last executing test programs: 4.306770542s ago: executing program 0 (id=3790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r2) close(0x3) 4.103135261s ago: executing program 1 (id=3792): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(0xffffffffffffffff, &(0x7f0000000000)=0x200, r1, &(0x7f0000000040)=0x1b, 0x400, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x14, 0x7, 0xa, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x10002000}, 0x800) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0xffffffffffffff9c}}]}]}, 0x24}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080003008100020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) (async) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080003008100020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) 3.927591515s ago: executing program 4 (id=3794): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r7, 0x8b2c, &(0x7f0000000040)) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0x7ff5}}, [@TCA_CHAIN={0x7, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000880}, 0x20000800) 3.800287829s ago: executing program 1 (id=3795): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 3.672885047s ago: executing program 3 (id=3797): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003b00010324bd7002fadbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) 3.60809634s ago: executing program 0 (id=3798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c00000010001f00109e0000800000f0c05c0375429ed913e81dc00da5000000c600", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r8) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x4289, 0x3, 0x1]}, &(0x7f0000000280)=0x44) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYRES64=r5], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 3.507933472s ago: executing program 4 (id=3799): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4110, 0x100e}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f00000006c0)=""/23, 0x17}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000003640)=""/224, 0xe0}], 0x5}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2202, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYRES16], 0x18}], 0x1}, 0x2000080) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000f000000050030000000000005002f00000000000800030000000000bd8d06258c7a81e5dc0336cac19db827bb4ffd7e9ac0b877457c6c68e70f60c54aa1dd63cd06d41755efe21a8e238f5ae6ca76bc08d4dabb3ddd56ae16d108df63e3", @ANYRES32=r4], 0x2c}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030425bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="40450000000000001c0012800b00010067726574617000000c00028008000400b227000008000a00", @ANYRES32=r4, @ANYBLOB="213de5f1d06503341e7449a9d5df054c3de7172154bbcfe7b6246bd245555ea509a4afd8b0cc7d0261746364d4438d702446dbdb69a8801c45"], 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) 3.416502867s ago: executing program 3 (id=3801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 3.323483736s ago: executing program 2 (id=3802): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r3, 0x29, 0x45, &(0x7f0000000340)="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", 0x118) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x7, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x6, 0x12d5f, 0x3}}, 0x44) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) close(0x4) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) 3.002857034s ago: executing program 2 (id=3803): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 3.002166658s ago: executing program 3 (id=3804): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r2, r3, 0x0, 0xffffffff000) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 2.963320881s ago: executing program 0 (id=3805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r1) (async) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xfb37}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0xc000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6f95}, 0x14}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) sendto$packet(r8, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.91606419s ago: executing program 2 (id=3806): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110af000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="6eec498ba7"]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1da4e27ecbf2cfaa}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@typed={0x8, 0x26, 0x0, 0x0, @u32}, @nested={0x4, 0x44}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) 2.794554355s ago: executing program 1 (id=3807): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x120, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x8000, 0x6, 0x3, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x38}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r4, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a, 0x0, r7}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x1, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffdfffffffff, 0x0, 0x7ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 2.714940035s ago: executing program 2 (id=3808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000001000000008100800000001600a24e0097140002"], 0x30}}, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffffffffd1d, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xfffffffffffffcb8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r4, 0x0, 0x0, 0x80800) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000160001fedbdf25020000000400ec0021000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0)={{0x2e, @broadcast, 0x4e23, 0x1, 'none\x00', 0x30, 0x0, 0x30}, {@multicast2, 0x4e20, 0x2000, 0x0, 0x8, 0xfff}}, 0x44) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="55c1508cf7f287c60840f7f59b855c01802351b5f49c787741b767a0c9eb08b28d0cd0e6dbe9efa4c4823f20b524af6035b50a2442705b400067d0f925f0aca4a3021da5470ab0c4b91e18719512ab232b9e22eef4e86166d9e48d2b19cacd809e93f181ec9b2a33dc9ffb22408184ac3806269e1e9f910508cdbba7e6629f499b41ea2c6a95ac12f1813cc9195b88422dff3dc2958664d22237a094888136f8d9dd886bd4c78261f590777edc62", @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r7, @ANYBLOB='\b\x00|\x00', @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.543330773s ago: executing program 4 (id=3809): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x98, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xeb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000020}, 0x40008080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r4, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a0006000802060000000000e6ff0f00fd8100000400ac00"], 0x34}}, 0x810) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x84) (async) recvmsg$can_raw(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x40) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x6, [@struct={0x6, 0x9, 0x0, 0x4, 0x1, 0x2, [{0x10, 0x0, 0x9}, {0xc, 0x1, 0xfffffff7}, {0x3, 0x4, 0x8}, {0x5, 0x2, 0x4}, {0xa, 0x5, 0xfffffffa}, {0x3, 0x0, 0x8}, {0xc, 0x3, 0x3}, {0xb, 0x1, 0x3699}, {0xc, 0x5, 0x5}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x70, 0x0, 0x3, 0x5}, @float={0xc, 0x0, 0x0, 0x10, 0xc}, @float={0x4, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000680)=""/233, 0xbe, 0xe9, 0x0, 0x6}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES32=r7, @ANYRES64=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r9, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r12, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) sendmsg$IPVS_CMD_SET_DEST(r9, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r13, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x8c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xaa}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf7c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x68, r12, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8001}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc000}]}, 0x68}, 0x1, 0x0, 0x0, 0x240400c0}, 0x20000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, 0xffffffffffffffff) 2.340209119s ago: executing program 1 (id=3810): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r0) (async) close(r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(0x3) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xa}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000000040)={0x2c, 0x140f, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044015}, 0x40000c0) 2.168941948s ago: executing program 1 (id=3811): syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c68100100008060001080006040002000000000000e0000001aaaaaaaaaabb0000000090f937e1f4fb39cb96dbfaa3157e7ee11ed9c79e717c1397e08839fccfde0c1492cabfd0eecf7f006d34ab"], 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x840) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25000}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x44}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={0x404, 0xb, 0x4, 0x3, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x2}, [@nested={0x161, 0xd4, 0x0, 0x1, [@nested={0x4, 0x24}, @typed={0xa, 0xa9, 0x0, 0x0, @str='-:*^\'\x00'}, @generic="80f67945fb7f4656b8d405ecc445c3d04896f14b78c988c15f8027237d23439f3ab8b4d8c3fa987f22555b74cf4bc494c0d4d5cd2d6ae05ad05e13c1c008ce0a878bbfdd2bd7ce893355e54b436554cf8ec7c79664173e8c77c8718d439bc770ad6de62c65caa14bbd280d4da5bfe37b0414d66442f21b96f4a9c9f1a5a15a69b2ad0ab3e2a86ae3c3f0858ba918e46e793eb04b81b79e21336b558913c79bac8e1d6c2edd58ea0142415388db8140496d9eaa0d214caad681bfd81f278a112abcd572f22314e44b76c00ca4e141109b", @generic="72ce6b109a8b658d4338f38b31d72ea91c94853d8fa55412f13c7909e706778ba02c65ad66194f5f2ee6975b35d22534f7c451e7d6f7ff236130eeb8278e95250cbf5592e9d262e6ab14c08a2f58dba3ca4bcd7f445ea524f7f26a187f6dee3cfd84444e491eddd9499882e014d66927a7fa0c19f2", @nested={0x4, 0x5e}, @nested={0x4}]}, @nested={0x1c3, 0x85, 0x0, 0x1, [@typed={0x8, 0xb8, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x162, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xfd}, @nested={0x4, 0x15f}, @typed={0xc, 0xda, 0x0, 0x0, @u64=0x6}, @generic="1a1961241ffd97e2ee1547e4a2189bd3c33c088f0bdaae3a919490f8e3564846a0b0201db066e73542bc3b909af89a392ac97f0b9ea97b7c23d195c56b3816586baad85b946d7806652c94f7a05caa84a1c70720c8e69f3052f4900f1ede2348723b67027d181a332440adb7d9857f3c710e2cb648ce3eebd5848170af732e7ac68e60d565dde1d0db121ef582182b1f97d7ef8373", @typed={0x8, 0x114, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x127}, @generic="b870b04d893a20dadb1b30049ab7e0effd4c86e426a243fc2f24c9c9c13c8a1475b177b5a471d779c9128d89bbde08328bfb9cace315092b355b79cb799edc1dcc450c65c380ca941cc5970a6350bfcbd2bff982ba89348f835a45e985f354fd956638f561d9d50aac3c8d6c0940741da6bb3c168e91e2fc7853e868e2f25e851f995b61b169ede0dd6efcf081ad00c6760e280bd859d40dd3d706bfc0f2d9acf446f93f7b9a520f0315b6787bd10eb3f2c3f53bd9c244374007cf2a82048a82d73a20f38ae89f35da391c67c8b730fd3f03e5f1ead270131426c5c1656bf3d075664cf17e0e3588793844e14712"]}, @nested={0x8, 0x9e, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x4, 0x143}, @nested={0xb6, 0xf7, 0x0, 0x1, [@generic="e792464d01a31259be6a284b1a9e5c9f7df16c40744b858bfb47d4afec6466fd72afdc934f1d05a48604372883cebc159a8643f93cd1c70faed199020dd8cb1e393603f1a7b228d4d4459f753d7c62fa4717392236ab6c6dc2e82d93c12748eb3c0b205f8143dfacee15cabdc6781407f93baf76440914850f1252129c4c75c691712aae0f5454da0c3bd01344912169b09af4a62e524c3e0e1642fd9ea4766a57d42f235d177023b5aa", @typed={0x8, 0x8b, 0x0, 0x0, @uid=r3}]}, @nested={0x4, 0x5c}]}, 0x404}, 0x1, 0x0, 0x0, 0xc4}, 0x4080) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)={0x94, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xb}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x495}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x94}}, 0x800) 1.725472353s ago: executing program 3 (id=3812): r0 = socket(0x10, 0xa, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x7}, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) socket$phonet(0x23, 0x2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.426528295s ago: executing program 3 (id=3813): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0xfff3}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x40005, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0xa, 0xc28, 0x9, 0x8, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x80000001, 0x1, 0x1, 0x7, 0x40, 0x7, 0x10, 0x8000, 0x5, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x5, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x7, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x7ff, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x1, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0xb4, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x9, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x4, 0x9, 0x0, 0x4, 0x10, 0x6, 0x5, 0x2, 0x7a, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {0x4}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x4002, 0x0) ioctl$PPPIOCSMRRU(r9, 0x4004743b, &(0x7f00000004c0)=0x9) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="95", 0x1}, {&(0x7f0000000300)='w', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)='+', 0x1}, {&(0x7f0000000140)="88", 0x1}, {&(0x7f0000000480)='v', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)="983e", 0x2}, {&(0x7f0000000780)="0e", 0x1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000900)='\v', 0x1}, {&(0x7f0000000940)=']', 0x1}, {&(0x7f0000000240)="e0", 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)="aa", 0x1}, {&(0x7f0000000540)="94b0", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000d40)="ec", 0x1}, {&(0x7f0000000e00)='C', 0x1}, {&(0x7f0000000e40)='-', 0x1}, {&(0x7f0000002a80)='\n', 0x1}, {&(0x7f0000000fc0)="ee00004dfaca59a0070000005f8c334db67d58cabb8808a613758d54863412c384b842619547bd5482b34e97272b53b13c06620fb120ed8854df31e5ba0a6f61e9", 0x41}, {&(0x7f00000010c0)='H', 0x1}, {&(0x7f0000001180)='\'', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)="b8", 0x1}, {&(0x7f0000001440)="a5", 0x1}, {&(0x7f0000001480)="f9", 0x1}, {&(0x7f0000001540)="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", 0xac1}, {&(0x7f0000000180)="93", 0x1}], 0x5}}], 0x6, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 679.657667ms ago: executing program 0 (id=3814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711011000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0x1}, {0x3, 0xf}, {0x7fff, 0xd}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 677.849107ms ago: executing program 2 (id=3815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) socket(0x200000000000011, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001580)={&(0x7f00000002c0)="c8d1d7b8c84de7ff728450346d86daf2a7eb8b09d16b8aabb3fe01b303bbff425448f25f68951481657140ab7526d2233a5944b4f9468143c88efdd7aa2c1d2e2c987b928a017729ae1c9fbeb792d899403b5dc0cad1e1aeaca1b52ee09c10c14a4857263edb0e40e8491dc69a9b566df10cd72f33c332f150ed95d8fe5399f27ab411b6c4c3b3b2ca0ba730db027841af08eb812e110189cd2b47be6d35337c7a42ca6ab1efe35ba61f50d200c7ff33e403c3394912b6b1847877fdb10248cf96a235f34f755446412cbcef4a5f45298b5cd89668061e4ef442e0e88edd3ae8c6c7363f2c0fd99a5d98fb98b0902f3a95", &(0x7f00000003c0)=""/10, &(0x7f0000000500)="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", &(0x7f0000001500)="1f9d20c2aaea7f07ac7b695f1348a9b53b6475c66259330a02a6f22d6636b6beb4ecec48de4cf6013628917ef45970a3eefad0e73a1c2e321d83d4a35e658ea252594ef76ef5cc627c37d471d9cd8594ff638e8a76788eba9c6a29a34c7f60178b1f2ca97eeedc3271", 0x8, r0, 0x4}, 0x38) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00084acf010000d08513b71da6953c00003000000000f702000000ffffffac1414aa000000005351b85b6d2db65be1c2aaa0aa61dd550ef145448170", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040a0300050200000000000000000002d58838068b91000000"], 0x4e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@loopback, @in=@remote}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f00000009c0)=0xe8) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000c80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000004000006111780000000000850000000000000095000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) getgid() sendmsg$netlink(r1, &(0x7f0000000c40)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) 675.994559ms ago: executing program 4 (id=3816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@remote, @dev={0xac, 0x14, 0x14, 0x3b}, 0x15, 0x19}}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0edddb41c674f3e6a012a39989e14b0a3267d13fc96d6f2ad16b7750dca8e4fd607ab580e1d60cf2efbfdf1455"], 0x18}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x11}}], 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 520.197547ms ago: executing program 1 (id=3817): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000980)=[{&(0x7f00000002c0)="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", 0xff}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000180)}}], 0x2, 0x4040001) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={r8, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB="03c0f9dd1ac9f3d083feeffa0d82ada4c78542d11009e72b8b84f6c66c66e82b", @ANYRES32=r9, @ANYBLOB="db5a7666d44fc16285b97800fad80120a85846837270e9375a18bdfda05ffba801c9f18b64a0deedf9d70f5860a89860a9b9a51cc8821ec64f0453acf21f8cd5a61c6bd49f3073779805f7af65fb58fcc508b02a36a29c0011756716b774bf3c8653049beaf579bc88305367cf5a46350f13c26a21a9e574f14a5c5ba2b790fbc98359f558215e5cacfd1a0a41d75aa5a144483f75074e334998e70807779f8eb5d45d0c812db5944cfd3960e7b14f3f087e3ac4963bf8e6e11c05d9b5133c135cebdcbd3f512773027627643413cfe574c9dcfdafdfbdf8621067bddf9f0879535988203f6932e8dfc412b6bf041ff7cd4eaad4a75e0000000000008dc3ee28c0d30ab51635b4018d47d6ff9c459a6497d3a856c78d5e4f41006af26c39ea7c0c228b7d4a39a13a6f7db746d8966072bd684263ed20e3ae27af31243693d9f0de44564904ffe241c319b91894a4810030728c18e1eb0d38d66a34233c59305c0a257edc0fdb4ea4bad8580ac362aa256ecbcd93521cf5ab4e50b4a7709d78bad834e02f94439524e75731956835419da3cec14889bbad000000"], 0x4c}, 0x1, 0xba01}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 408.532119ms ago: executing program 4 (id=3818): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket(0x2b, 0x5, 0xc3a0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000067000000080003002d1fb8239460ba4e3f24af72ce6fc5f69e071443cf57aa4da7b979f513e36b59e15e29a6ff7e6234a7d5f27b208f4c6d6cef02d430ba14ba0017ea9f0888705580ddf5cc995d4ff4d25bb6859371cbe5e95b7e8cbb5f72ed60bb86c159def03e58230d2fe415db8032cb51d6d640a7e3588e20a4ad2db601ea096f1469f5c686fa17a2e47b0baf45f008234c33253006aa12f9e1512b5207043ebcbfedd4000000", @ANYRES32=r5, @ANYBLOB="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"], 0x70}}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="53da8a6fe809"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) accept4(r1, 0x0, 0x0, 0x0) 306.919367ms ago: executing program 3 (id=3819): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000340), &(0x7f0000000140)=r1}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='nv', 0xc38) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x7c86, 0x80000001, 0x1, 0x9, 0x1b, 0x0, 0x3, 0x3}, &(0x7f00000001c0)={0x5, 0x4, 0x18000000, 0x3, 0x9, 0x9, 0xf4c, 0xffff}, &(0x7f0000000240)={0xef41, 0xdd9, 0x9, 0xe89, 0x0, 0x401, 0x0, 0x1a}, &(0x7f0000000280), &(0x7f00000003c0)={&(0x7f00000002c0)={[0x2]}, 0x8}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000021c0), 0x0}, 0x20) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="0911008d0c00"}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xd0f, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000020000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 244.20199ms ago: executing program 0 (id=3820): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x8, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x14, 0x3a, 0xf9, 0x0, 0x0, 0x8}, [@FRA_SRC={0x8, 0x2, @empty}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x9}]}, 0x2c}}, 0x0) 187.782241ms ago: executing program 4 (id=3821): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc3}) 45.431709ms ago: executing program 2 (id=3822): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf25090000e10800010001000000050008000000000005000700170000000800010002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 0 (id=3823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x75, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000500)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) kernel console output (not intermixed with test programs): e type 3 has an invalid length. [ 367.248297][T16005] netlink: 'syz.4.2832': attribute type 2 has an invalid length. [ 367.501027][T16018] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 367.787329][T16032] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 367.826081][T16032] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 367.854890][T16032] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 367.909024][T16032] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 367.988856][T16032] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 368.009669][T16038] netlink: 'syz.0.2841': attribute type 11 has an invalid length. [ 368.020022][T16034] dvmrp0: entered allmulticast mode [ 368.056849][T16038] netlink: 'syz.0.2841': attribute type 4 has an invalid length. [ 368.094644][T16038] __nla_validate_parse: 2 callbacks suppressed [ 368.094664][T16038] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2841'. [ 368.254350][T16047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2844'. [ 368.288522][T16047] xt_TCPMSS: Only works on TCP SYN packets [ 368.469756][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.471414][T16053] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2845'. [ 368.496587][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.516916][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.529980][T16053] 0·: renamed from hsr0 [ 368.537386][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.549380][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.574886][T16053] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.586253][T16053] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.605021][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.613094][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.623605][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.634836][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.648190][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.728286][T16053] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 368.921327][T16066] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2847'. [ 369.116609][ T5626] bond6: (slave syz_tun): Removing an active aggregator [ 369.135670][ T5626] bond6: (slave syz_tun): Releasing backup interface [ 369.143274][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 369.455248][ T48] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.486986][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 369.558224][T16083] netlink: 'syz.0.2852': attribute type 58 has an invalid length. [ 369.588606][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2852'. [ 369.873207][T16093] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2856'. [ 369.898352][T16093] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2856'. [ 369.936736][T16093] netlink: 'syz.0.2856': attribute type 5 has an invalid length. [ 369.982554][T16093] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2856'. [ 370.166097][T16094] bond6 (unregistering): Released all slaves [ 370.458038][T16102] syzkaller0: entered promiscuous mode [ 370.468296][T16102] syzkaller0: entered allmulticast mode [ 370.469621][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2859'. [ 370.544064][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2859'. [ 370.752967][ T5635] Bluetooth: hci5: command tx timeout [ 372.822378][ T5635] Bluetooth: hci5: command tx timeout [ 373.270136][T16051] lo speed is unknown, defaulting to 1000 [ 373.919334][T16159] __nla_validate_parse: 1 callbacks suppressed [ 373.919357][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2868'. [ 374.154028][T16166] bond6: Unable to set down delay as MII monitoring is disabled [ 374.168866][T16166] bond6 (unregistering): Released all slaves [ 374.587873][T16051] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.595765][T16051] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.604466][T16051] bridge_slave_0: entered allmulticast mode [ 374.613729][T16051] bridge_slave_0: entered promiscuous mode [ 374.625285][T16051] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.633041][T16051] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.640538][T16051] bridge_slave_1: entered allmulticast mode [ 374.649327][T16051] bridge_slave_1: entered promiscuous mode [ 374.708861][T16051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.724352][T16051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.816761][T16051] team0: Port device team_slave_0 added [ 374.828112][T16051] team0: Port device team_slave_1 added [ 374.902992][ T5635] Bluetooth: hci5: command tx timeout [ 374.944312][T16051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.951589][T16051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.978480][T16051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.998406][T16051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.006891][T16051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.056972][T16051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.261544][T16051] hsr_slave_0: entered promiscuous mode [ 375.284036][T16051] hsr_slave_1: entered promiscuous mode [ 375.308586][T16051] debugfs: 'hsr0' already exists in 'hsr' [ 375.326276][T16051] Cannot create hsr debugfs directory [ 375.336340][T16198] netlink: 'syz.1.2878': attribute type 21 has an invalid length. [ 375.379831][T16199] netlink: 'syz.2.2877': attribute type 11 has an invalid length. [ 375.861555][T16216] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000 [ 375.884474][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2884'. [ 376.196755][T16228] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2887'. [ 376.245756][T16051] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 376.260176][T16051] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.466267][T16051] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 376.504935][T16051] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.733643][T16249] netlink: 'syz.0.2895': attribute type 2 has an invalid length. [ 376.772643][T16051] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 376.788000][T16051] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.879963][T16051] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 376.901839][T16051] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.982812][ T5635] Bluetooth: hci5: command tx timeout [ 377.339815][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2898'. [ 377.515653][T16051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.572093][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.593338][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 377.617204][T16051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.686090][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.715844][T16051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.757685][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.781315][T16051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.847419][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.982122][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 378.136748][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'. [ 378.165518][T16301] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 378.176568][T16311] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2906'. [ 378.184105][T16295] netlink: 'syz.2.2905': attribute type 1 has an invalid length. [ 378.221842][T16295] netlink: 'syz.2.2905': attribute type 1 has an invalid length. [ 378.300527][T16295] netlink: 'syz.2.2905': attribute type 2 has an invalid length. [ 378.350308][T16295] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2905'. [ 378.470873][T16313] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2909'. [ 378.510101][T16051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.688728][T16051] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.738228][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.746717][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.864668][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.871885][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.226931][T16336] netlink: 'syz.1.2916': attribute type 22 has an invalid length. [ 379.262528][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2916'. [ 379.647317][T16347] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2919'. [ 379.794319][T16354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2921'. [ 379.906615][T16355] netlink: zone id is out of range [ 379.941475][T16355] netlink: zone id is out of range [ 379.976938][T16355] netlink: zone id is out of range [ 380.035002][T16355] netlink: zone id is out of range [ 380.051027][T16355] netlink: zone id is out of range [ 380.083005][T16355] netlink: zone id is out of range [ 380.096876][T16355] netlink: zone id is out of range [ 380.122529][T16355] netlink: zone id is out of range [ 380.134388][T16355] netlink: zone id is out of range [ 380.153361][T16355] netlink: zone id is out of range [ 380.807106][T16051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.008924][T16385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2930'. [ 381.390431][ T5951] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.425114][ T5951] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.464544][ T5951] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.514551][ T5951] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.732103][T16416] netlink: 'syz.3.2935': attribute type 19 has an invalid length. [ 381.778624][T16419] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2936'. [ 382.159876][T16051] veth0_vlan: entered promiscuous mode [ 382.230482][T16051] veth1_vlan: entered promiscuous mode [ 382.378677][T16051] veth0_macvtap: entered promiscuous mode [ 382.425525][T16051] veth1_macvtap: entered promiscuous mode [ 382.510562][T16051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.579896][T16449] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2943'. [ 382.598094][T16051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.637213][ T1054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.674573][ T1054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.710004][ T1054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.725826][T16452] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.2946'. [ 382.754531][ T1054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.010717][T16466] netlink: 'syz.1.2950': attribute type 1 has an invalid length. [ 383.035054][T16466] netlink: 'syz.1.2950': attribute type 1 has an invalid length. [ 383.057443][T16466] netlink: 'syz.1.2950': attribute type 1 has an invalid length. [ 383.084999][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.100610][T16466] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2950'. [ 383.115752][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.197868][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.214621][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.930404][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.946892][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.957626][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.969754][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.987838][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 384.225635][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 384.284255][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 384.319909][T16507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2959'. [ 384.364101][T16502] geneve3: entered promiscuous mode [ 385.317588][T16538] gre1: entered promiscuous mode [ 385.332408][T16538] gre1: entered allmulticast mode [ 385.718150][T16543] syzkaller0: entered promiscuous mode [ 385.737094][T16543] syzkaller0: entered allmulticast mode [ 386.030469][ T5644] Bluetooth: hci2: command tx timeout [ 386.087798][T16555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2970'. [ 386.209391][T16491] lo speed is unknown, defaulting to 1000 [ 387.705326][T16572] bridge0: port 3(team0) entered disabled state [ 387.714426][T16572] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.722225][T16572] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.103882][ T5644] Bluetooth: hci2: command tx timeout [ 388.368323][T16572] veth0_to_bridge: left allmulticast mode [ 388.803688][T16572] vlan2: left promiscuous mode [ 388.819897][T16572] veth3: left promiscuous mode [ 388.834536][T16572] bond3: left promiscuous mode [ 388.843377][T16572] gretap1: left promiscuous mode [ 388.848379][T16572] gretap1: left allmulticast mode [ 388.862663][T16572] gretap2: left promiscuous mode [ 388.873882][T16572] gretap2: left allmulticast mode [ 388.911744][T16572] veth1_vlan: left allmulticast mode [ 388.922779][T16572] macvtap1: left promiscuous mode [ 388.932690][T16572] macvtap1: left allmulticast mode [ 388.945389][T16572] bridge11: left promiscuous mode [ 388.955878][T16572] bridge11: left allmulticast mode [ 389.026719][ T57] bridge_slave_1: left allmulticast mode [ 389.037140][ T57] bridge_slave_1: left promiscuous mode [ 389.057777][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.099097][ T57] bridge_slave_0: left allmulticast mode [ 389.106345][ T57] bridge_slave_0: left promiscuous mode [ 389.113564][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.252121][ T57] pim6reg: left allmulticast mode [ 389.260654][ T57] dvmrp0: left allmulticast mode [ 389.781641][ T57] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 390.020658][ T57] bond6 (unregistering): (slave bridge30): Releasing backup interface [ 390.100892][ T57]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.116378][ T57]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.128933][ T57]  (unregistering): (slave bond1): Releasing backup interface [ 390.139368][ T57]  (unregistering): Released all slaves [ 390.159723][ T57] bond1 (unregistering): Released all slaves [ 390.181425][ T57] bond2 (unregistering): Released all slaves [ 390.190403][ T5644] Bluetooth: hci2: command tx timeout [ 390.218769][ T57] bond3 (unregistering): Released all slaves [ 390.248394][ T57] bond4 (unregistering): Released all slaves [ 390.276430][ T57] bond5 (unregistering): Released all slaves [ 390.304510][ T57] bond6 (unregistering): Released all slaves [ 390.327279][ T57] bond0 (unregistering): Released all slaves [ 390.418016][T16588] macsec1: entered promiscuous mode [ 390.502138][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 390.563877][T16627] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2986'. [ 390.757209][ T57] : left promiscuous mode [ 390.806253][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2989'. [ 390.824186][T16647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2989'. [ 390.859614][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2989'. [ 390.906534][T16647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2989'. [ 390.979385][ T57] tipc: Disabling bearer [ 391.030679][ T57] tipc: Disabling bearer [ 391.082020][ T57] tipc: Left network mode [ 391.249138][T16661] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2991'. [ 391.285810][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 391.329405][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'. [ 391.329848][T16667] netlink: 'syz.3.2992': attribute type 83 has an invalid length. [ 391.664177][T16491] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.694713][T16491] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.723830][T16491] bridge_slave_0: entered allmulticast mode [ 391.761943][T16491] bridge_slave_0: entered promiscuous mode [ 391.808444][T16491] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.832502][T16491] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.859041][T16491] bridge_slave_1: entered allmulticast mode [ 391.890931][T16491] bridge_slave_1: entered promiscuous mode [ 391.991137][T16681] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2995'. [ 392.061316][T16688] netlink: 'syz.4.2997': attribute type 3 has an invalid length. [ 392.129104][T16491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.240882][T16491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.274781][ T5644] Bluetooth: hci2: command tx timeout [ 392.670922][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2999'. [ 393.054461][T16491] team0: Port device team_slave_0 added [ 393.105940][T16491] team0: Port device team_slave_1 added [ 393.567962][T16491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.609670][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.671476][T16491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.696755][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 393.759491][T16491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.813805][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.866227][T16491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.309893][T16491] hsr_slave_0: entered promiscuous mode [ 394.360902][T16491] hsr_slave_1: entered promiscuous mode [ 394.469415][T16491] debugfs: 'hsr0' already exists in 'hsr' [ 394.497277][T16491] Cannot create hsr debugfs directory [ 394.541256][T16741] netlink: 'syz.1.3007': attribute type 6 has an invalid length. [ 395.293014][ T57] hsr_slave_0: left promiscuous mode [ 395.317479][ T57] hsr_slave_1: left promiscuous mode [ 395.344072][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.365930][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.226816][ T1054] smc: removing ib device syz0 [ 396.558339][ T57] team0 (unregistering): Port device team_slave_1 removed [ 396.622998][ T57] team0 (unregistering): Port device team_slave_0 removed [ 397.175905][ T57] team0 (unregistering): Port device dummy0 removed [ 397.498362][ T1054] smbdirect: ib_dev[syz0] removed [ 397.530823][T16790] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3014'. [ 397.566701][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 399.170676][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3027'. [ 399.883097][T16834] syz_tun: refused to change device tx_queue_len [ 400.164626][T16858] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20004 [ 400.430165][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 400.507232][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 401.027488][T16869] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 401.428026][T16898] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3038'. [ 402.586546][T16491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.910879][T16491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.072392][T16491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.158512][T16491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.215471][T16491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.311269][T16491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.359244][T16491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.424515][T16491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.653055][ T57] IPVS: stop unused estimator thread 0... [ 404.177045][T16491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.258329][T16977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 404.261113][T16976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 404.271097][T16491] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.330886][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.338162][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.351191][T16977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 404.388849][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.396156][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.437513][T16976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 404.778149][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'. [ 406.753683][T17030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3062'. [ 407.140775][T16491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.418550][T16491] veth0_vlan: entered promiscuous mode [ 407.517243][T16491] veth1_vlan: entered promiscuous mode [ 407.698774][T16491] veth0_macvtap: entered promiscuous mode [ 407.759572][T16491] veth1_macvtap: entered promiscuous mode [ 407.879781][T16491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.937155][T16491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.025973][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.081364][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'. [ 408.109464][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.183752][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.222126][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.434672][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3075'. [ 408.605653][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.659821][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.873018][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.899260][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.989459][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 409.044333][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 409.156191][T17088] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 409.782815][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.788428][T17103] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 409.809780][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.823808][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.825453][T17103] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 409.832661][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.859941][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.983797][T17103] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 410.161593][T17103] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 410.251943][T17128] net_ratelimit: 46 callbacks suppressed [ 410.252001][T17128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.729125][ T1054] smbdirect: ib_dev[syz2] removed [ 410.814844][T17151] __nla_validate_parse: 3 callbacks suppressed [ 410.814865][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'. [ 411.349382][T17162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3090'. [ 411.534614][T17162] team0 (unregistering): Port device team_slave_0 removed [ 411.611424][T17162] team0 (unregistering): Port device team_slave_1 removed [ 411.679615][T17176] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3092'. [ 411.942605][ T5635] Bluetooth: hci0: command tx timeout [ 411.945339][T17176] bond6 (unregistering): Released all slaves [ 412.226825][T17113] lo speed is unknown, defaulting to 1000 [ 412.721093][T17197] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3096'. [ 413.227492][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 413.536756][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3101'. [ 413.925663][T17259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.023096][ T5635] Bluetooth: hci0: command tx timeout [ 414.725749][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'. [ 415.167579][T17113] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.198084][T17113] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.232921][T17113] bridge_slave_0: entered allmulticast mode [ 415.267033][T17113] bridge_slave_0: entered promiscuous mode [ 415.315586][T17113] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.357434][T17316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3113'. [ 415.359877][T17113] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.392636][T17113] bridge_slave_1: entered allmulticast mode [ 415.418886][T17113] bridge_slave_1: entered promiscuous mode [ 415.675168][T17113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.755817][T17113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.915688][T17113] team0: Port device team_slave_0 added [ 415.936161][T17113] team0: Port device team_slave_1 added [ 416.023180][T17113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.125997][ T5635] Bluetooth: hci0: command tx timeout [ 416.188852][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.242348][T17113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.327153][T17113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.369942][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.428022][T17113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.584639][T17335] netlink: 'syz.3.3119': attribute type 4 has an invalid length. [ 416.635202][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'. [ 416.668661][T17336] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3116'. [ 416.690063][T17113] hsr_slave_0: entered promiscuous mode [ 416.708643][T17113] hsr_slave_1: entered promiscuous mode [ 416.727282][T17113] debugfs: 'hsr0' already exists in 'hsr' [ 416.741923][T17113] Cannot create hsr debugfs directory [ 417.120239][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'. [ 417.728794][T17375] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 418.126734][T17113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.180739][T17113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 418.265999][ T5635] Bluetooth: hci0: command tx timeout [ 418.307808][T17390] netlink: 'syz.2.3131': attribute type 25 has an invalid length. [ 418.534204][T17113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.591817][T17113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 418.677823][ T6833] hid-generic 0005:0C45:0009.0001: item fetching failed at offset 4/5 [ 418.693036][ T6833] hid-generic 0005:0C45:0009.0001: probe with driver hid-generic failed with error -22 [ 418.951829][T17113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.994117][T17419] Dead loop on virtual device ip6_vti0 (net 155), fix it urgently! [ 419.009925][T17113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 419.136200][T17423] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 419.146793][T17419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3137'. [ 419.526749][T17433] netlink: 'syz.0.3139': attribute type 10 has an invalid length. [ 419.574596][T17440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3140'. [ 419.639392][T17433] bond5: (slave veth0_to_bond): Releasing active interface [ 419.687992][T17433] veth0_to_bond: entered promiscuous mode [ 419.715474][T17433] veth0_to_bond: entered allmulticast mode [ 420.435134][T17453] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3144'. [ 420.528822][T17465] sctp: [Deprecated]: syz.2.3148 (pid 17465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.528822][T17465] Use struct sctp_sack_info instead [ 420.569458][T17113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 420.601818][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.641279][T17113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 420.715246][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.745737][T17113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 420.759091][T17471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.766540][T17471] IPv6: NLM_F_CREATE should be set when creating new route [ 420.773840][T17471] IPv6: NLM_F_CREATE should be set when creating new route [ 420.801355][T17471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.819191][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.858518][T17113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 420.902107][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.954975][T17474] syzkaller1: entered promiscuous mode [ 420.971636][T17474] syzkaller1: entered allmulticast mode [ 421.717825][T17113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.794105][T17514] netlink: 'syz.2.3157': attribute type 1 has an invalid length. [ 421.976639][T17113] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.017944][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.025302][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.109212][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.116516][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.246639][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3161'. [ 422.255890][T17525] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3161'. [ 422.292049][T17525] netlink: 'syz.3.3161': attribute type 5 has an invalid length. [ 422.764642][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3164'. [ 422.799087][T17544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3164'. [ 422.857069][T17544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3164'. [ 424.091959][T17113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.175004][T17113] veth0_vlan: entered promiscuous mode [ 424.197424][T17113] veth1_vlan: entered promiscuous mode [ 424.240733][T17113] veth0_macvtap: entered promiscuous mode [ 424.254530][T17113] veth1_macvtap: entered promiscuous mode [ 424.287435][T17113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.311022][T17113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.329681][ T1054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.353998][ T1054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.380380][ T1054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.404425][ T1054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.537284][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.555619][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.610242][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.623903][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.411710][T17725] netlink: 'syz.3.3173': attribute type 21 has an invalid length. [ 444.460374][T17725] IPv6: NLM_F_CREATE should be specified when creating new route [ 444.568854][T17732] netlink: 'syz.3.3173': attribute type 21 has an invalid length. [ 444.672651][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.690575][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.699654][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.714091][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.726453][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.526010][T17762] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 445.793547][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 446.050510][T17776] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 446.137563][T17781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3187'. [ 446.226589][T17781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3187'. [ 446.304682][T17789] netlink: 'syz.2.3187': attribute type 7 has an invalid length. [ 446.369703][T17776] bond1: entered promiscuous mode [ 446.380520][T17776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.388735][T17795] netlink: 'syz.3.3191': attribute type 1 has an invalid length. [ 446.474682][T17785] bond1: (slave bridge1): making interface the new active one [ 446.483652][T17785] bridge1: entered promiscuous mode [ 446.491096][T17785] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 446.579713][T17800] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3192'. [ 446.822871][ T5635] Bluetooth: hci3: command tx timeout [ 446.929743][T17797] bond6: (slave veth9): Enslaving as an active interface with a down link [ 446.987556][T17799] 8021q: adding VLAN 0 to HW filter on device bond6 [ 447.108575][T17741] lo speed is unknown, defaulting to 1000 [ 447.417706][T17820] syzkaller1: entered promiscuous mode [ 447.431659][T17820] syzkaller1: entered allmulticast mode [ 447.483668][T17832] netlink: 'syz.3.3199': attribute type 1 has an invalid length. [ 447.515396][T17832] netlink: 'syz.3.3199': attribute type 2 has an invalid length. [ 447.647500][T17835] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 447.762871][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'. [ 447.823764][T17844] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3203'. [ 447.840706][T17844] netlink: 'syz.1.3203': attribute type 5 has an invalid length. [ 447.854234][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'. [ 447.871138][T17843] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3203'. [ 447.882535][T17843] netlink: 'syz.1.3203': attribute type 5 has an invalid length. [ 448.036365][T17855] netlink: 'syz.3.3204': attribute type 21 has an invalid length. [ 448.046015][T17855] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3204'. [ 448.623993][T17871] xt_TCPMSS: Only works on TCP SYN packets [ 448.902662][ T5635] Bluetooth: hci3: command tx timeout [ 449.026418][T17885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3215'. [ 449.249951][T17741] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.341161][T17741] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.433121][T17741] bridge_slave_0: entered allmulticast mode [ 449.463200][T17741] bridge_slave_0: entered promiscuous mode [ 449.491864][T17741] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.543983][T17741] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.579801][T17741] bridge_slave_1: entered allmulticast mode [ 449.609665][T17741] bridge_slave_1: entered promiscuous mode [ 449.825433][T17741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.874565][T17741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.092879][T17917] macvtap0: entered allmulticast mode [ 450.135302][T17921] validate_nla: 2 callbacks suppressed [ 450.135322][T17921] netlink: 'syz.3.3224': attribute type 8 has an invalid length. [ 450.153025][T17917] veth0_macvtap: entered allmulticast mode [ 450.218280][T17741] team0: Port device team_slave_0 added [ 450.264671][T17928] netlink: 'syz.4.3227': attribute type 1 has an invalid length. [ 450.334608][T17741] team0: Port device team_slave_1 added [ 450.831679][T17741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.864349][T17741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.899967][T17741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.946923][T17741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.967107][T17741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.012733][ T5635] Bluetooth: hci3: command tx timeout [ 451.067917][T17741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.130256][T17944] __nla_validate_parse: 2 callbacks suppressed [ 451.130276][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'. [ 451.329062][T17741] hsr_slave_0: entered promiscuous mode [ 451.359104][T17741] hsr_slave_1: entered promiscuous mode [ 451.399491][T17741] debugfs: 'hsr0' already exists in 'hsr' [ 451.402816][T17949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3235'. [ 451.430852][T17741] Cannot create hsr debugfs directory [ 452.705869][T17741] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.857608][T17984] xt_hl: Unknown Hop Limit match mode: 206 [ 452.914612][T17985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3244'. [ 453.015292][T17741] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.062572][ T5635] Bluetooth: hci3: command tx timeout [ 453.423243][T17741] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.755846][T17741] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.871620][T18014] syzkaller0: entered promiscuous mode [ 453.892392][T18014] syzkaller0: entered allmulticast mode [ 453.998932][T18014] netlink: 'syz.4.3255': attribute type 1 has an invalid length. [ 454.210236][T18027] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 454.862036][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 454.916231][T17741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.987287][T17741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.010708][T17741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 455.047959][T17741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 455.083910][T18052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3264'. [ 455.093552][T17741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 455.126456][T17741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 455.156262][T17741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.207051][T17741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 455.500608][T18071] netlink: 'syz.1.3268': attribute type 4 has an invalid length. [ 455.575615][T17741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.608547][T18073] xt_hashlimit: size too large, truncated to 1048576 [ 455.701873][T17741] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.761259][T18075] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.840824][T18086] netlink: 'syz.4.3272': attribute type 3 has an invalid length. [ 455.957366][T18075] bridge_slave_0 (unregistering): left allmulticast mode [ 456.007350][T18075] bridge_slave_0 (unregistering): left promiscuous mode [ 456.057535][T18075] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.251556][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.258836][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.351641][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.359000][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.715441][T18109] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 456.731479][T18109] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 457.124091][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3280'. [ 457.641820][T18134] netlink: 'syz.3.3283': attribute type 1 has an invalid length. [ 457.734849][T18143] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20003 [ 458.019800][T18147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3286'. [ 458.103833][T18151] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3287'. [ 458.140364][T18151] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3287'. [ 458.496953][T18162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3290'. [ 458.554790][T18163] netlink: 'syz.1.3290': attribute type 23 has an invalid length. [ 458.869250][T18166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.898163][T18166] bond0: (slave bond1): Enslaving as an active interface with an up link [ 458.924998][T17741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.223041][T17741] veth0_vlan: entered promiscuous mode [ 459.297985][T17741] veth1_vlan: entered promiscuous mode [ 459.445315][T18192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3298'. [ 459.458524][T17741] veth0_macvtap: entered promiscuous mode [ 459.555169][T17741] veth1_macvtap: entered promiscuous mode [ 459.655365][T17741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.725771][T17741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.842008][ T5953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.879668][ T5953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.919488][ T5953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.957669][ T5953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.987593][T18204] netlink: 'syz.4.3304': attribute type 1 has an invalid length. [ 460.004466][T18204] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3304'. [ 460.184858][T18210] vlan1: entered allmulticast mode [ 460.213222][T18210] veth0_vlan: entered allmulticast mode [ 460.255699][T18210] netlink: 'syz.2.3305': attribute type 1 has an invalid length. [ 460.362643][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3305'. [ 460.539710][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3309'. [ 460.617003][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 460.735090][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.789780][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.951789][ T5954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.980292][ T5954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.081291][T18240] netlink: 'syz.1.3313': attribute type 2 has an invalid length. [ 461.114847][ T6842] IPVS: starting estimator thread 0... [ 461.117898][T18240] netlink: 'syz.1.3313': attribute type 11 has an invalid length. [ 461.147191][T18237] geneve3: entered promiscuous mode [ 461.236292][T18242] IPVS: using max 25 ests per chain, 60000 per kthread [ 461.266253][T18240] syzkaller0: entered promiscuous mode [ 461.296307][T18240] syzkaller0: entered allmulticast mode [ 461.686315][T18253] netlink: 'syz.2.3316': attribute type 12 has an invalid length. [ 462.065675][T18253] netlink: 'syz.2.3316': attribute type 12 has an invalid length. [ 462.379437][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.396978][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.414269][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.442636][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.455571][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 463.415932][T18303] netlink: 'syz.0.3324': attribute type 11 has an invalid length. [ 463.474003][T18303] __nla_validate_parse: 3 callbacks suppressed [ 463.474024][T18303] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3324'. [ 463.709199][T18265] lo speed is unknown, defaulting to 1000 [ 463.781688][T18308] netlink: 62 bytes leftover after parsing attributes in process `syz.4.3326'. [ 463.827206][T18308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3326'. [ 464.506854][ T5635] Bluetooth: hci4: command tx timeout [ 464.637348][T18334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3334'. [ 464.838871][T18312] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3328'. [ 464.854005][T18338] tipc: Enabling of bearer rejected, failed to enable media [ 465.148637][T18356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3339'. [ 465.237311][T18354] sit0: entered promiscuous mode [ 465.254233][T18354] netlink: 'syz.0.3338': attribute type 1 has an invalid length. [ 465.263459][T18354] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3338'. [ 465.296579][T18357] erspan0: entered promiscuous mode [ 465.312670][T18357] vlan3: entered promiscuous mode [ 465.537375][T18357] vlan3: entered promiscuous mode [ 465.670277][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3343'. [ 465.707513][T18265] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.742696][T18265] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.772065][T18265] bridge_slave_0: entered allmulticast mode [ 465.825036][T18265] bridge_slave_0: entered promiscuous mode [ 465.915694][T18357] vlan3: entered promiscuous mode [ 466.050058][T18265] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.068232][T18265] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.083882][T18265] bridge_slave_1: entered allmulticast mode [ 466.104049][T18265] bridge_slave_1: entered promiscuous mode [ 466.213126][T18265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.321120][T18265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.571815][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3346'. [ 466.582910][ T5644] Bluetooth: hci4: command tx timeout [ 466.614342][T18265] team0: Port device team_slave_0 added [ 466.624651][T18265] team0: Port device team_slave_1 added [ 466.672606][T18265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.679720][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.711838][T18265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.840806][T18385] bond2: option resend_igmp: invalid value (32767) [ 466.871743][T18406] netlink: 'syz.2.3353': attribute type 10 has an invalid length. [ 466.872344][T18385] bond2: option resend_igmp: allowed values 0 - 255 [ 466.890144][T18408] netlink: 'syz.2.3353': attribute type 10 has an invalid length. [ 466.916822][T18385] bond2 (unregistering): Released all slaves [ 466.975866][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3354'. [ 467.032059][T18265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.071919][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.127492][T18265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.637531][T18265] hsr_slave_0: entered promiscuous mode [ 467.667563][T18265] hsr_slave_1: entered promiscuous mode [ 467.688333][T18265] debugfs: 'hsr0' already exists in 'hsr' [ 467.708078][T18265] Cannot create hsr debugfs directory [ 468.047837][T18440] netlink: 'syz.2.3361': attribute type 11 has an invalid length. [ 468.520647][T18457] netlink: 'syz.4.3365': attribute type 10 has an invalid length. [ 468.549640][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3364'. [ 468.625085][T18447] syzkaller0: entered promiscuous mode [ 468.661017][T18447] syzkaller0: entered allmulticast mode [ 468.668094][ T5644] Bluetooth: hci4: command tx timeout [ 468.679404][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 468.690025][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 468.771101][T18465] openvswitch: netlink: Flow key attr not present in new flow. [ 469.310370][T18481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3372'. [ 469.388754][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 469.431722][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 469.544534][T18483] lo: entered promiscuous mode [ 469.611938][T18483] netlink: 'syz.4.3371': attribute type 2 has an invalid length. [ 469.664634][T18483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.742812][ T5644] Bluetooth: hci4: command tx timeout [ 472.521194][T18526] bond0: (slave bond_slave_1): Releasing backup interface [ 473.197211][T18546] raw_sendmsg: syz.1.3379 forgot to set AF_INET. Fix it! [ 473.214609][T18537] syzkaller0: entered promiscuous mode [ 473.240588][T18537] syzkaller0: entered allmulticast mode [ 473.350420][T18265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 473.399615][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.426253][T18265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 473.446083][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.488531][T18265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 473.523272][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.548254][T18265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 473.588544][T18265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.610253][ T6833] IPVS: starting estimator thread 0... [ 473.734708][T18555] IPVS: using max 31 ests per chain, 74400 per kthread [ 473.819674][T18569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3385'. [ 473.831253][T18570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3385'. [ 473.851516][T18567] syzkaller0: entered promiscuous mode [ 473.872898][T18567] syzkaller0: entered allmulticast mode [ 474.126570][T18575] xt_nat: multiple ranges no longer supported [ 474.560225][T18586] netlink: 'syz.0.3390': attribute type 1 has an invalid length. [ 474.635201][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'. [ 474.663315][T18586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.684489][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 474.775484][T18592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.817456][T18593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.020626][T18265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.157600][T18265] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.181950][T18602] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3397'. [ 475.220577][T18602] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3397'. [ 475.231789][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.239113][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.348034][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.355482][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.596086][T18614] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3399'. [ 475.673324][T18614] tipc: Trying to set illegal importance in message [ 475.750969][T18619] netlink: 'syz.0.3402': attribute type 12 has an invalid length. [ 475.781912][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3402'. [ 475.861540][T18619] netlink: 'syz.0.3402': attribute type 12 has an invalid length. [ 475.879670][ T5953] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.900040][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3402'. [ 475.912099][ T5953] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.946372][ T5953] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.969130][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3403'. [ 475.979888][ T5953] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.069513][ T5953] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.090313][ T5953] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.134350][ T5953] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.168417][ T5953] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.229074][T18630] netlink: 'syz.1.3405': attribute type 10 has an invalid length. [ 476.298399][T18630] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 476.321454][T18632] netlink: 'syz.2.3408': attribute type 4 has an invalid length. [ 476.335432][T18638] sctp: [Deprecated]: syz.0.3407 (pid 18638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.335432][T18638] Use struct sctp_sack_info instead [ 477.498345][T18678] syzkaller0: entered promiscuous mode [ 477.519934][T18678] syzkaller0: entered allmulticast mode [ 477.726265][T18681] nbd2: detected capacity change from 0 to 63 [ 477.784657][T18681] block nbd2: NBD_DISCONNECT [ 477.811881][T18265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.839812][T18682] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 477.844331][T18681] block nbd2: Disconnected due to user request. [ 477.858545][T18681] block nbd2: shutting down sockets [ 477.876800][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.887613][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 477.936627][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 477.946781][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 477.954656][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 477.962678][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 477.978851][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 477.993696][T18692] netlink: zone id is out of range [ 477.995264][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 478.000897][T18692] netlink: del zone limit has 4 unknown bytes [ 478.008497][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 478.026792][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 478.036950][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 478.048894][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 478.059527][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 478.069131][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 478.085608][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 478.099463][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 478.116931][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.133849][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.145706][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.156615][ T25] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.176735][T18535] ldm_validate_partition_table(): Disk read failed. [ 478.216614][T18535] Dev nbd2: unable to read RDB block 0 [ 478.245945][T18535] nbd2: unable to read partition table [ 478.281798][T18535] ldm_validate_partition_table(): Disk read failed. [ 478.299321][T18535] Dev nbd2: unable to read RDB block 0 [ 478.328234][T18535] nbd2: unable to read partition table [ 478.391338][T18265] veth0_vlan: entered promiscuous mode [ 478.406480][T18698] netlink: 'syz.0.3425': attribute type 5 has an invalid length. [ 478.494548][T18265] veth1_vlan: entered promiscuous mode [ 478.596705][T18698] syzkaller1: entered promiscuous mode [ 478.611454][T18698] syzkaller1: entered allmulticast mode [ 478.717923][T18265] veth0_macvtap: entered promiscuous mode [ 478.790400][T18265] veth1_macvtap: entered promiscuous mode [ 478.908129][T18265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.014703][T18265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.059553][ T8327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.099210][ T8327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.122459][T18727] __nla_validate_parse: 11 callbacks suppressed [ 479.122481][T18727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 479.153428][ T8327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.201729][ T8327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.681228][ T5951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.736092][ T5951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.878925][T18749] xt_TCPMSS: Only works on TCP SYN packets [ 479.986042][T18753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.075023][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.093789][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.302641][T18759] netlink: 'syz.0.3438': attribute type 10 has an invalid length. [ 480.524572][T18759] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 480.723994][T18772] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 480.774545][T18773] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 480.778600][T18781] netlink: 'syz.4.3447': attribute type 1 has an invalid length. [ 480.967255][T18773] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 481.018502][T18772] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 481.195320][T18781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.226026][T18773] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 481.236163][T18781] netlink: 'syz.4.3447': attribute type 1 has an invalid length. [ 481.258538][T18772] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 481.328699][T18782] bond2: (slave geneve2): making interface the new active one [ 481.344389][T18782] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 481.358937][T18773] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 481.380682][ T8327] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 481.407389][ T8327] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 481.437967][ T8327] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 481.457298][ T8327] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 481.603676][T18810] tun0: tun_chr_ioctl cmd 1074025675 [ 481.623150][T18810] tun0: persist disabled [ 481.658513][T18812] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3455'. [ 481.814013][T18814] sctp: [Deprecated]: syz.3.3454 (pid 18814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.814013][T18814] Use struct sctp_sack_info instead [ 481.961342][T18821] tipc: Enabling of bearer rejected, failed to enable media [ 482.228984][T18818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.243450][T18818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.257043][T18818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 482.285396][T18839] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 482.555636][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 482.657442][T18818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.697895][T18818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.753907][T18818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 482.873257][T18855] syzkaller0: entered promiscuous mode [ 482.896351][T18855] syzkaller0: entered allmulticast mode [ 483.172107][T18818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.199360][T18818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.211033][T18818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.457529][T18818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.526772][T18818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.576836][T18818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.641877][T18877] syz_tun: entered allmulticast mode [ 483.677536][T18879] pim6reg: entered allmulticast mode [ 483.958662][T18897] bond2: option all_slaves_active: invalid value (222) [ 483.968569][T18897] bond2 (unregistering): Released all slaves [ 484.157962][ T8327] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.173238][ T8327] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.194784][ T8327] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.391695][ T1054] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.425331][ T1054] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.436596][T18913] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 484.459146][ T1054] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.605418][ T1054] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.625036][ T1054] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.643922][ T1054] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.720209][ T8327] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.747839][ T8327] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.780799][ T8327] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 485.068884][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'. [ 485.107772][T18934] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 485.140969][T18934] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3488'. [ 485.652096][T18951] validate_nla: 37 callbacks suppressed [ 485.652117][T18951] netlink: 'syz.1.3493': attribute type 1 has an invalid length. [ 485.790625][T18951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.121679][T18973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3498'. [ 486.208005][T18977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3501'. [ 486.302518][T18975] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3500'. [ 486.473618][T18983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3504'. [ 486.485502][T18985] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 486.486307][T18984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3504'. [ 487.137969][T19012] blkio.reset_stats is deprecated [ 487.191491][T19015] bridge0: port 3(veth1_to_bridge) entered blocking state [ 487.216139][T19015] bridge0: port 3(veth1_to_bridge) entered disabled state [ 487.236893][T19015] veth1_to_bridge: entered allmulticast mode [ 487.297795][T19015] veth1_to_bridge: entered promiscuous mode [ 487.367287][T19015] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 487.420071][T19015] bridge0: port 3(veth1_to_bridge) entered blocking state [ 487.427480][T19015] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 487.470104][T19015] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3512'. [ 487.731056][T19022] bond2: invalid ARP target 0.0.0.0 specified for addition [ 487.741702][T19039] netlink: 'syz.3.3517': attribute type 1 has an invalid length. [ 487.762752][T19022] bond2: option arp_ip_target: invalid value (0) [ 487.817367][T19022] bond2 (unregistering): Released all slaves [ 487.917309][T19039] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 488.237161][T19051] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 488.311399][T19051] bond3: entered promiscuous mode [ 488.317921][T19051] 8021q: adding VLAN 0 to HW filter on device bond3 [ 489.347996][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3527'. [ 489.389983][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3527'. [ 489.654851][T19095] bond4: Invalid ad_actor_system MAC address. [ 489.690725][T19095] bond4: option ad_actor_system: invalid value (1) [ 489.734641][T19095] bond4 (unregistering): Released all slaves [ 490.156010][ T6839] IPVS: starting estimator thread 0... [ 490.167029][T19123] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 490.273277][T19125] IPVS: using max 29 ests per chain, 69600 per kthread [ 490.535804][T19137] __nla_validate_parse: 2 callbacks suppressed [ 490.535827][T19137] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3542'. [ 490.777135][T19147] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3544'. [ 490.805640][T19147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3544'. [ 490.862371][T19147] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3544'. [ 490.885446][T19147] netlink: 'syz.3.3544': attribute type 3 has an invalid length. [ 490.894983][T19152] gre1: entered promiscuous mode [ 490.895010][T19152] gre1: entered allmulticast mode [ 490.917323][T19147] netlink: 'syz.3.3544': attribute type 2 has an invalid length. [ 490.927085][T19147] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3544'. [ 491.144980][T19151] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3545'. [ 491.180650][T19151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3545'. [ 491.219517][T19151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3545'. [ 491.233474][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3548'. [ 491.273568][T19151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3545'. [ 492.581818][T19206] netlink: 'syz.2.3560': attribute type 1 has an invalid length. [ 492.622815][T19206] netlink: 'syz.2.3560': attribute type 3 has an invalid length. [ 492.652088][T19206] NCSI netlink: No device for ifindex 813332851 [ 493.192609][T19232] netlink: 'syz.3.3571': attribute type 13 has an invalid length. [ 493.226589][T19232] netlink: 'syz.3.3571': attribute type 58 has an invalid length. [ 493.352080][T19235] netlink: 'syz.0.3569': attribute type 1 has an invalid length. [ 493.576775][T19235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.887786][T19256] openvswitch: netlink: IPv4 tunnel dst address is zero [ 494.100385][T19245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.121855][T19245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.290857][T19245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.305496][T19245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.466600][T19272] openvswitch: netlink: Duplicate or invalid key (type 0). [ 494.484353][T19266] bond3 (unregistering): Released all slaves [ 494.500271][T19272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.567847][T19274] netlink: 'syz.4.3583': attribute type 1 has an invalid length. [ 494.727687][T19245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.777834][T19245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.070492][T19245] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.108946][T19245] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.717248][T19306] __nla_validate_parse: 9 callbacks suppressed [ 495.717270][T19306] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3590'. [ 495.735407][T19306] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 495.747490][T19306] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3590'. [ 495.812906][ T8327] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.833159][ T8327] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.001815][ T5954] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.045042][ T5954] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.266650][ T5952] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.290561][ T5952] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.405105][ T14] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.427247][ T14] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.653941][ T14] team0: left allmulticast mode [ 496.668313][ T14] team_slave_0: left allmulticast mode [ 496.688720][ T14] team_slave_1: left allmulticast mode [ 496.716143][ T14] geneve1: left allmulticast mode [ 496.746604][ T14] team0: left promiscuous mode [ 496.775635][ T14] team_slave_0: left promiscuous mode [ 496.808003][ T14] team_slave_1: left promiscuous mode [ 496.822788][ T14] geneve1: left promiscuous mode [ 496.839031][ T14] bridge0: port 3(team0) entered disabled state [ 496.847098][T19331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'. [ 496.880529][ T14] bridge_slave_1: left promiscuous mode [ 496.896520][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.950072][ T14] bridge_slave_0: left allmulticast mode [ 496.991926][ T14] bridge_slave_0: left promiscuous mode [ 497.030303][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.292367][ T14] dvmrp8: left allmulticast mode [ 497.315255][ T14] pimreg3: left allmulticast mode [ 497.336424][ T14] pimreg9: left allmulticast mode [ 497.494693][ T14] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 497.827865][ T14] team0: Port device geneve1 removed [ 498.085104][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.098259][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.111994][ T14] bond0 (unregistering): Released all slaves [ 498.126066][ T14] bond1 (unregistering): Released all slaves [ 498.149601][ T14] bond2 (unregistering): Released all slaves [ 498.181920][ T14] bond3 (unregistering): Released all slaves [ 498.226607][ T14] bond4 (unregistering): Released all slaves [ 498.270833][ T14] bond5 (unregistering): Released all slaves [ 498.330270][ T14] bond6 (unregistering): (slave veth9): Releasing active interface [ 498.347639][ T14] bond6 (unregistering): Released all slaves [ 498.404233][T19354] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 498.511660][ T6823] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 499.216492][T19386] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3609'. [ 499.393503][T13147] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 499.593123][T19391] netlink: 'syz.0.3611': attribute type 9 has an invalid length. [ 499.727778][ T14] hsr_slave_0: left promiscuous mode [ 499.754791][ T14] hsr_slave_1: left promiscuous mode [ 499.793112][ T14] veth0_macvtap: left allmulticast mode [ 500.812003][T19409] netlink: 'syz.3.3615': attribute type 1 has an invalid length. [ 500.938961][ T14] team0 (unregistering): Port device team_slave_1 removed [ 500.964951][ T14] team0 (unregistering): Port device team_slave_0 removed [ 501.197630][ T1054] smbdirect: ib_dev[syś2] removed [ 501.276983][T19393] ipvlan2: entered allmulticast mode [ 501.294615][T19393] batadv_slave_1: entered allmulticast mode [ 501.305902][T19393] batman_adv: batadv0: Adding interface: ipvlan2 [ 501.322353][T19393] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.349928][T19393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.361143][T19393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.372042][T19393] batman_adv: batadv0: Interface activated: ipvlan2 [ 501.599234][T19409] bond1: entered promiscuous mode [ 501.638441][T19409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.672580][T19410] macvtap1: entered allmulticast mode [ 501.691982][T19411] macvtap2: entered allmulticast mode [ 501.784705][T19412] bond1: (slave bridge1): making interface the new active one [ 501.789615][T19416] openvswitch: netlink: Key type 153 is out of range max 32 [ 501.816130][T19412] bridge1: entered promiscuous mode [ 501.841855][T19419] netlink: 'syz.1.3617': attribute type 4 has an invalid length. [ 501.857743][T19423] netlink: 'syz.1.3617': attribute type 4 has an invalid length. [ 501.869587][T19412] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 502.083546][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3620'. [ 502.141793][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3620'. [ 502.262730][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 502.359203][T19434] IPv6: NLM_F_CREATE should be specified when creating new route [ 502.446992][ T14] IPVS: stop unused estimator thread 0... [ 503.335135][T19465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.410205][T19465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.739873][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3633'. [ 503.766863][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 503.775189][T19477] bond3: entered promiscuous mode [ 504.544110][T19495] netlink: 'syz.4.3636': attribute type 21 has an invalid length. [ 504.911385][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3640'. [ 505.015927][T19513] netlink: 'syz.2.3641': attribute type 1 has an invalid length. [ 505.195361][T19513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.281720][T19519] syzkaller0: entered promiscuous mode [ 505.289137][T19519] syzkaller0: entered allmulticast mode [ 505.395857][T19516] bond3: (slave gretap1): making interface the new active one [ 505.451288][T19516] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 505.579421][T19534] netlink: 'syz.3.3647': attribute type 39 has an invalid length. [ 505.659831][T19537] netlink: 'syz.1.3646': attribute type 1 has an invalid length. [ 505.753094][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3647'. [ 505.961903][T19537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.038263][T19550] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3650'. [ 506.349846][T19560] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001 [ 506.363957][T19561] netlink: 'syz.4.3652': attribute type 2 has an invalid length. [ 506.403515][T19561] netlink: 'syz.4.3652': attribute type 8 has an invalid length. [ 506.423015][T19561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3652'. [ 506.829196][T19582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3658'. [ 507.221396][T19585] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 507.282803][T19585] bond4 (unregistering): Released all slaves [ 507.769326][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3672'. [ 507.794414][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3672'. [ 507.805492][T19620] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3669'. [ 507.873941][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'. [ 508.026648][T19628] macvlan0: entered promiscuous mode [ 508.068187][T19628] bond0: Error: CAN devices cannot be enslaved [ 508.121864][T19628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3674'. [ 508.122680][T19631] netlink: 'syz.2.3675': attribute type 5 has an invalid length. [ 508.170581][T19628] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3674'. [ 508.824271][T19578] Bluetooth: hci2: command 0x0406 tx timeout [ 508.832089][T19578] Bluetooth: hci5: command 0x0406 tx timeout [ 509.056165][T19667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3684'. [ 509.104884][T19669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3685'. [ 509.126890][ T30] audit: type=1107 audit(1782577870.948:3): pid=19668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 509.186119][T19667] x_tables: duplicate underflow at hook 2 [ 509.806313][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3690'. [ 509.879938][T19690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.201655][T19707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3695'. [ 510.250179][T19716] netlink: 'syz.0.3697': attribute type 3 has an invalid length. [ 511.417312][T19728] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 513.046511][T19697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.761309][T19788] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 513.834510][T19788] __nla_validate_parse: 5 callbacks suppressed [ 513.834533][T19788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3717'. [ 513.871923][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 513.894146][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 513.933048][T19796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3720'. [ 513.944256][T19796] openvswitch: netlink: Missing key (keys=40, expected=80) [ 514.061251][T19788] bond4 (unregistering): Released all slaves [ 514.130541][T19796] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.139409][T19796] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.428735][T19808] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3724'. [ 514.735780][T19823] bridge2: entered allmulticast mode [ 515.018811][T19826] bond4: option lp_interval: invalid value (0) [ 515.038832][T19835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3735'. [ 515.082367][T19826] bond4: option lp_interval: allowed values 1 - 2147483647 [ 515.111878][T19826] bond4 (unregistering): Released all slaves [ 515.549141][ T5953] tipc: Subscription rejected, illegal request [ 515.630854][T19859] netlink: 'syz.0.3737': attribute type 5 has an invalid length. [ 515.675800][T19853] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3737'. [ 516.079474][T19867] syzkaller0: entered promiscuous mode [ 516.109653][T19867] syzkaller0: entered allmulticast mode [ 516.891864][T19903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3752'. [ 517.072063][T19908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3754'. [ 517.127514][T19911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3754'. [ 517.151950][T19910] netlink: 'syz.0.3755': attribute type 12 has an invalid length. [ 517.509490][T19918] netlink: 'syz.0.3758': attribute type 1 has an invalid length. [ 518.238612][T19947] tls_set_device_offload: netdev not found [ 519.253181][T19964] syzkaller1: entered promiscuous mode [ 519.288516][T19964] syzkaller1: entered allmulticast mode [ 519.335854][T19983] syz.0.3772: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 519.415393][T19983] CPU: 0 UID: 0 PID: 19983 Comm: syz.0.3772 Not tainted syzkaller #0 PREEMPT(full) [ 519.415425][T19983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.415437][T19983] Call Trace: [ 519.415446][T19983] [ 519.415454][T19983] dump_stack_lvl+0xe8/0x150 [ 519.415503][T19983] warn_alloc+0x24c/0x270 [ 519.415583][T19983] ? stack_depot_save_flags+0x33/0x800 [ 519.415689][T19983] ? __pfx_warn_alloc+0x10/0x10 [ 519.415723][T19983] ? kasan_save_track+0x3e/0x80 [ 519.415751][T19983] ? __kasan_kmalloc+0x93/0xb0 [ 519.415775][T19983] ? xsk_setsockopt+0x52a/0x960 [ 519.415863][T19983] ? do_sock_setsockopt+0x17c/0x1b0 [ 519.415952][T19983] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 519.415973][T19983] ? do_syscall_64+0x174/0x580 [ 519.415993][T19983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.416028][T19983] __vmalloc_node_range_noprof+0x12c/0x1730 [ 519.416090][T19983] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 519.416125][T19983] ? __kasan_kmalloc+0x93/0xb0 [ 519.416147][T19983] ? __kmalloc_cache_noprof+0x32d/0x660 [ 519.416178][T19983] ? __kmalloc_cache_noprof+0x150/0x660 [ 519.416213][T19983] vmalloc_user_noprof+0xad/0xe0 [ 519.416243][T19983] ? xskq_create+0xbf/0x170 [ 519.416272][T19983] xskq_create+0xbf/0x170 [ 519.416302][T19983] xsk_init_queue+0x8a/0xe0 [ 519.416332][T19983] xsk_setsockopt+0x52a/0x960 [ 519.416356][T19983] ? __fget_files+0x2a/0x420 [ 519.416382][T19983] ? __pfx_xsk_setsockopt+0x10/0x10 [ 519.416409][T19983] ? __pfx_aa_sk_perm+0x10/0x10 [ 519.416515][T19983] ? aa_sock_opt_perm+0xff/0x1a0 [ 519.416552][T19983] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 519.416598][T19983] ? __pfx_xsk_setsockopt+0x10/0x10 [ 519.416628][T19983] do_sock_setsockopt+0x17c/0x1b0 [ 519.416655][T19983] __x64_sys_setsockopt+0x13d/0x1b0 [ 519.416680][T19983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.416704][T19983] do_syscall_64+0x174/0x580 [ 519.416722][T19983] ? trace_irq_disable+0x3b/0x140 [ 519.416743][T19983] ? clear_bhb_loop+0x40/0x90 [ 519.416769][T19983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.416789][T19983] RIP: 0033:0x7f79fdf9ce59 [ 519.416810][T19983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.416827][T19983] RSP: 002b:00007f79feebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 519.416850][T19983] RAX: ffffffffffffffda RBX: 00007f79fe215fa0 RCX: 00007f79fdf9ce59 [ 519.416865][T19983] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 519.416878][T19983] RBP: 00007f79fe032e6f R08: 0000000000000004 R09: 0000000000000000 [ 519.416890][T19983] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.416903][T19983] R13: 00007f79fe216038 R14: 00007f79fe215fa0 R15: 00007ffe0176f948 [ 519.416937][T19983] [ 519.421817][T19992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3772'. [ 519.429581][T19983] Mem-Info: [ 519.961366][T19983] active_anon:5676 inactive_anon:0 isolated_anon:0 [ 519.961366][T19983] active_file:0 inactive_file:43665 isolated_file:0 [ 519.961366][T19983] unevictable:768 dirty:35 writeback:0 [ 519.961366][T19983] slab_reclaimable:11653 slab_unreclaimable:113634 [ 519.961366][T19983] mapped:31485 shmem:1339 pagetables:1256 [ 519.961366][T19983] sec_pagetables:0 bounce:0 [ 519.961366][T19983] kernel_misc_reclaimable:0 [ 519.961366][T19983] free:1307441 free_pcp:9634 free_cma:0 [ 520.141621][T19983] Node 0 active_anon:22808kB inactive_anon:0kB active_file:0kB inactive_file:174456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121736kB dirty:140kB writeback:0kB shmem:3820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14940kB pagetables:5040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 520.216979][T19983] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 520.328227][T19983] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.400939][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3779'. [ 520.421495][T19983] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 520.439826][T19983] Node 0 DMA32 free:1280620kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22808kB inactive_anon:0kB active_file:0kB inactive_file:174456kB unevictable:1536kB writepending:140kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:37148kB local_pcp:20792kB free_cma:0kB [ 520.524784][T19983] lowmem_reserve[]: 0 0 0 0 0 [ 520.553281][T19983] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 520.657282][T19983] lowmem_reserve[]: 0 0 0 0 0 [ 520.683776][T19983] Node 1 Normal free:3933492kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2764kB local_pcp:2764kB free_cma:0kB [ 520.771565][T19983] lowmem_reserve[]: 0 0 0 0 0 [ 520.789935][T19983] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 520.846600][T19983] Node 0 DMA32: 2214*4kB (UME) 980*8kB (UM) 371*16kB (UME) 339*32kB (UME) 47*64kB (UM) 32*128kB (UM) 13*256kB (UME) 6*512kB (UME) 6*1024kB (UM) 5*2048kB (UM) 297*4096kB (UM) = 1279880kB [ 520.940472][T19983] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 521.005182][T19983] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3933492kB [ 521.039018][T19983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.088587][T19983] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.138761][T19983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.179061][T19983] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.214033][T19983] 44969 total pagecache pages [ 521.230111][T19983] 0 pages in swap cache [ 521.249419][T19983] Free swap = 124996kB [ 521.263375][T19983] Total swap = 124996kB [ 521.284583][T19983] 2097051 pages RAM [ 521.299745][T19983] 0 pages HighMem/MovableOnly [ 521.315559][T19983] 427419 pages reserved [ 521.328913][T19983] 0 pages cma reserved [ 521.888918][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3792'. [ 521.971596][T20063] netlink: 'syz.4.3794': attribute type 9 has an invalid length. [ 522.062885][T20063] netlink: 'syz.4.3794': attribute type 11 has an invalid length. [ 522.363600][T20078] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3800'. [ 522.366991][T20074] netlink: 'syz.0.3798': attribute type 1 has an invalid length. [ 522.418514][T20077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3799'. [ 522.450722][T20082] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3798'. [ 522.521177][T20074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3798'. [ 522.533555][T20077] gretap1: entered promiscuous mode [ 522.540152][T20077] batman_adv: batadv0: Adding interface: gretap1 [ 522.551252][ T5879] IPVS: starting estimator thread 0... [ 522.551252][T20077] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.584145][T20077] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 522.605686][T20083] ipvlan0: entered allmulticast mode [ 522.614843][T20083] batadv_slave_1: entered allmulticast mode [ 522.623910][T20083] batman_adv: batadv0: Adding interface: ipvlan0 [ 522.630540][T20083] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.659283][T20083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.663056][T20086] IPVS: using max 27 ests per chain, 64800 per kthread [ 522.671810][T20083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.688015][T20083] batman_adv: batadv0: Interface activated: ipvlan0 [ 522.697608][T20074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 522.707352][T20087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3798'. [ 523.075004][T20098] syzkaller0: entered promiscuous mode [ 523.108134][T20098] syzkaller0: entered allmulticast mode [ 523.135463][T20100] netlink: 'syz.1.3807': attribute type 1 has an invalid length. [ 523.236181][T20107] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3808'. [ 523.287318][T20100] bond4: entered promiscuous mode [ 523.304546][T20100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.260922][T20139] block nbd4: not configured, cannot reconfigure [ 525.335601][T20138] netlink: 'syz.2.3815': attribute type 1 has an invalid length. [ 525.364924][T20138] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3815'. [ 525.481255][T20145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3818'. [ 525.587987][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3817'. [ 525.627617][T20147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3819'. [ 525.774140][T20149] bond0: (slave dummy0): Releasing backup interface [ 525.808261][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.815310][T20154] netlink: 'syz.3.3819': attribute type 10 has an invalid length. [ 525.823038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.843712][T20154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3819'. [ 525.845350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.868556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.882775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.897084][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.911259][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.915073][T20149] bridge_slave_0: left allmulticast mode [ 525.925925][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.931019][T20149] bridge_slave_0: left promiscuous mode [ 525.944563][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.966440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.812326][ C1] net_ratelimit: 4886 callbacks suppressed [ 530.812371][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.833351][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.847758][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.861972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.876064][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.890362][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.905291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.920248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.936520][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.950775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.192152][ C0] sched: DL replenish lagged too much [ 535.822628][ C1] net_ratelimit: 4858 callbacks suppressed [ 535.822686][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.845198][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.859604][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.873866][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.888352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.902546][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.917162][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.931355][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.945594][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.959924][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.490969][T20149] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.832288][ C1] net_ratelimit: 5724 callbacks suppressed [ 540.832343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.853328][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.867800][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.881985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.896136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.910269][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.924527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.938574][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.952726][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.966848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.842218][ C0] net_ratelimit: 14574 callbacks suppressed [ 545.842242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 545.842298][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.848513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.848760][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.849733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 545.863038][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.873352][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.873601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.874504][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 545.888300][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.852316][ C0] net_ratelimit: 18945 callbacks suppressed [ 550.852339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.852390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.858987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.860145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 550.873487][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.883845][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 550.884202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.884524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.885644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 550.898843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.213161][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 555.862185][ C1] net_ratelimit: 20260 callbacks suppressed [ 555.862231][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.862324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.871884][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.888024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 555.888287][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 555.888538][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.888794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.889715][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 555.903361][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.913498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 560.872225][ C1] net_ratelimit: 21404 callbacks suppressed [ 560.872280][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.872368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 560.879183][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.890463][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 560.890713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.890956][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.891980][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 560.905812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.916302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 560.916638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.882451][ C1] net_ratelimit: 21677 callbacks suppressed [ 565.882493][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.882852][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 565.889611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.900729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 565.900984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.901243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.902148][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 565.915640][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.926158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 565.926415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.892315][ C0] net_ratelimit: 22010 callbacks suppressed [ 570.892339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.892449][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.898539][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.899407][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 570.912834][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.923396][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 570.923641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.923886][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.924793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 570.938485][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.902206][ C1] net_ratelimit: 20377 callbacks suppressed [ 575.902246][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.902446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 575.909477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.920423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 575.920694][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.920940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.921866][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 575.935504][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.945908][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 575.946153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.140408][T17114] Bluetooth: hci3: command 0x0406 tx timeout [ 580.912365][ C1] net_ratelimit: 21797 callbacks suppressed [ 580.912419][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.912649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 580.919825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.930824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 580.931072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.931317][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.932235][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 580.945815][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.956140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 580.956398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.922213][ C1] net_ratelimit: 21498 callbacks suppressed [ 585.922268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.923474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 585.929415][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.940650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 585.940943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.941283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.942311][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 585.955870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.966462][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 585.966731][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.932228][ C0] net_ratelimit: 21158 callbacks suppressed [ 590.932236][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.932250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 590.938492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 590.938759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.939016][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.952831][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.963985][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 590.964251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 590.964482][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.978003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.942148][ C0] net_ratelimit: 21775 callbacks suppressed [ 595.942172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 595.942413][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.948351][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 595.948597][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.948848][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.949710][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 595.962866][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.973187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 595.973432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.973675][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.952116][ C0] net_ratelimit: 21937 callbacks suppressed [ 600.952140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.952355][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.958323][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.959228][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 600.972673][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.983156][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 600.983488][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.983736][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.984612][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 600.998212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.917219][T19657] Bluetooth: hci4: command 0x0406 tx timeout [ 605.962511][ C1] net_ratelimit: 21291 callbacks suppressed [ 605.962550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.962973][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 605.969786][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.981125][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 605.981473][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.981743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.982743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 605.996194][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.006436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 606.006710][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.972345][ C1] net_ratelimit: 19573 callbacks suppressed [ 610.972395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.972754][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 610.979609][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.991501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.991779][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.992032][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.992998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 611.006998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.017512][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 611.017773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.982165][ C1] net_ratelimit: 20811 callbacks suppressed [ 615.982226][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.982600][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 615.989321][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.000638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 616.000892][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.001139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.002038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 616.015830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.026418][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 616.026687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.992170][ C1] net_ratelimit: 21492 callbacks suppressed [ 620.992229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.992406][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 620.999512][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.010927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.011197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.011522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.012475][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 621.026056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.036311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.036587][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.002127][ C0] net_ratelimit: 21710 callbacks suppressed [ 626.002149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 626.002490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.008513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.008768][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.009591][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 626.022997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.033383][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 626.033644][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.033889][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.035068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 630.812082][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 630.819085][ C0] rcu: (detected by 0, t=10502 jiffies, g=108465, q=2521 ncpus=2) [ 630.827530][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 1806 (4295000183-4294998377), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 630.840936][ C0] rcu: rcu_preempt kthread starved for 1806 jiffies! g108465 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 630.852249][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 630.862415][ C0] rcu: RCU grace-period kthread stack dump: [ 630.868522][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 630.882056][ C0] Call Trace: [ 630.885449][ C0] [ 630.888410][ C0] __schedule+0x17d9/0x56c0 [ 630.893051][ C0] ? __lock_acquire+0x683/0x2cf0 [ 630.898074][ C0] ? __pfx___schedule+0x10/0x10 [ 630.902976][ C0] ? schedule+0x90/0x2b0 [ 630.907279][ C0] schedule+0x164/0x2b0 [ 630.911479][ C0] schedule_timeout+0x152/0x2c0 [ 630.916536][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 630.921968][ C0] ? __pfx_process_timeout+0x10/0x10 [ 630.927410][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 630.933302][ C0] ? prepare_to_swait_event+0x322/0x350 [ 630.938915][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 630.943818][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 630.950013][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 630.955418][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 630.960669][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 630.965297][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 630.970531][ C0] ? __kthread_parkme+0x71/0x1f0 [ 630.975531][ C0] ? __kthread_parkme+0x196/0x1f0 [ 630.980604][ C0] kthread+0x388/0x470 [ 630.984788][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 630.990011][ C0] ? __pfx_kthread+0x10/0x10 [ 630.994686][ C0] ret_from_fork+0x514/0xb70 [ 630.999356][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 631.004506][ C0] ? __switch_to+0xc89/0x1420 [ 631.009318][ C0] ? __pfx_kthread+0x10/0x10 [ 631.013940][ C0] ret_from_fork_asm+0x1a/0x30 [ 631.018850][ C0] [ 631.021909][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 631.022323][ C1] net_ratelimit: 21594 callbacks suppressed [ 631.022355][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.028248][ C0] Sending NMI from CPU 0 to CPUs 1: [ 631.028280][ C1] NMI backtrace for cpu 1 [ 631.028293][ C1] CPU: 1 UID: 0 PID: 12290 Comm: kworker/R-bond6 Not tainted syzkaller #0 PREEMPT(full) [ 631.028312][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.028322][ C1] Workqueue: bond6 bond_3ad_state_machine_handler [ 631.028453][ C1] RIP: 0010:_raw_spin_lock_irq+0x3d/0x50 [ 631.028477][ C1] Code: 09 54 18 f6 bf 01 00 00 00 e8 1f 82 dd f5 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 74 24 08 e8 f3 c6 eb f5 <48> 83 c4 08 48 89 df 5b e9 86 68 ec f5 66 0f 1f 44 00 00 90 90 90 [ 631.028491][ C1] RSP: 0018:ffffc90000a07ea8 EFLAGS: 00000082 [ 631.028505][ C1] RAX: 88b66f133d100100 RBX: ffff8880b87281c0 RCX: 0000000080010103 [ 631.028518][ C1] RDX: 00000000afae7716 RSI: ffffffff8e25a5b4 RDI: ffffffff8c2a9f80 [ 631.028530][ C1] RBP: ffff888033480300 R08: ffffffff81b31046 R09: 0000000000080000 [ 631.028542][ C1] R10: 0000000000000000 R11: ffff8880b87281d8 R12: ffff8880b87281c0 [ 631.028553][ C1] R13: 0000000000000001 R14: ffff8880b87283e0 R15: 1ffff110170e5072 [ 631.028565][ C1] FS: 0000000000000000(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 631.028579][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.028590][ C1] CR2: 00007fd7925ffffc CR3: 0000000074668000 CR4: 00000000003526f0 [ 631.028607][ C1] Call Trace: [ 631.028613][ C1] [ 631.028619][ C1] ? __hrtimer_run_queues+0x466/0xa10 [ 631.028642][ C1] __hrtimer_run_queues+0x466/0xa10 [ 631.028671][ C1] hrtimer_interrupt+0x448/0x910 [ 631.028704][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 631.028740][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 631.028763][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 631.028782][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 631.028802][ C1] Code: 0f 84 44 ff ff ff e8 12 6b 21 00 fb eb 44 e8 0a 6b 21 00 e8 a5 9e 0e 0a 4d 85 f6 74 94 e8 fb 6a 21 00 fb 48 c7 c7 60 bf 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 631.028816][ C1] RSP: 0018:ffffc90000a081a0 EFLAGS: 00000246 [ 631.028829][ C1] RAX: ffffffff81a50685 RBX: ffffffff81a504ff RCX: ffff88801ff90000 [ 631.028841][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff8e94bf60 [ 631.028852][ C1] RBP: ffffc90000a08250 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 631.028864][ C1] R10: dffffc0000000000 R11: fffffbfff2065a5f R12: 0000000000000000 [ 631.028875][ C1] R13: 000000000000006e R14: 0000000000000200 R15: 1ffff92000141038 [ 631.028889][ C1] ? vprintk_emit+0x2cf/0x560 [ 631.028908][ C1] ? vprintk_emit+0x455/0x560 [ 631.028932][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 631.028951][ C1] ? irqentry_exit+0x218/0x8f0 [ 631.028976][ C1] _printk+0xdd/0x130 [ 631.029013][ C1] ? __pfx__printk+0x10/0x10 [ 631.029034][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 631.029055][ C1] ? ___ratelimit+0x584/0x8e0 [ 631.029120][ C1] br_fdb_update+0x657/0x6c0 [ 631.029206][ C1] ? stack_trace_save+0xa9/0x100 [ 631.029229][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 631.029252][ C1] br_handle_frame_finish+0x618/0x1990 [ 631.029276][ C1] ? kasan_save_track+0x4f/0x80 [ 631.029299][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 631.029327][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 631.029373][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 631.029400][ C1] ? nf_hook_slow+0x176/0x220 [ 631.029452][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 631.029475][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 631.029538][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 631.029597][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 631.029621][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 631.029645][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 631.029662][ C1] ? lock_acquire+0x106/0x350 [ 631.029681][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 631.029698][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 631.029724][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 631.029741][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 631.029758][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 631.029776][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 631.029793][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 631.029820][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 631.029842][ C1] br_handle_frame+0x127f/0x1510 [ 631.029863][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 631.029879][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 631.029903][ C1] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 631.029929][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 631.029943][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 631.030015][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 631.030038][ C1] ? irqentry_exit+0x218/0x8f0 [ 631.030060][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.030094][ C1] ? process_backlog+0x3c3/0x1860 [ 631.030119][ C1] ? process_backlog+0x3c3/0x1860 [ 631.030139][ C1] ? process_backlog+0x3c3/0x1860 [ 631.030163][ C1] process_backlog+0x706/0x1860 [ 631.030186][ C1] ? process_backlog+0x3c3/0x1860 [ 631.030214][ C1] __napi_poll+0xaa/0x330 [ 631.030236][ C1] net_rx_action+0x61d/0xf50 [ 631.030263][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 631.030283][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 631.030371][ C1] handle_softirqs+0x225/0x840 [ 631.030406][ C1] ? do_softirq+0x76/0xd0 [ 631.030429][ C1] ? bond_3ad_state_machine_handler+0x5a7c/0x5d60 [ 631.030450][ C1] do_softirq+0x76/0xd0 [ 631.030470][ C1] [ 631.030476][ C1] [ 631.030481][ C1] __local_bh_enable_ip+0xf8/0x130 [ 631.030503][ C1] bond_3ad_state_machine_handler+0x5a7c/0x5d60 [ 631.030529][ C1] ? irqentry_exit+0x218/0x8f0 [ 631.030550][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.030574][ C1] ? bond_3ad_state_machine_handler+0xd0/0x5d60 [ 631.030596][ C1] ? __pfx_bond_3ad_state_machine_handler+0x10/0x10 [ 631.030617][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 631.030642][ C1] ? rcu_is_watching+0x15/0xb0 [ 631.030661][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 631.030682][ C1] process_scheduled_works+0xa8e/0x14e0 [ 631.030716][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 631.030736][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 631.030761][ C1] ? assign_work+0x3af/0x5d0 [ 631.030784][ C1] rescuer_thread+0x7b6/0x10b0 [ 631.030801][ C1] ? rescuer_thread+0xb8/0x10b0 [ 631.030825][ C1] kthread+0x388/0x470 [ 631.030841][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 631.030855][ C1] ? __pfx_kthread+0x10/0x10 [ 631.030872][ C1] ret_from_fork+0x514/0xb70 [ 631.030892][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 631.030910][ C1] ? __switch_to+0xc89/0x1420 [ 631.030933][ C1] ? __pfx_kthread+0x10/0x10 [ 631.030951][ C1] ret_from_fork_asm+0x1a/0x30 [ 631.030978][ C1] [ 631.031433][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 631.031714][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.031971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.034198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 631.039110][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.050346][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 631.050594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.053780][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.058028][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.032154][ C1] net_ratelimit: 19912 callbacks suppressed [ 636.032210][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.032510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 636.039332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.050692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 636.050972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.051319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.052344][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:ef:b6:89:3d:a6, vlan:0) [ 636.065716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.076192][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 636.076478][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)