last executing test programs: 28.646156642s ago: executing program 0 (id=3996): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0100"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 28.644149037s ago: executing program 3 (id=3997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062800000006500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb1c0b87368371fa3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddr={0x58, 0x16, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x40, 0x2, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x6000011) 28.468982809s ago: executing program 1 (id=3999): r0 = socket(0xa, 0x3, 0x4) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x216, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x2, 0xffff, {{0x36, 0x4, 0x1, 0xa, 0xd8, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x23, 0x4f, [@empty, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @cipso={0x86, 0x41, 0x3, [{0x6, 0x11, "946281afd7e1523f9d3dae9ae7eb6a"}, {0x6, 0x2}, {0x5, 0xa, "ca27067ece75e3be"}, {0x6, 0xb, "e761d93fd09f92b542"}, {0x2, 0xf, "e91c4717bd682cfda232e444e6"}, {0x0, 0x4, "8662"}]}, @lsrr={0x83, 0x23, 0x3d, [@multicast2, @empty, @broadcast, @rand_addr=0x64010101, @empty, @multicast1, @remote, @remote]}, @timestamp={0x44, 0x1c, 0x4a, 0x0, 0x4, [0xfffffff1, 0x7, 0x10000, 0x8, 0x7, 0x0]}, @ssrr={0x89, 0x1f, 0x9e, [@remote, @private=0xa010101, @local, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) (async) ioctl$int_in(r3, 0x5421, &(0x7f00000008c0)=0xc44) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x27, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xc43, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r7, r8, r9], &(0x7f0000000780)=[{0x2, 0x3, 0x7}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x1}, {0x4, 0x3, 0x1, 0x3}, {0x0, 0x4, 0xc, 0x1}, {0x5, 0x5, 0x3, 0x3}], 0x10, 0xc}, 0x94) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x8910, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x800, 0x6, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010102}}}}) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) 28.468381903s ago: executing program 2 (id=4000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0xd4}, @device_b, @device_a, @initial, {0x6, 0x8}}, @smps={0x7, 0x1, {0x0, 0x1}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c001}, 0x40084) (fail_nth: 9) 28.467980513s ago: executing program 0 (id=4001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r1}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 28.45313968s ago: executing program 3 (id=4002): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c5060000000000000000000000000002a0bae5dc2f1d3e644d6501c56b33b57b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000080000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0280000020040000"], 0x20}}, 0x0) (async) 28.441897952s ago: executing program 1 (id=4003): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48002080}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x43}}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 27.985684119s ago: executing program 0 (id=4004): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="871e1e0f", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250c0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.985196703s ago: executing program 2 (id=4005): unshare(0x22020400) r0 = socket(0x9, 0x6, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r1, 0x0) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) 27.920411095s ago: executing program 4 (id=4006): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x104, r0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4a84}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x2c, {0x2, 0x0, @empty}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd26, 0xfffffffc, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 27.873389026s ago: executing program 2 (id=4007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="4153eaebd0448de2a47cc6be9e37ff4fdf1a7426dbc9878130896bc2d61b5e61b8d5152a83dac0b219802abe4c2b342a4f8b370ae01a78c16463b6b9a16311e086b2fe395eeb963f7f6e315324771e471005198a1192d3b6c87e872aacb7e271436828dc4ade635432395d8ec8f7e1dcbc1ea9074d0230f6"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) 27.86385437s ago: executing program 3 (id=4008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]}}]}, 0x45c}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x22, 0x2004}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) 27.789770502s ago: executing program 1 (id=4009): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0000000400007024f6321af63a2ccb4308002395bde09d5eb0890000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x48) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) socketpair(0x28, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) 27.760894656s ago: executing program 0 (id=4010): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0xd, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905", &(0x7f0000000040)=""/24, 0x6414}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) getsockopt$sock_timeval(r0, 0x1, 0x49, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 27.722811464s ago: executing program 4 (id=4011): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) (rerun: 32) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x0, 0x7f, {{0x2a, 0x4, 0x0, 0x8, 0xa8, 0x68, 0x0, 0x6, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xa7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @end, @timestamp_prespec={0x44, 0x14, 0x3e, 0x3, 0x2, [{@private=0xa010101, 0x8}, {@broadcast, 0x5}]}, @ssrr={0x89, 0x23, 0x73, [@multicast1, @loopback, @broadcast, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010101, @remote, @broadcast]}, @rr={0x7, 0x27, 0x41, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, @remote, @local, @loopback, @local, @loopback]}, @ssrr={0x89, 0x13, 0x1c, [@loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2]}]}}}}}) (async) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x807, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r8}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x5, 0x2f, 0xd, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80, 0x10, 0x4, 0x101}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x4, 0xf9, 0x4, 0x3, 0x22, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @mcast2, 0x8000, 0x7800, 0x7, 0x9}}) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) (async) bind$packet(r11, &(0x7f0000000040)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r15 = socket(0x10, 0x3, 0x0) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r17, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58020000", @ANYRES16=r1, @ANYBLOB="20002bbd7000fedbdf25190000004c000180080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="14000200767863616e31000000000000000000000800030002000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="18000180140002006d6163767461703000090000000000201400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c000180140002006361696630000000000000000000000014000200776c616e30000000000000000000000014000200766972745f776966693000000000000014000200766574683100000000000000000000000800030002000000080003000400000008000300010000007c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000100000014000200776c616e3100000000000000000000001400020076657468305f746f5f687372000000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200697036746e6c300000000000000000004400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14000200776731000000000000000000000000001400020073797a5f74756e00000000000000000008000300020000003800018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000000000014000200766972745f77696669300000000000005c0001800800030000000000140002007767310000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32=r17, @ANYBLOB], 0x258}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 27.603076587s ago: executing program 2 (id=4012): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0xffffffff}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 27.597160895s ago: executing program 1 (id=4013): r0 = socket(0x15, 0x5, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) (async) recvfrom$inet6(r1, &(0x7f0000000040)=""/38, 0x26, 0x122, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000440)="83", 0x1, 0x4000, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/19, 0x13, 0x4001a060, 0x0, 0x0) (async, rerun: 64) getsockopt(r0, 0x200000000114, 0x3, 0x0, &(0x7f0000000000)) (rerun: 64) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000540)=@phonet={0x23, 0x0, 0x0, 0xf}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000500)="270502001a0014000600002fb96dbcf706e1bd24161288a8070088a80100", 0x1e}, {&(0x7f00000004c0)="724260452eca7f662c", 0x9}, {&(0x7f0000003600)="57302e3cbfe6c0fa1fb3e02c94b7baf27e8ebe940e7f6cb235f6ddc7caac75358d34ee63c77a986b1a149472663c97128570f6f2ba3ca147a938ee6e8fa659e93bcc9b71f3c5379b1040d6222b2a513991eda5c155e67597236429f3279ba276350c95c29ad20082d95f33f5824afa2f655eaa274d50a4e92d08ed65d254fc5fedcd72957609481d0201f15deb74029ae0b2ec2969b1a1ede2f59578f26481ad02293846868240be3852e4e3c126e491643d68c650039aba4260282bfa69b2f6d5df9b1c933b4fa34abcb7481c574e7ac30767196762364947ad562cde043a046594cc96c42d158756319b000c3a19654d46b007b8f5be851238f1d83df268c4e60457814b94aabdad8b309968234fb3e0e559c136895036338eb8e9217251d3f4cfdf7ef364dd7a2b704a7e18c248e06c856fb0b4f673a5a440414d1d92cfd9252b2a1f1a1645d35d515bed8699aacfc9a1f837eaed3a684850027cdb1df766f1272e8511d15f9fe52bee96aa9f1acd9e6b202ce396c5ce388dcd0ae9f57cb15bc9805f004311b2b183524bda65d4281097087dd5e32d917e11a8e2bf6afec7f22636f3ff679edd914ba069726320f7c85ec5a98291cc7831c1ee41df392ed246398ced4bb992e8a7fac0f024a60503c7dfc86fe8e6ae48e07dbdcfe171b992e90ee692a8b239d289cf2742d607d1c97608bcba2952403002570ac933ef4d87ec2784ba70c7482c55ebad08e37894b1d9b51f2cbb9e48adec95a46c507d914207026e744fcf579e1de23aed2d0e1cb054ac70b024db539ee227c357e8740dc0c26ba90ff8d76713533390308fb53354edd1cae16cb1b90ccb7cd0e720e0740200f7ddb81daae8591b297d9634960f76f5afbb3d057e839595c3f2b8431fd5a7018dcee8a67c02dfe2cdff33468108012252bc3a9ca28abaeaa0f1e2f2334e10f5ab08fb420d7e3dd15433d30c11a48fb497e78cd975ffc241ba3fc80415da55045d215f7b8214a5d765b7708bd9689330f161da3ef0a3c0f1955f92452006f3d03a743f783003b149d2daa843e40c9944d63750444aa01cc71e4819a757b4d4f2af4e433c6a107882e63bccf01780b2c455edd4be0a818b8d7d16a771966f6a9174d2b3680a419269a3dec1c49ff7554a6e1cd5d785199e4b740e19f168128244214335de3a63aacf7e28cf9202d95b0772726105b65c7a4b450bce22f77a1a5844531575176e6697fc16380b709354e859b814416de11ce8d3129e0985690445d42eafa2e3f9ae05df420a7b8b00412d713d82df1921a61f231b1dc5155b2d2d4c71d651e175e70c458d777b9d0217b1ede3f3e97d76c78dd3d10ff0037795b7e31df95d3814e5ed2f51e9671ee378c0248a04f641514c32a46fa166078bc35cb050611d4fa2554343e13af71a48168ad9b74a23a6c282c2f1b49a1242acffc07bc937b8e32731676887ba7dc74f7d32b758d1d408e2423a71271a051ee9c7eb5142388e50f228854d6e3a4e779a364959e4ba9a1753220f2672c0337e32e1633001c4881158a26e72b6e420c331898a00db6c881e6b6502da485bbee089c6828b2de2284de3b166f94def47b7a954d078710eb3bec45bfc3c6967b69cb39b5756ce07e3980cfefe23c040ac2535beb0b685538bf681dbd6c8372a7f884bc2add681355a472c75dab053abd3f96a48fff72edd870bee4164dc2dae58f09f020f8fa5019dd1d691f00b6a05a500796c4573212377e0cdaaa8dfe794093cc6e4058e0c3080f820331a32d7b5226e09ae1619ebec04a70a8cf53425d36d462a3dc293d5f957a1e393d6f6c5c0acb7d26096a807a2acb7a568eca7308ccf571c53da5317d454e8aeb9a7f2e1b3f36db21ab84c2b81283110e3bee5dfb35b546b6b70bd995deb9dc89cf5eacfb6a43f1877b79a81450e292d1fc0b68c5d3cd5972338d94318d79996ed4c3da638733f924e1c6f60ebecaad8702f7da1be86b6213ac8a22cd919f5502effdafd2e06aef1fe0a732ca58dfd3758730d3cb2a8bfa779dff3ec638deea0515afe98ca2c59e453351f3886ebb7c178bbe67f76a24d14c38d520ca4f5f671853d7a15381eec44885cc8a3e76e7fedbe6503a9738a0f05bf417322c406718fd38aebea631f097ef4564211ec4aa29f4056354f9dcb7d9c37fa87ef3dce7a8f17d282aca170705edb2ba586be76cd697167a806b6c3234c8944b4a164dbc19d92983d9098abb2cfdc7865580e15a535e05d179348bb7f310fcb09ae48d0cb8654279f1fd7cda46bf5442707bc03ad1f8b8ea985e2f9503fd8f280d23928355b9587487109248c53cadb91aa1820b9dcd15e7457ac575d067e9f5fa8ee3cdfd35dbe9db8ef3620ed6a94ac5dc6f16c186055729b31ac388f542e0b37b5b7e59fa6cb29f15d75d949327aba607582f854a32ca35a56aab61f66de620261d4cf69287108d5c72d4ca1e43bfe60c062b9526ec2a7e1cbd4d1879cde2ad087807b7eece126435699c0ceb576c7c6aeba884d669bc21569eb6bcc2bcad7776b33771879f1aae1229635c69b2e29657748bcbbf3f3ff30049110736e6ad1a7248f4d5f597cd1adabb63d9091fc66d71944a96c46727fd29ad57297d46b8595d90736d84f1235ccb6b6c52d4728b7f6b2f0db577c894d728d1ef8e22d8919215f5ee641f68154693199cbb1d581f9227ef0ce9d483cb8d5416141df2d1df366fe01ce7283c340274b190978becacae0d1204cc391439d501344a18b5d282e094863b9090d4b24283f70c4af46efaf5145dee405605c57872e330dfd810bbed2370e18e6a0e1d2dbce963d043cd63e4eef0bad3f98a513c75b7e4f876a8668d87ab6b2e85149c0d5e87ac5cf910f0ad05d84b8d3f1f91ed9ec15413aada9632b549c5ad9a764338c42c2d0be024b035e6323f5efd36071208470abf953ee3bcd5a6dba42f96e09374ff0d699cf360eb916a37c0cc55d254538bbbbfcd2051f2bde8bd47cf6315ce2f1a35366ee177c71df7ca6772f8562d3973453fc28ce17f4c42d7ff32afe35efe3fd7cd30dd30fd7972dc757a89e870a2d55e554f689235dfe408d613585cd5080f4301d579376017ba436afd09b5788e3cb4a1844c87913b19ca6a1ea3062751eb7af97cf852fea0df6834598b7d007228faf9da1c6c1e97a7a3a7a8da9ce61abba86d7d812b5d7f3f0eae94414387e322c9cbba49b7e2d8acedf0bfd355d02fd7b6bb91b17e32ecae6cf133dc3e4f18120091afe9d46c08743245e9f1aeb7c4fc55f73b46809d8ad4cf1fe054abf8a37f8e2369d654d6433328c1d61db35384ed0128f35524efc2f14c02804a050d50c21787277fa069639912168eeeca17cdef989717399cccde566d83a18b846c6ce5d707e31c68ee8a457952069da66856acdfaee2b51348e3d81e873e7292f3980f471ea3edf7b3466e58c21d47a4c33c16be577515d613ca2a8acd4d3b5586725f28b0589dc285008b27c86c206680d3fa8f89140fbbe2c038df4222a38a3ef93179add20e9a68f48f3387ac6ec2101a0ed41851e9be940d9481882b7457e0fc3ed99b4f5cb78b4d8c2636ead853c84983ca55b866f7c4f4dd792714e9b8671479f07c8e14a212c9184f0dd5e62ec246246d04f09aeef8c9f6c4884bbf7a219b05cc3e07e733b41e6c53291dfd8268e2074fd1f0ddcb33d70e07124c274a391b69d577c169d2bc9b2e2fc1171c575384fd2f10a8282ca631af26512620cc58d921f33371ad6c5206a403f7f9f4b4588899f1c72ca3425f10b99466880dafbeaf515c64edc661e8ffcf7c3e2e2f0617e2a578d41214d9891d7e3f1527efabf85ef7d68b87d70883fc77724a30530984a0b79597a1d054e08cdaf2aac0c24d9004292a5206058f0835983801e215f2787ed10eaa7b130c03ebc104be0194ef74e568641370f41f8e78067aa4e088496ff03f40af1476ccdf4580f723309040e204fe254e923ff832decf4787da2b011a529f736d74d11342e2315c988942e690eb412e37116cb976907d9e6d52e89594ed336339bf3344a2f32d1af77a6185759babd2fa1ba8b093d0c50ec6f592077a00d22577393f9cbf5b082f63ad556b6f75958ecf0a7c94252a73f50042d4d891453f192e89f24af726c5b3e45ca5ed67c816bd5b9d71899582398b6a844b61349bb07a4fca12b624ea3bc1fc88232c56da0a2ca053b27e3d222f94cdf3e20769e7e78eedb52493e6da5a0b13d5c4cf767a77cf88a40abeef25f62cf938673aa43cd3c81d07295e62d0442f767485099a87c5efb29862c6427234931205b6682b8ba3cfe9394717e9b902d3b7e0460ecbbf28ffa93ce70bcd5a7d596343971124dc9487495e4e12b86bae016a2b545a0a5bcc3d557c0f3a17d215b909075b53009fbf598010cff0b71b2205c9d1bac981c3b6deb28676ce823f1953f5cfce29cef956018b51136db56159ec13a0bdf91be3f14ea39bdb4265d7aa05f549cc17a193d29a8f69f9755e1bff0c40bfccf67397016d1115bdb6695389fed1d1df1edf7f17e8ae2958a55093995bc791ce747cae71284ba99cdf515319fce918df86b153f91ac4c88068bfec4880caeec03ad08bdb1af09b2176aa8ade51f5088a2d48006c3eec2be659dfa8ba6cb506e825e9f58948b5e379124e324c724d957a9cfc3ff0aa01c761fbd3c0a149bb01a1aeb713522f57b03", 0xd00}], 0x3}, 0x200008d4) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtaction={0x1070, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x105c, 0x1, [@m_ctinfo={0x1058, 0x11, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2d5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1070}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095", @ANYRES16=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/time_for_children\x00') (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) (async, rerun: 64) write$nci(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="4024967c"], 0x4) (rerun: 64) write$nci(r6, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r2], 0x9d) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) 27.490386159s ago: executing program 3 (id=4014): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x8c}}, 0x0) r4 = socket(0x10, 0x3, 0xbffffffd) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="20000000520001000000000000001b001c0000000c0001000200000000000000"], 0x20}}, 0x0) 27.481020261s ago: executing program 4 (id=4015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2002}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001d0a05090001cc73797a3000000000140000001100010000000000000000000300000a00000000000000000000000000db5b5824627fa0e30ffba65c"], 0x48}}, 0x20000000) 27.268617346s ago: executing program 3 (id=4016): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffff0000d4211ceb21b7764917bb94a0940784eb79589e01079a6ec85b26f06f620b92c8b1438998565a844b8592842b001eb034ac32543a39100ab92d59a3235319236e3f82b308bb3de0ad2f9bdb4540408e37e15dc2771135a933e6770619a4e8554bb4336b44e1a562a14a407c29b47be5807d0fe1842860659b05a8e16dd40a3573a51eb3ce5f1466ae279d2709da891358608474d1770ec02feab0a16f"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x969c}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r1, 0xb5cb, 0x20, 0x2, 0x7fffffff}, &(0x7f0000000240)=0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x2, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}]}, 0x3c}}, 0x0) 27.266927633s ago: executing program 1 (id=4017): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x40, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 27.261230355s ago: executing program 2 (id=4018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2d8, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000140)=0x23, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000180)="5abf1b75d26aec640e4778aa815a382f96336378e4903e3fb73e9903bca9c57db1313be076bbf737ceabfdcc36e49f35e13ac7020fdcd5870c4c3f99cfb6fab0ce39fab9e41c3270", &(0x7f0000000200)=@tcp6=r4, 0x2}, 0x20) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000280)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf3c, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1b, &(0x7f0000000340)=""/27, 0x41000, 0x15, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x3, 0x9, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r6, r2, r2, r2, r2, r2, r7], 0x0, 0x10, 0x5}, 0x94) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f00000006c0), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @remote, @multicast2}, &(0x7f00000007c0)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xccd1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x28008081) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0x121000, 0x0) ioctl$PPPIOCGDEBUG(r13, 0x80047441, &(0x7f0000000940)) sendmsg$AUDIT_GET_FEATURE(r13, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3fb, 0x100, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@initdev, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000b80)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r8, 0x0, 0xdb, 0x62, &(0x7f0000000bc0)="4c8506011e13c1ab9701c18815fd16d81f47d631e81651a8dcc9686b072335eb0c35b18e46254631890b0c495936939a60155789d4a955079e23dada5d5025ee21e1211f55929336762d5943c6aa0bf4e24043139495e724596fbdaf59cf30c6d32ad7d954a7e9697a2b05cbb7cd640005674d96cda7735366360bc74b8fc60f795330831340df3091314a90a1beeaf0e9cac5c0ad9b9734b57d1eec36f76f40668c745ff1096cfe0cc89911bf88aa5a199b9c54788e181f59fadf089d9ceb902a458c23eaeec2988d0590775abc8c12d184fe0904ec2fe59d8080", &(0x7f0000000cc0)=""/98, 0x4, 0x0, 0x35, 0x75, &(0x7f0000000d40)="44a900a961acb02b0ac7e6c98b3da267107e5356ddb5e049c7d2b72075d6fda9f9f525bda86addda84267ec8c2c64eb01a1f440f5a", &(0x7f0000000d80)="66a8745b01185184f39a6a84c039eec218423cb3a426cb08686872d7a27e683d2bc5cc5bf154d5ccb076388cec63a54294174b84bb83619571bd8b4d2a2f9ad612a1b42a5f08a6de247ef3f36729d7b3dec04cf421317c5ed3dd7cbe4aad363d2c6cfab8a55ff8a5698061435021fdce8dac7b7370", 0x5, 0x0, 0xa}, 0x50) pwritev(r3, &(0x7f0000000f00)=[{&(0x7f0000000e80)="29530c8694f9c198f2b042e75b859ddc093d20bb903c1ce2e078c8e0167048458b00f41ea1487fd3dee54e0ea96bd8d15a3249b088c816fd5e636d1c950c174406df749696d57b34f380d145fb1950434021d0742af2604bbcf9b59e8de55e", 0x5f}], 0x1, 0x7, 0x9) r14 = accept$inet(r0, 0x0, &(0x7f0000000f40)) setsockopt$inet_sctp_SCTP_INITMSG(r14, 0x84, 0x2, &(0x7f0000000f80)={0x1, 0x5, 0x2, 0xfff}, 0x8) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000fc0)={0x0, 0x2, 0x7f, 0x200}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001040)={'netdevsim0\x00'}) 26.376271583s ago: executing program 3 (id=4019): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x0, 0x0) 26.079394718s ago: executing program 1 (id=4020): syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd68e4177f0028890020010000000000000000000000000001ff020000000000000000000000000001bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bceaeff0a8d91755bf3714f9ed4805225843ab355a24af746bf214e111b50ee0256ae78725d248e07ac31710d22e3f61ec096cf6cd53f74a3db1e86f1b9028bbc91e76cc679ceec98cf385c0b0b4a996d3eb1dedf5e58785934b30c9903396280db5f4037ee2fa008b4f134f6740d1e9a2e9b74bbd49bb2b9c67649c8435c"], 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockname$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) sendto$packet(r0, &(0x7f0000000080)="01a156ef9113b8600f20bc15551240df41d625d1", 0x14, 0x4000, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) 26.078812109s ago: executing program 2 (id=4021): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x12a}], 0x1, 0x80000001, 0x4dc7a87d) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 26.070633489s ago: executing program 4 (id=4022): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001a40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6119aedd5) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x1000, 0xb88, 0x2, 0x8, 0x5, 0xbad, 0x9, 0x7f}, 0x20) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x403, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x32f6a000) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xd1383000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r9, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x2000) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 25.925216171s ago: executing program 0 (id=4023): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x521041, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x521041, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) (async) vmsplice(r0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) (async) 25.922610855s ago: executing program 4 (id=4024): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140)="3836c332e5fd0b957b1a87012535b4a4e870", &(0x7f0000000280)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r3}, 0x20) close(r3) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="981238d357278620d8f34e5c83ec6821addbb73de3893f18d0388e89cec27b5bacaa7d19eb3d49ddc7256ed0538fa087bc2c7a09000000000032d7a3bb1d205cc8002f7291c5271969af5f023951a28b74aeaeba3648263b5cf8a2c88483c30e72fe18da9ba2d55c9188d26bb490d5febea0f84e29d569aa04addbc711"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 25.856839322s ago: executing program 0 (id=4025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) 25.805809624s ago: executing program 4 (id=4026): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c48000000700000005000000000000100c00000005000000000000080200000000000000030000060400000007000000810000000b0000000002000009000000070000000d00000000000002050000000400000007000085020000000b00000001000000080000000500000002000000060000000a000000010000000900000003000000040000000000f7ffffff0800000005000000050000000700000004000000a2410000070000000000000100000000480075020d00000000000008020000000041305f2e11f065cbfae5f8f89800ffc66326a9c8a01774d9249c68ab369828ca4085bb9e82c316f71b4d9def8761d9750d1735b2bae9202ec0a8b12d05f70ad1ef833a2221ff583b1075de0e424937c73fd779204319b79d2444df2592b26f1ecfb8ace441ca9205095ee664c22c536f74e2388fa0f83176d06b94a35932b7a782c6a27d49c1e46537d4d1521f7b44daf8f5"], &(0x7f0000000280)=""/55, 0xe3, 0x37, 0x1, 0x8}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r1}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000200)=0xb, 0x4) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) recvfrom$l2tp6(r3, &(0x7f0000000380)=""/122, 0x7a, 0x10021, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, 0x20) bind$802154_dgram(r3, &(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2aaf41, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 0s ago: executing program 32 (id=4025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): .2.3006'. [ 215.664893][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.712701][T15958] lo speed is unknown, defaulting to 1000 [ 215.757226][T11936] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.773480][T11936] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 215.811358][T11936] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 215.829009][T15975] 8021q: VLANs not supported on ip6gre0 [ 215.907948][T11936] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.927761][T11936] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 215.940584][T11936] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 215.959270][T15984] dvmrp0: entered allmulticast mode [ 216.072125][T15994] dvmrp0: entered allmulticast mode [ 216.103779][ T5866] Bluetooth: hci3: command tx timeout [ 216.254573][T15958] chnl_net:caif_netlink_parms(): no params data found [ 216.374995][T11936] bond0: left promiscuous mode [ 216.389351][T11936] bridge0: port 1(bond0) entered disabled state [ 216.397276][T16021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3022'. [ 216.655259][T16034] netlink: 'syz.1.3026': attribute type 12 has an invalid length. [ 216.656822][T16035] netlink: 'syz.2.3027': attribute type 11 has an invalid length. [ 216.665644][T16034] netlink: 'syz.1.3026': attribute type 11 has an invalid length. [ 216.673679][T16035] netlink: 'syz.2.3027': attribute type 11 has an invalid length. [ 216.954944][T11936] bond1 (unregistering): Released all slaves [ 216.966233][T11936] bond0 (unregistering): Released all slaves [ 216.977014][T11936] bond2 (unregistering): Released all slaves [ 216.987145][T11936] bond3 (unregistering): Released all slaves [ 217.112623][T11936] : left promiscuous mode [ 217.240160][T11936] tipc: Disabling bearer [ 217.248621][T11936] tipc: Left network mode [ 217.257017][T15958] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.262802][T16063] netlink: 'syz.0.3034': attribute type 22 has an invalid length. [ 217.264799][T15958] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.279357][T15958] bridge_slave_0: entered allmulticast mode [ 217.289873][T11936] IPVS: stopping backup sync thread 11998 ... [ 217.303280][T15958] bridge_slave_0: entered promiscuous mode [ 217.313737][T15958] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.320994][T15958] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.329122][T15958] bridge_slave_1: entered allmulticast mode [ 217.336682][T15958] bridge_slave_1: entered promiscuous mode [ 217.344327][T16063] netlink: 'syz.0.3034': attribute type 22 has an invalid length. [ 217.574081][T15958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.642716][T15958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.663229][T16076] sctp: [Deprecated]: syz.2.3038 (pid 16076) Use of int in max_burst socket option deprecated. [ 217.663229][T16076] Use struct sctp_assoc_value instead [ 217.708667][ T5866] Bluetooth: hci2: command tx timeout [ 217.749643][T15958] team0: Port device team_slave_0 added [ 217.759992][T15958] team0: Port device team_slave_1 added [ 217.834161][T15958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.844751][T15958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.871573][T15958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.909620][T15958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.929079][T15958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.960397][T15958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.016483][T16093] tc_dump_action: action bad kind [ 218.041535][T11936] veth0_to_bond: left promiscuous mode [ 218.055493][T11936] batadv_slave_1: left promiscuous mode [ 218.084183][T11936] hsr_slave_0: left promiscuous mode [ 218.090391][T11936] hsr_slave_1: left promiscuous mode [ 218.102290][T11936] veth1_macvtap: left promiscuous mode [ 218.107851][T11936] veth0_macvtap: left promiscuous mode [ 218.119928][T11936] veth1_vlan: left promiscuous mode [ 218.126321][T11936] veth0_vlan: left promiscuous mode [ 218.182529][ T5866] Bluetooth: hci3: command tx timeout [ 218.445941][T16107] veth7: entered promiscuous mode [ 218.451402][T16107] veth7: entered allmulticast mode [ 218.458204][T16109] __nla_validate_parse: 12 callbacks suppressed [ 218.458226][T16109] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3049'. [ 218.492130][T16116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3052'. [ 218.626846][T15958] hsr_slave_0: entered promiscuous mode [ 218.637650][T15958] hsr_slave_1: entered promiscuous mode [ 218.648210][T15958] debugfs: 'hsr0' already exists in 'hsr' [ 218.655757][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3054'. [ 218.667781][T15958] Cannot create hsr debugfs directory [ 218.738983][T16094] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.749491][T16094] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 218.802777][T16094] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.808729][T16094] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 218.834314][T11936] IPVS: stop unused estimator thread 0... [ 219.034664][T16148] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 219.228572][T16155] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000 [ 219.236935][T16154] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000 [ 219.248008][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 219.257303][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 219.269044][T16155] netlink: 'syz.0.3062': attribute type 11 has an invalid length. [ 219.277347][T16155] netlink: 'syz.0.3062': attribute type 11 has an invalid length. [ 219.286184][T16155] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3062'. [ 219.295570][T16154] netlink: 'syz.0.3062': attribute type 11 has an invalid length. [ 219.304764][T16154] netlink: 'syz.0.3062': attribute type 11 has an invalid length. [ 219.312890][T16154] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3062'. [ 219.328264][T15958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.348108][T15958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.363434][T15958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.378662][T15958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.507383][T15958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.526229][T15958] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.537922][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.545200][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.585458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.592653][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.637678][T16177] validate_nla: 1 callbacks suppressed [ 219.637700][T16177] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 219.719953][T16177] 8021q: adding VLAN 0 to HW filter on device bond11 [ 220.065641][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3072'. [ 220.119820][T16222] IPVS: length: 103 != 8 [ 220.150502][T15958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.347140][T15958] veth0_vlan: entered promiscuous mode [ 220.383671][T15958] veth1_vlan: entered promiscuous mode [ 220.394764][T16243] nftables ruleset with unbound set [ 220.491950][T15958] veth0_macvtap: entered promiscuous mode [ 220.517635][T15958] veth1_macvtap: entered promiscuous mode [ 220.546110][T15958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.572644][T15958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.609830][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3084'. [ 220.627538][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.640575][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 220.681619][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.707627][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.745533][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.814432][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.830599][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.869558][T11939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.883702][T11939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.036186][T16285] bond0: (slave geneve1): Releasing backup interface [ 221.064881][T16290] netlink: 'syz.4.3093': attribute type 3 has an invalid length. [ 221.084010][T16295] sctp: [Deprecated]: syz.3.2993 (pid 16295) Use of int in max_burst socket option deprecated. [ 221.084010][T16295] Use struct sctp_assoc_value instead [ 221.141940][T16285] bond5: (slave bridge4): Releasing active interface [ 221.179834][T16285] bond7: (slave geneve3): Releasing active interface [ 221.240661][ T30] audit: type=1107 audit(1755871718.271:2): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 221.271070][T11939] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.295863][T11939] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.322334][T11939] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.370718][T11939] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.420037][T16308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.515069][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.522663][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.529989][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.530167][ T5859] `: (slave syz_tun): Releasing backup interface [ 221.554847][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.563605][ T5859] syz_tun (unregistering): left promiscuous mode [ 221.570281][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.585139][T16316] dvmrp0: left allmulticast mode [ 221.590600][T16316] lo: left allmulticast mode [ 221.632035][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.643471][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.721051][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.735678][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.816173][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.829436][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.922025][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.936646][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.040582][T16344] tc_dump_action: action bad kind [ 222.129681][T16348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.177317][T16311] chnl_net:caif_netlink_parms(): no params data found [ 222.200506][T16352] netlink: 'syz.2.3112': attribute type 4 has an invalid length. [ 222.202101][T16348] netlink: 'syz.1.3113': attribute type 1 has an invalid length. [ 222.224147][ T13] veth0_to_bond: left allmulticast mode [ 222.234173][ T13] veth0_to_bond: left promiscuous mode [ 222.245639][ T13] bridge5: port 2(veth0_to_bond) entered disabled state [ 222.256163][ T13] veth5: left allmulticast mode [ 222.264360][ T13] veth5: left promiscuous mode [ 222.271413][ T13] bridge5: port 1(veth5) entered disabled state [ 222.348695][ T13] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 222.357292][ T13] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ca:17:c3:c4:1b:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 222.424345][ T13] ` (unregistering): (slave geneve1): Releasing backup interface [ 222.435966][ T13] geneve1 (unregistering): left promiscuous mode [ 222.449273][ T13] ` (unregistering): (slave bridge0): Releasing backup interface [ 222.459180][ T13] bridge0 (unregistering): left promiscuous mode [ 222.827487][ T13] ` (unregistering): Released all slaves [ 222.839219][ T13] bond0 (unregistering): (slave bond1): Releasing active interface [ 222.848168][ T13] bond0 (unregistering): Released all slaves [ 222.859356][ T13] bond1 (unregistering): Released all slaves [ 222.872609][ T13] bond2 (unregistering): Released all slaves [ 222.885130][ T13] bond3 (unregistering): (slave veth13): Releasing backup interface [ 222.895519][ T13] bond3 (unregistering): Released all slaves [ 222.910195][ T13] bond4 (unregistering): Released all slaves [ 222.947150][T16359] gretap2: entered promiscuous mode [ 222.957217][T16359] bond9: (slave gretap2): making interface the new active one [ 222.967849][T16359] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 222.977287][T16360] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 223.009211][T16365] macvlan0: entered promiscuous mode [ 223.031448][T16365] macvlan0: entered allmulticast mode [ 223.042063][T16365] bond9: entered promiscuous mode [ 223.057847][T16365] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 223.080417][T16365] bond9: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 223.100633][T16365] bond9: left promiscuous mode [ 223.218625][ T13] tipc: Left network mode [ 223.235353][T16377] tipc: Enabling of bearer rejected, failed to enable media [ 223.448264][T16311] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.464086][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.471832][T16311] bridge_slave_0: entered allmulticast mode [ 223.483361][T16311] bridge_slave_0: entered promiscuous mode [ 223.490655][T16392] tipc: Enabled bearer , priority 0 [ 223.499549][T16311] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.509479][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.525036][T16311] bridge_slave_1: entered allmulticast mode [ 223.530731][T16401] __nla_validate_parse: 5 callbacks suppressed [ 223.530753][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 223.534072][T16311] bridge_slave_1: entered promiscuous mode [ 223.561349][T16402] tipc: Enabling of bearer rejected, already enabled [ 223.574263][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 223.615981][T16311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.633382][ T5864] Bluetooth: hci5: command tx timeout [ 223.656099][T16402] tipc: Disabling bearer [ 223.699770][ T13] hsr_slave_1: left promiscuous mode [ 223.720797][ T13] veth1_macvtap: left promiscuous mode [ 223.721789][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'. [ 223.735726][T16413] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3129'. [ 223.744978][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'. [ 223.757277][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3129'. [ 223.766424][ T13] veth0_macvtap: left promiscuous mode [ 223.768998][T16415] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 223.775360][ T13] veth1_vlan: left promiscuous mode [ 223.788036][ T13] veth0_vlan: left promiscuous mode [ 223.877804][T16420] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 223.895860][ T13] pim6reg (unregistering): left allmulticast mode [ 224.018424][T16311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.052310][T16418] sch_tbf: peakrate 14652803538553308261 is lower than or equals to rate 16346666145249937006 ! [ 224.163630][T16311] team0: Port device team_slave_0 added [ 224.184115][T16311] team0: Port device team_slave_1 added [ 224.266814][T16442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3134'. [ 224.281209][T16442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3134'. [ 224.292436][T16445] netlink: 'syz.2.3138': attribute type 3 has an invalid length. [ 224.300209][T16445] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3138'. [ 224.311300][T16311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.318288][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.344871][T16311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.379363][T16311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.386813][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.413604][T16311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.443609][ T13] IPVS: stop unused estimator thread 0... [ 224.457368][T16311] hsr_slave_0: entered promiscuous mode [ 224.464284][T16311] hsr_slave_1: entered promiscuous mode [ 224.470283][T16311] debugfs: 'hsr0' already exists in 'hsr' [ 224.476171][T16311] Cannot create hsr debugfs directory [ 224.624968][T16454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3139'. [ 224.726281][T16458] netlink: ct family unspecified [ 224.736201][T16458] openvswitch: netlink: Actions may not be safe on all matching packets [ 224.786700][T16311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.798811][T16311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.809777][T16311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.820444][T16311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.846827][T16475] sctp: [Deprecated]: syz.4.3147 (pid 16475) Use of int in maxseg socket option. [ 224.846827][T16475] Use struct sctp_assoc_value instead [ 224.923193][T16311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.977227][T16311] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.007437][T11925] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.014614][T11925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.029866][T11925] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.037042][T11925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.195298][T16499] netlink: 'syz.1.3153': attribute type 24 has an invalid length. [ 225.258086][T16489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.270007][T16504] veth0_to_bridge: left allmulticast mode [ 225.276197][T16504] veth0_to_bridge: left promiscuous mode [ 225.282572][T16504] bridge0: port 3(veth0_to_bridge) entered disabled state [ 225.294973][T16504] bridge_slave_1: left allmulticast mode [ 225.303904][T16504] bridge_slave_1: left promiscuous mode [ 225.309664][T16504] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.318239][T16504] : left allmulticast mode [ 225.323023][T16504] : left promiscuous mode [ 225.327717][T16504] bridge0: port 1() entered disabled state [ 225.393433][T16311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.436237][T16311] veth0_vlan: entered promiscuous mode [ 225.464351][T16311] veth1_vlan: entered promiscuous mode [ 225.493818][T16311] veth0_macvtap: entered promiscuous mode [ 225.520159][T16311] veth1_macvtap: entered promiscuous mode [ 225.538506][T16511] netlink: 'syz.1.3156': attribute type 2 has an invalid length. [ 225.574897][T16311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.595128][T16311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.623945][T11939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.648545][T11939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.692925][T11939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.710015][T11939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.715534][ T5864] Bluetooth: hci5: command tx timeout [ 225.841624][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.849474][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.880132][T16531] netlink: 'syz.2.3164': attribute type 2 has an invalid length. [ 225.896500][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.914973][T16533] : entered promiscuous mode [ 225.919772][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.005596][T16541] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 226.475804][T16563] syzkaller1: entered promiscuous mode [ 226.491318][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.494981][T16563] syzkaller1: entered allmulticast mode [ 226.498775][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.511537][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.519225][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.526885][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.619969][T16574] netlink: 'syz.1.3176': attribute type 6 has an invalid length. [ 226.847951][T16570] chnl_net:caif_netlink_parms(): no params data found [ 226.959474][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.970280][T16570] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.977831][T16570] bridge_slave_0: entered allmulticast mode [ 226.986099][T16570] bridge_slave_0: entered promiscuous mode [ 226.997024][T16570] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.004268][T16570] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.011844][T16570] bridge_slave_1: entered allmulticast mode [ 227.018885][T16570] bridge_slave_1: entered promiscuous mode [ 227.067286][T16570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.079245][T16570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.122843][T16570] team0: Port device team_slave_0 added [ 227.131685][T16570] team0: Port device team_slave_1 added [ 227.184326][T16570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.203190][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.233252][T16570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.248348][T16570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.258780][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.288854][T16570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.338347][T16570] hsr_slave_0: entered promiscuous mode [ 227.347317][T16570] hsr_slave_1: entered promiscuous mode [ 227.362807][T16570] debugfs: 'hsr0' already exists in 'hsr' [ 227.368660][T16570] Cannot create hsr debugfs directory [ 227.474104][T16570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.486606][T16570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 227.497887][T16570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 227.528401][T16631] bond1: entered promiscuous mode [ 227.533701][T16631] bond1: entered allmulticast mode [ 227.539255][T16631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.567886][T16570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.592496][T16570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 227.603889][T16570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 227.684906][T16570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.698181][T16570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 227.710591][T16570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 227.732701][T16642] net veth1_virt_wifi .: renamed from virt_wifi0 [ 227.758971][T16570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.770635][T16570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 227.784755][T16570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 227.791499][ T5864] Bluetooth: hci5: command tx timeout [ 227.916622][T16570] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.929397][T16570] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.940052][T16570] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.956025][T16570] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.038695][T16664] 8021q: VLANs not supported on gre0 [ 228.059246][T16570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.098798][T16570] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.119946][T11941] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.127210][T11941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.146973][T11941] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.154179][T11941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.366986][T16570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.567841][T16700] __nla_validate_parse: 15 callbacks suppressed [ 228.567864][T16700] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.3207'. [ 228.583053][T16570] veth0_vlan: entered promiscuous mode [ 228.591639][ T5864] Bluetooth: hci1: command tx timeout [ 228.603674][T16570] veth1_vlan: entered promiscuous mode [ 228.635408][T16570] veth0_macvtap: entered promiscuous mode [ 228.644898][T16570] veth1_macvtap: entered promiscuous mode [ 228.665561][T16570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.682926][T16570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.696891][T11939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.714105][T11939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.734630][T11939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.745162][T11939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.796083][T11939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.807713][T11939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.834327][T11939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.844192][T11939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.001217][T16716] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 229.033552][T16718] netlink: set zone limit has 8 unknown bytes [ 229.253243][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'. [ 229.317902][ T2910] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 229.343786][ T2910] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 229.388923][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.396634][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.408615][ T2910] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 229.419133][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.426434][ T2910] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 229.438272][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.447473][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.506666][ T2910] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 229.516572][ T2910] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 229.522930][T16749] netlink: 'syz.3.3221': attribute type 21 has an invalid length. [ 229.549202][T16749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3221'. [ 229.574830][ T2910] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 229.598663][ T2910] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 229.743594][T16756] netlink: 'syz.3.3224': attribute type 10 has an invalid length. [ 229.780398][T16756] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 229.910432][T16758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3224'. [ 229.932440][ T5866] Bluetooth: hci5: command tx timeout [ 230.263903][T16770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.280164][T16771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.336221][ T2910] bond9 (unregistering): (slave gretap2): Releasing active interface [ 230.664464][ T5866] Bluetooth: hci1: command tx timeout [ 231.015413][ T2910] bond0 (unregistering): Released all slaves [ 231.025761][ T2910] bond1 (unregistering): Released all slaves [ 231.037025][ T2910] bond2 (unregistering): Released all slaves [ 231.047765][ T2910] bond3 (unregistering): Released all slaves [ 231.058586][ T2910] bond4 (unregistering): Released all slaves [ 231.071677][ T2910] bond5 (unregistering): Released all slaves [ 231.085728][ T2910] bond6 (unregistering): Released all slaves [ 231.097337][ T2910] bond7 (unregistering): Released all slaves [ 231.111373][ T2910] bond8 (unregistering): Released all slaves [ 231.123038][ T2910] bond9 (unregistering): Released all slaves [ 231.138382][T16739] chnl_net:caif_netlink_parms(): no params data found [ 231.158659][T16772] netlink: 'syz.4.3225': attribute type 25 has an invalid length. [ 231.253438][ T2910] : left promiscuous mode [ 231.298306][T16784] netlink: 'syz.0.3229': attribute type 16 has an invalid length. [ 231.309378][ T2910] tipc: Disabling bearer [ 231.314766][T16784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3229'. [ 231.325527][ T2910] tipc: Left network mode [ 231.400300][T16739] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.407791][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.419511][T16739] bridge_slave_0: entered allmulticast mode [ 231.436042][T16739] bridge_slave_0: entered promiscuous mode [ 231.461597][ T5866] Bluetooth: hci0: command tx timeout [ 231.487155][T16739] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.498274][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.507845][T16739] bridge_slave_1: entered allmulticast mode [ 231.515369][T16739] bridge_slave_1: entered promiscuous mode [ 231.564755][T16802] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3233'. [ 231.574865][T16802] xt_policy: neither incoming nor outgoing policy selected [ 231.584941][T16802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3233'. [ 231.585627][T16739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.613176][T16739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.659985][T16739] team0: Port device team_slave_0 added [ 231.678729][T16739] team0: Port device team_slave_1 added [ 231.726762][T16807] syzkaller0: entered promiscuous mode [ 231.732537][T16807] syzkaller0: entered allmulticast mode [ 231.745271][ T2910] veth0_macvtap: left promiscuous mode [ 231.757450][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881423b9c00: rx timeout, send abort [ 231.765822][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881423b8800: rx timeout, send abort [ 231.774313][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881423b9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.788683][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881423b8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.876467][ T2910] pim6reg (unregistering): left allmulticast mode [ 231.978879][T16739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.986280][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.015665][T16739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.030940][T16813] netlink: 'syz.3.3236': attribute type 1 has an invalid length. [ 232.033487][T16739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.038884][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3236'. [ 232.049731][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.082130][T16739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.178477][T16739] hsr_slave_0: entered promiscuous mode [ 232.186115][T16739] hsr_slave_1: entered promiscuous mode [ 232.196906][T16739] debugfs: 'hsr0' already exists in 'hsr' [ 232.203184][T16739] Cannot create hsr debugfs directory [ 232.236839][T16817] netlink: 'syz.3.3238': attribute type 1 has an invalid length. [ 232.244930][T16817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3238'. [ 232.258937][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 232.428463][ T2910] IPVS: stop unused estimator thread 0... [ 232.662949][T16845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.670234][T16845] IPv6: NLM_F_CREATE should be set when creating new route [ 232.677512][T16845] IPv6: NLM_F_CREATE should be set when creating new route [ 232.684770][T16845] IPv6: NLM_F_CREATE should be set when creating new route [ 232.699509][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.707405][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.715259][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.723326][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.730878][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.738491][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.739956][T16739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.746008][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.746194][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.746460][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.746636][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.746804][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.746985][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.747149][T16847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.806311][ T5866] Bluetooth: hci1: command tx timeout [ 232.812252][T16739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.831517][T16739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.854255][T16739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.965673][T16739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.987686][T16863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.994448][T16739] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.013645][T11925] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.020794][T11925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.033772][T11925] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.040910][T11925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.041835][T16863] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.066701][T16866] netlink: 'syz.4.3252': attribute type 2 has an invalid length. [ 233.259099][T16739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.289183][T16886] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 233.318345][T16739] veth0_vlan: entered promiscuous mode [ 233.328191][T16739] veth1_vlan: entered promiscuous mode [ 233.368595][T16739] veth0_macvtap: entered promiscuous mode [ 233.380152][T16739] veth1_macvtap: entered promiscuous mode [ 233.403381][T16739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.417035][T16739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.429476][T11925] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.439550][T11925] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.450866][T11925] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.460642][T11925] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.551418][ T5866] Bluetooth: hci0: command tx timeout [ 233.935085][T11941] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.944503][T11941] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.956829][T11941] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.965633][T11941] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.027373][T17091] netlink: 'syz.0.3257': attribute type 2 has an invalid length. [ 234.035439][T17091] __nla_validate_parse: 4 callbacks suppressed [ 234.035460][T17091] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3257'. [ 234.097826][T17094] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3258'. [ 234.137875][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.146786][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.178428][T11939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.202197][T11939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.300536][T17105] syz_tun: entered allmulticast mode [ 234.309526][T17103] syz_tun: left allmulticast mode [ 234.446263][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'. [ 234.522604][T17127] netlink: 'syz.4.3268': attribute type 10 has an invalid length. [ 234.539008][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3269'. [ 234.560450][T17134] bridge_slave_0: left allmulticast mode [ 234.566977][T17134] bridge_slave_0: left promiscuous mode [ 234.573009][T17127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3268'. [ 234.576365][T17134] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.594632][T17134] bridge_slave_1: left allmulticast mode [ 234.600455][T17134] bridge_slave_1: left promiscuous mode [ 234.606662][T17134] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.617744][T17134] bond0: (slave bond_slave_0): Releasing backup interface [ 234.631624][T17134] bond0: (slave bond_slave_1): Releasing backup interface [ 234.651979][T17134] team0: Port device team_slave_0 removed [ 234.680328][T17134] team0: Port device team_slave_1 removed [ 234.696697][T17134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.704371][T17134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.713340][T17134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.720825][T17134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.736610][T17134] bond0: (slave wlan1): Releasing backup interface [ 234.763903][T17127] dummy0: entered promiscuous mode [ 234.770955][T17127] bridge0: port 3(dummy0) entered blocking state [ 234.778859][T17127] bridge0: port 3(dummy0) entered disabled state [ 234.785846][T17127] dummy0: entered allmulticast mode [ 234.796283][T17127] bridge0: port 3(dummy0) entered blocking state [ 234.802799][T17127] bridge0: port 3(dummy0) entered forwarding state [ 234.821294][ T5866] Bluetooth: hci1: command tx timeout [ 235.508807][T17190] syz_tun: entered allmulticast mode [ 235.566988][T17189] syz_tun: left allmulticast mode [ 235.631951][T17198] netlink: 'syz.1.3289': attribute type 1 has an invalid length. [ 235.632452][ T5866] Bluetooth: hci0: command tx timeout [ 235.639892][T17198] netlink: 'syz.1.3289': attribute type 1 has an invalid length. [ 235.639908][T17198] netlink: 'syz.1.3289': attribute type 1 has an invalid length. [ 235.639923][T17198] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3289'. [ 235.728240][ T5958] IPVS: starting estimator thread 0... [ 235.821249][T17208] IPVS: using max 36 ests per chain, 86400 per kthread [ 235.903811][T17221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3292'. [ 235.967479][T17222] veth3: entered allmulticast mode [ 236.125445][T17246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3302'. [ 236.227791][T17252] : entered promiscuous mode [ 236.239968][T17258] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 236.389304][T17271] vlan2: entered promiscuous mode [ 236.406064][T17271] vlan2: entered allmulticast mode [ 236.421320][T17271] hsr_slave_1: entered allmulticast mode [ 236.455413][T17278] validate_nla: 1 callbacks suppressed [ 236.455516][T17278] netlink: 'syz.3.3312': attribute type 10 has an invalid length. [ 236.469894][T17278] bridge0: port 1(team0) entered blocking state [ 236.482127][T17278] bridge0: port 1(team0) entered disabled state [ 236.488658][T17278] team0: entered allmulticast mode [ 236.509742][T17278] team0: entered promiscuous mode [ 236.556077][T17284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3310'. [ 236.575401][T17278] team0: left allmulticast mode [ 236.606075][T17278] team0: left promiscuous mode [ 236.616750][T17278] bridge0: port 1(team0) entered disabled state [ 236.627659][T17278] team0: Cannot enslave team device to itself [ 236.665827][T17291] netlink: 'syz.1.3314': attribute type 16 has an invalid length. [ 236.693482][T17291] netlink: 'syz.1.3314': attribute type 17 has an invalid length. [ 236.750106][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.759810][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.894418][T17291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.003052][T17316] netlink: 'syz.3.3317': attribute type 1 has an invalid length. [ 237.031897][T17313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3317'. [ 237.081541][T17314] veth0_to_bridge: entered promiscuous mode [ 237.121819][T17296] netlink: 'syz.4.3316': attribute type 14 has an invalid length. [ 237.160271][T17296] netlink: 'syz.4.3316': attribute type 13 has an invalid length. [ 237.190814][T17295] veth0_to_bridge: left promiscuous mode [ 237.344337][T17342] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 237.359096][T17342] netlink: 'syz.3.3326': attribute type 4 has an invalid length. [ 237.569848][T17360] gtp0: entered promiscuous mode [ 237.575013][T17360] gtp0: entered allmulticast mode [ 237.653489][T17365] netlink: 'syz.1.3332': attribute type 30 has an invalid length. [ 237.695368][T17365] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 237.702975][ T5866] Bluetooth: hci0: command tx timeout [ 237.710968][T17365] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.907259][T17382] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.104710][T17400] team0: Device gtp0 is of different type [ 238.226537][T17412] sctp: [Deprecated]: syz.2.3346 (pid 17412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.226537][T17412] Use struct sctp_sack_info instead [ 238.389493][T17424] bridge_slave_0: left allmulticast mode [ 238.399439][T17424] bridge_slave_0: left promiscuous mode [ 238.408469][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.418715][T17424] bridge_slave_1: left allmulticast mode [ 238.425060][T17424] bridge_slave_1: left promiscuous mode [ 238.430932][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.444578][T17424] bond0: (slave bond_slave_0): Releasing backup interface [ 238.462825][T17424] bond0: (slave bond_slave_1): Releasing backup interface [ 238.483066][T17424] team0: Port device team_slave_0 removed [ 238.493386][T17424] team0: Port device team_slave_1 removed [ 238.500069][T17424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.541450][T17424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.555445][T17424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.563038][T17424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.780993][T17446] sctp: [Deprecated]: syz.0.3358 (pid 17446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.780993][T17446] Use struct sctp_sack_info instead [ 238.809148][T17449] gtp1: entered promiscuous mode [ 239.034993][T17466] netlink: 'syz.3.3364': attribute type 11 has an invalid length. [ 239.055670][T17466] __nla_validate_parse: 20 callbacks suppressed [ 239.055691][T17466] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3364'. [ 239.208044][T17473] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3366'. [ 239.588240][T17513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 240.070893][T17518] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3374'. [ 240.088174][T17518] netlink: 29 bytes leftover after parsing attributes in process `syz.4.3374'. [ 240.149285][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3377'. [ 240.167887][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3377'. [ 240.183174][T17523] IPVS: length: 251 != 8 [ 240.192247][T17523] nbd: must specify a device to reconfigure [ 240.284072][T17532] Bluetooth: MGMT ver 1.23 [ 240.367068][T17541] tipc: Started in network mode [ 240.374365][T17541] tipc: Node identity ac14140f, cluster identity 4711 [ 240.387747][T17541] tipc: New replicast peer: 255.255.255.255 [ 240.397742][T17541] tipc: Enabled bearer , priority 10 [ 240.457198][T17548] netlink: 'syz.2.3384': attribute type 1 has an invalid length. [ 240.469619][T17548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3384'. [ 240.569059][T17553] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3386'. [ 240.595354][T17556] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3387'. [ 240.605421][T11939] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.617539][T11939] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.649321][T11939] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.661018][T11939] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.511341][ T5987] tipc: Node number set to 2886997007 [ 255.783544][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.792700][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.923773][T17572] __nla_validate_parse: 1 callbacks suppressed [ 261.923794][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 261.955289][T17574] validate_nla: 1 callbacks suppressed [ 261.955309][T17574] netlink: 'syz.0.3391': attribute type 1 has an invalid length. [ 262.095133][T17586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3397'. [ 262.232322][T17593] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3400'. [ 262.250724][T17600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3400'. [ 262.256801][T17603] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3405'. [ 262.289388][T17603] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3405'. [ 262.323711][T17593] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 [ 262.325119][T17604] tipc: Enabling of bearer rejected, failed to enable media [ 262.396255][T17618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3408'. [ 262.424456][T17620] netlink: 'syz.3.3409': attribute type 4 has an invalid length. [ 262.436079][T17619] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3407'. [ 262.475978][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'. [ 262.487818][T17620] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3409'. [ 262.535400][T17620] `: renamed from bond0 (while UP) [ 262.716184][T17645] delete_channel: no stack [ 263.056156][T17667] team0 (unregistering): Port device team_slave_0 removed [ 263.066676][T17667] team0 (unregistering): Port device team_slave_1 removed [ 263.332828][T17691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.400194][T17695] vlan2: entered promiscuous mode [ 263.408658][T17695] vlan2: entered allmulticast mode [ 263.414664][T17695] hsr_slave_1: entered allmulticast mode [ 263.430532][T17700] netlink: 'syz.0.3435': attribute type 1 has an invalid length. [ 263.456349][T17700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.545887][T17710] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.579112][T17705] delete_channel: no stack [ 263.645184][T17716] netlink: 'syz.3.3441': attribute type 11 has an invalid length. [ 263.654681][T17718] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.666110][T17716] netlink: 'syz.3.3441': attribute type 11 has an invalid length. [ 263.708270][T17725] netlink: 'syz.2.3443': attribute type 1 has an invalid length. [ 263.873154][T17743] netlink: 'syz.0.3448': attribute type 11 has an invalid length. [ 263.876182][T17742] netlink: 'syz.0.3448': attribute type 11 has an invalid length. [ 263.889364][T17741] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.009832][T17755] bond0: entered promiscuous mode [ 264.015040][T17755] bond0: entered allmulticast mode [ 264.020620][T17755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.250382][T17760] team_slave_0: entered allmulticast mode [ 264.329495][T17767] ipvlan0: entered promiscuous mode [ 264.337004][T17767] ipvlan0: entered allmulticast mode [ 264.344968][T17767] veth0_vlan: entered allmulticast mode [ 264.465273][T17784] syzkaller0: entered promiscuous mode [ 264.470804][T17784] syzkaller0: entered allmulticast mode [ 264.497928][T17790] gretap0: entered promiscuous mode [ 264.586213][T17790] 0ªî{X¹¦: renamed from gretap0 [ 264.592901][T17790] 0ªî{X¹¦: left promiscuous mode [ 264.597981][T17790] 0ªî{X¹¦: entered allmulticast mode [ 264.604815][T17790] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.380142][T17875] netlink: 'syz.4.3488': attribute type 2 has an invalid length. [ 265.396517][T17875] netlink: 'syz.4.3488': attribute type 4 has an invalid length. [ 265.408048][T17878] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 265.612030][T17888] netlink: 'syz.4.3491': attribute type 1 has an invalid length. [ 265.634914][T17890] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 265.709551][T17888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.725548][T17888] bond1: (slave bond2): making interface the new active one [ 265.733823][T17888] bond1: (slave bond2): Enslaving as an active interface with an up link [ 265.765177][T17896] bond1: entered promiscuous mode [ 265.777635][T17896] bond2: entered promiscuous mode [ 265.783139][T17896] bond1: entered allmulticast mode [ 265.788301][T17896] bond2: entered allmulticast mode [ 265.795619][T17896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.080402][T17922] sctp: [Deprecated]: syz.1.3502 (pid 17922) Use of int in maxseg socket option. [ 266.080402][T17922] Use struct sctp_assoc_value instead [ 266.860641][T17943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.881865][T17943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.935613][T17951] vlan2: entered allmulticast mode [ 266.971315][T17951] erspan0: entered allmulticast mode [ 266.990751][T17954] netlink: 'syz.4.3516': attribute type 1 has an invalid length. [ 267.000569][T17954] __nla_validate_parse: 41 callbacks suppressed [ 267.000592][T17954] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3516'. [ 267.016474][T17954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3516'. [ 267.053150][T17943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.065619][T17943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.092916][T17962] sctp: [Deprecated]: syz.1.3518 (pid 17962) Use of int in max_burst socket option deprecated. [ 267.092916][T17962] Use struct sctp_assoc_value instead [ 267.127779][T17943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.140285][T17943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.238919][T17943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.257321][T17943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.268885][T17980] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3522'. [ 267.375064][T11936] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.388689][T11936] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.420116][T11936] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.438715][T11936] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.460175][T11936] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.491254][T11936] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.521202][ T2910] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.547247][ T2910] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.604263][T18005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3531'. [ 267.774821][T18023] netlink: 'syz.4.3533': attribute type 10 has an invalid length. [ 267.777623][T18024] tipc: New replicast peer: 255.255.255.255 [ 267.783036][T18023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3533'. [ 267.789451][T18024] tipc: Enabled bearer , priority 10 [ 267.944543][T18030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3539'. [ 268.193635][T18045] veth0: entered promiscuous mode [ 268.199502][T18045] tap0: tun_chr_ioctl cmd 1074025678 [ 268.207934][T18045] tap0: group set to 0 [ 268.214870][T18044] veth0: left promiscuous mode [ 268.229245][T18054] netlink: 'syz.1.3548': attribute type 8 has an invalid length. [ 268.285536][T18058] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.293784][T18059] netlink: 'syz.1.3550': attribute type 1 has an invalid length. [ 268.544741][T18077] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 268.623226][T18092] netlink: 'syz.4.3561': attribute type 1 has an invalid length. [ 268.650878][T18092] netlink: 'syz.4.3561': attribute type 11 has an invalid length. [ 268.651733][T18089] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 268.659283][T18092] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3561'. [ 268.681871][T18089] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 268.720746][T18089] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 268.735151][T18096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3564'. [ 268.755606][T18098] netlink: 'syz.3.3563': attribute type 1 has an invalid length. [ 268.795374][T18098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.824976][T18098] bond2: (slave geneve2): making interface the new active one [ 268.835648][T18098] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 268.888316][T18109] netlink: 'syz.2.3568': attribute type 39 has an invalid length. [ 269.041536][T18123] netlink: 'syz.3.3572': attribute type 1 has an invalid length. [ 269.049326][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 269.094301][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3572'. [ 269.108147][T18123] tc_dump_action: action bad kind [ 269.329621][T18143] xt_time: unknown flags 0xf4 [ 269.524601][T18165] Bluetooth: MGMT ver 1.23 [ 269.714969][T18184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.787579][T18186] 0ªî{X¹¦: left allmulticast mode [ 269.839650][T18186] 8021q: adding VLAN 0 to HW filter on device ` [ 269.854528][T18196] NCSI netlink: No device for ifindex 0 [ 269.861043][T18186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.909945][T18195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.918789][T18195] bond0: (slave bond3): Enslaving as an active interface with an up link [ 270.294095][T18229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.533889][T18249] `: renamed from bond0 (while UP) [ 271.857426][T18350] syzkaller1: entered promiscuous mode [ 271.867731][T18350] syzkaller1: entered allmulticast mode [ 272.024617][T18369] __nla_validate_parse: 21 callbacks suppressed [ 272.024639][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3655'. [ 272.105347][T18378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3659'. [ 272.228189][T18391] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3662'. [ 272.258424][T18391] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3662'. [ 272.304571][T18400] IPv6: sit2: Disabled Multicast RS [ 272.304709][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'. [ 272.310866][T18400] sit2: entered allmulticast mode [ 272.327855][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'. [ 272.426669][T18413] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3668'. [ 272.609385][T18424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3672'. [ 272.699283][T18438] validate_nla: 12 callbacks suppressed [ 272.699302][T18438] netlink: 'syz.4.3676': attribute type 2 has an invalid length. [ 272.715861][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3676'. [ 272.733652][T18445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3679'. [ 272.745452][T18443] netlink: 'syz.3.3678': attribute type 1 has an invalid length. [ 272.753428][T18443] netlink: 'syz.3.3678': attribute type 1 has an invalid length. [ 272.764115][T18445] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 272.781435][T18443] netlink: 'syz.3.3678': attribute type 1 has an invalid length. [ 272.791387][T18443] netlink: 'syz.3.3678': attribute type 2 has an invalid length. [ 272.839915][T18443] pim6reg1: entered promiscuous mode [ 272.851196][T18443] pim6reg1: entered allmulticast mode [ 272.927277][ T5958] IPVS: starting estimator thread 0... [ 273.031188][T18459] IPVS: using max 34 ests per chain, 81600 per kthread [ 273.165021][T11941] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.193177][T11941] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.227447][T11941] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.252158][T18482] netlink: zone id is out of range [ 273.257804][T18482] netlink: zone id is out of range [ 273.265632][T18482] netlink: zone id is out of range [ 273.266091][T18480] dvmrp0: entered allmulticast mode [ 273.270872][T18482] netlink: zone id is out of range [ 273.270884][T18482] netlink: zone id is out of range [ 273.270893][T18482] netlink: zone id is out of range [ 273.305384][T11941] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.345997][T18491] netlink: 'syz.4.3697': attribute type 13 has an invalid length. [ 273.423747][T18497] netlink: 'syz.0.3700': attribute type 1 has an invalid length. [ 273.441654][T18497] netlink: 'syz.0.3700': attribute type 1 has an invalid length. [ 273.884287][T18544] netlink: 'syz.4.3714': attribute type 33 has an invalid length. [ 273.972469][T18544] bridge0: port 3(dummy0) entered disabled state [ 273.992059][T18544] dummy0 (unregistering): left allmulticast mode [ 273.998664][T18544] bridge0: port 3(dummy0) entered disabled state [ 274.157671][T18564] dvmrp0: left allmulticast mode [ 274.597502][T18603] syzkaller0: entered promiscuous mode [ 274.611244][T18603] syzkaller0: entered allmulticast mode [ 274.826242][T18624] netlink: 'syz.2.3744': attribute type 2 has an invalid length. [ 275.346601][T18669] syzkaller0: entered promiscuous mode [ 275.377187][T18669] syzkaller0: entered allmulticast mode [ 275.453669][T18686] unknown channel width for channel at 909000KHz? [ 275.553674][T18692] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20002 [ 275.649040][T18694] bridge_slave_0: invalid flags given to default FDB implementation [ 276.093141][T18730] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 276.119150][T18737] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:0 [ 276.246233][T18753] (unnamed net_device) (uninitialized): option mode: invalid value (255) [ 276.943808][T18822] net_ratelimit: 11 callbacks suppressed [ 276.943831][T18822] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 277.328931][T18851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.378594][T18851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.394815][T18853] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 277.410163][T18853] __nla_validate_parse: 38 callbacks suppressed [ 277.410184][T18853] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3822'. [ 277.450019][T18851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.471257][T18851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.534532][T18860] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.538002][T18859] Unsupported ieee802154 address type: 0 [ 277.561925][T18851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.575356][T18851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.594577][T18859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3824'. [ 277.603732][T18862] bond3: (slave gretap1): making interface the new active one [ 277.604687][T18862] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 277.659467][T18851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.676109][T18851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.793699][T11941] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.808873][T11941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.837685][T11941] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.856915][T11941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.910003][T11941] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.935838][T11941] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.969095][T11941] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.001113][T11941] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.036163][T18890] svc: failed to register nfsdv3 RPC service (errno 111). [ 278.054170][T18897] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3833'. [ 278.064279][T18890] svc: failed to register nfsaclv3 RPC service (errno 111). [ 278.066115][T18900] Bluetooth: MGMT ver 1.23 [ 278.080098][T18886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3833'. [ 278.097356][T18896] vxlan0: entered promiscuous mode [ 278.103069][T18896] vxlan0: entered allmulticast mode [ 278.110441][T18900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3834'. [ 278.118905][T11925] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.130543][T11925] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.150796][T11925] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.163365][T11925] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.269756][T18909] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 278.513508][T18940] syzkaller0: entered promiscuous mode [ 278.527455][T18940] syzkaller0: entered allmulticast mode [ 278.607600][T18948] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3847'. [ 278.644731][T18951] validate_nla: 9 callbacks suppressed [ 278.644752][T18951] netlink: 'syz.4.3848': attribute type 1 has an invalid length. [ 278.662387][T18951] netlink: 'syz.4.3848': attribute type 4 has an invalid length. [ 278.672581][T18951] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3848'. [ 278.689593][T18951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3848'. [ 279.112887][T18985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3858'. [ 279.187929][T18990] IPVS: ip_vs_edit_dest(): server weight less than zero [ 279.196567][T18992] FAULT_INJECTION: forcing a failure. [ 279.196567][T18992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.231554][T18992] CPU: 0 UID: 0 PID: 18992 Comm: syz.0.3860 Not tainted syzkaller #0 PREEMPT(full) [ 279.231585][T18992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.231613][T18992] Call Trace: [ 279.231621][T18992] [ 279.231630][T18992] dump_stack_lvl+0x189/0x250 [ 279.231679][T18992] ? __pfx____ratelimit+0x10/0x10 [ 279.231709][T18992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.231734][T18992] ? __pfx__printk+0x10/0x10 [ 279.231761][T18992] ? __might_fault+0xb0/0x130 [ 279.231794][T18992] ? rcu_is_watching+0x15/0xb0 [ 279.231816][T18992] should_fail_ex+0x414/0x560 [ 279.231847][T18992] _copy_from_user+0x2d/0xb0 [ 279.231871][T18992] ___sys_sendmsg+0x158/0x2a0 [ 279.231895][T18992] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.231936][T18992] ? __fget_files+0x2a/0x420 [ 279.231967][T18992] ? __fget_files+0x3a0/0x420 [ 279.232005][T18992] __x64_sys_sendmsg+0x19b/0x260 [ 279.232027][T18992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.232054][T18992] ? __pfx_ksys_write+0x10/0x10 [ 279.232081][T18992] ? rcu_is_watching+0x15/0xb0 [ 279.232104][T18992] ? rcu_is_watching+0x15/0xb0 [ 279.232126][T18992] do_syscall_64+0xfa/0x3b0 [ 279.232157][T18992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.232178][T18992] ? clear_bhb_loop+0x60/0xb0 [ 279.232201][T18992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.232222][T18992] RIP: 0033:0x7f16e158ebe9 [ 279.232240][T18992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.232260][T18992] RSP: 002b:00007f16e232c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.232283][T18992] RAX: ffffffffffffffda RBX: 00007f16e17b5fa0 RCX: 00007f16e158ebe9 [ 279.232299][T18992] RDX: 0000000000040084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 279.232313][T18992] RBP: 00007f16e232c090 R08: 0000000000000000 R09: 0000000000000000 [ 279.232327][T18992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.232340][T18992] R13: 00007f16e17b6038 R14: 00007f16e17b5fa0 R15: 00007fffafbf4608 [ 279.232365][T18992] [ 279.656461][T19001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.724040][T19014] netlink: 'syz.2.3868': attribute type 1 has an invalid length. [ 279.740504][T19019] netlink: 'syz.0.3871': attribute type 4 has an invalid length. [ 279.751542][T19019] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3871'. [ 279.769158][T19014] bond2: entered promiscuous mode [ 279.776935][T19014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.829556][T19014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.838759][T19014] bond2: (slave bond3): making interface the new active one [ 279.847166][T19014] bond3: entered promiscuous mode [ 279.853494][T19014] bond2: (slave bond3): Enslaving as an active interface with an up link [ 279.863349][T19028] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 280.000884][T19039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.021929][T19045] netlink: 'syz.4.3878': attribute type 10 has an invalid length. [ 280.034416][T19045] bridge_slave_1: left allmulticast mode [ 280.050725][T19045] bridge_slave_1: left promiscuous mode [ 280.058676][T19045] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.099164][T19045] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 280.255862][T19072] wg1: entered promiscuous mode [ 280.264810][T19070] netlink: 'syz.0.3885': attribute type 9 has an invalid length. [ 280.267900][T19072] wg1: entered allmulticast mode [ 280.410223][T19084] netlink: 'syz.2.3890': attribute type 83 has an invalid length. [ 280.427496][T19080] syzkaller0: entered promiscuous mode [ 280.435801][T19080] syzkaller0: entered allmulticast mode [ 280.666489][T19106] netlink: 'syz.1.3897': attribute type 21 has an invalid length. [ 280.777931][T19116] vlan2: entered allmulticast mode [ 280.784612][T19116] erspan0: entered allmulticast mode [ 280.942728][T19133] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 281.020411][ T30] audit: type=1800 audit(1755871778.051:3): pid=19131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3904" name="memory.events" dev="tmpfs" ino=693 res=0 errno=0 [ 281.128868][T19143] netlink: 'syz.2.3909': attribute type 1 has an invalid length. [ 281.208645][T19148] veth0: entered promiscuous mode [ 281.263538][T19146] veth0: left promiscuous mode [ 281.377462][T19165] gretap0: entered promiscuous mode [ 281.406213][T19165] gretap0: left promiscuous mode [ 281.452591][T19171] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 281.463954][T19171] gretap0: entered promiscuous mode [ 281.469398][T19171] gretap0: entered allmulticast mode [ 281.820094][T19197] netlink: 'syz.3.3927': attribute type 83 has an invalid length. [ 281.899492][T19213] IPv6: sit1: Disabled Multicast RS [ 281.905709][T19213] sit1: entered allmulticast mode [ 282.049001][T19230] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 282.615318][T19270] __nla_validate_parse: 13 callbacks suppressed [ 282.615344][T19270] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3948'. [ 282.755010][T19282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3952'. [ 282.795917][T19284] ipvlan2: entered promiscuous mode [ 282.907148][T19296] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3957'. [ 283.140181][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 283.206900][T19319] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 283.437345][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3970'. [ 283.468238][T19339] FAULT_INJECTION: forcing a failure. [ 283.468238][T19339] name failslab, interval 1, probability 0, space 0, times 0 [ 283.510287][T19339] CPU: 0 UID: 0 PID: 19339 Comm: syz.0.3968 Not tainted syzkaller #0 PREEMPT(full) [ 283.510318][T19339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.510331][T19339] Call Trace: [ 283.510339][T19339] [ 283.510347][T19339] dump_stack_lvl+0x189/0x250 [ 283.510378][T19339] ? __pfx____ratelimit+0x10/0x10 [ 283.510407][T19339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.510432][T19339] ? __pfx__printk+0x10/0x10 [ 283.510461][T19339] ? genl_family_rcv_msg_doit+0x267/0x300 [ 283.510488][T19339] ? __pfx___might_resched+0x10/0x10 [ 283.510508][T19339] ? lock_acquire+0x5f/0x360 [ 283.510540][T19339] should_fail_ex+0x414/0x560 [ 283.510569][T19339] should_failslab+0xa8/0x100 [ 283.510601][T19339] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 283.510631][T19339] ? __alloc_skb+0x112/0x2d0 [ 283.510665][T19339] __alloc_skb+0x112/0x2d0 [ 283.510698][T19339] netlink_ack+0x146/0xa50 [ 283.510726][T19339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.510748][T19339] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 283.510770][T19339] ? __pfx_nl80211_post_doit+0x10/0x10 [ 283.510793][T19339] ? __asan_memcpy+0x40/0x70 [ 283.510814][T19339] ? __pfx_ref_tracker_free+0x10/0x10 [ 283.510847][T19339] netlink_rcv_skb+0x28c/0x470 [ 283.510877][T19339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.510899][T19339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.510936][T19339] ? lock_release+0x4b/0x3e0 [ 283.510969][T19339] ? down_read+0x1ad/0x2e0 [ 283.510989][T19339] genl_rcv+0x28/0x40 [ 283.511010][T19339] netlink_unicast+0x82c/0x9e0 [ 283.511042][T19339] ? __pfx_netlink_unicast+0x10/0x10 [ 283.511074][T19339] ? netlink_sendmsg+0x642/0xb30 [ 283.511103][T19339] ? skb_put+0x11b/0x210 [ 283.511123][T19339] netlink_sendmsg+0x805/0xb30 [ 283.511158][T19339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.511189][T19339] ? aa_sock_msg_perm+0xf1/0x1d0 [ 283.511210][T19339] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.511233][T19339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.511266][T19339] __sock_sendmsg+0x219/0x270 [ 283.511301][T19339] ____sys_sendmsg+0x505/0x830 [ 283.511325][T19339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.511351][T19339] ? import_iovec+0x74/0xa0 [ 283.511377][T19339] ___sys_sendmsg+0x21f/0x2a0 [ 283.511399][T19339] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.511440][T19339] ? __fget_files+0x2a/0x420 [ 283.511472][T19339] ? __fget_files+0x3a0/0x420 [ 283.511508][T19339] __x64_sys_sendmsg+0x19b/0x260 [ 283.511531][T19339] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.511558][T19339] ? __pfx_ksys_write+0x10/0x10 [ 283.511589][T19339] ? rcu_is_watching+0x15/0xb0 [ 283.511612][T19339] do_syscall_64+0xfa/0x3b0 [ 283.511643][T19339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.511664][T19339] ? clear_bhb_loop+0x60/0xb0 [ 283.511688][T19339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.511708][T19339] RIP: 0033:0x7f16e158ebe9 [ 283.511727][T19339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.511746][T19339] RSP: 002b:00007f16df7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.511770][T19339] RAX: ffffffffffffffda RBX: 00007f16e17b6090 RCX: 00007f16e158ebe9 [ 283.511786][T19339] RDX: 0000000000040084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 283.511800][T19339] RBP: 00007f16df7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 283.511814][T19339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.511826][T19339] R13: 00007f16e17b6128 R14: 00007f16e17b6090 R15: 00007fffafbf4608 [ 283.511851][T19339] [ 283.879539][T19349] nbd: must specify a size in bytes for the device [ 284.056970][T15408] syzkaller0: tun_net_xmit 76 [ 284.064179][T15408] syzkaller0: tun_net_xmit 48 [ 284.075046][T19366] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 284.225427][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3979'. [ 284.269242][T19387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3981'. [ 284.387047][T19398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3985'. [ 284.459540][T19406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3988'. [ 284.687743][T19428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3990'. [ 284.789059][T19436] hsr_slave_0: left promiscuous mode [ 284.803697][T19436] hsr_slave_1: left promiscuous mode [ 284.833322][T19443] bridge0: port 3(veth0_to_bridge) entered blocking state [ 284.840818][T19443] bridge0: port 3(veth0_to_bridge) entered disabled state [ 284.848332][T19443] veth0_to_bridge: entered allmulticast mode [ 284.857655][T19443] veth0_to_bridge: entered promiscuous mode [ 284.870293][T19443] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.886410][T19443] bridge0: port 3(veth0_to_bridge) entered blocking state [ 284.893683][T19443] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 284.993466][T19456] FAULT_INJECTION: forcing a failure. [ 284.993466][T19456] name failslab, interval 1, probability 0, space 0, times 0 [ 285.014900][T19456] CPU: 0 UID: 0 PID: 19456 Comm: syz.2.4000 Not tainted syzkaller #0 PREEMPT(full) [ 285.014931][T19456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.014944][T19456] Call Trace: [ 285.014952][T19456] [ 285.014961][T19456] dump_stack_lvl+0x189/0x250 [ 285.014991][T19456] ? __pfx____ratelimit+0x10/0x10 [ 285.015021][T19456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.015046][T19456] ? __pfx__printk+0x10/0x10 [ 285.015073][T19456] ? genl_rcv+0x28/0x40 [ 285.015096][T19456] ? ____sys_sendmsg+0x505/0x830 [ 285.015117][T19456] ? __x64_sys_sendmsg+0x19b/0x260 [ 285.015137][T19456] ? do_syscall_64+0xfa/0x3b0 [ 285.015168][T19456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.015194][T19456] should_fail_ex+0x414/0x560 [ 285.015232][T19456] should_failslab+0xa8/0x100 [ 285.015264][T19456] kmem_cache_alloc_noprof+0x73/0x3c0 [ 285.015290][T19456] ? skb_clone+0x212/0x3a0 [ 285.015315][T19456] skb_clone+0x212/0x3a0 [ 285.015339][T19456] __netlink_deliver_tap+0x404/0x850 [ 285.015378][T19456] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.015410][T19456] netlink_deliver_tap+0x19c/0x1b0 [ 285.015441][T19456] netlink_sendskb+0x68/0x140 [ 285.015469][T19456] netlink_unicast+0x397/0x9e0 [ 285.015495][T19456] ? __asan_memcpy+0x40/0x70 [ 285.015523][T19456] ? __pfx_netlink_unicast+0x10/0x10 [ 285.015556][T19456] netlink_rcv_skb+0x28c/0x470 [ 285.015586][T19456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.015610][T19456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.015646][T19456] ? lock_release+0x4b/0x3e0 [ 285.015680][T19456] ? down_read+0x1ad/0x2e0 [ 285.015700][T19456] genl_rcv+0x28/0x40 [ 285.015721][T19456] netlink_unicast+0x82c/0x9e0 [ 285.015753][T19456] ? __pfx_netlink_unicast+0x10/0x10 [ 285.015780][T19456] ? netlink_sendmsg+0x642/0xb30 [ 285.015808][T19456] ? skb_put+0x11b/0x210 [ 285.015828][T19456] netlink_sendmsg+0x805/0xb30 [ 285.015863][T19456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.015895][T19456] ? aa_sock_msg_perm+0xf1/0x1d0 [ 285.015915][T19456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.015939][T19456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.015970][T19456] __sock_sendmsg+0x219/0x270 [ 285.015999][T19456] ____sys_sendmsg+0x505/0x830 [ 285.016023][T19456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.016048][T19456] ? import_iovec+0x74/0xa0 [ 285.016074][T19456] ___sys_sendmsg+0x21f/0x2a0 [ 285.016096][T19456] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.016137][T19456] ? __fget_files+0x2a/0x420 [ 285.016169][T19456] ? __fget_files+0x3a0/0x420 [ 285.016205][T19456] __x64_sys_sendmsg+0x19b/0x260 [ 285.016242][T19456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.016269][T19456] ? __pfx_ksys_write+0x10/0x10 [ 285.016298][T19456] ? rcu_is_watching+0x15/0xb0 [ 285.016322][T19456] ? rcu_is_watching+0x15/0xb0 [ 285.016344][T19456] do_syscall_64+0xfa/0x3b0 [ 285.016375][T19456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.016396][T19456] ? clear_bhb_loop+0x60/0xb0 [ 285.016419][T19456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.016440][T19456] RIP: 0033:0x7fc66518ebe9 [ 285.016458][T19456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.016477][T19456] RSP: 002b:00007fc665f34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.016500][T19456] RAX: ffffffffffffffda RBX: 00007fc6653b5fa0 RCX: 00007fc66518ebe9 [ 285.016517][T19456] RDX: 0000000000040084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 285.016530][T19456] RBP: 00007fc665f34090 R08: 0000000000000000 R09: 0000000000000000 [ 285.016544][T19456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.016556][T19456] R13: 00007fc6653b6038 R14: 00007fc6653b5fa0 R15: 00007ffd78f1f428 [ 285.016581][T19456] [ 285.386948][T19458] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 285.684935][T19472] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 285.702094][T19473] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 285.923869][T19488] validate_nla: 4 callbacks suppressed [ 285.923890][T19488] netlink: 'syz.2.4012': attribute type 1 has an invalid length. [ 286.063741][T19488] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.154813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 287.167585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 287.180245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 287.193184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 287.205853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 287.218500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 287.231165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 287.243960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 290.391095][ C0] net_ratelimit: 8253 callbacks suppressed [ 290.391117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.391143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.397891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 290.409277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.421126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.433242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.445932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 290.457193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.469279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.481424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.401221][ C1] net_ratelimit: 30125 callbacks suppressed [ 295.401244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.401839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 295.407680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.419559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.431663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.444453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 295.455624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.467481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.479507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.492170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 296.211078][ C1] sched: DL replenish lagged too much [ 300.411281][ C1] net_ratelimit: 30313 callbacks suppressed [ 300.411305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.411858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 300.417521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.429550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.441643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.454257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 300.465384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.477376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.489888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.502259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 305.421208][ C1] net_ratelimit: 29949 callbacks suppressed [ 305.421231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.421343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 305.427505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.439635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.451634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.464441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 305.475590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.487488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.499432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.512540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 310.431082][ C1] net_ratelimit: 30277 callbacks suppressed [ 310.431104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.431206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.437372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.450097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 310.461196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.473192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.485222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.497965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 310.509134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.521157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.441204][ C0] net_ratelimit: 30732 callbacks suppressed [ 315.441229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 315.441267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.447422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.459440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.472199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 315.483420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.495585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.507559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.520353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 315.531541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.291790][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.451129][ C1] net_ratelimit: 29991 callbacks suppressed [ 320.451153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.451641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 320.457343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.469363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.481541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.494174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 320.505331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.517340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.529389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.542048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 325.461149][ C1] net_ratelimit: 30736 callbacks suppressed [ 325.461172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.461214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.467422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.479947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 325.491164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.503139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.515247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.527746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 325.538942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.551094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.471074][ C0] net_ratelimit: 31155 callbacks suppressed [ 330.471094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 330.471118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.477260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.489399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.501878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 330.513112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.525083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.537226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.549673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 330.560905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.481074][ C1] net_ratelimit: 31065 callbacks suppressed [ 335.481096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.481175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.487311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.499977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 335.511056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.523117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.535247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.547644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 335.558879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.570935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.491171][ C0] net_ratelimit: 30878 callbacks suppressed [ 340.491194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 340.491215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.497407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.509409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.522240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 340.533435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.545283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.557225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.569957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 340.581183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.501078][ C0] net_ratelimit: 30707 callbacks suppressed [ 345.501103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 345.501179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.507367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.519530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.531925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 345.543135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.555115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.567180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.579739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 345.590955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.730939][ T5864] Bluetooth: hci5: command 0x0406 tx timeout [ 350.511131][ C1] net_ratelimit: 31085 callbacks suppressed [ 350.511147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 350.511155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.511406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.517345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.529571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.542296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 350.553400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.565268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.577330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.589998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 355.521197][ C1] net_ratelimit: 30442 callbacks suppressed [ 355.521218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.521606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 355.527461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.539931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 355.551600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.563472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.575388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.588160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 355.599330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.611840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 355.800240][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 360.531178][ C0] net_ratelimit: 30902 callbacks suppressed [ 360.531200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.531208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.531493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.537432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.549392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.561970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 360.573237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.585764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 360.597149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.609082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.541262][ C1] net_ratelimit: 31684 callbacks suppressed [ 365.541290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.541735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 365.547613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.559536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.571574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.583428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.595333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.608002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 365.619190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.631895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 370.551299][ C1] net_ratelimit: 32410 callbacks suppressed [ 370.551322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.551862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 370.557666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.570204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 370.581540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.593505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.605467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.617498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.629391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.641913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 375.561300][ C1] net_ratelimit: 32436 callbacks suppressed [ 375.561323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.561389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 375.567551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.579529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.591666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.603591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.615520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.627871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 375.639340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.651800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 378.826690][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.571063][ C1] net_ratelimit: 31509 callbacks suppressed [ 380.571085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.571121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 380.577507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.589899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 380.601322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.613209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.625219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.637271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.649137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.661774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 385.581165][ C1] net_ratelimit: 31260 callbacks suppressed [ 385.581187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.581679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 385.587415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.599442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.611435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.623530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.635502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.648057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 385.659381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.671884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 390.591078][ C0] net_ratelimit: 30881 callbacks suppressed [ 390.591102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.591203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.597328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.609218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.621886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 390.633124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.645630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 390.656990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.669019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.680985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.601094][ C1] net_ratelimit: 31719 callbacks suppressed [ 395.601117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.601600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 395.607296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.619990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 395.631427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.643425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.655503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.667426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.679509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.692085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 400.611070][ C1] net_ratelimit: 31581 callbacks suppressed [ 400.611092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.611727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 400.617307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.629207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.641242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.653191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.665037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.677731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 400.688990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.701430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 405.621105][ C0] net_ratelimit: 31801 callbacks suppressed [ 405.621108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.621127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 405.627365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.639198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.651385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.663137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.675168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.687736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 405.699052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.711597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 410.631108][ C1] net_ratelimit: 31475 callbacks suppressed [ 410.631131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.631482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 410.637346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.649889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 410.661292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.673258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.685304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.697181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.709117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.721590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 415.641114][ C0] net_ratelimit: 31959 callbacks suppressed [ 415.641138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.641136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.641396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.647925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 415.659313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.671781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 415.683121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.695051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.707102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.719016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.651147][ C0] net_ratelimit: 32371 callbacks suppressed [ 420.651169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.651212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.657363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.669299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.681839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 420.693188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.705748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 420.717194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.729087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.741158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.661034][ C1] net_ratelimit: 32217 callbacks suppressed [ 425.661057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.661482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 425.667246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.679881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 425.691313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.703157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.715277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.727110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.739098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.751964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 430.671163][ C1] net_ratelimit: 32419 callbacks suppressed [ 430.671186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.671199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.672006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 430.677443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.689926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 430.701323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.713203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.725240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.737245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.749246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.681092][ C1] net_ratelimit: 32018 callbacks suppressed [ 435.681115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.681570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 435.687373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.699935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 435.711337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.723161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 435.735234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.747309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 435.759249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.771892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 440.378266][ T31] INFO: task syz.1.4020:19519 blocked for more than 149 seconds. [ 440.393312][ T31] Not tainted syzkaller #0 [ 440.398292][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.691160][ C1] net_ratelimit: 31799 callbacks suppressed [ 440.691182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.691225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 440.697589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.709323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.721417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.733283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.745212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.757770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 440.769118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.781681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 442.731566][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.701203][ C1] net_ratelimit: 33225 callbacks suppressed [ 445.701225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.701482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 445.707439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.719430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.731406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.743433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.755346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.767851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 445.779165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.791703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:40:06:fd:5c:90, vlan:0) [ 447.931014][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 447.938000][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15958/1:b..l [ 447.946014][ C0] rcu: (detected by 0, t=10503 jiffies, g=51901, q=688 ncpus=2) [ 447.953759][ C0] task:syz-executor state:R running task stack:20608 pid:15958 tgid:15958 ppid:15904 task_flags:0x400140 flags:0x00004002 [ 447.967287][ C0] Call Trace: [ 447.970581][ C0] [ 447.973535][ C0] __schedule+0x1798/0x4cc0 [ 447.978074][ C0] ? rcu_is_watching+0x15/0xb0 [ 447.982863][ C0] ? finish_task_switch+0x32b/0x950 [ 447.988083][ C0] ? __pfx___schedule+0x10/0x10 [ 447.992962][ C0] ? __schedule+0x17ae/0x4cc0 [ 447.997665][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.002444][ C0] preempt_schedule_irq+0xb5/0x150 [ 448.007586][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 448.013331][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.018133][ C0] ? rcu_irq_exit_check_preempt+0xd6/0x210 [ 448.023974][ C0] irqentry_exit+0x6f/0x90 [ 448.028519][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.034545][ C0] RIP: 0010:__rcu_read_lock+0x39/0x60 [ 448.039999][ C0] Code: 81 c3 44 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 18 ff 03 8b 03 3d 00 00 00 40 7d 07 <5b> c3 cc cc cc cc cc 90 0f 0b 90 eb f3 89 d9 80 e1 07 80 c1 03 38 [ 448.059811][ C0] RSP: 0018:ffffc9000aec7328 EFLAGS: 00000283 [ 448.065914][ C0] RAX: 0000000000000001 RBX: ffff888022b7a244 RCX: dffffc0000000000 [ 448.073916][ C0] RDX: ffffc9000aec74f8 RSI: dffffc0000000000 RDI: ffffc9000aec7468 [ 448.081905][ C0] RBP: dffffc0000000000 R08: ffffc9000aec7458 R09: 0000000000000000 [ 448.090244][ C0] R10: ffffc9000aec74b8 R11: fffff520015d8e99 R12: 1ffff920015d8e8d [ 448.098254][ C0] R13: ffffc9000aec74a0 R14: ffffc9000aec7468 R15: ffffc9000aec7468 [ 448.106263][ C0] ? arch_stack_walk+0xe4/0x150 [ 448.111158][ C0] unwind_next_frame+0x9e/0x2390 [ 448.116123][ C0] ? unwind_next_frame+0xa5/0x2390 [ 448.121267][ C0] ? __unwind_start+0xf8/0x760 [ 448.126055][ C0] __unwind_start+0x5b9/0x760 [ 448.130757][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 448.136934][ C0] arch_stack_walk+0xe4/0x150 [ 448.141645][ C0] ? arch_stack_walk+0xe4/0x150 [ 448.146529][ C0] stack_trace_save+0x9c/0xe0 [ 448.151230][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 448.156702][ C0] save_stack+0xf5/0x1f0 [ 448.160975][ C0] ? __pfx_save_stack+0x10/0x10 [ 448.165853][ C0] ? page_ext_get+0x22/0x2f0 [ 448.170482][ C0] ? lock_release+0x4b/0x3e0 [ 448.175100][ C0] ? page_ext_get+0x22/0x2f0 [ 448.179729][ C0] __reset_page_owner+0x71/0x1f0 [ 448.184706][ C0] __free_frozen_pages+0xbc4/0xd30 [ 448.189851][ C0] __put_partials+0x156/0x1a0 [ 448.194540][ C0] put_cpu_partial+0x17c/0x250 [ 448.199323][ C0] ? put_cpu_partial+0x6d/0x250 [ 448.204298][ C0] __slab_free+0x2d5/0x3c0 [ 448.208743][ C0] ? __phys_addr+0xd3/0x180 [ 448.213268][ C0] qlist_free_all+0x97/0x140 [ 448.217883][ C0] kasan_quarantine_reduce+0x148/0x160 [ 448.223369][ C0] __kasan_slab_alloc+0x22/0x80 [ 448.228246][ C0] __kmalloc_noprof+0x224/0x4f0 [ 448.233121][ C0] ? tomoyo_encode+0x28b/0x550 [ 448.237904][ C0] tomoyo_encode+0x28b/0x550 [ 448.242517][ C0] tomoyo_realpath_from_path+0x58d/0x5d0 [ 448.248174][ C0] ? tomoyo_domain+0xd9/0x130 [ 448.252874][ C0] tomoyo_path_perm+0x213/0x4b0 [ 448.257746][ C0] ? stack_depot_save_flags+0x40/0x860 [ 448.263230][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 448.268273][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 448.273668][ C0] ? do_sys_openat2+0x154/0x1c0 [ 448.278532][ C0] ? __x64_sys_openat+0x138/0x170 [ 448.283571][ C0] ? do_syscall_64+0xfa/0x3b0 [ 448.288274][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.294373][ C0] ? lock_acquire+0x5f/0x360 [ 448.298996][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.303772][ C0] ? lock_release+0x4b/0x3e0 [ 448.308386][ C0] ? __might_fault+0xb0/0x130 [ 448.313080][ C0] ? __might_fault+0xcc/0x130 [ 448.317842][ C0] security_inode_getattr+0x12f/0x330 [ 448.323239][ C0] vfs_fstatat+0xb1/0x170 [ 448.327594][ C0] __x64_sys_newfstatat+0x116/0x190 [ 448.332821][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 448.338612][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.343410][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.348204][ C0] do_syscall_64+0xfa/0x3b0 [ 448.352738][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.357524][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.363652][ C0] ? clear_bhb_loop+0x60/0xb0 [ 448.368369][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.374297][ C0] RIP: 0033:0x7f0663b8d3fa [ 448.378744][ C0] RSP: 002b:00007ffdf40d49f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 448.387181][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0663b8d3fa [ 448.395176][ C0] RDX: 00007ffdf40d4a00 RSI: 00007f0663c4ede2 RDI: 0000000000000003 [ 448.403172][ C0] RBP: 00007ffdf40d4a00 R08: 0000000000000000 R09: 0000000000000000 [ 448.411169][ C0] R10: 0000000000001000 R11: 0000000000000206 R12: 00000000000000ac [ 448.419174][ C0] R13: 0000000000000000 R14: 0000000000046146 R15: 00007ffdf40d4b50 [ 448.427181][ C0] [ 448.430222][ C0] rcu: rcu_preempt kthread starved for 566 jiffies! g51901 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 448.441270][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 448.451256][ C0] rcu: RCU grace-period kthread stack dump: [ 448.457156][ C0] task:rcu_preempt state:R running task stack:26920 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 448.470677][ C0] Call Trace: [ 448.473973][ C0] [ 448.476941][ C0] __schedule+0x1798/0x4cc0 [ 448.481485][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.486271][ C0] ? __pfx___schedule+0x10/0x10 [ 448.491159][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 448.497080][ C0] ? schedule+0x91/0x360 [ 448.501359][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.506145][ C0] ? lock_release+0x4b/0x3e0 [ 448.510762][ C0] schedule+0x165/0x360 [ 448.514950][ C0] schedule_timeout+0x12b/0x270 [ 448.519823][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 448.525230][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.530017][ C0] ? __pfx_process_timeout+0x10/0x10 [ 448.535327][ C0] ? prepare_to_swait_event+0x341/0x380 [ 448.540912][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 448.545802][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 448.552003][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 448.557324][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 448.562577][ C0] ? finish_swait+0xcd/0x1f0 [ 448.567206][ C0] rcu_gp_kthread+0x99/0x390 [ 448.571822][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 448.577045][ C0] ? __kthread_parkme+0x7b/0x200 [ 448.582007][ C0] ? __kthread_parkme+0x1a1/0x200 [ 448.587055][ C0] kthread+0x70e/0x8a0 [ 448.591148][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 448.596372][ C0] ? __pfx_kthread+0x10/0x10 [ 448.600981][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.606202][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.611427][ C0] ? __pfx_kthread+0x10/0x10 [ 448.616043][ C0] ret_from_fork+0x3f9/0x770 [ 448.620649][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 448.625779][ C0] ? __switch_to_asm+0x39/0x70 [ 448.630585][ C0] ? __switch_to_asm+0x33/0x70 [ 448.635381][ C0] ? __pfx_kthread+0x10/0x10 [ 448.640000][ C0] ret_from_fork_asm+0x1a/0x30 [ 448.644805][ C0] [ 448.647837][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 448.654184][ C0] Sending NMI from CPU 0 to CPUs 1: [ 448.659414][ C1] NMI backtrace for cpu 1 [ 448.659435][ C1] CPU: 1 UID: 0 PID: 11931 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 448.659455][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.659468][ C1] Workqueue: bat_events batadv_tt_purge [ 448.659495][ C1] RIP: 0010:lock_release+0x3a/0x3e0 [ 448.659523][ C1] Code: ec 30 49 89 f5 49 89 fe 65 48 8b 05 70 e4 02 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 73 e4 02 11 83 f8 08 0f 83 9a 02 00 00 <89> c0 48 0f a3 05 5c 18 06 0e 73 16 e8 45 f1 08 00 84 c0 75 0d f6 [ 448.659539][ C1] RSP: 0018:ffffc90000a087d8 EFLAGS: 00000297 [ 448.659553][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88807ed40000 [ 448.659565][ C1] RDX: 0000000000000100 RSI: ffffffff8a37bdbe RDI: ffffffff8e139ee0 [ 448.659576][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.659587][ C1] R10: 00000000fffffff5 R11: ffffffff8a2ba6f0 R12: dffffc0000000000 [ 448.659599][ C1] R13: ffffffff8a37bdbe R14: ffffffff8e139ee0 R15: 0000000000000000 [ 448.659612][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 448.659625][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.659637][ C1] CR2: 00005555924ab5c8 CR3: 0000000021790000 CR4: 00000000003526f0 [ 448.659652][ C1] Call Trace: [ 448.659659][ C1] [ 448.659670][ C1] ipv6_chk_mcast_addr+0x77a/0x860 [ 448.659691][ C1] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 448.659714][ C1] ip6_mc_input+0x4ae/0xaf0 [ 448.659740][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 448.659764][ C1] ? rcu_read_lock_held+0xa/0x50 [ 448.659781][ C1] ? skb_dst+0x71/0xd0 [ 448.659804][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 448.659827][ C1] NF_HOOK+0x309/0x3a0 [ 448.659848][ C1] ? skb_orphan+0xaf/0xd0 [ 448.659871][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 448.659894][ C1] ? NF_HOOK+0x9a/0x3a0 [ 448.659916][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 448.659939][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 448.659966][ C1] __netif_receive_skb+0xd3/0x380 [ 448.659990][ C1] ? process_backlog+0x2d5/0x14f0 [ 448.660016][ C1] process_backlog+0x60e/0x14f0 [ 448.660046][ C1] ? __pfx_process_backlog+0x10/0x10 [ 448.660071][ C1] ? get_jiffies_update+0x44/0x140 [ 448.660099][ C1] __napi_poll+0xc7/0x360 [ 448.660120][ C1] ? rcu_is_watching+0x15/0xb0 [ 448.660138][ C1] net_rx_action+0x707/0xe30 [ 448.660161][ C1] ? rcu_is_watching+0x15/0xb0 [ 448.660184][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 448.660224][ C1] handle_softirqs+0x283/0x870 [ 448.660244][ C1] ? do_softirq+0xec/0x180 [ 448.660262][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 448.660281][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 448.660304][ C1] do_softirq+0xec/0x180 [ 448.660318][ C1] [ 448.660324][ C1] [ 448.660331][ C1] ? __pfx_do_softirq+0x10/0x10 [ 448.660351][ C1] ? rcu_is_watching+0x15/0xb0 [ 448.660369][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 448.660385][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 448.660403][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 448.660424][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 448.660447][ C1] batadv_tt_purge+0x4d1/0x9e0 [ 448.660472][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 448.660490][ C1] process_scheduled_works+0xae1/0x17b0 [ 448.660519][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.660543][ C1] worker_thread+0x8a0/0xda0 [ 448.660572][ C1] kthread+0x70e/0x8a0 [ 448.660594][ C1] ? __pfx_worker_thread+0x10/0x10 [ 448.660611][ C1] ? __pfx_kthread+0x10/0x10 [ 448.660632][ C1] ? rcu_is_watching+0x15/0xb0 [ 448.660648][ C1] ? __pfx_kthread+0x10/0x10 [ 448.660669][ C1] ret_from_fork+0x3f9/0x770 [ 448.660688][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 448.660707][ C1] ? __switch_to_asm+0x39/0x70 [ 448.660730][ C1] ? __switch_to_asm+0x33/0x70 [ 448.660751][ C1] ? __pfx_kthread+0x10/0x10 [ 448.660772][ C1] ret_from_fork_asm+0x1a/0x30 [ 448.660802][ C1] [ 449.394103][ T31] task:syz.1.4020 state:D stack:27432 pid:19519 tgid:19517 ppid:16739 task_flags:0x400140 flags:0x00004004 [ 449.414013][ T31] Call Trace: [ 449.417342][ T31] [ 449.420295][ T31] __schedule+0x1798/0x4cc0 [ 449.433123][ T31] ? unwind_next_frame+0xa5/0x2390 [ 449.438293][ T31] ? rcu_is_watching+0x15/0xb0 [ 449.451215][ T31] ? __pfx___schedule+0x10/0x10 [ 449.456119][ T31] ? schedule+0x91/0x360 [ 449.460380][ T31] ? rcu_is_watching+0x15/0xb0 [ 449.472838][ T31] ? lock_release+0x4b/0x3e0 [ 449.477479][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 449.491137][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 449.497523][ T31] schedule+0x165/0x360 [ 449.517125][ T31] schedule_preempt_disabled+0x13/0x30 [ 449.537813][ T31] __mutex_lock+0x7e6/0x1350 [ 449.558012][ T31] ? __mutex_lock+0x5bb/0x1350 [ 449.578578][ T31] ? arp_ioctl+0x2f5/0x450 [ 449.598253][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 449.611194][ T31] ? lock_release+0x4b/0x3e0 [ 449.615854][ T31] ? __might_fault+0xb0/0x130 [ 449.620562][ T31] ? __might_fault+0xcc/0x130 [ 449.633282][ T31] arp_ioctl+0x2f5/0x450 [ 449.637589][ T31] ? __pfx_arp_ioctl+0x10/0x10 [ 449.658582][ T31] inet_ioctl+0x36e/0x4c0 [ 449.671061][ T31] ? rcu_is_watching+0x15/0xb0 [ 449.675877][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 449.680786][ T31] ? lock_release+0x4b/0x3e0 [ 449.693182][ T31] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 449.698893][ T31] ? kfree+0x18e/0x440 [ 449.711369][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 449.716438][ T31] ? packet_ioctl+0x1f1/0x350 [ 449.736771][ T31] sock_do_ioctl+0xd9/0x300 [ 449.756668][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 449.776922][ T31] ? do_futex+0x333/0x420 [ 449.796320][ T31] ? file_init_path+0x434/0x590 [ 449.816896][ T31] sock_ioctl+0x576/0x790 [ 449.836693][ T31] ? lock_release+0x4b/0x3e0 [ 449.856630][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 449.876670][ T31] ? __fget_files+0x2a/0x420 [ 449.896512][ T31] ? __fget_files+0x3a0/0x420 [ 449.916650][ T31] ? __fget_files+0x2a/0x420 [ 449.937588][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 449.958679][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 449.971711][ T31] __se_sys_ioctl+0xfc/0x170 [ 449.976364][ T31] do_syscall_64+0xfa/0x3b0 [ 449.980900][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.994607][ T31] ? clear_bhb_loop+0x60/0xb0 [ 449.999336][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.013180][ T31] RIP: 0033:0x7fa216b8ebe9 [ 450.017645][ T31] RSP: 002b:00007fa217ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.034103][ T31] RAX: ffffffffffffffda RBX: 00007fa216db5fa0 RCX: 00007fa216b8ebe9 [ 450.058025][ T31] RDX: 0000200000000000 RSI: 0000000000008955 RDI: 0000000000000003 [ 450.074092][ T31] RBP: 00007fa216c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 450.098300][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.114334][ T31] R13: 00007fa216db6038 R14: 00007fa216db5fa0 R15: 00007ffd84b2a318 [ 450.138342][ T31] [ 450.157549][ T31] INFO: task syz.2.4021:19521 blocked for more than 159 seconds. [ 450.173261][ T31] Not tainted syzkaller #0 [ 450.178238][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.194303][ T31] task:syz.2.4021 state:D stack:28392 pid:19521 tgid:19520 ppid:15572 task_flags:0x400140 flags:0x00004004 [ 450.213864][ T31] Call Trace: [ 450.217231][ T31] [ 450.220182][ T31] __schedule+0x1798/0x4cc0 [ 450.232534][ T31] ? futex_unqueue+0x22/0x240 [ 450.237262][ T31] ? futex_unqueue+0x22/0x240 [ 450.257360][ T31] ? lock_release+0x4b/0x3e0 [ 450.277934][ T31] ? __pfx___schedule+0x10/0x10 [ 450.298185][ T31] ? schedule+0x91/0x360 [ 450.318239][ T31] ? rcu_is_watching+0x15/0xb0 [ 450.331307][ T31] ? lock_release+0x4b/0x3e0 [ 450.335967][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 450.351175][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 450.357565][ T31] schedule+0x165/0x360 [ 450.377149][ T31] schedule_preempt_disabled+0x13/0x30 [ 450.398198][ T31] __mutex_lock+0x7e6/0x1350 [ 450.418326][ T31] ? __mutex_lock+0x5bb/0x1350 [ 450.438814][ T31] ? xsk_bind+0x156/0xf90