last executing test programs: 2m22.856326659s ago: executing program 3 (id=12534): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x4010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0xfffffd2e, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x4010) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0xfffffd2e, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 2m22.631416252s ago: executing program 3 (id=12539): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) clock_gettime(0x0, &(0x7f0000002880)) (async) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x12000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = gettid() (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0xa, 0x7, 0x4, 0xffff0000, 0x6, 0x2, r9}, 0x20) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400", @ANYRES32=r4, @ANYBLOB="049c01000750050008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 2m22.613690521s ago: executing program 2 (id=12540): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) 2m22.528582386s ago: executing program 3 (id=12541): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) 2m22.228787576s ago: executing program 2 (id=12544): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x200}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x5}, &(0x7f00000000c0)=0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}}, 0x84) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200)=0x5, 0x8) shutdown(r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r5, 0x941d) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x1c) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000400)) recvfrom$unix(r6, &(0x7f0000000440)=""/47, 0x2f, 0x40000000, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FIOCLEX(r0, 0x5451) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000500)={0x4}, 0x4) recvfrom$unix(r6, &(0x7f0000000540)=""/30, 0x1e, 0x100, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendto$inet6(r3, &(0x7f0000000600)="2f535aaf54438184ecbe96a38e9879320d48", 0x12, 0x24008800, &(0x7f0000000640)={0xa, 0x4e22, 0x9, @private1, 0x2}, 0x1c) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000000680)=@generic={0x1, 0x8, 0x9}) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000006c0)=@fragment={0x0, 0x0, 0x5, 0x1, 0x0, 0x7, 0x64}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000700)={r7, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f00000007c0)=0x84) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r10, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000800)={0x2}) connect$bt_rfcomm(r6, &(0x7f0000000840)={0x1f, @any, 0x1}, 0xa) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000880)={r8, 0x1, 0x9, [0x5, 0x3ff, 0x4, 0xde1, 0x4, 0x81, 0x9, 0x1, 0x5dd]}, 0x1a) 2m22.01663056s ago: executing program 3 (id=12546): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x6, 0x1000}]}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 2m21.790482505s ago: executing program 3 (id=12548): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0}, &(0x7f0000000080)=0x60) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="930326bd7000fbdbdf251e00000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0800040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00', 0x64, 0x0, 0x0, 0x41000}, 0x94) 2m21.616901171s ago: executing program 3 (id=12550): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xdfdddf82bb4cc70c, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x2689e000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) (rerun: 32) 2m21.568212436s ago: executing program 4 (id=12552): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x7}, 0x90) 2m21.240479768s ago: executing program 2 (id=12553): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) 2m21.239978341s ago: executing program 4 (id=12554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x5a, "7063c673dffeb903cd63a6e3db0c2119243a151a21351def972eb097d0e47f1fbd01e62559009880c93c7b392326bf36740e1ed373e94d53cae0f3e99123c8d3423c9f6ccd29905a955774f14c2ee6f3798dc256fc002787000a"}, &(0x7f0000000180)=0x62) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0x3, 0x9, 0x1, 0x5, 0x101, 0x2, 0x8ad1, 0x1, 0xf54c, 0xfffffffffffffffb, 0xbaa, 0x5, 0x5, 0x5, 0x6ac3]}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0x0, 0xe3c1, 0x2, 0x6, 0xfffa, 0x6, 0x3, 0x4, 0x1, 0xfffb, 0x0, 0x9, 0x18, 0xef, 0x5e6d, 0x3], 0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xffffff00, 0xff000000, 0xff], [0x0, 0x0, 0xff000000, 0xffffff00], 'veth1_to_bond\x00', 'wlan0\x00', {0x873054bc4ee3b02d}, {0xff}, 0x89, 0xb8, 0x5, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0xe25, 0x664}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x3d, "52a7c9017ed5048ad31b0477f146377ff2b6d287373519532f5bff53ee26"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 2m21.165023918s ago: executing program 0 (id=12556): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000220000000000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe(&(0x7f00000044c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004540)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004600)={0x6, 0x12, &(0x7f0000004340)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0xb, 0xb, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @func, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000004400)='syzkaller\x00', 0x800, 0x57, &(0x7f0000004440)=""/87, 0x40f00, 0x19, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004500)={0x3, 0x3, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000004580)=[r1, r0, r0, r4, r0, r1], &(0x7f00000045c0)=[{0x5, 0x1, 0x2, 0xc}], 0x10, 0x401}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000500)=""/169, 0xa9}], 0x4}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)=""/163, 0xa3}], 0x1, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000880)=""/97, 0x61}, {&(0x7f0000000900)=""/8, 0x8}, {&(0x7f0000000940)=""/234, 0xea}, {&(0x7f0000002b40)=""/197, 0xc5}, {&(0x7f0000002c40)=""/229, 0xe5}], 0x6, &(0x7f0000002d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/231, 0xe7}, {&(0x7f0000003f40)=""/88, 0x58}], 0x3}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003fc0)=""/25, 0x19}, {&(0x7f0000004000)=""/155, 0x9b}], 0x2, &(0x7f0000004100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}], 0x5, 0x60, &(0x7f0000004300)={0x0, 0x989680}) 2m21.135363014s ago: executing program 1 (id=12557): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x0, 0x8}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x28000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000200)=0x80, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x8) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001d4beb2cadd636fe7bb8bb9009930e0f31ba5f893b28c76b1d92e09c826f2dec7bd78566fc53afc5de40d37774709c2962db9800b5d2241bcebf8fbe9b5c7dc23ca46325b8260f16915e79a66d6125e3aaf7ff73d0cc63750d21cfc491322c1ca1e8ef81a4e92f21beedc4945d8e8a183e89c69a8e228f8fcacc7704391e4e6fc4ce1c2721937ff0278052905d2496be19d62ec389ee716cf791e99ecd4d44d909000000000000000000", @ANYRES16=r4, @ANYBLOB="02002abd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) 2m20.970257372s ago: executing program 4 (id=12558): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050041) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae7", 0x20}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x4000004) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000540)={0x5, &(0x7f0000000780)=[{0x9, 0xa8, &(0x7f00000002c0)="b5a651d6cc5450496ee7f7c2ebb87e8bfd81d01fb2f0dac73f36cf8e857bf27497a148a913a96cf1369a0f4b167f4fde622ef31a0133b3dd5fda7a7cc8aca85b016040300beceab513a7aa615abb67906efe14b52f33d2aafb323f064956eee2c32a62ca5d7d293b50b16fd50262bd327e67074ef9c631f13f9e5084476f0835f9ca26f523130e96d525d932bf0d8274d6d34bb7b3c599299d1a0890948db9fe4b52849ed496e41a"}, {0x3, 0x47, &(0x7f0000000140)="57022fecd6deedb67ee35e5c7b59e2241851f8f2cbebe9b9907985e450a6e4d4a8a4c0f1afb208638808be362de448a472dfc19cc4c183bd7e28dbbf5c82a2c6f2ff34ff7093fe"}, {0x2cab, 0xa8, &(0x7f0000000480)="ce95081a8adc977991115eb517bca873df320eaf0e39e768febd3d5bee48188929402ea97ce58815aa37f5f3414ad3b41ea6419606cb8e93ccedcdecb99082819cc2bcd7aa9c16b67b9f0c4b5c04824a44e5441e6bcc05ece4309af7975c8be324c0f6d2950b6e4fca3ac8e31b331a5a66ae28314a2c4f3830424b278bdab2a944bfb6ecf261affbc66ba842cf2c9214d71854ed4059b0641874361fef5f436d1e5072cae4ffb2b3", 0x1}, {0x3, 0xf3, &(0x7f0000000880)="862ae0165605ebfbbcbe3e7699ed01ee6cb9ef84055e645daf1c6d2de417b0732efa479731f6481665c97d5b6d4bdb94d862e1587ebd871bcaf4d59723fd8045a9fdac4e31d30af8539af442e3f2f72d43a23b65751821feec357e73bf5f76a53c7dd48ea3de719e984f115df2f758b16061b59f46ee1587f60e589186286a6bf5ddef376e5fab2d58861aa7215ee958d4fc98b9a181e0322b36431392a3feed5f246397ce3614820e48c6b563d05ca7cc2b1aff287c124e007ac6099fe53f785f85654a14fa9a83f8bd95a242327ee3577fbfeadaddf93e4941621102333f870af11f6623e7e5faf495c8fc8df7cbadcf4650", 0x1, 0x1}, {0x6, 0x4b, &(0x7f0000000380)="640e6e160a9d8a932283d62c091c742c5b5f4bb33d68464e263048b33c286128ee03babb32bcb573a133b9e85182f2dfc0c6c8319a9d74f430b589646bbd010f8442dfc9b6c56be7d186f0"}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) 2m20.828848172s ago: executing program 2 (id=12559): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x52, 0x8, 0x2, 0xfff, 0x59, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8000, 0x7f000}}) socket(0x6, 0x5, 0x0) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) recvfrom$ax25(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x8000040) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 2m20.826957005s ago: executing program 0 (id=12560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000b0601020000000809060000000000000008437f1500000000000a000009090002007379"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) 2m20.357495688s ago: executing program 1 (id=12561): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@tipc, &(0x7f0000000100)=0x80) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getlink={0x20, 0x12, 0x8, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x60400, 0x22100}}, 0x20}}, 0x0) 2m20.133192944s ago: executing program 2 (id=12562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000004000000000030000100000007810ada3e323b5951fbea0bbede0f606c4987f0cc683f963f6751903e61ad401e2857af00f6f95fda03c10a9524a2460ea2569d52813acf17277dc119104ee26ddb48d0463add89bb0f426519a77a8fa177d8d2d2bc16f64e38846c39d714fa7d60852e5cf7b197938fa4ffb207191cbab98ebc34a8d6016e987c5c45d90097b7e8279f5ea6fec6254c06aa4965379594d3d3240ffdaf5e8616a5ec139293d07c12ec1f7166b507d08c7614dbe167520b7ca0452d440e14b27e8ea2ede2aaca6d7655d4b0c8e62e2dd9802456f8fe13f8d6e22b996935e02afd9e3e3430c18805c969a729414e78743d1480cda9b70e37807036911c234c0107de2a19d40a3b27688b8479fcebbe25e7761ed270f7d40490477cc4599ed3688385d4e509c985f5935aab903cd9cf0607a50e7f4d429cbc6dd0cbdc6a8fb8b57c607f7ad263917e3543f22bf32c4464c77be45ff4e68027aa66c4b3b3f6497c697727efdba5233a60e869ba9cde230298cf7d24fc6a0a91a1e2b"], 0x1c}, 0x1, 0x0, 0x0, 0x4040891}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068de080002000000fcffff7f04000000000000000000b7f869b06784"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018100000000000000c0000000c00001402000000000000000000000d000000000000c67b"], 0x0, 0x26, 0x0, 0x1}, 0x19) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0xfffffffa, @mcast2, 0x42}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250c0000000c0099008100f810"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1e}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) write(r2, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r10 = socket$packet(0x11, 0x0, 0x300) splice(r10, &(0x7f00000002c0)=0x7, r0, &(0x7f0000000500)=0x8000000000000000, 0x1000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {0xd, 0xffe0}, {0x6, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x9, 0x81, 0x101, 0x10, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xf, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 2m19.721504362s ago: executing program 1 (id=12563): syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x10, 0x6, 0x0, @remote, @local, {[], {{0x0, 0xe22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1d3622fb24b095"}, @fastopen={0x22, 0x6, "5f83c50f"}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2m19.410405885s ago: executing program 0 (id=12564): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, 0x20, 0x0, 0x0, 0x0, [@sadb_key={0x1e, 0x8, 0x730, 0x0, "636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152ae5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369fff"}]}, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES8=0x0, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="0a0001"], 0x48}}, 0x0) 2m19.328073982s ago: executing program 4 (id=12565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010101, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) 2m19.055265613s ago: executing program 4 (id=12566): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000052482b17d8dc09e2a2710000000000000000000000000000000089568a845b0fe85dbed5f8812f81fa9ee94838e522afee822b6f8dc8010fdc92820deb6ac10251a0b317fa5154bdb9b8ba0e268831d5402e3f7289cab30e12d98b270668a8139f0d30b1a3f914f4cd0f8031801b2f78ce5b3c36cdda998835c1ce406e1a583464db8d79a1b0b89077b38b8a99", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0)="0032b319c1d6bd21ed7c280044d42826c628210db4e9dcac9a249c66deb9763b479e228f72ed6775435a8bda47894bfd1a641620e19c47160a42079a8c6bf0bba1c7be23280a6c39099464971dfa26320f74a71d69b7645dd34dc716136417114467d0250fd6fd1d487d518760085a4056f2e76a1a039a5f272a728286c192c882c6373e0c919ab28405bf09318b1a2a554a18b4567e03af", 0x5, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) getsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000000)=""/182, &(0x7f00000016c0)=0xb6) 2m18.857039457s ago: executing program 1 (id=12567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) 2m18.856375465s ago: executing program 0 (id=12568): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x400, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x5}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000b5de9cd4d15e1db7d8f92fc33fcee748dd74103b678d21ea8d7d4e1d7c5be1ab56b03d27a15c0d94b963b3ac8ee82e2028d94a1a72d24b9cc85ab4bd7bc35192bd83e6f9da1b3c3b81", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf2508000000100004800900010073797a3100000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0xf8}, 0x1, 0x0, 0x0, 0xcc0c0}, 0x40085) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m18.434005717s ago: executing program 0 (id=12569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001800010000000000fedbdf251d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095", @ANYBLOB="e57d3b9a86758727c887684af7a134cd85bf24c7d1c20e6c921b8aab400e09b57430e334fbe3a585bb2b6a1c48ad7b6cb649beb4b0c9a92320b935c44e834585831232e5f742544de4dbabf19cbc2fdcb0c5f65cbff8e229246c07fd10f231f954c4937c870eb278e0ff0a57580052e384180c98292132caa4c072a4846d4eb46d6300726bf65b7c016cc75a7a6410266d6020a73e45906bdc5dad90ab528c93f3a574cd7d166a3c18b567c73c8d865c8b28a4a677f85b8d13398422de72726dbcaebdea99c05a04689dca2f40716235e18e91c5461c66790eb9404cac3cd75ec3488bfd9abfabab81f73a01d1c4bb6fe1"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m18.33132568s ago: executing program 1 (id=12570): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000040)=0xe53, 0xc4ea702b9ea34718) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000640)={r1, 0x4, 0x6, 0x3}) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r5, r0, 0x0, r6}, 0x10) (async, rerun: 32) r7 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80000) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x13, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r8, 0x0, &(0x7f0000000500)=""/184}, 0x20) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 2m18.232975878s ago: executing program 2 (id=12571): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xffff, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x64, 0x6, 0x4, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@multicast2, 0x4e20ffff}]}, @timestamp_addr={0x44, 0x3c, 0xea, 0x1, 0x0, [{@multicast1, 0x4}, {}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0xffff4af6}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) listen(r1, 0xffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "2d294722739b84647f4790228f4f3c38"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000149e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r7, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m18.109372169s ago: executing program 4 (id=12572): ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000000)={0x1, 0xf03, 0xe1, &(0x7f0000000100)=""/225}) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 2m18.103769643s ago: executing program 0 (id=12573): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff3}, {0x0, 0x3}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0x3e}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x10000002, 0xb4, 0xda}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) close(r4) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7ffbe, {0x0, 0x0, 0x0, r15, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x205, 0x1, 0xb}, 0xb, 0x0, 0x31, 0x5, 0x9, 0x2, 0x9, 0x16, 0x2, 0x1, {0xf, 0x23, 0x7, 0x8, 0xfffffffc, 0x7583}}}}]}, 0x78}}, 0x8000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 2m18.092843299s ago: executing program 1 (id=12574): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x7ff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0xd, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r5, &(0x7f0000000000)="846bb66f", 0x18, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000000)="846bb66f", 0x18, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(r6) 0s ago: executing program 32 (id=12573): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff3}, {0x0, 0x3}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0x3e}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x10000002, 0xb4, 0xda}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) close(r4) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7ffbe, {0x0, 0x0, 0x0, r15, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x205, 0x1, 0xb}, 0xb, 0x0, 0x31, 0x5, 0x9, 0x2, 0x9, 0x16, 0x2, 0x1, {0xf, 0x23, 0x7, 0x8, 0xfffffffc, 0x7583}}}}]}, 0x78}}, 0x8000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) kernel console output (not intermixed with test programs): 490][T21872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1344.566018][T21882] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1344.718295][T21892] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 1344.763547][T21893] atomic_op ffff888062ff9998 conn xmit_atomic 0000000000000000 [ 1345.200731][T21908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11554'. [ 1345.579063][T21946] siw: device registration error -23 [ 1346.001287][T21966] xt_hashlimit: size too large, truncated to 1048576 [ 1346.211777][T21981] xt_hashlimit: size too large, truncated to 1048576 [ 1346.246774][T21984] openvswitch: netlink: Multiple metadata blocks provided [ 1346.986676][T22020] syzkaller0: entered promiscuous mode [ 1346.992533][T22020] syzkaller0: entered allmulticast mode [ 1349.421708][T22057] __nla_validate_parse: 7 callbacks suppressed [ 1349.421724][T22057] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.11589'. [ 1349.496819][T22061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11591'. [ 1349.506510][T22061] netlink: 'syz.4.11591': attribute type 7 has an invalid length. [ 1349.517181][T22061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11591'. [ 1349.599251][T22061] openvswitch: netlink: EtherType 0 is less than min 600 [ 1349.884145][T22023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1350.144328][T22079] x_tables: unsorted entry at hook 2 [ 1350.238225][T22088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11596'. [ 1350.441402][T22099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11599'. [ 1350.596147][T22109] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11602'. [ 1350.616352][T22109] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11602'. [ 1351.345957][T22161] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1351.790696][T22177] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11617'. [ 1352.005665][T22191] netlink: 'syz.2.11620': attribute type 2 has an invalid length. [ 1352.023441][T22191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11620'. [ 1352.042749][T22191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11620'. [ 1352.135408][T22194] netlink: 'syz.4.11623': attribute type 4 has an invalid length. [ 1352.159625][ T7217] Bluetooth: hci2: link tx timeout [ 1352.166730][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.177402][ T7217] Bluetooth: hci2: link tx timeout [ 1352.183327][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.191202][ T7217] Bluetooth: hci2: link tx timeout [ 1352.196447][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.237543][ T7217] Bluetooth: hci2: link tx timeout [ 1352.243683][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.252258][ T7217] Bluetooth: hci2: link tx timeout [ 1352.257519][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.265577][ T7217] Bluetooth: hci2: link tx timeout [ 1352.271400][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.279346][ T7217] Bluetooth: hci2: link tx timeout [ 1352.284704][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.295540][ T7217] Bluetooth: hci2: link tx timeout [ 1352.301394][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.309231][ T7217] Bluetooth: hci2: link tx timeout [ 1352.315996][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.324011][ T7217] Bluetooth: hci2: link tx timeout [ 1352.329183][ T7217] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1352.480091][T22207] x_tables: duplicate underflow at hook 1 [ 1352.583264][T22211] syzkaller0: entered promiscuous mode [ 1352.609057][T22211] syzkaller0: entered allmulticast mode [ 1352.655551][T22181] netlink: 'syz.3.11618': attribute type 7 has an invalid length. [ 1352.670998][T22218] Bluetooth: MGMT ver 1.23 [ 1352.675768][T22218] Bluetooth: hci1: too big key_count value 32778 [ 1352.683563][T22181] netlink: 'syz.3.11618': attribute type 8 has an invalid length. [ 1353.143907][T22239] tipc: Enabling of bearer rejected, failed to enable media [ 1353.344852][T22250] netlink: 'syz.4.11638': attribute type 1 has an invalid length. [ 1353.813229][T22290] netlink: 'syz.3.11650': attribute type 21 has an invalid length. [ 1354.148336][T22309] bridge0: port 3(wlan0) entered blocking state [ 1354.173262][T22309] bridge0: port 3(wlan0) entered disabled state [ 1354.180998][T22309] mac80211_hwsim hwsim91 wlan0: entered allmulticast mode [ 1354.211469][T22309] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode [ 1354.219736][ T7217] Bluetooth: hci2: command 0x0405 tx timeout [ 1354.689286][T22323] openvswitch: netlink: Multiple metadata blocks provided [ 1354.832075][T22332] __nla_validate_parse: 14 callbacks suppressed [ 1354.832097][T22332] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.11662'. [ 1355.241508][T22351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1355.344781][T22357] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20001 [ 1355.395157][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11671'. [ 1355.564644][T22367] netlink: 'syz.1.11673': attribute type 9 has an invalid length. [ 1355.573742][T22367] netlink: 'syz.1.11673': attribute type 6 has an invalid length. [ 1355.739488][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11674'. [ 1356.160860][T22403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1356.523730][T22432] syzkaller0: entered promiscuous mode [ 1356.532560][T22432] syzkaller0: entered allmulticast mode [ 1357.328394][T22478] syzkaller0: entered promiscuous mode [ 1357.364651][T22478] syzkaller0: entered allmulticast mode [ 1357.387571][T22482] tipc: Started in network mode [ 1357.392568][T22482] tipc: Node identity d29e17fda7a1, cluster identity 4711 [ 1357.421452][T22482] tipc: Enabled bearer , priority 0 [ 1357.501039][T22475] tipc: Resetting bearer [ 1357.529371][T22492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11712'. [ 1357.541886][T22475] tipc: Disabling bearer [ 1357.857599][T22515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11716'. [ 1358.055981][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11719'. [ 1358.100528][T22528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11719'. [ 1358.556149][T22558] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.11729'. [ 1358.577564][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11730'. [ 1358.706973][T22563] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 1358.982247][T22581] Cannot find add_set index 65532 as target [ 1359.028193][T22581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11734'. [ 1359.456647][ T7217] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1359.475200][ T7217] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1359.487002][ T7217] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1359.513626][ T7217] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1359.522808][ T7217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1359.590819][T22600] wlan0 speed is unknown, defaulting to 1000 [ 1359.590851][T22607] netlink: 'syz.1.11741': attribute type 5 has an invalid length. [ 1359.603295][T22600] wg1 speed is unknown, defaulting to 1000 [ 1359.618797][T22600] lo speed is unknown, defaulting to 1000 [ 1359.826110][T22614] netlink: 'syz.1.11744': attribute type 1 has an invalid length. [ 1359.840597][T22615] netlink: 'syz.1.11744': attribute type 1 has an invalid length. [ 1359.909870][ T25] block nbd0: Possible stuck request ffff8880a0b29e00: control (read@0,1024B). Runtime 30 seconds [ 1359.924547][ T25] block nbd0: Possible stuck request ffff8880a0b2a000: control (read@1024,1024B). Runtime 30 seconds [ 1359.937716][ T25] block nbd0: Possible stuck request ffff8880a0b2a200: control (read@2048,1024B). Runtime 30 seconds [ 1359.949187][ T25] block nbd0: Possible stuck request ffff8880a0b2a400: control (read@3072,1024B). Runtime 30 seconds [ 1359.967717][T22614] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1360.105452][T22621] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1360.122602][T22621] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1360.160712][T22621] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1360.260351][T22635] netlink: 'syz.0.11751': attribute type 6 has an invalid length. [ 1360.350021][T21799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1360.371147][T21799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.618730][T21799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1360.634477][T21799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.711854][T22666] __nla_validate_parse: 4 callbacks suppressed [ 1360.711874][T22666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11755'. [ 1360.890694][T21799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1360.907714][T21799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.927233][T22669] netlink: 'syz.0.11758': attribute type 1 has an invalid length. [ 1360.946637][T22669] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11758'. [ 1360.956206][T22669] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11758'. [ 1360.975678][T22669] netlink: 658 bytes leftover after parsing attributes in process `syz.0.11758'. [ 1361.031639][T22600] chnl_net:caif_netlink_parms(): no params data found [ 1361.056360][T22681] netlink: 'syz.3.11761': attribute type 39 has an invalid length. [ 1361.086216][T21799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1361.105445][T21799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.315774][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11766'. [ 1361.564130][T22600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.579651][T16563] Bluetooth: hci3: command tx timeout [ 1361.579708][T22600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.605999][T22600] bridge_slave_0: entered allmulticast mode [ 1361.616807][T22600] bridge_slave_0: entered promiscuous mode [ 1361.627604][T22709] syzkaller0: entered promiscuous mode [ 1361.639415][T22709] syzkaller0: entered allmulticast mode [ 1361.648185][T22707] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1361.672996][T22600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.680606][T22600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.687998][T22600] bridge_slave_1: entered allmulticast mode [ 1361.696584][T22600] bridge_slave_1: entered promiscuous mode [ 1361.734969][T22711] smc: net device team0 applied user defined pnetid SYZ2 [ 1361.743175][T22712] smc: net device team0 erased user defined pnetid SYZ2 [ 1361.861730][T22600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.871536][T21799] team0: left allmulticast mode [ 1361.876461][T21799] team_slave_0: left allmulticast mode [ 1361.889037][T21799] team_slave_1: left allmulticast mode [ 1361.895658][T21799] team0: left promiscuous mode [ 1361.905335][T21799] team_slave_0: left promiscuous mode [ 1361.911340][T21799] team_slave_1: left promiscuous mode [ 1361.917432][T21799] bridge0: port 3(team0) entered disabled state [ 1361.930433][T21799] bridge_slave_1: left promiscuous mode [ 1361.936271][T21799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.947358][T21799] bridge_slave_0: left allmulticast mode [ 1361.954068][T21799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.074366][T22730] netlink: 'syz.4.11777': attribute type 1 has an invalid length. [ 1362.226357][T21799] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1362.519394][T21799] dvmrp6 (unregistering): left allmulticast mode [ 1362.943431][T21799] team0: Port device bridge7 removed [ 1363.021697][T21799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.036195][T21799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.048057][T21799] bond0 (unregistering): Released all slaves [ 1363.189495][T21799] bond1 (unregistering): Released all slaves [ 1363.321538][T21799] bond2 (unregistering): Released all slaves [ 1363.335809][T21799] bond3 (unregistering): Released all slaves [ 1363.361987][T22600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.422476][T22730] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1363.487855][T22600] team0: Port device team_slave_0 added [ 1363.577409][T22600] team0: Port device team_slave_1 added [ 1363.597428][T22744] netlink: 'syz.1.11779': attribute type 1 has an invalid length. [ 1363.654059][T16563] Bluetooth: hci3: command tx timeout [ 1363.719162][T22754] Bluetooth: MGMT ver 1.23 [ 1363.728509][T21799] tipc: Disabling bearer [ 1363.800091][T21799] tipc: Left network mode [ 1363.852043][T21799] IPVS: stopping backup sync thread 17152 ... [ 1363.881471][T22744] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1363.913322][T22752] vlan2: entered promiscuous mode [ 1363.918634][T22752] bond12: entered promiscuous mode [ 1363.924439][T22752] vlan2: entered allmulticast mode [ 1363.931206][T22752] bond12: entered allmulticast mode [ 1363.938871][T22600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.947076][T22600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.973468][T22600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.062344][T22600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.098542][T22600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.153804][T22770] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1364.170640][T22600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.304859][T22776] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11789'. [ 1364.371121][T22776] block nbd0: reconnected socket [ 1364.372885][T16563] block nbd0: Receive control failed (result -107) [ 1364.496057][T22600] hsr_slave_0: entered promiscuous mode [ 1364.523661][T22600] hsr_slave_1: entered promiscuous mode [ 1364.541061][T22600] debugfs: 'hsr0' already exists in 'hsr' [ 1364.546883][T22600] Cannot create hsr debugfs directory [ 1364.620341][T22782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11790'. [ 1364.668253][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11793'. [ 1364.790816][T22802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11795'. [ 1365.204190][T22823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11802'. [ 1365.467896][T21799] hsr_slave_0: left promiscuous mode [ 1365.484213][T21799] hsr_slave_1: left promiscuous mode [ 1365.492338][T21799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.519926][T21799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.548675][T21799] veth1_vlan: left promiscuous mode [ 1365.563299][T21799] veth0_vlan: left promiscuous mode [ 1365.730272][T16563] Bluetooth: hci3: command tx timeout [ 1365.939429][T22847] netlink: 'syz.1.11806': attribute type 2 has an invalid length. [ 1365.947919][T22847] netlink: 'syz.1.11806': attribute type 1 has an invalid length. [ 1366.176035][T21799] team0 (unregistering): Port device team_slave_1 removed [ 1366.223145][T21799] team0 (unregistering): Port device team_slave_0 removed [ 1366.853040][T22824] wlan0 speed is unknown, defaulting to 1000 [ 1366.911146][T22824] wg1 speed is unknown, defaulting to 1000 [ 1366.919952][T22824] lo speed is unknown, defaulting to 1000 [ 1366.938417][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1367.304519][T21799] IPVS: stop unused estimator thread 0... [ 1367.810551][T16563] Bluetooth: hci3: command tx timeout [ 1368.555263][T22838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1368.568518][T22600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1368.633076][T22600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1368.686275][T22600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1368.749942][T22600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1368.871793][T22925] __nla_validate_parse: 1 callbacks suppressed [ 1368.871813][T22925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11818'. [ 1368.905062][T22600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.916370][T22925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11818'. [ 1369.055703][T22600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.093416][T25431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.100800][T25431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.127120][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.134434][T19681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.390714][T22956] x_tables: duplicate entry at hook 2 [ 1369.424311][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11825'. [ 1369.528976][T22957] tipc: Enabling of bearer rejected, failed to enable media [ 1369.756923][T22968] netlink: 'syz.1.11828': attribute type 1 has an invalid length. [ 1369.854659][T22968] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1369.867586][T22600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.933418][T22968] syzkaller1: entered promiscuous mode [ 1369.939057][T22968] syzkaller1: entered allmulticast mode [ 1370.004989][T22968] bond13: (slave geneve2): making interface the new active one [ 1370.015022][T22968] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 1370.228036][T22600] veth0_vlan: entered promiscuous mode [ 1370.237115][T22983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11833'. [ 1370.307422][T22600] veth1_vlan: entered promiscuous mode [ 1370.483212][T22600] veth0_macvtap: entered promiscuous mode [ 1370.569205][T22600] veth1_macvtap: entered promiscuous mode [ 1370.591547][T23004] netlink: 'syz.3.11839': attribute type 13 has an invalid length. [ 1370.690489][T22600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.806795][T22600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.871743][T21795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.922771][T21795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.942811][T21795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.956335][T21795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.140655][T23038] netlink: 404 bytes leftover after parsing attributes in process `syz.4.11847'. [ 1371.169014][T23039] netlink: 404 bytes leftover after parsing attributes in process `syz.4.11847'. [ 1371.175419][T19679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.200150][T19679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.304974][T25438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.322437][T25438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.675937][T23076] netlink: 'syz.2.11737': attribute type 32 has an invalid length. [ 1371.768208][T23076] bond1: option coupled_control: invalid value (3) [ 1371.825350][T23076] bond1 (unregistering): Released all slaves [ 1371.844988][T23082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11856'. [ 1372.049842][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1372.058032][ C1] lec:lec_tx_timeout: lec0 [ 1372.603790][T23120] openvswitch: netlink: IPv4 tun info is not correct [ 1372.716929][T23127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11869'. [ 1372.828740][T23134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11872'. [ 1372.960802][T23141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11873'. [ 1373.483043][T23177] syzkaller1: entered promiscuous mode [ 1373.488942][T23177] syzkaller1: entered allmulticast mode [ 1374.052030][T23218] netlink: 'syz.4.11892': attribute type 10 has an invalid length. [ 1374.071777][T23218] __nla_validate_parse: 1 callbacks suppressed [ 1374.071799][T23218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11892'. [ 1374.110460][T23218] dummy0: entered promiscuous mode [ 1374.122838][T23218] bridge0: port 2(dummy0) entered blocking state [ 1374.160960][T23218] bridge0: port 2(dummy0) entered disabled state [ 1374.182454][T23218] dummy0: entered allmulticast mode [ 1374.207159][T23218] bridge0: port 2(dummy0) entered blocking state [ 1374.213766][T23218] bridge0: port 2(dummy0) entered forwarding state [ 1374.405847][T23237] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11896'. [ 1374.773749][T23254] xt_socket: unknown flags 0x50 [ 1374.863744][T23262] netlink: 'syz.0.11902': attribute type 1 has an invalid length. [ 1374.871930][T23262] netlink: 'syz.0.11902': attribute type 2 has an invalid length. [ 1374.882860][T23262] netlink: 'syz.0.11902': attribute type 1 has an invalid length. [ 1374.932916][T23262] netlink: 'syz.0.11902': attribute type 3 has an invalid length. [ 1374.962766][T23262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11902'. [ 1374.977613][T23263] --map-set only usable from mangle table [ 1375.148461][T23266] bond3: left promiscuous mode [ 1375.182962][T23266] bridge3: left promiscuous mode [ 1375.280086][T23266] bond4: left promiscuous mode [ 1375.370520][T23266] veth1_vlan: left allmulticast mode [ 1375.408541][T23266] macvtap1: left promiscuous mode [ 1375.444000][T23266] veth5: left promiscuous mode [ 1375.482342][T23266] vlan0: left allmulticast mode [ 1375.492194][T23266] veth0_vlan: left allmulticast mode [ 1375.497659][T23266] vlan0: left promiscuous mode [ 1375.507398][T23285] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11905'. [ 1375.518653][T23266] macvtap2: left promiscuous mode [ 1375.863837][T23308] SET target dimension over the limit! [ 1376.248466][T23331] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11921'. [ 1376.279474][T23325] syzkaller0: entered promiscuous mode [ 1376.285487][T23325] syzkaller0: entered allmulticast mode [ 1376.358236][T23336] team0: Cannot enslave team device to itself [ 1376.439235][T23344] geneve2: entered promiscuous mode [ 1376.466330][T19679] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 58101 - 0 [ 1376.517872][T19679] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 58101 - 0 [ 1376.528164][T19679] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 58101 - 0 [ 1376.606726][T19679] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 58101 - 0 [ 1376.836285][ T30] audit: type=1800 audit(1769922726.463:8): pid=23358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11926" name="memory.events" dev="tmpfs" ino=2951 res=0 errno=0 [ 1377.009941][ T7217] Bluetooth: hci3: command 0x0405 tx timeout [ 1377.382508][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11934'. [ 1377.563882][T23409] tipc: Enabling of bearer rejected, failed to enable media [ 1377.657997][T23409] syzkaller0: entered promiscuous mode [ 1377.663642][T23409] syzkaller0: entered allmulticast mode [ 1378.387878][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11946'. [ 1378.674769][T23462] netlink: 'syz.4.11949': attribute type 4 has an invalid length. [ 1378.687916][T23462] netlink: 25 bytes leftover after parsing attributes in process `syz.4.11949'. [ 1378.782789][T23432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11942'. [ 1378.964227][T23472] wlan0 speed is unknown, defaulting to 1000 [ 1378.972309][T23472] wg1 speed is unknown, defaulting to 1000 [ 1378.998607][T23472] lo speed is unknown, defaulting to 1000 [ 1379.029968][T23484] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11953'. [ 1379.086967][T23465] wlan0 speed is unknown, defaulting to 1000 [ 1379.182171][T23465] wg1 speed is unknown, defaulting to 1000 [ 1379.294524][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11954'. [ 1379.321522][T23497] netlink: 'syz.3.11956': attribute type 1 has an invalid length. [ 1379.345930][T23498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11955'. [ 1379.412651][T23465] lo speed is unknown, defaulting to 1000 [ 1379.435369][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11954'. [ 1379.509031][T21795] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.566922][T21795] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.587647][T21795] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.695982][T21795] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.810449][T23519] atomic_op ffff888027206198 conn xmit_atomic 0000000000000000 [ 1379.823423][T23516] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.11964'. [ 1379.866629][T23523] : entered promiscuous mode [ 1380.266783][T23547] netlink: 'syz.0.11973': attribute type 1 has an invalid length. [ 1380.364568][T23559] x_tables: unsorted underflow at hook 4 [ 1380.727164][T23576] bond12: option resend_igmp: invalid value (32767) [ 1380.746978][T23576] bond12: option resend_igmp: allowed values 0 - 255 [ 1380.762895][T23576] bond12 (unregistering): Released all slaves [ 1380.798974][T23584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11983'. [ 1380.863313][T23584] netlink: 'syz.2.11983': attribute type 2 has an invalid length. [ 1380.898552][T23584] 9: entered promiscuous mode [ 1380.971436][T23588] wlan0 speed is unknown, defaulting to 1000 [ 1380.979188][T23588] wg1 speed is unknown, defaulting to 1000 [ 1380.996172][T23588] lo speed is unknown, defaulting to 1000 [ 1382.134013][T23655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12004'. [ 1384.266724][T23609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1384.961014][T23683] syzkaller0: entered allmulticast mode [ 1385.268059][T23691] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12014'. [ 1385.291077][T23703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12017'. [ 1385.455380][T23708] syzkaller0: entered promiscuous mode [ 1385.480823][T23708] syzkaller0: entered allmulticast mode [ 1385.522961][T23708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12019'. [ 1385.946671][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12028'. [ 1386.045602][T23737] lec:lec_start_xmit: lec0:No lecd attached [ 1386.070870][T23745] openvswitch: netlink: Duplicate key (type 32). [ 1386.125491][T23746] wlan0 speed is unknown, defaulting to 1000 [ 1386.167744][T23746] wg1 speed is unknown, defaulting to 1000 [ 1386.208851][T23740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12030'. [ 1386.249018][T23746] lo speed is unknown, defaulting to 1000 [ 1386.262089][T23740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12030'. [ 1386.538947][T23766] wlan0 speed is unknown, defaulting to 1000 [ 1386.597748][T23766] wg1 speed is unknown, defaulting to 1000 [ 1386.844967][T23766] lo speed is unknown, defaulting to 1000 [ 1387.040464][T23790] syzkaller0: entered promiscuous mode [ 1387.046065][T23790] syzkaller0: entered allmulticast mode [ 1387.167749][T23803] netlink: 'syz.1.12038': attribute type 1 has an invalid length. [ 1387.362873][T23808] netlink: 'syz.2.12046': attribute type 13 has an invalid length. [ 1387.595885][T23830] delete_channel: no stack [ 1387.762170][T23808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12046'. [ 1388.258624][ T7217] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1388.270769][ T7217] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1388.282001][ T7217] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1388.293077][ T7217] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1388.303065][ T7217] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1388.558754][T23859] wlan0 speed is unknown, defaulting to 1000 [ 1388.617431][T23859] wg1 speed is unknown, defaulting to 1000 [ 1388.652864][T23859] lo speed is unknown, defaulting to 1000 [ 1388.887895][T13254] syz_tun (unregistering): left allmulticast mode [ 1388.935496][T23883] netlink: 181084 bytes leftover after parsing attributes in process `syz.3.12058'. [ 1389.008479][T23889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12059'. [ 1389.049352][T23889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12059'. [ 1389.428456][T23859] chnl_net:caif_netlink_parms(): no params data found [ 1389.653710][T23928] syzkaller0: entered promiscuous mode [ 1389.659260][T23928] syzkaller0: entered allmulticast mode [ 1389.759192][T23859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.784665][T23859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.803425][T23859] bridge_slave_0: entered allmulticast mode [ 1389.817024][T23859] bridge_slave_0: entered promiscuous mode [ 1389.884842][T23859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.930622][T23859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.972950][T23859] bridge_slave_1: entered allmulticast mode [ 1389.982539][ T25] block nbd0: Possible stuck request ffff8880a0b29e00: control (read@0,1024B). Runtime 60 seconds [ 1389.995810][ T25] block nbd0: Possible stuck request ffff8880a0b2a000: control (read@1024,1024B). Runtime 60 seconds [ 1390.007340][ T25] block nbd0: Possible stuck request ffff8880a0b2a200: control (read@2048,1024B). Runtime 60 seconds [ 1390.018658][ T25] block nbd0: Possible stuck request ffff8880a0b2a400: control (read@3072,1024B). Runtime 60 seconds [ 1390.033826][ T40] block nbd0: Dead connection, failed to find a fallback [ 1390.041680][ T40] block nbd0: shutting down sockets [ 1390.047166][ T40] blk_print_req_error: 138 callbacks suppressed [ 1390.047186][ T40] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.066487][ T40] buffer_io_error: 138 callbacks suppressed [ 1390.066508][ T40] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1390.081552][ T40] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.091246][ T40] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1390.099129][ T40] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.108890][ T40] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1390.116809][ T40] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.126496][ T40] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1390.136383][T21183] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.148164][T23859] bridge_slave_1: entered promiscuous mode [ 1390.154128][T21183] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1390.169705][T21183] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.187461][T21183] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1390.195654][T21183] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.205246][T21183] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1390.213429][T21183] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.223225][T21183] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1390.231387][T21183] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.241067][T21183] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1390.248980][T21183] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1390.258753][T21183] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1390.267558][T21183] ldm_validate_partition_table(): Disk read failed. [ 1390.274878][T21183] Dev nbd0: unable to read RDB block 0 [ 1390.290431][T21183] nbd0: unable to read partition table [ 1390.313811][T21183] ldm_validate_partition_table(): Disk read failed. [ 1390.337932][T21183] Dev nbd0: unable to read RDB block 0 [ 1390.360783][T21183] nbd0: unable to read partition table [ 1390.370116][ T7217] Bluetooth: hci4: command tx timeout [ 1390.391018][T21331] ldm_validate_partition_table(): Disk read failed. [ 1390.400343][T21331] Dev nbd0: unable to read RDB block 0 [ 1390.406636][T21331] nbd0: unable to read partition table [ 1390.421587][T21331] ldm_validate_partition_table(): Disk read failed. [ 1390.439069][T21331] Dev nbd0: unable to read RDB block 0 [ 1390.445853][T21331] nbd0: unable to read partition table [ 1390.536058][T23938] syzkaller0: entered promiscuous mode [ 1390.553141][T23938] syzkaller0: entered allmulticast mode [ 1390.594114][T23859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.614536][T23963] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20000 [ 1390.628618][T23859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.063306][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1391.071419][ C1] lec:lec_tx_timeout: lec0 [ 1391.076111][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1392.455632][ T7217] Bluetooth: hci4: command tx timeout [ 1393.018870][T23859] team0: Port device team_slave_0 added [ 1393.042577][T23859] team0: Port device team_slave_1 added [ 1393.167666][T23859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.199698][T23859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.230974][T23859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.250478][T23859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.258167][T23859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.285700][T23859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.319822][T23998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12076'. [ 1393.343428][T23997] netlink: 'syz.0.12075': attribute type 39 has an invalid length. [ 1393.505967][T23859] hsr_slave_0: entered promiscuous mode [ 1393.545166][T23859] hsr_slave_1: entered promiscuous mode [ 1393.798981][T24028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12084'. [ 1393.870986][T24032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1393.871855][T24032] netlink: 'syz.2.12083': attribute type 23 has an invalid length. [ 1394.038015][T24027] .: left allmulticast mode [ 1394.085063][T24027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.104547][T24027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.193496][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12080'. [ 1394.294348][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12080'. [ 1394.465860][T24027] bond3: left promiscuous mode [ 1394.471203][T24027] veth0_to_bond: left promiscuous mode [ 1394.476988][T24027] bond3: left allmulticast mode [ 1394.482579][T24027] veth0_to_bond: left allmulticast mode [ 1394.500859][T24027] bond5: left promiscuous mode [ 1394.505745][T24027] gre2: left promiscuous mode [ 1394.519165][T24027] gre3: left promiscuous mode [ 1394.524907][T24027] gre3: left allmulticast mode [ 1394.540097][ T7217] Bluetooth: hci4: command tx timeout [ 1394.567924][T24027] veth0_macvtap: left allmulticast mode [ 1394.578782][T24027] macvtap1: left allmulticast mode [ 1394.587541][T24027] gtp0: left promiscuous mode [ 1394.592406][T24027] gtp0: left allmulticast mode [ 1394.616510][T24027] vlan2: left promiscuous mode [ 1394.621683][T24027] bond12: left promiscuous mode [ 1394.626751][T24027] vlan2: left allmulticast mode [ 1394.632260][T24027] bond12: left allmulticast mode [ 1394.654744][T24028] geneve3: entered promiscuous mode [ 1394.660605][T24028] geneve3: entered allmulticast mode [ 1394.668032][T19413] lo speed is unknown, defaulting to 1000 [ 1394.686141][T19413] syz: Port: 1 Link DOWN [ 1394.754984][T24046] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12085'. [ 1394.901370][T24065] netlink: 'syz.1.12087': attribute type 1 has an invalid length. [ 1395.036247][T23859] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.058471][T23859] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.086075][T24074] netlink: 'syz.2.12091': attribute type 1 has an invalid length. [ 1395.101971][T24072] x_tables: duplicate underflow at hook 1 [ 1395.118522][T24072] x_tables: duplicate underflow at hook 1 [ 1395.134257][T24072] x_tables: duplicate underflow at hook 1 [ 1395.162530][T24072] x_tables: duplicate underflow at hook 1 [ 1395.168423][T24072] x_tables: duplicate underflow at hook 1 [ 1395.196071][T24074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1395.219902][T24072] x_tables: duplicate underflow at hook 1 [ 1395.225814][T24072] x_tables: duplicate underflow at hook 1 [ 1395.265837][T24072] x_tables: duplicate underflow at hook 1 [ 1395.301504][T24072] x_tables: duplicate underflow at hook 1 [ 1395.313971][T23859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.324734][T24072] x_tables: duplicate underflow at hook 1 [ 1395.333742][T24085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12093'. [ 1395.343254][T23859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.408645][T24074] bond1: entered promiscuous mode [ 1395.413931][T24074] bond1: entered allmulticast mode [ 1395.656866][T23859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.681416][T23859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.726984][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12098'. [ 1395.746711][T24100] netlink: 'syz.3.12097': attribute type 3 has an invalid length. [ 1395.755896][T24106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12099'. [ 1395.765927][T24100] netlink: 'syz.3.12097': attribute type 1 has an invalid length. [ 1395.841560][T23859] batman_adv: batadv0: Removing interface: netdevsim0 [ 1395.852441][T23859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.864969][T23859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.911062][T24100] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1395.994220][T24108] bond9: (slave geneve4): making interface the new active one [ 1396.007282][T24108] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 1396.028571][T25431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.054353][T25431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.084385][T25431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.093304][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1396.093343][ C1] lec:lec_tx_timeout: lec0 [ 1396.102043][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1396.177109][T25431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.218672][T24128] netlink: 'syz.3.12105': attribute type 4 has an invalid length. [ 1396.229171][T24129] sctp: [Deprecated]: syz.2.12104 (pid 24129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1396.229171][T24129] Use struct sctp_sack_info instead [ 1396.400443][T23859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1396.417475][T23859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1396.418277][T24137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12107'. [ 1396.463754][T23859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1396.481278][T24143] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12109'. [ 1396.493517][T23859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1396.511843][T24148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1396.544924][T24151] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 1396.610220][ T7217] Bluetooth: hci4: command tx timeout [ 1396.693445][T23859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.749145][T23859] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.767565][T19679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.774812][T19679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.805366][T25431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.812601][T25431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.351919][T23859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.493217][T24187] netlink: 'syz.3.12119': attribute type 10 has an invalid length. [ 1397.500150][T24184] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1397.502787][T24187] bridge_slave_1: left allmulticast mode [ 1397.515021][T24187] bridge_slave_1: left promiscuous mode [ 1397.522259][T24187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.563957][T24187] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1397.588598][T24191] C: renamed from lo (while UP) [ 1397.604329][T24191] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1397.812470][T24205] 8021q: VLANs not supported on lo [ 1398.061643][T23859] veth0_vlan: entered promiscuous mode [ 1398.094311][T23859] veth1_vlan: entered promiscuous mode [ 1398.171820][T23859] veth0_macvtap: entered promiscuous mode [ 1398.195137][T23859] veth1_macvtap: entered promiscuous mode [ 1398.225768][T24222] syzkaller0: entered promiscuous mode [ 1398.239187][T24222] syzkaller0: entered allmulticast mode [ 1398.273664][T24226] tipc: New replicast peer: 255.255.255.255 [ 1398.280427][T24226] tipc: Enabled bearer , priority 10 [ 1398.294676][T23859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.316864][T23859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.378580][T25436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.391043][T25436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.403644][T25436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.419297][T25436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.523520][T24238] __nla_validate_parse: 4 callbacks suppressed [ 1398.523542][T24238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12131'. [ 1398.612650][T21799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.625511][T21799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.703468][T24241] tipc: Enabled bearer , priority 0 [ 1398.712146][T24241] syzkaller0: entered promiscuous mode [ 1398.717811][T24241] syzkaller0: entered allmulticast mode [ 1398.734027][T25436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.747839][T25436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.778323][T24241] tipc: Resetting bearer [ 1398.802925][T24240] tipc: Resetting bearer [ 1398.833145][T24240] tipc: Disabling bearer [ 1398.866467][T24244] wlan0 speed is unknown, defaulting to 1000 [ 1398.886616][T24244] wg1 speed is unknown, defaulting to 1000 [ 1398.910252][T24244] lo speed is unknown, defaulting to 1000 [ 1398.919405][T24248] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12050'. [ 1399.124157][T24251] netlink: 'syz.0.12134': attribute type 2 has an invalid length. [ 1399.153932][T24251] netlink: 'syz.0.12134': attribute type 4 has an invalid length. [ 1399.427899][T16563] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1399.441846][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12137'. [ 1399.475610][T16563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1399.484682][T16563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1399.494966][T16563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1399.514208][T16563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1399.523373][ T2725] tipc: Node number set to 1967069181 [ 1399.598347][T24263] wlan0 speed is unknown, defaulting to 1000 [ 1399.615464][T24263] wg1 speed is unknown, defaulting to 1000 [ 1399.634730][T24263] lo speed is unknown, defaulting to 1000 [ 1399.874840][T24276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12140'. [ 1399.888923][T24276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12140'. [ 1400.245747][T24301] netlink: 'syz.3.12146': attribute type 12 has an invalid length. [ 1400.278776][T24301] bond10: option primary_reselect: invalid value (252) [ 1400.309263][T24301] bond10 (unregistering): Released all slaves [ 1400.368766][T24263] chnl_net:caif_netlink_parms(): no params data found [ 1400.660679][T24326] tipc: Enabled bearer , priority 0 [ 1400.678240][T24263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.708168][T24263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.726005][T24263] bridge_slave_0: entered allmulticast mode [ 1400.746509][T24263] bridge_slave_0: entered promiscuous mode [ 1400.790226][T24331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12152'. [ 1400.855851][T24326] syzkaller0: entered promiscuous mode [ 1400.863821][T24326] syzkaller0: entered allmulticast mode [ 1400.870522][T24326] tipc: Resetting bearer [ 1400.882729][T24263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.891218][T24263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.898783][T24263] bridge_slave_1: entered allmulticast mode [ 1400.910572][T24263] bridge_slave_1: entered promiscuous mode [ 1400.943600][T24325] tipc: Resetting bearer [ 1400.956873][T24330] netlink: 'syz.4.12153': attribute type 63 has an invalid length. [ 1401.062188][T24340] FAULT_INJECTION: forcing a failure. [ 1401.062188][T24340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.075722][T24340] CPU: 0 UID: 0 PID: 24340 Comm: syz.2.12156 Not tainted syzkaller #0 PREEMPT(full) [ 1401.075749][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1401.075763][T24340] Call Trace: [ 1401.075772][T24340] [ 1401.075782][T24340] dump_stack_lvl+0xe8/0x150 [ 1401.075816][T24340] should_fail_ex+0x412/0x560 [ 1401.075846][T24340] _copy_from_user+0x2d/0xb0 [ 1401.075879][T24340] ___sys_sendmsg+0x1c6/0x360 [ 1401.075907][T24340] ? __lock_acquire+0x6b5/0x2cf0 [ 1401.075940][T24340] ? __pfx____sys_sendmsg+0x10/0x10 [ 1401.076005][T24340] ? __fget_files+0x2a/0x420 [ 1401.076028][T24340] ? __fget_files+0x3a0/0x420 [ 1401.076061][T24340] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1401.076092][T24340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1401.076131][T24340] ? __pfx_ksys_write+0x10/0x10 [ 1401.076173][T24340] do_syscall_64+0xe2/0xf80 [ 1401.076195][T24340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.076216][T24340] ? trace_irq_disable+0x37/0x100 [ 1401.076236][T24340] ? clear_bhb_loop+0x60/0xb0 [ 1401.076262][T24340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.076282][T24340] RIP: 0033:0x7f4cd6d9aeb9 [ 1401.076301][T24340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.076317][T24340] RSP: 002b:00007f4cd7c84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1401.076340][T24340] RAX: ffffffffffffffda RBX: 00007f4cd7015fa0 RCX: 00007f4cd6d9aeb9 [ 1401.076356][T24340] RDX: 0000000000000810 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1401.076369][T24340] RBP: 00007f4cd7c84090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.076383][T24340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.076395][T24340] R13: 00007f4cd7016038 R14: 00007f4cd7015fa0 R15: 00007ffe99cd3138 [ 1401.076428][T24340] [ 1401.130576][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1401.270028][ C1] lec:lec_tx_timeout: lec0 [ 1401.275506][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1401.557507][T24351] can: request_module (can-proto-3) failed. [ 1401.576580][T16563] Bluetooth: hci5: command tx timeout [ 1403.327126][T24325] tipc: Disabling bearer [ 1403.369035][T24263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.384292][T24263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.503613][T24263] team0: Port device team_slave_0 added [ 1403.525265][T24263] team0: Port device team_slave_1 added [ 1403.579343][T24263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.586632][T24263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.614933][T24263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.632182][T24263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.639205][T24263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.659820][T16563] Bluetooth: hci5: command tx timeout [ 1403.677773][T24263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.710578][T24359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12162'. [ 1403.749434][T24263] hsr_slave_0: entered promiscuous mode [ 1403.756778][T24263] hsr_slave_1: entered promiscuous mode [ 1403.763496][T24263] debugfs: 'hsr0' already exists in 'hsr' [ 1403.769296][T24263] Cannot create hsr debugfs directory [ 1403.848685][T24367] netlink: 100 bytes leftover after parsing attributes in process `syz.3.12164'. [ 1404.035917][T24374] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12167'. [ 1404.179968][T24377] tipc: Started in network mode [ 1404.184949][T24377] tipc: Node identity 42c0316b38d2, cluster identity 4711 [ 1404.197171][T24377] tipc: Enabled bearer , priority 0 [ 1404.239493][T24376] syzkaller0: entered promiscuous mode [ 1404.245101][T24376] syzkaller0: entered allmulticast mode [ 1404.367351][T24389] netlink: 'syz.3.12172': attribute type 3 has an invalid length. [ 1404.410317][T24263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.444773][T24377] tipc: Resetting bearer [ 1404.456643][T24386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12170'. [ 1404.479838][T24375] tipc: Resetting bearer [ 1404.548539][T24375] tipc: Disabling bearer [ 1404.562874][T24402] netlink: 'syz.0.12174': attribute type 1 has an invalid length. [ 1404.588410][T24263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.715662][T24414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12175'. [ 1404.725817][T24414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12175'. [ 1404.747975][T24415] netlink: 'syz.0.12174': attribute type 10 has an invalid length. [ 1404.886635][T24411] veth9: entered promiscuous mode [ 1404.979337][T24263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.102253][T24263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.513420][T24263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1405.577590][T24263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1405.621632][T24263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1405.670337][T24263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1405.731001][T16563] Bluetooth: hci5: command tx timeout [ 1405.742815][T24459] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12185'. [ 1406.171264][T24263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.232545][T24263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.317534][T19681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.324864][T19681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.366172][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.373424][T19681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.477816][T24492] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.12191'. [ 1406.550905][T24492] netlink: Unknown conntrack attr (type=2304, max=9) [ 1406.888695][T24509] gtp0: entered promiscuous mode [ 1406.898598][T24511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12195'. [ 1406.921760][T24513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12195'. [ 1406.941501][T24509] gtp0: entered allmulticast mode [ 1407.009597][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 1407.017711][ C1] lec:lec_tx_timeout: lec0 [ 1407.023205][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1407.272104][T24263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.372612][ T30] audit: type=1800 audit(1769922757.003:9): pid=24533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12200" name="memory.events" dev="tmpfs" ino=414 res=0 errno=0 [ 1407.425861][T24263] veth0_vlan: entered promiscuous mode [ 1407.438842][T24263] veth1_vlan: entered promiscuous mode [ 1407.550162][T24263] veth0_macvtap: entered promiscuous mode [ 1407.586107][T24263] veth1_macvtap: entered promiscuous mode [ 1407.698940][T24263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.729450][T24263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.776769][T29787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.790525][T29787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.812483][T16563] Bluetooth: hci5: command tx timeout [ 1407.832855][T29787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.866822][T29787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.894171][T24561] netlink: 'syz.0.12207': attribute type 12 has an invalid length. [ 1408.160970][T24554] wlan0 speed is unknown, defaulting to 1000 [ 1408.221780][T24554] wg1 speed is unknown, defaulting to 1000 [ 1408.283331][T19681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.293903][T19681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.302695][T24576] nbd0: detected capacity change from 127 to 0 [ 1408.340418][T24554] lo speed is unknown, defaulting to 1000 [ 1408.473820][T19681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.483302][T19681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.609007][T24586] netlink: 'syz.1.12135': attribute type 21 has an invalid length. [ 1408.618875][T24586] IPv6: NLM_F_CREATE should be specified when creating new route [ 1408.627151][T24586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1408.634511][T24586] IPv6: NLM_F_CREATE should be set when creating new route [ 1408.641877][T24586] IPv6: NLM_F_CREATE should be set when creating new route [ 1408.649155][T24586] IPv6: NLM_F_CREATE should be set when creating new route [ 1408.923947][T24601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1408.987349][T24599] netlink: 'syz.3.12216': attribute type 4 has an invalid length. [ 1409.135885][T24609] netlink: 'syz.1.12219': attribute type 11 has an invalid length. [ 1409.181546][T24611] __nla_validate_parse: 4 callbacks suppressed [ 1409.181568][T24611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12221'. [ 1409.261071][T24616] netlink: 'syz.0.12222': attribute type 1 has an invalid length. [ 1409.290160][T24616] netlink: 'syz.0.12222': attribute type 1 has an invalid length. [ 1409.426111][T24623] wlan0 speed is unknown, defaulting to 1000 [ 1409.462427][T24623] wg1 speed is unknown, defaulting to 1000 [ 1409.475421][T24625] sctp: [Deprecated]: syz.3.12226 (pid 24625) Use of int in maxseg socket option. [ 1409.475421][T24625] Use struct sctp_assoc_value instead [ 1409.498043][T24623] lo speed is unknown, defaulting to 1000 [ 1409.630057][T24642] syzkaller0: entered allmulticast mode [ 1409.710993][T24645] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12230'. [ 1409.803692][T24653] can: request_module (can-proto-0) failed. [ 1410.000853][T24665] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12234'. [ 1410.010557][T24665] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12234'. [ 1410.020530][T24665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12234'. [ 1410.033599][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12234'. [ 1410.043106][T24665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12234'. [ 1410.066502][T25431] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.066847][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12234'. [ 1410.077356][T25431] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.090703][T24665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12234'. [ 1410.102949][T25431] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1410.112418][T25431] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.050038][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1412.058168][ C1] lec:lec_tx_timeout: lec0 [ 1412.063267][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1412.254530][T24618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1412.758980][T24683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12240'. [ 1413.029262][T24704] netlink: 'syz.4.12245': attribute type 4 has an invalid length. [ 1413.051034][T24704] netlink: 'syz.4.12245': attribute type 1 has an invalid length. [ 1414.071871][T13191] IPVS: starting estimator thread 0... [ 1414.160549][T24755] IPVS: using max 30 ests per chain, 72000 per kthread [ 1414.419138][T24776] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1414.426316][T24776] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1414.522419][T24784] __nla_validate_parse: 10 callbacks suppressed [ 1414.522441][T24784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12268'. [ 1414.572710][T24789] sctp: [Deprecated]: syz.0.12269 (pid 24789) Use of int in maxseg socket option. [ 1414.572710][T24789] Use struct sctp_assoc_value instead [ 1414.587983][T24784] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.12268'. [ 1414.610196][T24784] openvswitch: netlink: Flow key attr not present in new flow. [ 1414.625603][T24790] netlink: 'syz.4.12271': attribute type 1 has an invalid length. [ 1414.795852][T24802] ip6tnl1: entered allmulticast mode [ 1415.124273][T24828] syzkaller0: entered promiscuous mode [ 1415.131437][T24828] syzkaller0: entered allmulticast mode [ 1415.215485][T24828] tipc: Enabled bearer , priority 0 [ 1415.248188][T24823] tipc: Resetting bearer [ 1415.282581][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12286'. [ 1415.361177][T24823] tipc: Disabling bearer [ 1415.502829][T24846] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12287'. [ 1415.607638][T24859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12290'. [ 1415.826695][T24872] netlink: 'syz.1.12295': attribute type 1 has an invalid length. [ 1415.852815][T24873] netlink: 'syz.1.12295': attribute type 4 has an invalid length. [ 1415.869966][T24873] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12295'. [ 1415.947493][T24873] netlink: 'syz.1.12295': attribute type 4 has an invalid length. [ 1415.956585][T24873] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12295'. [ 1415.986084][T24873] netlink: 'syz.1.12295': attribute type 4 has an invalid length. [ 1416.009936][T24873] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12295'. [ 1416.066651][T24873] netlink: 'syz.1.12295': attribute type 4 has an invalid length. [ 1416.102834][T24873] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12295'. [ 1416.131439][T24873] netlink: 'syz.1.12295': attribute type 4 has an invalid length. [ 1416.150249][T24873] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12295'. [ 1416.165966][T24873] netlink: 'syz.1.12295': attribute type 4 has an invalid length. [ 1417.069879][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1417.077967][ C1] lec:lec_tx_timeout: lec0 [ 1417.089658][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1417.496900][T24976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1417.632180][T24979] tipc: Enabling of bearer rejected, failed to enable media [ 1417.672644][T24979] SET target dimension over the limit! [ 1418.451502][T25045] IPVS: Unknown mcast interface: batadv_slave_0 [ 1419.295189][T25085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1419.419648][T25089] IPv4: Oversized IP packet from 172.20.20.24 [ 1419.426749][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1419.433207][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1419.766041][T25125] __nla_validate_parse: 73 callbacks suppressed [ 1419.766060][T25125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12366'. [ 1420.572763][T25162] erspan0: entered promiscuous mode [ 1420.631925][T25162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.642309][T25162] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.666904][T25162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1420.706270][T25176] netlink: 165 bytes leftover after parsing attributes in process `syz.0.12382'. [ 1420.822147][T25181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12382'. [ 1420.986679][T25194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12383'. [ 1421.231858][T25205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12389'. [ 1421.255947][T25205] validate_nla: 59 callbacks suppressed [ 1421.255970][T25205] netlink: 'syz.4.12389': attribute type 3 has an invalid length. [ 1421.292872][T25209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12391'. [ 1421.304316][T25205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12389'. [ 1421.315429][T25209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12391'. [ 1421.475175][T25221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12394'. [ 1421.569791][T16563] Bluetooth: hci5: command tx timeout [ 1421.644038][T25228] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12398'. [ 1421.800465][T25235] xt_check_table_hooks: 55 callbacks suppressed [ 1421.800490][T25235] x_tables: duplicate underflow at hook 1 [ 1422.104387][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1422.112514][ C1] lec:lec_tx_timeout: lec0 [ 1422.117512][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1422.496460][T25269] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1423.677382][T25305] IPVS: set_ctl: invalid protocol: 110 255.255.255.255:20001 [ 1424.045498][T25322] nbd: must specify at least one socket [ 1424.125580][T25323] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1424.141674][ T7217] Bluetooth: hci5: command 0x0405 tx timeout [ 1424.162187][ T7217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1424.172829][ T7217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1424.182976][ T7217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1424.202837][ T7217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1424.215485][ T7217] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1424.231145][T25323] bond1 (unregistering): Released all slaves [ 1424.448611][T25328] wlan0 speed is unknown, defaulting to 1000 [ 1424.499688][T25328] wg1 speed is unknown, defaulting to 1000 [ 1424.573632][T25339] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1424.589222][T25339] bond1: option arp_ip_target: invalid value (0) [ 1424.633351][T25339] bond1 (unregistering): Released all slaves [ 1424.674053][T25328] lo speed is unknown, defaulting to 1000 [ 1424.735148][T19679] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58101 - 0 [ 1424.779041][T25350] __nla_validate_parse: 8 callbacks suppressed [ 1424.779063][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12432'. [ 1424.862093][T19679] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58101 - 0 [ 1425.005721][T19679] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58101 - 0 [ 1425.130147][T25373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12434'. [ 1425.142973][T19679] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58101 - 0 [ 1425.341378][T25328] chnl_net:caif_netlink_parms(): no params data found [ 1425.350658][T25380] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12438'. [ 1425.501127][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1425.521945][T25393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12440'. [ 1425.984538][T19679] bridge_slave_1: left allmulticast mode [ 1425.994931][T19679] bridge_slave_1: left promiscuous mode [ 1426.009086][T19679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.033155][T19679] bridge_slave_0: left allmulticast mode [ 1426.038966][T19679] bridge_slave_0: left promiscuous mode [ 1426.045131][T19679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.127072][T19679] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1426.136466][T19679] bond4 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ba:5c:d2:20:ff:55 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1426.289938][ T7217] Bluetooth: hci1: command tx timeout [ 1426.342928][T19679] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1426.954505][T19679] bond0 (unregistering): Released all slaves [ 1426.969110][T19679] bond1 (unregistering): Released all slaves [ 1426.986242][T19679] bond2 (unregistering): Released all slaves [ 1427.129680][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1427.137748][ C1] lec:lec_tx_timeout: lec0 [ 1427.146277][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1427.163629][T19679] bond3 (unregistering): Released all slaves [ 1427.179785][T19679] bond4 (unregistering): (slave veth7): Releasing backup interface [ 1427.190255][T19679] bond4 (unregistering): Released all slaves [ 1427.205153][T19679] bond5 (unregistering): Released all slaves [ 1427.227109][T19679] bond6 (unregistering): Released all slaves [ 1427.243923][T19679] bond7 (unregistering): Released all slaves [ 1427.269847][T25328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.277069][T25328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.312130][T25328] bridge_slave_0: entered allmulticast mode [ 1427.338499][T25328] bridge_slave_0: entered promiscuous mode [ 1427.359743][T25328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.367440][T25328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.375509][T25328] bridge_slave_1: entered allmulticast mode [ 1427.383480][T25328] bridge_slave_1: entered promiscuous mode [ 1427.493414][T25440] netlink: 272 bytes leftover after parsing attributes in process `syz.1.12448'. [ 1427.508956][T25426] tipc: Enabling of bearer rejected, failed to enable media [ 1427.529121][T25434] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12447'. [ 1427.549207][T25434] netem: invalid attributes len -24 [ 1427.566874][T25434] netem: change failed [ 1427.686530][T19679] : left promiscuous mode [ 1427.775785][T25328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.808793][T25431] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1427.821008][T25431] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1427.831504][T25431] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1427.878287][T25431] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1427.905350][T19679] tipc: Disabling bearer [ 1427.911564][T19679] tipc: Left network mode [ 1427.913493][T25463] ip6tnl0: Caught tx_queue_len zero misconfig [ 1427.949392][T25328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.155918][T25469] netlink: 348 bytes leftover after parsing attributes in process `syz.1.12456'. [ 1428.202374][T25328] team0: Port device team_slave_0 added [ 1428.238183][T25328] team0: Port device team_slave_1 added [ 1428.250800][T19679] IPVS: stopping master sync thread 15875 ... [ 1428.383900][ T7217] Bluetooth: hci1: command tx timeout [ 1428.575024][T25328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.620413][T25328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.735457][T25328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.852167][T25328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.859182][T25328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.959577][T25328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.994902][T25515] netlink: 'syz.1.12465': attribute type 9 has an invalid length. [ 1429.042226][T25515] netlink: 'syz.1.12465': attribute type 11 has an invalid length. [ 1429.085284][T25515] netlink: 'syz.1.12465': attribute type 12 has an invalid length. [ 1429.120337][T25515] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.12465'. [ 1429.247055][T25328] hsr_slave_0: entered promiscuous mode [ 1429.287621][T25328] hsr_slave_1: entered promiscuous mode [ 1429.312483][T25328] debugfs: 'hsr0' already exists in 'hsr' [ 1429.318327][T25328] Cannot create hsr debugfs directory [ 1429.336253][T25530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12470'. [ 1429.671739][T25544] tipc: Started in network mode [ 1429.681370][T25544] tipc: Node identity ac14140f, cluster identity 4711 [ 1429.688462][T25544] tipc: New replicast peer: 255.255.255.255 [ 1429.700670][T25544] tipc: Enabled bearer , priority 10 [ 1429.719468][T25550] netlink: 'syz.3.12474': attribute type 10 has an invalid length. [ 1429.802485][T19679] hsr_slave_0: left promiscuous mode [ 1429.842645][T25557] __nla_validate_parse: 1 callbacks suppressed [ 1429.842664][T25557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12475'. [ 1430.450397][ T7217] Bluetooth: hci1: command tx timeout [ 1430.956250][T25550] batman_adv: batadv0: Adding interface: netdevsim0 [ 1430.965383][T25550] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1430.993910][T25550] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1431.022527][T25553] veth0: entered promiscuous mode [ 1431.027723][T25553] veth0: left promiscuous mode [ 1431.142286][ T5909] tipc: Node number set to 2886997007 [ 1431.303765][T25580] netlink: 'syz.1.12482': attribute type 1 has an invalid length. [ 1431.359868][T25582] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12484'. [ 1431.371540][T25584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12482'. [ 1431.443461][T25586] netlink: 'syz.3.12485': attribute type 2 has an invalid length. [ 1431.463602][T25589] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12484'. [ 1431.478458][T25586] netlink: 119 bytes leftover after parsing attributes in process `syz.3.12485'. [ 1431.497549][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12482'. [ 1431.524136][T25582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.531619][T25582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.653339][T25589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.660611][T25589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.668154][T25589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.675399][T25589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.700813][T25589] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12484'. [ 1431.798019][T25589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.805871][T25589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.931296][T25603] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1431.951194][T25603] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1432.096875][T19679] IPVS: stop unused estimator thread 0... [ 1432.108547][T25607] tipc: Started in network mode [ 1432.116416][T25607] tipc: Node identity 02157eb22dec, cluster identity 4711 [ 1432.158365][T25607] tipc: Enabled bearer , priority 0 [ 1432.165595][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1432.165628][ C1] lec:lec_tx_timeout: lec0 [ 1432.174376][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1432.212464][T25613] bond0: Caught tx_queue_len zero misconfig [ 1432.274776][T25620] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12487'. [ 1432.343511][T25614] can: request_module (can-proto-0) failed. [ 1432.392457][T25607] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1432.530154][ T7217] Bluetooth: hci1: command tx timeout [ 1432.604182][T25606] tipc: Disabling bearer [ 1432.656227][T25642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12495'. [ 1432.774137][T25646] netlink: 'syz.2.12496': attribute type 1 has an invalid length. [ 1432.842566][T25646] siw: device registration error -23 [ 1433.001772][T25658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12499'. [ 1433.248966][T25672] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1433.468686][T25682] vcan0: entered allmulticast mode [ 1433.484195][T25328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1433.536476][T25328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1433.590411][T25328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1433.635215][T25328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1434.064283][T25711] bond4: entered promiscuous mode [ 1434.081179][T25711] bond4: entered allmulticast mode [ 1434.093805][T25711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1434.137340][T25328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.325809][T25328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.396127][T21799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.403375][T21799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.477096][T21799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.484451][T21799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.985667][T25769] ipt_ECN: cannot use operation on non-tcp rule [ 1435.075991][T25328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.177747][T25328] veth0_vlan: entered promiscuous mode [ 1435.266941][T25328] veth1_vlan: entered promiscuous mode [ 1435.550556][T25782] netdevsim netdevsim2: Direct firmware load for er failed with error -2 [ 1435.562139][T25782] netdevsim netdevsim2: Falling back to sysfs fallback for: er [ 1435.882837][T25807] SET target dimension over the limit! [ 1437.181530][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1437.189641][ C1] lec:lec_tx_timeout: lec0 [ 1437.195372][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1438.172624][T25328] veth0_macvtap: entered promiscuous mode [ 1438.223051][T25328] veth1_macvtap: entered promiscuous mode [ 1438.232723][T25827] netlink: 'syz.3.12534': attribute type 19 has an invalid length. [ 1438.272376][T19679] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.283947][T25828] __nla_validate_parse: 6 callbacks suppressed [ 1438.283969][T25828] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12535'. [ 1438.304305][T25827] netlink: 'syz.3.12534': attribute type 19 has an invalid length. [ 1438.313035][T19679] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.324256][T25830] netlink: 'syz.1.12537': attribute type 83 has an invalid length. [ 1438.341614][T19679] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.494910][T19681] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.526868][T25328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.564496][T25328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.634250][T25849] netlink: 'syz.2.12540': attribute type 29 has an invalid length. [ 1438.665885][T25847] netlink: 'syz.2.12540': attribute type 29 has an invalid length. [ 1438.711089][T19681] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.788240][T25858] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12542'. [ 1438.835464][T25858] netlink: 'syz.1.12542': attribute type 1 has an invalid length. [ 1438.868379][T19681] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.884868][T19681] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.954563][T19681] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.060265][T25867] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1439.067665][T25867] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1439.106454][T25867] veth0_to_bridge: entered allmulticast mode [ 1439.152605][T25867] veth0_to_bridge: entered promiscuous mode [ 1439.158740][T25867] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1439.222494][T25867] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1439.229818][T25867] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1439.393293][T19681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.426794][T19681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.499337][T25436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.519637][T25436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.560554][T25888] netlink: 'syz.3.12550': attribute type 33 has an invalid length. [ 1439.677388][T25888] netlink: 'syz.3.12550': attribute type 33 has an invalid length. [ 1439.687226][T25888] netlink: 'syz.3.12550': attribute type 33 has an invalid length. [ 1439.714627][T25888] netlink: 'syz.3.12550': attribute type 33 has an invalid length. [ 1440.463333][T25921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12560'. [ 1440.517185][T25920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12559'. [ 1440.603490][T25925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12560'. [ 1441.014930][T16563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1441.025793][T16563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1441.036841][T16563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1441.066698][T16563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1441.079424][T16563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1441.411841][T25935] openvswitch: netlink: Key type 31 is not supported [ 1441.495894][T25935] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12562'. [ 1441.643669][T25940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12563'. [ 1441.798875][T25436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.876782][T25436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.920600][T25948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12564'. [ 1442.030760][T25932] wlan0 speed is unknown, defaulting to 1000 [ 1442.083903][T25932] wg1 speed is unknown, defaulting to 1000 [ 1442.133159][T25932] lo speed is unknown, defaulting to 1000 [ 1442.210652][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1442.218757][ C1] lec:lec_tx_timeout: lec0 [ 1442.223463][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1442.406158][T25955] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.12568'. [ 1442.538158][T25436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1442.552054][T25436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.672785][T25959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12569'. [ 1443.095055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.107606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.120141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.132636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.145086][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.157564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.169981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.182535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.194932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.229825][T16563] Bluetooth: hci2: command tx timeout [ 1445.303416][T16563] Bluetooth: hci2: command tx timeout [ 1446.419692][ C1] net_ratelimit: 7687 callbacks suppressed [ 1446.419716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.438189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.450590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.463087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.475514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.487994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.500467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.512934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.525344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1446.539035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1447.232277][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1447.240554][ C1] lec:lec_tx_timeout: lec0 [ 1447.260934][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1447.721029][T16563] Bluetooth: hci2: command tx timeout [ 1448.260531][ C1] sched: DL replenish lagged too much [ 1449.851238][T16563] Bluetooth: hci2: command tx timeout [ 1451.429540][ C1] net_ratelimit: 11576 callbacks suppressed [ 1451.429564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.448065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.460484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.473051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.485444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.498019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.510407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.522870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.535258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.547733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1453.339177][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6070 ms [ 1453.347302][ C1] lec:lec_tx_timeout: lec0 [ 1453.367262][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1456.439580][ C1] net_ratelimit: 11633 callbacks suppressed [ 1456.439607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.458036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.470663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.483101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.495640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.508067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.520526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.532928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.545402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.557804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1459.100620][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 1459.108687][ C1] lec:lec_tx_timeout: lec0 [ 1459.129540][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1461.449539][ C1] net_ratelimit: 12122 callbacks suppressed [ 1461.449563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.467926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.480407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.492856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.505522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.517942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.530438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.542859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.555344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.567816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.149588][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1464.157758][ C1] lec:lec_tx_timeout: lec0 [ 1464.176953][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1466.459656][ C0] net_ratelimit: 12866 callbacks suppressed [ 1466.459660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.459680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.466510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.481242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.490970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.505010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.514441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.529106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1466.538745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.553108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1469.191339][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1469.199420][ C1] lec:lec_tx_timeout: lec0 [ 1469.219973][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1471.469714][ C1] net_ratelimit: 18399 callbacks suppressed [ 1471.469738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.472492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.477395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.488918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.502760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1471.513340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.525014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.539594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1471.549648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.561123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1474.236413][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1474.244522][ C1] lec:lec_tx_timeout: lec0 [ 1474.262075][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1476.479899][ C1] net_ratelimit: 18012 callbacks suppressed [ 1476.479924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.482313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1476.487004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1476.501648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.511012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.523284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.535285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.549420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1476.559193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1476.573576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1480.210941][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5950 ms [ 1480.219024][ C1] lec:lec_tx_timeout: lec0 [ 1480.237565][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1481.489785][ C0] net_ratelimit: 15800 callbacks suppressed [ 1481.489790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1481.489810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.496852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.511241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1481.521285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.535207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.545025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1481.557231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.568918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.582910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1486.061055][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 1486.069130][ C1] lec:lec_tx_timeout: lec0 [ 1486.086400][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1486.499581][ C1] net_ratelimit: 17167 callbacks suppressed [ 1486.499605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1486.502643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.506419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.518895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.530784][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.544894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1486.554576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1486.569137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.578489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.591046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.100770][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1491.108832][ C1] lec:lec_tx_timeout: lec0 [ 1491.125352][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1491.509663][ C1] net_ratelimit: 17340 callbacks suppressed [ 1491.509689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.511138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1491.516651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1491.532235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.541561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.554254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.566254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.580327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1491.590235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1491.604778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.140616][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1496.148712][ C1] lec:lec_tx_timeout: lec0 [ 1496.166084][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1496.519653][ C1] net_ratelimit: 17406 callbacks suppressed [ 1496.519677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1496.520668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1496.526574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.541144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.550857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.562683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.574597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1496.588863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1496.598480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.615301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.188182][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1501.196393][ C1] lec:lec_tx_timeout: lec0 [ 1501.215164][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1501.529679][ C1] net_ratelimit: 17016 callbacks suppressed [ 1501.529704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.530494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1501.536946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.551189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.560914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1501.573041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.584758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.599062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1501.609049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.623141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.239675][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1506.247758][ C1] lec:lec_tx_timeout: lec0 [ 1506.264290][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1506.539858][ C1] net_ratelimit: 16627 callbacks suppressed [ 1506.539882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1506.540086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1506.547032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.561181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.571355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.582989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.595172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1506.609328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1506.619054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.633425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.549595][ C1] net_ratelimit: 15810 callbacks suppressed [ 1511.549620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.549901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.556785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1511.570857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1511.580688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.594894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.604973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.616786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.628814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1511.642862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1512.209522][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5940 ms [ 1512.217604][ C1] lec:lec_tx_timeout: lec0 [ 1512.239709][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1516.559602][ C0] net_ratelimit: 16124 callbacks suppressed [ 1516.559625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.560258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1516.566819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.578499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.592800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1516.603064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.616986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.626823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1516.639017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.650686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1518.052212][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 1518.060324][ C1] lec:lec_tx_timeout: lec0 [ 1518.077082][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1521.569745][ C1] net_ratelimit: 15973 callbacks suppressed [ 1521.569769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1521.570089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1521.576666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.591249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.601059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.613031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.624972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1521.638876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1521.648880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.666428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1523.094038][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1523.102598][ C1] lec:lec_tx_timeout: lec0 [ 1526.579680][ C1] net_ratelimit: 16803 callbacks suppressed [ 1526.579704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1526.580061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.586835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.601146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1526.611138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.622775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1526.634981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1526.649392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.658869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.671431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.589557][ C0] net_ratelimit: 17687 callbacks suppressed [ 1531.589581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1531.589935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1531.596808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.608803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1531.620850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.632728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.647237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.657381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.669656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.681260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1536.599529][ C0] net_ratelimit: 18734 callbacks suppressed [ 1536.599554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.599561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.600734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.608748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1536.618941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1536.630928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1536.643037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1536.655020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.666959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.679768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.609590][ C1] net_ratelimit: 18777 callbacks suppressed [ 1541.609615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.611436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.617134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.628997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.640669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1541.654815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1541.665277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1541.677144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1541.688887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.701035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.619493][ C1] net_ratelimit: 19716 callbacks suppressed [ 1546.619517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1546.620480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.626421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.641433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.651116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.666233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.674865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1546.689292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1546.700051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1546.711709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1551.629831][ C0] net_ratelimit: 19019 callbacks suppressed [ 1551.629835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1551.629855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.636682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.649046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.661159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.676807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.684765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1551.697390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.708880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1551.723179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1553.604956][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1556.639566][ C1] net_ratelimit: 18476 callbacks suppressed [ 1556.639589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.639596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.645199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.646716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.659294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.670716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1556.685199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1556.694643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1556.706910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1556.718572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.012392][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 1559.020515][ C1] lec:lec_tx_timeout: lec0 [ 1561.649538][ C1] net_ratelimit: 17727 callbacks suppressed [ 1561.649562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.650315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.656564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1561.673231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.680743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1561.698248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.704588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.718880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1561.729175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.741002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1566.659544][ C1] net_ratelimit: 18050 callbacks suppressed [ 1566.659568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.660177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.666579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1566.682493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.690731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1566.702943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.714630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.729163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1566.739325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.750912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1571.669543][ C0] net_ratelimit: 18087 callbacks suppressed [ 1571.669568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.669872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.676733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.688496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1571.707805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.713058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1571.725228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.736727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.751689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1571.761165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.679771][ C1] net_ratelimit: 18293 callbacks suppressed [ 1576.679795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1576.679817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.687058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.704358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.711519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.723265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.735335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1576.749530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1576.759181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1576.771375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1581.689551][ C0] net_ratelimit: 18156 callbacks suppressed [ 1581.689575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.689713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1581.698661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.708685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1581.722851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1581.732410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.744790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1581.756738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.768491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.780505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1585.219458][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1585.226483][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25971/1:b..l [ 1585.235135][ C0] rcu: (detected by 0, t=10503 jiffies, g=253865, q=2583 ncpus=2) [ 1585.243166][ C0] task:syz.1.12574 state:R running task stack:25144 pid:25971 tgid:25971 ppid:24263 task_flags:0x400040 flags:0x00080000 [ 1585.258223][ C0] Call Trace: [ 1585.261556][ C0] [ 1585.264534][ C0] __schedule+0x14ea/0x5050 [ 1585.269128][ C0] ? __pfx___schedule+0x10/0x10 [ 1585.274053][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1585.279136][ C0] irqentry_exit+0x597/0x620 [ 1585.283773][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1585.289812][ C0] RIP: 0010:unwind_next_frame+0xd10/0x23c0 [ 1585.295660][ C0] Code: 7c 05 00 00 74 08 4c 89 ff e8 ac 25 b7 00 4c 89 7c 24 68 48 89 9c 24 80 00 00 00 4d 8b 7e 08 49 8d 5e 10 49 89 dd 49 c1 ed 03 <48> b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 48 89 df e8 [ 1585.315314][ C0] RSP: 0018:ffffc90003b6f178 EFLAGS: 00000a06 [ 1585.321436][ C0] RAX: dffffc0000000000 RBX: ffffc90003b6f258 RCX: ffffffff900fdb34 [ 1585.329450][ C0] RDX: ffffffff908f73cc RSI: 0000000000000002 RDI: ffffffff8c073920 [ 1585.337464][ C0] RBP: 1ffff9200076de4a R08: 000000000000000c R09: ffffffff8e55a360 [ 1585.345572][ C0] R10: ffffc90003b6f298 R11: ffffffff81afb170 R12: ffffc90003b6f5d0 [ 1585.353601][ C0] R13: 1ffff9200076de4b R14: ffffc90003b6f248 R15: ffffc90003b68000 [ 1585.361624][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1585.367861][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 1585.373027][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1585.378189][ C0] ? __put_partials+0x146/0x170 [ 1585.383110][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1585.389309][ C0] arch_stack_walk+0x11b/0x150 [ 1585.394125][ C0] ? __put_partials+0x146/0x170 [ 1585.399024][ C0] stack_trace_save+0xa9/0x100 [ 1585.403849][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1585.409278][ C0] save_stack+0x122/0x230 [ 1585.413662][ C0] ? __pfx_save_stack+0x10/0x10 [ 1585.418608][ C0] ? __free_frozen_pages+0xbf8/0xd70 [ 1585.423937][ C0] ? __put_partials+0x146/0x170 [ 1585.428855][ C0] ? page_ext_put+0x97/0xc0 [ 1585.433418][ C0] __reset_page_owner+0x71/0x1f0 [ 1585.438410][ C0] __free_frozen_pages+0xbf8/0xd70 [ 1585.443566][ C0] __put_partials+0x146/0x170 [ 1585.448290][ C0] __slab_free+0x294/0x320 [ 1585.452767][ C0] ? qlist_free_all+0x8c/0x100 [ 1585.457604][ C0] qlist_free_all+0x97/0x100 [ 1585.462245][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1585.467764][ C0] __kasan_slab_alloc+0x22/0x80 [ 1585.472661][ C0] ? kmem_cache_alloc_noprof+0x223/0x6e0 [ 1585.478340][ C0] kmem_cache_alloc_noprof+0x370/0x6e0 [ 1585.483841][ C0] ? vm_area_dup+0x2b/0x680 [ 1585.488599][ C0] vm_area_dup+0x2b/0x680 [ 1585.492981][ C0] __split_vma+0x1d5/0xa50 [ 1585.497448][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1585.502437][ C0] ? __pfx___split_vma+0x10/0x10 [ 1585.507441][ C0] vma_modify+0x941/0x2010 [ 1585.511918][ C0] vma_modify_flags+0x24b/0x330 [ 1585.516815][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 1585.522260][ C0] ? rcu_is_watching+0x15/0xb0 [ 1585.527158][ C0] ? percpu_counter_add_batch+0xea/0x1d0 [ 1585.532853][ C0] ? __vm_enough_memory+0x11b/0x380 [ 1585.538134][ C0] mprotect_fixup+0x46a/0xa50 [ 1585.542869][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 1585.548196][ C0] ? apparmor_file_mprotect+0x217/0x2f0 [ 1585.553826][ C0] do_mprotect_pkey+0x8ab/0xcd0 [ 1585.558825][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1585.564259][ C0] ? __se_sys_futex+0x3a8/0x450 [ 1585.569262][ C0] ? rcu_is_watching+0x15/0xb0 [ 1585.574084][ C0] __x64_sys_mprotect+0x80/0x90 [ 1585.578989][ C0] do_syscall_64+0xe2/0xf80 [ 1585.583533][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.589906][ C0] ? trace_irq_disable+0x37/0x100 [ 1585.594978][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1585.599702][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.605639][ C0] RIP: 0033:0x7f527519acb7 [ 1585.610106][ C0] RSP: 002b:00007ffe02096d78 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1585.618562][ C0] RAX: ffffffffffffffda RBX: 00007f52733d56c0 RCX: 00007f527519acb7 [ 1585.626576][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f52733b6000 [ 1585.634591][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1585.642607][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe02096ed0 [ 1585.650625][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1585.658654][ C0] [ 1585.661709][ C0] rcu: rcu_preempt kthread starved for 444 jiffies! g253865 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1585.672866][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1585.682959][ C0] rcu: RCU grace-period kthread stack dump: [ 1585.688877][ C0] task:rcu_preempt state:R running task stack:27448 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1585.702431][ C0] Call Trace: [ 1585.705750][ C0] [ 1585.708731][ C0] __schedule+0x14ea/0x5050 [ 1585.713367][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1585.718355][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1585.723437][ C0] ? __pfx___schedule+0x10/0x10 [ 1585.728337][ C0] ? schedule+0x90/0x360 [ 1585.732626][ C0] schedule+0x164/0x360 [ 1585.736827][ C0] schedule_timeout+0x158/0x2c0 [ 1585.741728][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1585.747150][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1585.752571][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1585.758521][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1585.764127][ C0] rcu_gp_fqs_loop+0x312/0x1560 [ 1585.769032][ C0] ? rcu_gp_init+0x11c4/0x1640 [ 1585.773860][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1585.780159][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1585.785490][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1585.790785][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1585.796652][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1585.801306][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1585.806646][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1585.811631][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1585.816710][ C0] kthread+0x726/0x8b0 [ 1585.820839][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1585.826088][ C0] ? __pfx_kthread+0x10/0x10 [ 1585.830743][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1585.835994][ C0] ? __pfx_kthread+0x10/0x10 [ 1585.840651][ C0] ret_from_fork+0x51b/0xa40 [ 1585.845293][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1585.850452][ C0] ? __switch_to+0xc82/0x1410 [ 1585.855178][ C0] ? __pfx_kthread+0x10/0x10 [ 1585.859817][ C0] ret_from_fork_asm+0x1a/0x30 [ 1585.864665][ C0] [ 1585.867722][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1585.874099][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1585.879359][ C1] NMI backtrace for cpu 1 [ 1585.879378][ C1] CPU: 1 UID: 0 PID: 3409 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 1585.879399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1585.879412][ C1] Workqueue: bat_events batadv_tt_purge [ 1585.879449][ C1] RIP: 0010:unwind_next_frame+0x2d/0x23c0 [ 1585.879472][ C1] Code: fa 55 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fe 48 bd 00 00 00 00 00 fc ff df 48 8d 5f 48 48 89 d8 48 c1 e8 03 <48> 89 44 24 30 80 3c 28 00 74 08 48 89 df e8 60 32 b7 00 48 89 5c [ 1585.879488][ C1] RSP: 0018:ffffc90000a07738 EFLAGS: 00000a06 [ 1585.879503][ C1] RAX: 1ffff92000140f0a RBX: ffffc90000a07850 RCX: 0000000080000100 [ 1585.879517][ C1] RDX: dffffc0000000000 RSI: ffffffff821ed32c RDI: ffffc90000a07808 [ 1585.879531][ C1] RBP: dffffc0000000000 R08: ffffc90000a078d0 R09: 0000000000000001 [ 1585.879544][ C1] R10: ffffc90000a07858 R11: ffffffff81afb170 R12: ffff888030b98000 [ 1585.879558][ C1] R13: 1ffff110061730ba R14: ffffc90000a07808 R15: ffffc90000a07808 [ 1585.879572][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 1585.879587][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1585.879599][ C1] CR2: 00007f6c529fff5c CR3: 000000006bef8000 CR4: 00000000003526f0 [ 1585.879616][ C1] Call Trace: [ 1585.879623][ C1] [ 1585.879635][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1585.879656][ C1] ? post_alloc_hook+0x228/0x280 [ 1585.879672][ C1] ? get_page_from_freelist+0x24dc/0x2580 [ 1585.879694][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1585.879718][ C1] arch_stack_walk+0x11b/0x150 [ 1585.879740][ C1] ? get_page_from_freelist+0x24dc/0x2580 [ 1585.879763][ C1] stack_trace_save+0xa9/0x100 [ 1585.879784][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1585.879812][ C1] save_stack+0x122/0x230 [ 1585.879845][ C1] ? __pfx_save_stack+0x10/0x10 [ 1585.879869][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1585.879893][ C1] ? post_alloc_hook+0x228/0x280 [ 1585.879908][ C1] ? get_page_from_freelist+0x24dc/0x2580 [ 1585.879940][ C1] __set_page_owner+0x8d/0x4c0 [ 1585.879967][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1585.879992][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1585.880018][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1585.880037][ C1] ? bad_range+0x8b/0x2c0 [ 1585.880062][ C1] post_alloc_hook+0x228/0x280 [ 1585.880082][ C1] get_page_from_freelist+0x24dc/0x2580 [ 1585.880107][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1585.880134][ C1] ? ipv6_mc_check_mld+0x372/0x2180 [ 1585.880162][ C1] ? prepare_alloc_pages+0x22a/0x650 [ 1585.880185][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1585.880208][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1585.880231][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 1585.880252][ C1] ? ___slab_alloc+0x137/0x1760 [ 1585.880275][ C1] alloc_pages_mpol+0x232/0x4a0 [ 1585.880299][ C1] allocate_slab+0x86/0x3a0 [ 1585.880324][ C1] ___slab_alloc+0xd82/0x1760 [ 1585.880346][ C1] ? ebt_do_table+0x25d0/0x2830 [ 1585.880364][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1585.880382][ C1] ? skb_ext_add+0x1b6/0x8f0 [ 1585.880406][ C1] ? skb_ext_add+0x1b6/0x8f0 [ 1585.880427][ C1] __slab_alloc+0x65/0x100 [ 1585.880450][ C1] kmem_cache_alloc_noprof+0x3fe/0x6e0 [ 1585.880478][ C1] ? skb_ext_add+0x1b6/0x8f0 [ 1585.880503][ C1] skb_ext_add+0x1b6/0x8f0 [ 1585.880529][ C1] br_nf_forward_ip+0xc3/0xa30 [ 1585.880546][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1585.880571][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 1585.880589][ C1] nf_hook_slow+0xc5/0x220 [ 1585.880609][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1585.880635][ C1] NF_HOOK+0x23e/0x3f0 [ 1585.880662][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1585.880686][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1585.880713][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1585.880740][ C1] ? __skb_clone+0x483/0x7a0 [ 1585.880763][ C1] ? br_handle_vlan+0x61/0x530 [ 1585.880786][ C1] __br_forward+0x397/0x540 [ 1585.880811][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1585.880845][ C1] br_flood+0x6ee/0xb80 [ 1585.880879][ C1] br_handle_frame_finish+0x1492/0x1b40 [ 1585.880896][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1585.880918][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1585.880942][ C1] ? ip6t_do_table+0x193/0x1560 [ 1585.880963][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1585.880983][ C1] ? nf_hook_slow+0x176/0x220 [ 1585.881003][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1585.881020][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1585.881052][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1585.881081][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1585.881098][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1585.881131][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 1585.881149][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1585.881173][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1585.881192][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1585.881210][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1585.881231][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1585.881249][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 1585.881281][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1585.881307][ C1] br_handle_frame+0x1277/0x1510 [ 1585.881330][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1585.881349][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1585.881372][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1585.881389][ C1] __netif_receive_skb_core+0x98f/0x30a0 [ 1585.881410][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 1585.881444][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1585.881463][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 1585.881486][ C1] ? NF_HOOK+0x336/0x3c0 [ 1585.881514][ C1] ? process_backlog+0x3eb/0x1950 [ 1585.881538][ C1] ? process_backlog+0x3eb/0x1950 [ 1585.881556][ C1] ? process_backlog+0x3eb/0x1950 [ 1585.881576][ C1] ? process_backlog+0x3eb/0x1950 [ 1585.881596][ C1] process_backlog+0x76d/0x1950 [ 1585.881626][ C1] __napi_poll+0xae/0x340 [ 1585.881643][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1585.881663][ C1] net_rx_action+0x627/0xf70 [ 1585.881682][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1585.881717][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1585.881752][ C1] handle_softirqs+0x22a/0x7c0 [ 1585.881769][ C1] ? do_softirq+0x76/0xd0 [ 1585.881787][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1585.881814][ C1] do_softirq+0x76/0xd0 [ 1585.881835][ C1] [ 1585.881841][ C1] [ 1585.881848][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1585.881864][ C1] batadv_tt_local_purge+0x2a7/0x340 [ 1585.881897][ C1] batadv_tt_purge+0x35/0x9e0 [ 1585.881926][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1585.881952][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1585.881979][ C1] process_scheduled_works+0xaec/0x17a0 [ 1585.882019][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1585.882044][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1585.882066][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1585.882093][ C1] rescuer_thread+0xcba/0x1390 [ 1585.882115][ C1] ? rescuer_thread+0xb4/0x1390 [ 1585.882143][ C1] kthread+0x726/0x8b0 [ 1585.882164][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 1585.882181][ C1] ? __pfx_kthread+0x10/0x10 [ 1585.882202][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1585.882228][ C1] ? __pfx_kthread+0x10/0x10 [ 1585.882248][ C1] ret_from_fork+0x51b/0xa40 [ 1585.882277][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1585.882302][ C1] ? __switch_to+0xc82/0x1410 [ 1585.882328][ C1] ? __pfx_kthread+0x10/0x10 [ 1585.882347][ C1] ret_from_fork_asm+0x1a/0x30 [ 1585.882381][ C1] [ 1586.699619][ C1] net_ratelimit: 13761 callbacks suppressed [ 1586.699642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.699648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.704794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.706800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.718817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.730667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1586.744861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1586.754888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1586.767050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1586.778759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.709551][ C0] net_ratelimit: 16801 callbacks suppressed [ 1591.709557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.709576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.716744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1591.731224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1591.740875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:d3:51:f8:49:f1, vlan:0) [ 1591.752781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1591.764654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.776731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.788895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.801309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)