341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.363974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.375982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.388067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.307488][ C1] net_ratelimit: 15574 callbacks suppressed [ 925.307509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.307960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.313928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.326001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.338060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.350064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.361841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.373662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.387084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:1b:93:e3:28:90, vlan:0) [ 925.397781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.317461][ C1] net_ratelimit: 15669 callbacks suppressed [ 930.317483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.317660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.323916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.335899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 930.347793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.359741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.373420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:1b:93:e3:28:90, vlan:0) [ 930.383395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.395431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.407538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 934.767565][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 935.327500][ C1] net_ratelimit: 15790 callbacks suppressed [ 935.327522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.327693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.333943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.345921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.357941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.370002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 935.381753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.393941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.405724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.417601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.927416][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 939.934399][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10165/1:b..l [ 939.942941][ C1] rcu: (detected by 1, t=10503 jiffies, g=161877, q=4584 ncpus=2) [ 939.950853][ C1] task:syz.0.8501 state:R running task stack:25976 pid:10165 tgid:10162 ppid:32554 task_flags:0x40054c flags:0x00080002 [ 939.965767][ C1] Call Trace: [ 939.969071][ C1] [ 939.972017][ C1] __schedule+0x1585/0x5340 [ 939.976544][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 939.981520][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 939.986561][ C1] ? __pfx___schedule+0x10/0x10 [ 939.991449][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 939.996848][ C1] preempt_schedule_common+0x82/0xd0 [ 940.002165][ C1] preempt_schedule_thunk+0x16/0x30 [ 940.007386][ C1] _raw_spin_unlock+0x3f/0x50 [ 940.012079][ C1] unmap_page_range+0x3b71/0x48f0 [ 940.017187][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 940.022591][ C1] ? mas_find+0xb0e/0xd30 [ 940.026942][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 940.031463][ C1] unmap_vmas+0x48f/0x6a0 [ 940.035819][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 940.040708][ C1] exit_mmap+0x280/0xa10 [ 940.044980][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 940.049783][ C1] ? __pfx_exit_aio+0x10/0x10 [ 940.054492][ C1] ? uprobe_clear_state+0x27c/0x290 [ 940.059712][ C1] __mmput+0x118/0x430 [ 940.063801][ C1] exit_mm+0x168/0x220 [ 940.067882][ C1] do_exit+0x62e/0x2320 [ 940.072056][ C1] ? __pfx_do_exit+0x10/0x10 [ 940.076650][ C1] ? cgroup1_freezing+0x20/0x350 [ 940.081609][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 940.086658][ C1] do_group_exit+0x21b/0x2d0 [ 940.091256][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 940.096473][ C1] get_signal+0x1284/0x1330 [ 940.101014][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 940.106578][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 940.112740][ C1] ? vm_mmap_pgoff+0x3aa/0x4f0 [ 940.117528][ C1] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 940.123362][ C1] exit_to_user_mode_loop+0x86/0x480 [ 940.128660][ C1] ? rcu_is_watching+0x15/0xb0 [ 940.133448][ C1] do_syscall_64+0x32d/0xf80 [ 940.138076][ C1] ? trace_irq_disable+0x3b/0x150 [ 940.143110][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.149191][ C1] ? clear_bhb_loop+0x40/0x90 [ 940.153884][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.159796][ C1] RIP: 0033:0x7f514479c799 [ 940.164216][ C1] RSP: 002b:00007f51456c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 940.172637][ C1] RAX: 0000200000001000 RBX: 00007f5144a16090 RCX: 00007f514479c799 [ 940.180619][ C1] RDX: 0000000002000004 RSI: 0000000000c00000 RDI: 0000200000001000 [ 940.188601][ C1] RBP: 00007f5144832bd9 R08: ffffffffffffffff R09: 0000000000000000 [ 940.196587][ C1] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000000 [ 940.204578][ C1] R13: 00007f5144a16128 R14: 00007f5144a16090 R15: 00007ffce387c998 [ 940.212593][ C1] [ 940.215637][ C1] rcu: rcu_preempt kthread starved for 226 jiffies! g161877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 940.226753][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 940.236731][ C1] rcu: RCU grace-period kthread stack dump: [ 940.242621][ C1] task:rcu_preempt state:R running task stack:27664 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 940.256127][ C1] Call Trace: [ 940.259412][ C1] [ 940.262356][ C1] __schedule+0x1585/0x5340 [ 940.266909][ C1] ? __pfx___schedule+0x10/0x10 [ 940.271797][ C1] ? schedule+0x90/0x360 [ 940.276060][ C1] schedule+0x164/0x360 [ 940.280233][ C1] schedule_timeout+0x158/0x2c0 [ 940.285101][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 940.290491][ C1] ? __pfx_process_timeout+0x10/0x10 [ 940.295797][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 940.301618][ C1] ? prepare_to_swait_event+0x340/0x370 [ 940.307272][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 940.312148][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 940.318318][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 940.323618][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 940.328839][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.334666][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 940.337965][ C0] net_ratelimit: 15040 callbacks suppressed [ 940.337982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 940.339271][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 940.345797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.357021][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.357060][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 940.357084][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 940.362904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.374233][ C1] kthread+0x388/0x470 [ 940.374260][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 940.374281][ C1] ? __pfx_kthread+0x10/0x10 [ 940.380835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 940.384989][ C1] ret_from_fork+0x51e/0xb90 [ 940.390724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.401868][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 940.401894][ C1] ? __switch_to+0xc7d/0x1450 [ 940.401918][ C1] ? __pfx_kthread+0x10/0x10 [ 940.406529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.411164][ C1] ret_from_fork_asm+0x1a/0x30 [ 940.411207][ C1] [ 940.411216][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 940.411240][ C1] Sending NMI from CPU 1 to CPUs 0: [ 940.416476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 940.427670][ C0] NMI backtrace for cpu 0 [ 940.427704][ C0] CPU: 0 UID: 0 PID: 6542 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 940.427722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 940.427733][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 940.427755][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x10/0x100 [ 940.427774][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 48 89 fb e8 b3 d0 12 00 9c 41 5f 4c 89 fe 48 81 e6 00 02 00 00 31 ff e8 7e d5 12 00 49 81 e7 00 [ 940.427787][ C0] RSP: 0000:ffffc90000006e48 EFLAGS: 00000006 [ 940.427800][ C0] RAX: ffffffff81b2bafd RBX: ffffffff9a2b6500 RCX: ffff8880326edac0 [ 940.427812][ C0] RDX: 0000000000010100 RSI: ffff8880b86283e0 RDI: ffffffff9a2b6500 [ 940.427823][ C0] RBP: ffff8880b86284e0 R08: 0000000000000003 R09: 0000000000000004 [ 940.427833][ C0] R10: dffffc0000000000 R11: fffff52000000dc8 R12: dffffc0000000000 [ 940.427844][ C0] R13: ffff8880b8628280 R14: ffff8880b8628460 R15: 0000000000000006 [ 940.427855][ C0] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 940.427868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.427885][ C0] CR2: 00007f72986bf008 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 940.427898][ C0] Call Trace: [ 940.427905][ C0] [ 940.427914][ C0] ktime_get_update_offsets_now+0x67/0x3d0 [ 940.427938][ C0] hrtimer_interrupt+0x132/0x1010 [ 940.427960][ C0] ? sched_clock+0x3f/0x60 [ 940.427980][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 940.428003][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 940.428021][ C0] __sysvec_apic_timer_interrupt+0x102/0x460 [ 940.428044][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 940.428067][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 940.428084][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 940.428106][ C0] Code: 0f 84 44 ff ff ff e8 72 27 21 00 fb eb 44 e8 6a 27 21 00 e8 45 ce 08 0a 4d 85 f6 74 94 e8 5b 27 21 00 fb 48 c7 c7 20 27 75 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 cb 16 [ 940.428118][ C0] RSP: 0000:ffffc90000007100 EFLAGS: 00000246 [ 940.428131][ C0] RAX: ffffffff81a46455 RBX: ffffffff81a462cf RCX: ffff8880326edac0 [ 940.428142][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff8e752720 [ 940.428152][ C0] RBP: ffffc900000071b0 R08: ffffffff901185b7 R09: 1ffffffff20230b6 [ 940.428164][ C0] R10: dffffc0000000000 R11: fffffbfff20230b7 R12: 0000000000000000 [ 940.428174][ C0] R13: 000000000000006e R14: 0000000000000200 R15: 1ffff92000000e24 [ 940.428187][ C0] ? vprintk_emit+0x2cf/0x560 [ 940.428209][ C0] ? vprintk_emit+0x455/0x560 [ 940.428244][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 940.428270][ C0] _printk+0xdd/0x130 [ 940.428288][ C0] ? __pfx__printk+0x10/0x10 [ 940.428303][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 940.428324][ C0] ? ___ratelimit+0x58c/0x8d0 [ 940.428348][ C0] br_fdb_update+0x62d/0x690 [ 940.428374][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 940.428394][ C0] ? skb_ext_add+0x148/0x8f0 [ 940.428420][ C0] br_handle_frame_finish+0x573/0x1b40 [ 940.428437][ C0] ? ip6t_do_table+0x137d/0x1560 [ 940.428462][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 940.428497][ C0] ? nf_hook_slow+0x176/0x220 [ 940.428518][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 940.428534][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 940.428556][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 940.428571][ C0] ? nft_do_chain_inet+0x29d/0x380 [ 940.428593][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 940.428609][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 940.428631][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 940.428648][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 940.428671][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 940.428690][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 940.428707][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 940.428726][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 940.428744][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 940.428764][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 940.428779][ C0] br_handle_frame+0x1277/0x1510 [ 940.428801][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 940.428819][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 940.428835][ C0] ? packet_rcv+0x175/0x1720 [ 940.428858][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 940.428878][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 940.428897][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 940.428922][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 940.428946][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 940.428966][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 940.428984][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 940.429006][ C0] ? NF_HOOK+0x336/0x3c0 [ 940.429031][ C0] ? lock_acquire+0xf0/0x2e0 [ 940.429051][ C0] ? process_backlog+0x3eb/0x1950 [ 940.429069][ C0] ? process_backlog+0x3eb/0x1950 [ 940.429087][ C0] ? process_backlog+0x3eb/0x1950 [ 940.429105][ C0] process_backlog+0x76d/0x1950 [ 940.429134][ C0] __napi_poll+0xae/0x340 [ 940.429149][ C0] ? skb_defer_free_flush+0x233/0x260 [ 940.429168][ C0] net_rx_action+0x627/0xf70 [ 940.429186][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 940.429212][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 940.429240][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 940.429260][ C0] handle_softirqs+0x22a/0x870 [ 940.429281][ C0] ? do_softirq+0x76/0xd0 [ 940.429302][ C0] ? kernel_fpu_end+0x62/0x80 [ 940.429316][ C0] do_softirq+0x76/0xd0 [ 940.429334][ C0] [ 940.429339][ C0] [ 940.429345][ C0] __local_bh_enable_ip+0xf8/0x130 [ 940.429364][ C0] blake2s_compress+0xf9/0x1eb0 [ 940.429394][ C0] ? __pfx_encode_point+0x10/0x10 [ 940.429407][ C0] ? kernel_fpu_begin_mask+0x2b6/0x380 [ 940.429425][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 940.429447][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 940.429467][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 940.429488][ C0] ? kernel_fpu_end+0x62/0x80 [ 940.429504][ C0] ? blake2s_update+0x255/0x450 [ 940.429528][ C0] ? blake2s_update+0x255/0x450 [ 940.429551][ C0] blake2s_final+0x116/0x270 [ 940.429574][ C0] hmac+0x2de/0x3b0 [ 940.429595][ C0] ? __pfx_hmac+0x10/0x10 [ 940.429634][ C0] kdf+0x126/0x2b0 [ 940.429656][ C0] ? __pfx_kdf+0x10/0x10 [ 940.429687][ C0] wg_noise_handshake_create_initiation+0x2bc/0x830 [ 940.429713][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 940.429737][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 940.429759][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 940.429787][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 940.429806][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 940.429826][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 940.429842][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 940.429859][ C0] wg_packet_handshake_send_worker+0x18d/0x350 [ 940.429883][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 940.429911][ C0] ? process_scheduled_works+0xa25/0x1830 [ 940.429929][ C0] ? process_scheduled_works+0xa25/0x1830 [ 940.429948][ C0] process_scheduled_works+0xb02/0x1830 [ 940.429981][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.430002][ C0] ? assign_work+0x3d5/0x5e0 [ 940.430023][ C0] worker_thread+0xa50/0xfc0 [ 940.430055][ C0] kthread+0x388/0x470 [ 940.430070][ C0] ? __pfx_worker_thread+0x10/0x10 [ 940.430088][ C0] ? __pfx_kthread+0x10/0x10 [ 940.430102][ C0] ret_from_fork+0x51e/0xb90 [ 940.430122][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 940.430140][ C0] ? __switch_to+0xc7d/0x1450 [ 940.430159][ C0] ? __pfx_kthread+0x10/0x10 [ 940.430174][ C0] ret_from_fork_asm+0x1a/0x30 [ 940.430203][ C0] [ 940.431423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.435485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.447500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.281959][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6510 ms [ 941.290004][ C1] lec:lec_tx_timeout: lec0 [ 945.347418][ C1] net_ratelimit: 14814 callbacks suppressed [ 945.347439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.347557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 945.353876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.366043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.377802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.389705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.401727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.413809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 945.425637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.437664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)