last executing test programs: 2m7.384244267s ago: executing program 4 (id=3249): r0 = socket(0x2b, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0xed, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x7, 0x4}, {0xfffffff9, 0x43, 0x1, 0x7}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x8, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xfffffff8, 0x400}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x0, 0xc, 0x1, 0x2, {0x1, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0x7f, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfe}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd00000000000003ff00000800090002"], 0x34}}, 0x20) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r10, 0xc0286687, &(0x7f0000000440)={0x0, 0x39a9, 0x92, &(0x7f0000000380)=""/146}) setsockopt$sock_timeval(r9, 0x1, 0x2, &(0x7f0000000040), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) 2m5.412098123s ago: executing program 4 (id=3255): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) listen(r0, 0x200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80c00) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) recvfrom(r2, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) 2m4.880680414s ago: executing program 4 (id=3257): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c001000041000100fcff070004000000030000008f014880040008"], 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2m3.8114208s ago: executing program 4 (id=3261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f00000003c0)=@framed={{}, [@alu={0x3, 0x1, 0xd, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000400)='syzkaller\x00', 0x2}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'bond_slave_0\x00'}, 0x3}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100070000000001feffffff07ce0000", @ANYRES32=r4, @ANYBLOB="40200000104006000c001a800800048004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x800c010}, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r5, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m2.473707162s ago: executing program 4 (id=3266): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480), 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0x0, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c084}, 0x40000881) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m40.532424797s ago: executing program 2 (id=3353): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'veth0_vlan\x00', {0x2, 0x0, @local}}) (async, rerun: 64) accept4$unix(r0, 0x0, &(0x7f0000000080), 0x0) (rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1d0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffffff, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x101, 0xff]}}, {}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x7, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xfd, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r3 = socket$inet(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="70000000300001060000000000000000000000005c000180580001800f00010074756e6e656c5f6b65790000440002801c000200000000000000000000000000000000000700000001000000080003007f000001080004007f00000114000b80040000000c0002800800190000000000", 0x70) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x188, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@dev, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x180}}, @algo_aead={0x4c, 0x12, {{'morus640-sse2\x00'}}}]}, 0x188}}, 0x0) 1m40.107071406s ago: executing program 2 (id=3356): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1000}) socket$nl_generic(0x10, 0x3, 0x10) 1m39.934966566s ago: executing program 0 (id=3357): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 1m39.8703258s ago: executing program 2 (id=3358): syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa080202"], 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f00000011c0)=ANY=[@ANYRES32=0x0], 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x400) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f0000000a40)=""/253, 0xfd}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/173, 0xad}], 0x8) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r2 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f0000000100)="37dfba92a0f3a0afed5d92f4615f71776bc5954d8cfdf01d8c9be9c406ca0bfa640ffcb07b3b562943925b938a455fbfd5d24f8f9b3d49d478418ba6af6b234e2336c27dcfa340a348af970d677d5e9a7a8c99aef1cee17051d3061086436ac6efd01d5aea0b49d906ef", 0x6a) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) (async) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000004c0)={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, {0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0xffffffffffffffff, {[0x8, 0x4, 0x0, 0x0, 0x0, 0x8, 0x10001, 0xc]}}, 0x5c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000000000006111590000000000d500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1m39.613263053s ago: executing program 3 (id=3360): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0xa1a7, 0x2, 0x8201, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000000)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1m39.499911526s ago: executing program 0 (id=3361): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000000080002000200000004000300", 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x2c, 0x28, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0xf}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000280)={0x1d, r10, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x78, 0x0, 0x109, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x11}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x71}, @ETHTOOL_A_RINGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8000}]}, 0x78}, 0x1, 0x0, 0x0, 0x24044044}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r14, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r14, 0x400454e2, &(0x7f0000000040)=0x1) setsockopt$inet6_int(r13, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r13, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xfc, r12, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "d65d2ba19ed576aca7967cbd7b3fc881c6c5dfa5f063e1942c5c07e1214154334397c787be9cf4ae66335a591a31ffd63b5cd2a7de896391f66dd96e9c525eafd5455b799fe2a0a35e1cad081ca667d2ab577a881361d504415b6b8970d8668fccbc88f0fdc06438c5f41bd0f774ea44d792f273f61b024f7cdf90ffa7736fb2d603aaa40873c705e614436d33"}, @ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "93d9d13357b8594101360ea8cab101d1e4828267f3ee28a3c51ac10df0cfbf53507352e45a0a4227becc1ad20197e6e54f0388169100afe8370ca1b7964906d41c992ddaa5c73fdcf5"}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 1m39.120379629s ago: executing program 3 (id=3362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xb) setsockopt$inet6_tcp_int(r2, 0x6, 0xdb12a9e8eb45100c, &(0x7f0000000080), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1}, 0x20) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x139, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x103, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x18, 0x1000, 0x0, 0x0, {[@generic={0x2, 0x8, "fac60743fbd3"}, @window={0x3, 0x3, 0x4}, @md5sig={0x13, 0x12, "d641f4de67c1c6d3a424aa6d8e3462b3"}, @generic={0x1, 0x4, "49cf"}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "13763b5eac849182da04585ecb50d250"}]}}, {"2a0a980cc4e5c6a8c1c9663a9123053201e78f4aec38c06388c9bd6814a6bad0c47794930bc8f29f00fde0c7b97d784d30fd7bf2521631d81bd03962c98ae050e06b7f1aece095d907c78ff9f432cd75e8dc93e52f7504851afbdd739fda392a4a860ffb52a5a084339f717a3e3eaf5e10aeb75e2bc8c7ee38998c46705075140864e04f159f37ae4c17fe20b0fd10a7176143a7761fd67fe22f8b59500425354cbe34783909f3442255afbe3fd7ad1459085a3694ff8c"}}}}}}}, 0x0) 1m38.904454927s ago: executing program 2 (id=3363): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES8=r0, @ANYBLOB="0600eb00000800000400ec000a00060700021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4024004) (async, rerun: 64) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x66}, @MPTCP_PM_ATTR_LOC_ID={0x4, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48014}, 0x84040) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1000000}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24000844}, 0x24044000) close(r3) (async) sendmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, 0x0, 0x4080) (async, rerun: 64) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)={'veth0_to_bond\x00'}) (async, rerun: 64) r5 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001800)=""/4128, 0x1020}, {&(0x7f0000002b80)=""/4094, 0xffe}, {&(0x7f0000000380)=""/231, 0xf5}, {&(0x7f00000001c0)=""/180, 0xbe}, {&(0x7f0000000040)=""/104, 0x68}], 0x5}, 0x22) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r5, 0x5f2bc000) 1m38.647096478s ago: executing program 1 (id=3364): r0 = socket(0x0, 0x6, 0x1) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000390425bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="40100000004104001800128008000100677265000c000280050013000900006f00000000000000604b7e0000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, r7, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newaddr={0x30, 0x14, 0x100, 0x70bd26, 0x25dfdbfd, {0x2, 0x1f, 0x1, 0xff, r10}, [@IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x4010088) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r13) (async) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r13) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r14, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r11, 0x84, 0x79, 0x0, 0x0) (async) recvmsg$can_raw(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40012020) 1m38.492795347s ago: executing program 0 (id=3365): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x33, 0x49a62f8650fc05d3, 0x970) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={0x0, 0x2a7d, 0x0, [0x1, 0x7, 0x1, 0xda, 0xef], [0x4, 0x8, 0x9, 0xffffffffffffffff, 0x3, 0x0, 0xf021, 0x7, 0x9, 0x101, 0x2, 0xae, 0x9, 0x8e00000000000000, 0xd343, 0x5, 0xfffffffffffffffd, 0x3, 0x1, 0x7, 0x0, 0x4, 0x3, 0x7991, 0xb, 0xffffffffffffffff, 0x100000001, 0x0, 0x6, 0xd9, 0x1, 0x9, 0x8, 0xffffffffffffffff, 0x8, 0x1ff, 0x7, 0x7, 0x6, 0x4, 0x656f88b1, 0x6, 0x5, 0x6, 0x3, 0x3, 0x2, 0x11, 0x81, 0x8, 0x43, 0x200, 0x3, 0x6, 0xb, 0x9, 0x1, 0x81, 0x80000000, 0xffff, 0x1, 0xfffffffffffffffb, 0x5, 0xf, 0x6, 0x4, 0x213, 0x7fffffff, 0x8, 0x1, 0x800, 0x3, 0x8, 0xbde, 0xc, 0x2, 0x9, 0x8, 0x8, 0x0, 0x1, 0xd, 0xf5, 0xfffffffffffffff9, 0x9, 0x80000001, 0x8, 0x7, 0x8, 0x10000, 0x8, 0x1, 0x7, 0xfffffffffffffff8, 0x0, 0xfffffffffffffff1, 0xe7af, 0x4, 0x4, 0x1, 0x6ff517d7, 0x6, 0xffffffffffffffd8, 0x8, 0x6, 0x2, 0x7f, 0x567, 0x5, 0x401, 0x4, 0x4, 0x8, 0x5fc7226, 0x1162, 0x0, 0xff, 0x3, 0x3873d947, 0x4, 0x9]}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000080)='J', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x2, 0xfff, 0x8000000000000001, 0x4, 0x8, 0xb7be, 0x3, 0x4, 0x5, 0x1, 0x100, 0x3, 0x7, 0x5, 0x1d79c6ed]}, &(0x7f0000000000)=0x100) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000840)={0x1a, 0x0, {0x7f, @struct={0x0, 0x3}, 0x0, 0xff, 0xffffffffffffff35, 0x7, 0xec4, 0x8, 0x10, @usage=0x3, 0x9, 0xb, [0x1, 0x0, 0x8d70, 0xffffffffffff0000, 0x4f0]}, {0x27e4, @usage=0x9, 0x0, 0x4, 0x4, 0xf, 0x7, 0x4, 0x2a, @struct={0x4, 0xfff}, 0x1, 0x10, [0x9, 0x2, 0x3, 0xb, 0x1, 0x100]}, {0x0, @usage=0x6, 0x0, 0x2274a4d2, 0x400, 0x9, 0x40, 0x6, 0x2, @struct={0xfac, 0x7}, 0xd, 0x0, [0x2, 0xffffffffffffffff, 0x1, 0x5, 0x8, 0x5]}, {0x946, 0x8000, 0x6000000000000}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000c40)={0x0, 0x8, 0xf, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001040)={0x5, 0x0, {0x0, @usage=0x4, r3, 0xbdf, 0x1494, 0x10000, 0x9, 0x1, 0x44a, @struct={0xc0, 0xb19}, 0x18, 0x2, [0x9, 0x2, 0x0, 0x200, 0x6, 0x3]}, {0x7e2, @struct={0x8, 0xfffffffd}, r5, 0x2, 0xa, 0x0, 0x6, 0x9, 0x14, @struct={0x2, 0x100}, 0xe, 0xc248, [0x411c, 0xaf, 0x2, 0x7, 0x9, 0x79b9]}, {0x7, @struct={0x6, 0x9}, r6, 0x64, 0xab7, 0x3a, 0x9, 0x6778c23b, 0x45, @usage=0x1, 0x6, 0x7, [0x0, 0x3ff, 0x2, 0xfffffffffffffff8, 0x1000, 0x8]}, {0x2, 0xb495, 0x7}}) 1m38.25307621s ago: executing program 3 (id=3366): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r2 = epoll_create(0x2) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000300)={{&(0x7f0000000040)=[{0x101, 0x100000000, 0x3, {0x90f, 0x8000000000000001}, 0x2, 0x5}, {0x2, 0x3, 0x3, {0x5, 0x8}, 0x5, 0x4, 0x2}, {0x800, 0x3, 0x7, {0x8000, 0xfffffffffffffff9}, 0xfffffffffffffff9, 0x7, 0x6}, {0x7, 0x1, 0x2, {0x5, 0xc2}, 0x4, 0x2, 0x2}, {0x80, 0xe73, 0x8, {0x5, 0x101}, 0x2, 0x5, 0x7f}], 0x5, 0x40, 0x3, 0x8}, {&(0x7f0000000180)=[{0x3, 0x1}, {0x5, 0xe}, {0x101, 0xb}, {0x1, 0x9}, {0xfffffffffffffffd}], 0x5, 0x10, 0x9, 0x2cb}, {&(0x7f0000000200)=[0x9, 0x5, 0x8, 0x0, 0xdc], 0x5, 0x8, 0x2, 0x6}, {&(0x7f0000000240)=[{0x6c8, 0x7, 0x5af, 0x100, 0x2}, {0x5, 0xebf0, 0x0, 0x3, 0x401}, {0x2, 0x6, 0x1, 0x400, 0x40}], 0x3, 0x28, 0x1, 0x400}, {&(0x7f00000002c0)=[0x3, 0x0], 0x2, 0x8, 0x81, 0x6d}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x80201, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, &(0x7f00000003c0)={0x8000000000000001, 0x3}) recvfrom$unix(r1, &(0x7f0000000400)=""/211, 0xd3, 0x2000, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) close(r3) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x7d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xd, &(0x7f0000000580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000600)='GPL\x00', 0x10000, 0xbf, &(0x7f0000000640)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000740)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xd, 0x63, 0x94}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000009c0)=[r5, r6, r7, r8], &(0x7f0000000a00)=[{0x5, 0x9, 0x6, 0x3}, {0x2, 0x4, 0xd, 0x5}, {0x2, 0x2, 0x4, 0x3}, {0x0, 0x5, 0x3, 0x9}], 0x10, 0x96}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r9, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r10 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000c80)=0x10, 0x80800) sendto$phonet(r10, &(0x7f0000000cc0), 0x0, 0x20000000, &(0x7f0000000d00)={0x23, 0x6, 0x7, 0x10}, 0x10) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={r8, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000e00)={{{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x4e22, 0xc, 0x4e22, 0x5, 0x2, 0x80, 0x20, 0x21, r12, r13}, {0x3, 0x5da2, 0x9d7, 0x7ff, 0x6, 0x5, 0x4, 0x1}, {0xb, 0x2, 0x3, 0x7fffffffffffffff}, 0x1, 0x6e6bc0, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x4d4, 0xff}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x34ff, 0x3, 0x1, 0x5, 0x11, 0x80000001, 0x65c7}}, 0xe8) connect(r10, &(0x7f0000000f00)=@ethernet={0x306, @remote}, 0x80) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000f80)={0x0, 0x0, 0x5, 0x7}) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f00000010c0)={r0, &(0x7f0000000fc0)='!%\x00', 0x24b82, &(0x7f0000001000)={@align=0x2, {0x0, 0x8001, 0x95}}, 0x200, &(0x7f0000001040), &(0x7f0000001080)=0x200}) write$cgroup_devices(r14, &(0x7f0000001100)={'c', ' *:* ', 'rw\x00'}, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000013c0)={{r2}, r15, 0x4, @inherit={0x80, &(0x7f0000001340)={0x0, 0x7, 0x5, 0x2, {0x26, 0x4, 0xb77, 0x9, 0x4}, [0xffff, 0x2, 0x17, 0x9, 0x9, 0x7, 0x8000]}}, @name="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"}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x4011, r1, 0xc7ce3000) 1m38.168541877s ago: executing program 1 (id=3367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x9, 0x3}]}}}]}, 0x3c}}, 0x0) 1m37.874013574s ago: executing program 0 (id=3368): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff71100c000000e4f7fd135820ed92d7efc985b08af6e1650000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}}], 0x1, 0x2040000, &(0x7f0000003700)) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000480)={0x9, {0x2, 0x2, 0x1ff, 0x6, 0x8000000000000000}}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000480)={0x9, {0x2, 0x2, 0x1ff, 0x6, 0x8000000000000000}}) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40005) bind$rds(r0, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd60f4adf700202c00fe800000000000004c4cbf121f8175a8ff0200000000000000000000000000013c00000000000000050200c900000000810090780000000315b572d434a7024c"], 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd60f4adf700202c00fe800000000000004c4cbf121f8175a8ff0200000000000000000000000000013c00000000000000050200c900000000810090780000000315b572d434a7024c"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r3, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) socket(0x6, 0x3, 0x10001) (async) r4 = socket(0x6, 0x3, 0x10001) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040)={r7, 0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r7, 0xc000}, &(0x7f0000000080)=0x8) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180), &(0x7f00000002c0)=0x4) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180), &(0x7f00000002c0)=0x4) 1m37.658254249s ago: executing program 1 (id=3369): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xfffffffffffffd8e, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xffe7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "dc450c3e0cd486b59a21e735845991e2"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e080001400000001508"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000100), &(0x7f0000000180)=r3}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1m37.043512956s ago: executing program 3 (id=3370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 1m36.859145839s ago: executing program 0 (id=3371): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffffe, @loopback, 0x2000a}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20044040) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0) 1m36.82180897s ago: executing program 4 (id=3273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, 0x0, &(0x7f0000000400)) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$sock(r2, &(0x7f0000000600)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x2, 0x1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="813bcf1dace13a7c6907f35496183d89e1939242b474bf652c7b367b7c3a7f23dc511f6fbb4113509e4ff88cd23cb7432e90797fe5d8d2394db49e06c12989bb0adbcbba18df225e80a118c2c5fe524fa97c8c18c7c1071d96c9de0a9a081c9e48b28588fe8375c4e36e38d0dd9dd11f37bfe292fc11e14b828e29ceec8a6584116d3ef6711a6cb231417a5c38919181c612b41f7629c384540498a2bf5f91601590953ee07c4a28f16b92a46b63758e33a1710dd1b6e4e88a48b36145a5ece60bc4c358c18e71b869c4460b0705271b7ed8684c", 0xd4}, {&(0x7f0000000400)="754f76ed0078f25eb9efdd6b5e6385999fb60d933054b4da732e7d4a1160c51f01c030083f29fed5ef1ccc06f4da6ff38fd01b2bf9d98a5acd92ec743f56f3ae9032e63ac4f98314262862d8714a561c746027ef222146abda5788ee84b8a7060c15470e422a6b93963a76c05824e1023f7ddd9d58213ff0b55a88f10a3296367b217eb2", 0x84}], 0x2, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x89a1}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x36bf}}, @txtime={{0x18, 0x1, 0x3d, 0x898}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0xd8}, 0x6048084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="016f0800010027000000270000004a0000c800000000008490783fffff20ac1414aa008323340a010101e0000001ac1414aae0000002ac1414aaffffffffac1414aa640101018909e432f078d4f344862800000002061157c1e095a607b91bb4217ae4b62bbb020a6cf3b8b3a66d9118020725b6b5990f00442cab61e0000001000000070a01010100000006640101010000074cac1414aa000000087f00000100000000890754ac1414bb890bd8e0000002ac1414bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8a00000090780018050a000000000000070000005d70c508b018fc006d2af5d445897410838610316e0f2b2f6c087c21cb4f6861e0baf3ddfcc05f65cf64db652a7a1f0d05db5381227d45badfe6c0cee6c36b0aad07a2f231b962ce878fc5d70e6e5caa1b9d945185777df72cbfddc5246668b88c7f1d3d1c392923bdfcde44a1d3a0d2761de5e77ebf751db71375ef0700000000000000a41ebb17ef50009cd188c9b47979fb2c440a"], 0xd6) 1m36.751994697s ago: executing program 3 (id=3372): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) socket$inet(0x2, 0x4000000000000001, 0x100) close(0x3) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xb}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x44, 0x4a, 0x800, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x48, 0x0, r3, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044800}, 0x24000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18fffffff900518d26e7e45a8f7500008509000000d696fdcb84bdffd705bccb9d0000000000eff0000000f4"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) 1m36.666080633s ago: executing program 1 (id=3373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/248, 0x1a, 0xf8, 0x1}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000003201"], 0x138) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x4) 1m36.518463383s ago: executing program 3 (id=3374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) (async) r1 = socket$kcm(0x29, 0x5, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "2d74a2efa1df858e", "b74f034c00", "e44b1fb5", "1759311fc8fa92da"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r3, 0x0, 0xffffffff004) 1m36.391351738s ago: executing program 2 (id=3375): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c00313bec5b0100000000010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) shutdown(r0, 0x1) 1m36.339563512s ago: executing program 1 (id=3376): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000000c0)}, 0x20) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r3, &(0x7f0000000180)={0x27, @short}, 0x14) 1m36.10564497s ago: executing program 2 (id=3377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) r3 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xd, 0x7fe6, 0xffffffff, 0x42}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7f, 0x7}}}}]}, 0x44}}, 0x20040084) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x34, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40040800) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff001, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 1m35.978480369s ago: executing program 0 (id=3378): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@initdev, @empty, 0x0}, &(0x7f00000000c0)=0xc) (async, rerun: 32) r3 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1000000}, 0x10) (async, rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xa0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r6, {0xe, 0x1}}}, 0x24}}, 0x4) (rerun: 32) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000440)={r3, &(0x7f0000000340)='*[[\x00', 0x78200, &(0x7f0000000380)={@_ha_fsid={[0x0, 0x9]}, {0x7, 0x800, 0x5, 0x2}}, 0x2, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x2274}) 1m35.977404824s ago: executing program 1 (id=3379): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x1335, &(0x7f0000002640)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "36e875", 0x12ff, 0x2f, 0x1, @local, @mcast2, {[@hopopts={0x5c, 0xd, '\x00', [@generic={0x6, 0x1b, "c94ed0a24621a06c924fc61a9e28085a291d84cae692d74782514e"}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x1, 0x18, "c9c3e1f1bd267594ae34a06e23e865f9368c83a6cc146953"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x4, [0x5, 0x3]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x3, "5944b2"}, @enc_lim={0x4, 0x1, 0x9f}]}, @dstopts={0x4, 0x16, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0xd, 0x7b3c, [0x8, 0x5, 0x0, 0x2, 0x0, 0x1800000000000, 0x8, 0x80000001, 0x67]}}, @enc_lim={0x4, 0x1, 0xb}, @generic={0xe5, 0x1, 'w'}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x9, [0xfffffffffffffffd, 0xd, 0x0, 0x3, 0xff, 0x1d9]}}, @jumbo={0xc2, 0x4, 0x29}, @ra={0x5, 0x2, 0x64}]}, @fragment={0x4, 0x0, 0x69, 0x1, 0x0, 0x4, 0x66}, @hopopts={0x2e, 0x0, '\x00', [@ra={0x5, 0x2, 0x401}, @enc_lim={0x4, 0x1, 0x9}]}, @srh={0x0, 0x4, 0x4, 0x2, 0xf, 0x0, 0x3, [@empty, @empty]}, @fragment={0x88, 0x0, 0x6, 0x1, 0x0, 0x6, 0x67}, @fragment={0x67, 0x0, 0x8, 0x1, 0x0, 0x3, 0x68}, @fragment={0x16, 0x0, 0xff, 0x0, 0x0, 0x4, 0x67}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x3, [], "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"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x92, 0x72e, 0x2], "2b502e13ee4cfd9db7d094fad5b6399edd3df2a84e0fcbf57ee6b9197d1a84c79bb0"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0xffa, 0x6], "867cf8e83aa8740a93deaef3ac5f55dc03b549fbeee95e169ef5250bca03521d104533fae1a87527f9cd836921796a138d7f5c214a1ae7ccae5c845b301a072c574b434a5bdb2d650278084b7a0f967a8915d356e0623f62af7be5188302654c7cd795d7a8bbaa963e7b9b30be8e99b048669c0ac165c053dab3d746cdf98574e931aa1449804448e1deee78723e1af3ac9586d421f8c179282b31a26bfe417e8f12d3d8c2"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xd, 0x0, 0x1, 0x1, 0x7, 0x1}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x0, 0x2, 0x0, 0x2, 0x5, 0x81}, 0x2, {0x3, 0x8, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "e9556c38e4b03958d621c2ad48f4a9a2cd320530fb95601db0c2331eeb45f9a972e06b717ed4b98d481c0e079bdd6a806ed7cccc22cbe2579586503ca3c7256e6fb877107debeb3bd12a19297f8acb804a24959cf1e8d5ebd9da"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000880)=[{&(0x7f00000002c0)="3cfe7fdef1c0bb20a8f598af7c013f205695b8b502d8b03c5f8c3ca42466148bac07d14b116ba7939834b907d84f354d335cb707b53f4971a7eb26c84d8e8c291e7326886e60e294af5693f268fcbdd9e738c9899a011d9fd5791d58090f90289cab6be098dcaa032d1f842d0ed05a9d80a5964d266b9960b6b0c6c310097334df86b55ef537b415be556e5fd31dc5af6315d1842bcc1de04823e2cc7ae4403e8e17f09ac671e2876b7baf2f5be67d219369b1631cddfee0e01aba83cc62380add701e5e45fcf7dd13e8ac46b5ad511a08c5616d2facf7a3e62d60e73e077b44e4fbd8a06592a1271abc5e44531de18dc606e49a", 0xf4}, {&(0x7f0000000580)="ca191e57f62c02992755dd0aa0468fc215ba3465a94c343d437ced064810633c1754c57c89f4b0befbc77205092521fc097cf103cfb7c5edba353b7b495f11b8ee8730fbbf8b697942e78216409fd9e33ca4f6c49785ef0557668dfb302fe2f5ead640149454c61e98ef865af012b56c239366c3c1c75578709f82263e51c90aab408d25a6f01a303be2bfe1c6ef6d33d5a38224284f7d44858dd1ab72d1409bfb0b6f3fbaa9707f655764f3830638278a47e4dc455e36c70786f6a3a2e1a4bac0255b8fa68e810a2192eed7c159eddf4323328745a359171ca8720f4ef04a64ba9d125a8bdd5362142f3f839d2f2055502647a54315", 0xf6}, {&(0x7f0000000680)="ac827cf66f8451bf6d2214cd88c0126cc1e46566a661e6948d5d8051bfb7037c9265458754578c013421ad08e8c8c90681a7535387e049d6f384ace62a12f2cce3a83cbb5c75eee71517e3b95feb0d2f409c879daa86cdd1f9e650bb6800d4c0a5bdb719e9c3928dc983e145addee44256e66cecf1", 0x75}, {&(0x7f0000000900)="df6ff0909694e7752ea83c5dc9c3f2cbafd00be827dbe0257871cd38a9f95ca3dff994fdf52668639899c7960639dedbc1ca4b72b6dca763f9b4591ad2b4d54a529f61a7b66649669d21ed8d8423d7fd03653ce654ef5f64b3f2d73b7f8ba8e8dfaa899d76e81e8ac6283bfe2df24e95f3e9f5974e168ef7a35dd00586a460220f0c712ea8a202c52900c3ae6a4c009e740813202856571d8d9d1d4268", 0x9d}, {&(0x7f00000007c0)="3a1d526fb305e2a5d672478143a542c7af47e04db4f8c1e1edb1c38b834c34a0eae06762b63ae2d1cce21583ff7f842f03536beaeda656d7c8bc48a24efe9c09a4745b37d64078d3352436cf0ea150e7ef51dd7cbd0127299eb05efea8acd84cc22f2c2d79eb2160305d2e7c502e0257635cf9e5405490aee733b2617ec5cc6fbcb39fc2ad15961661f3ba2d4962e8e3d4dab920666f684fe5aeda676fe97683d28661d161bc340df0f4e589fdc79eac8b6634b66dd5ff39edf71100", 0xbc}], 0x5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x2001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000000)="170000000a00020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e60500", 0x105) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r3) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x40040) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r7, 0x2) r8 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$alg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40081}, 0x40000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0xff, 0x3f, 0xfffff004}, {0x16, 0x4, 0x2, 0xfffffffe}]}) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/27, 0x1b}}], 0x1, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x1, 0x0, 0x2, 0x10004003, 0xfffffa75, 0x0, 0x200a}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) r11 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000200)={r2}) 0s ago: executing program 32 (id=3378): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@initdev, @empty, 0x0}, &(0x7f00000000c0)=0xc) (async, rerun: 32) r3 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1000000}, 0x10) (async, rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xa0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r6, {0xe, 0x1}}}, 0x24}}, 0x4) (rerun: 32) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000440)={r3, &(0x7f0000000340)='*[[\x00', 0x78200, &(0x7f0000000380)={@_ha_fsid={[0x0, 0x9]}, {0x7, 0x800, 0x5, 0x2}}, 0x2, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x2274}) kernel console output (not intermixed with test programs): link: 164 bytes leftover after parsing attributes in process `syz.2.2606'. [ 252.308051][T16138] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2606'. [ 252.308073][T16138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2606'. [ 252.647117][T16158] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.242334][T16200] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 253.252883][T16200] bond7 (unregistering): Released all slaves [ 253.988919][T16250] syzkaller0: left promiscuous mode [ 253.988951][T16250] syzkaller0: left allmulticast mode [ 255.164013][T16314] validate_nla: 28 callbacks suppressed [ 255.164055][T16314] netlink: 'syz.0.2654': attribute type 9 has an invalid length. [ 255.282280][T16325] C: Caught tx_queue_len zero misconfig [ 255.297594][T16323] __nla_validate_parse: 13 callbacks suppressed [ 255.297613][T16323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 255.378828][T16332] netlink: zone id is out of range [ 255.378842][T16332] netlink: zone id is out of range [ 255.378957][T16332] netlink: zone id is out of range [ 255.473815][T16336] netlink: 'syz.4.2660': attribute type 5 has an invalid length. [ 255.640348][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 255.640372][ C0] bridge0: topology change detected, propagating [ 255.640783][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.640801][ C0] bridge0: topology change detected, propagating [ 255.807050][T16346] netlink: zone id is out of range [ 256.789440][T16410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2684'. [ 256.865785][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2685'. [ 257.133248][T16429] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 257.279352][T16435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.711927][T16468] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.032775][T16492] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2702'. [ 258.047108][T16491] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2702'. [ 258.082651][T16492] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2702'. [ 258.084462][T16491] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2702'. [ 258.179047][T16491] syzkaller1: entered promiscuous mode [ 258.179069][T16491] syzkaller1: entered allmulticast mode [ 258.329074][T16492] IPv6: NLM_F_REPLACE set, but no existing node found! [ 258.800374][T16528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2706'. [ 258.815915][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2706'. [ 258.815936][T16528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2706'. [ 259.102594][T16541] nbd: nbd2 already in use [ 259.204286][T16546] netlink: 'syz.0.2711': attribute type 7 has an invalid length. [ 259.204307][T16546] netlink: 'syz.0.2711': attribute type 8 has an invalid length. [ 259.228870][T16546] dummy0: entered promiscuous mode [ 259.250111][T16546] dummy0: left promiscuous mode [ 259.273090][T16554] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 259.287826][T16556] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 259.561613][T16577] netlink: 'syz.2.2719': attribute type 10 has an invalid length. [ 259.592916][T16583] netlink: 'syz.2.2719': attribute type 10 has an invalid length. [ 259.850987][T16606] Bluetooth: ISO socket layer initialized [ 259.941826][T16610] gretap0: entered promiscuous mode [ 259.970241][T16610] 0ªî{X¹¦: renamed from gretap0 [ 259.988147][T16610] 0ªî{X¹¦: left promiscuous mode [ 259.988169][T16610] 0ªî{X¹¦: entered allmulticast mode [ 260.007593][T16610] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 260.173439][T16618] dummy0 (unregistering): left allmulticast mode [ 260.201292][T16624] netlink: 'syz.2.2730': attribute type 62 has an invalid length. [ 260.287417][T16628] bond0: (slave team0): Releasing backup interface [ 260.289182][T16628] team0: left promiscuous mode [ 260.289203][T16628] team_slave_0: left promiscuous mode [ 260.289656][T16628] team_slave_1: left promiscuous mode [ 260.292538][T16628] bond5: (slave veth0_to_bond): Releasing active interface [ 260.328901][T16628] bond0: (slave bond_slave_0): Releasing backup interface [ 260.330734][T16628] bond_slave_0: left promiscuous mode [ 260.336644][T16628] bond0: (slave bond_slave_1): Releasing backup interface [ 260.362901][T16628] bond_slave_1: left promiscuous mode [ 260.374282][T16628] team0: Port device team_slave_0 removed [ 260.387237][T16628] team0: Port device team_slave_1 removed [ 260.387505][T16628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.390240][T16628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.398068][T16638] team0: Port device xfrm0 added [ 260.450465][T16622] tipc: Enabled bearer , priority 0 [ 260.572147][T16642] __nla_validate_parse: 14 callbacks suppressed [ 260.572170][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 260.929418][T16673] xt_hashlimit: size too large, truncated to 1048576 [ 261.017544][T16675] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 261.094177][T16657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 261.094217][T16657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 261.094245][T16657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.142541][T16664] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 261.144288][T16668] bond0: entered promiscuous mode [ 261.144308][T16668] bond_slave_0: entered promiscuous mode [ 261.144497][T16668] bond_slave_1: entered promiscuous mode [ 261.144709][T16668] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 261.301006][T16657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 261.301066][T16657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 261.301093][T16657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.436084][T16657] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 261.446406][T16690] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2744'. [ 261.463870][T16657] team0: Port device netdevsim1 removed [ 261.480702][T16657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 261.480742][T16657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 261.480769][T16657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.609263][T16657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 261.609301][T16657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 261.609329][T16657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.972485][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 261.972506][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2752'. [ 261.974845][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 261.974878][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2752'. [ 261.981382][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 261.981401][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2752'. [ 261.983786][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 261.983803][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2752'. [ 262.015377][T14894] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.015408][T14894] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 262.015430][T14894] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.235797][T14887] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.235831][T14887] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 262.235856][T14887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.236334][T14887] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.236359][T14887] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 262.236381][T14887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.387109][T14894] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.387143][T14894] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 262.387167][T14894] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.774427][T16765] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 262.902115][T16770] syzkaller1: entered promiscuous mode [ 262.902139][T16770] syzkaller1: entered allmulticast mode [ 263.022222][T16774] netlink: 'syz.4.2762': attribute type 10 has an invalid length. [ 263.315793][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 266.047073][T16812] __nla_validate_parse: 46 callbacks suppressed [ 266.047093][T16812] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2775'. [ 266.085445][T16809] netlink: 'syz.2.2774': attribute type 2 has an invalid length. [ 266.089719][T16815] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2775'. [ 266.091058][T16812] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2775'. [ 266.275861][T16820] sctp: [Deprecated]: syz.2.2777 (pid 16820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.275861][T16820] Use struct sctp_sack_info instead [ 266.277931][T16820] netlink: 'syz.2.2777': attribute type 10 has an invalid length. [ 266.284786][T16824] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2777'. [ 266.333257][T16822] vlan3: entered allmulticast mode [ 266.333278][T16822] veth1_virt_wifi: entered allmulticast mode [ 266.511153][T16820] team0: Port device dummy0 added [ 266.547257][T16824] team0: Port device dummy0 removed [ 266.898444][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'. [ 267.109450][T16864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2788'. [ 267.112677][T16872] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 267.118008][T16864] netlink: 'syz.3.2788': attribute type 3 has an invalid length. [ 267.471377][T16894] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2797'. [ 267.547779][T16890] netlink: 'syz.1.2796': attribute type 17 has an invalid length. [ 267.547802][T16890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'. [ 267.547829][T16890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2796'. [ 268.062212][T16935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2803'. [ 269.262777][T17008] xt_policy: output policy not valid in PREROUTING and INPUT [ 269.712151][T17041] tunl0: entered promiscuous mode [ 269.726860][T17041] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 270.194154][T17069] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 270.866688][T17124] netlink: 'syz.2.2840': attribute type 2 has an invalid length. [ 270.934798][T17124] openvswitch: netlink: Message has 8 unknown bytes. [ 270.934835][T17124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.293329][T17151] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 271.293351][T17151] __nla_validate_parse: 14 callbacks suppressed [ 271.293363][T17151] netlink: 16118 bytes leftover after parsing attributes in process `syz.2.2849'. [ 271.293989][T17151] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 271.294085][T17151] netlink: 16118 bytes leftover after parsing attributes in process `syz.2.2849'. [ 271.335363][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2848'. [ 271.369530][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2848'. [ 271.697445][T17162] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 271.923916][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 272.040719][T17188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2859'. [ 272.210677][T17195] netlink: 'syz.0.2864': attribute type 1 has an invalid length. [ 272.280114][T17203] TCP: TCP_TX_DELAY enabled [ 272.354748][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2865'. [ 272.354770][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2865'. [ 272.354818][T17204] vlan0: entered promiscuous mode [ 272.782370][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.784134][T17221] policy can only be matched on NF_INET_PRE_ROUTING [ 272.784146][T17221] unable to load match [ 272.794760][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.800710][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2868'. [ 272.807298][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.825954][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.826573][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.876688][ T4938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.878830][ T4938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.881202][ T4938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.884095][ T4938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.884752][ T4938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.452577][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2876'. [ 273.601698][T17222] virt_wifi0 speed is unknown, defaulting to 1000 [ 273.870125][T17276] geneve6: entered promiscuous mode [ 273.887462][T14869] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 40346 - 0 [ 273.887532][T14869] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 40346 - 0 [ 273.887567][T14869] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 40346 - 0 [ 273.887601][T14869] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 40346 - 0 [ 274.116958][T17290] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 274.296535][T17222] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.296676][T17222] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.296829][T17222] bridge_slave_0: entered allmulticast mode [ 274.298822][T17222] bridge_slave_0: entered promiscuous mode [ 274.335817][T17222] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.335951][T17222] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.336115][T17222] bridge_slave_1: entered allmulticast mode [ 274.340332][T17222] bridge_slave_1: entered promiscuous mode [ 274.432629][T17222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.456608][T17222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.517094][T17222] team0: Port device team_slave_0 added [ 274.519941][T17222] team0: Port device team_slave_1 added [ 274.613479][T17315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 274.957215][T17331] netlink: 'syz.2.2896': attribute type 13 has an invalid length. [ 274.995619][ T4938] Bluetooth: hci5: command tx timeout [ 275.302543][T17319] bridge0: port 3(syz_tun) entered disabled state [ 275.303076][T17319] bridge0: port 5(veth1_to_bridge) entered disabled state [ 275.303255][T17319] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.422576][T17347] netlink: 'syz.2.2900': attribute type 3 has an invalid length. [ 275.422598][T17347] netlink: 'syz.2.2900': attribute type 1 has an invalid length. [ 275.651296][T17319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.972213][T17319] tipc: Resetting bearer [ 276.027679][T17222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.027697][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.027724][T17222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.165124][T14871] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.165157][T14871] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 276.165182][T14871] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.165220][T14871] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.165244][T14871] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 276.165268][T14871] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.165302][T14871] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.165326][T14871] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 276.165350][T14871] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.171759][T17222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.171774][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.171802][T17222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.260777][T14886] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.260808][T14886] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 276.260833][T14886] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.421102][T17222] hsr_slave_0: entered promiscuous mode [ 276.422340][T17222] hsr_slave_1: entered promiscuous mode [ 276.724048][T17386] nbd: nbd0 already in use [ 276.724391][T17386] block nbd0: NBD_DISCONNECT [ 276.724413][T17386] block nbd0: Send disconnect failed -32 [ 276.726728][T17386] block nbd0: shutting down sockets [ 276.822792][T17387] __nla_validate_parse: 2 callbacks suppressed [ 276.822812][T17387] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2909'. [ 276.822831][T17387] openvswitch: netlink: Message has 512 unknown bytes. [ 276.879069][T17222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.879101][T17222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.075198][ T4938] Bluetooth: hci5: command tx timeout [ 277.140803][T17222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.140839][T17222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.204203][T17411] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2915'. [ 277.208552][T17411] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 277.256572][T17222] bond0: (slave netdevsim1): Releasing backup interface [ 277.272930][T17222] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 277.286130][T17222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.286163][T17222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.421631][T17419] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 277.454412][T17222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.454446][T17222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.517227][T14893] IPVS: starting estimator thread 0... [ 277.605404][T17425] IPVS: using max 39 ests per chain, 93600 per kthread [ 277.933280][T17222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.949325][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.950451][T17222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.991241][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.993190][T17222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.017074][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.017925][T17222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.043948][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.090742][T17446] ovs-dp0: entered promiscuous mode [ 278.240113][T17222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.331945][T17222] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.374981][T14893] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.375104][T14893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.403622][T14893] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.403728][T14893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.534526][T17464] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.158624][ T4938] Bluetooth: hci5: command tx timeout [ 279.451432][T17504] netlink: 'syz.1.2939': attribute type 16 has an invalid length. [ 279.451456][T17504] netlink: 'syz.1.2939': attribute type 3 has an invalid length. [ 279.451469][T17504] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2939'. [ 279.538430][T17505] nbd: must specify a device to reconfigure [ 279.947503][T17508] openvswitch: netlink: Missing key (keys=40, expected=100) [ 279.957221][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2943'. [ 279.977346][T17531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2945'. [ 279.977372][T17531] netlink: 'syz.2.2945': attribute type 6 has an invalid length. [ 280.109320][T17222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.144800][T17538] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 280.162115][T17539] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2947'. [ 280.162255][T17539] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2947'. [ 280.162387][T17539] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2947'. [ 280.162512][T17539] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2947'. [ 280.162721][T17539] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2947'. [ 280.274262][T17222] veth0_vlan: entered promiscuous mode [ 280.328926][T17222] veth1_vlan: entered promiscuous mode [ 280.438830][T17554] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 280.471520][T17222] veth0_macvtap: entered promiscuous mode [ 280.490571][T17222] veth1_macvtap: entered promiscuous mode [ 280.532425][T17222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.570407][T17222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.616839][T17560] netlink: 'syz.1.2955': attribute type 1 has an invalid length. [ 280.657249][T17560] bond12: entered promiscuous mode [ 280.657532][T17560] 8021q: adding VLAN 0 to HW filter on device bond12 [ 280.662585][T17564] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 280.763089][T14893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.763213][T14893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.777964][T14893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.794553][T14894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.833791][T17566] ipvlan4: entered allmulticast mode [ 280.833811][T17566] bond12: entered allmulticast mode [ 280.834461][T14894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.834478][T14894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.918205][T17566] bond12: (slave bridge7): making interface the new active one [ 280.918228][T17566] bridge7: entered promiscuous mode [ 280.918371][T17566] bridge7: entered allmulticast mode [ 280.921899][T17566] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 281.016838][T14871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.016859][T14871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.238675][ T4938] Bluetooth: hci5: command tx timeout [ 281.903821][T14886] IPVS: starting estimator thread 0... [ 282.005066][T17624] IPVS: using max 38 ests per chain, 91200 per kthread [ 282.052050][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.053442][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.054809][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.079375][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.080055][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.187713][T17629] __nla_validate_parse: 67 callbacks suppressed [ 282.187733][T17629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2968'. [ 282.761665][T17656] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 282.984396][T17671] xt_socket: unknown flags 0x8 [ 283.046005][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 283.046062][T17675] netlink: 'syz.2.2978': attribute type 9 has an invalid length. [ 283.046076][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2978'. [ 283.047946][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 283.047974][T17675] netlink: 'syz.2.2978': attribute type 9 has an invalid length. [ 283.047987][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2978'. [ 283.226486][T17627] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.363434][T17685] netlink: 'syz.2.2979': attribute type 3 has an invalid length. [ 283.363456][T17685] netlink: 'syz.2.2979': attribute type 3 has an invalid length. [ 283.363470][T17685] netlink: 'syz.2.2979': attribute type 3 has an invalid length. [ 283.438441][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2982'. [ 283.592733][T17690] syzkaller0: entered promiscuous mode [ 283.592757][T17690] syzkaller0: entered allmulticast mode [ 283.626140][T14873] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.626224][T14873] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.626257][T14873] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.626289][T14873] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.842073][T17704] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 283.843089][T17701] syzkaller0: entered promiscuous mode [ 283.843108][T17701] syzkaller0: entered allmulticast mode [ 283.905665][T17701] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.2985'. [ 284.037276][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'. [ 284.038059][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'. [ 284.068590][T17721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2989'. [ 284.068860][T17719] xt_nat: multiple ranges no longer supported [ 284.116600][ T4938] Bluetooth: hci3: command tx timeout [ 284.187112][T17627] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.187280][T17627] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.187416][T17627] bridge_slave_0: entered allmulticast mode [ 284.189327][T17627] bridge_slave_0: entered promiscuous mode [ 284.220854][T17627] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.220928][T17627] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.221074][T17627] bridge_slave_1: entered allmulticast mode [ 284.242523][T17627] bridge_slave_1: entered promiscuous mode [ 284.332300][T17627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.345593][T17627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.449950][T17627] team0: Port device team_slave_0 added [ 284.461825][T17627] team0: Port device team_slave_1 added [ 284.544303][T17627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.544321][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.544346][T17627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.553162][T17627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.553178][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.553204][T17627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.769830][T17627] hsr_slave_0: entered promiscuous mode [ 284.770935][T17627] hsr_slave_1: entered promiscuous mode [ 284.771644][T17627] debugfs: 'hsr0' already exists in 'hsr' [ 284.771679][T17627] Cannot create hsr debugfs directory [ 285.038686][T17767] openvswitch: netlink: Flow actions attr not present in new flow. [ 285.155597][T17769] netlink: 'syz.3.3002': attribute type 1 has an invalid length. [ 285.155618][T17769] netlink: 'syz.3.3002': attribute type 4 has an invalid length. [ 285.156109][T17769] netlink: 'syz.3.3002': attribute type 1 has an invalid length. [ 285.156125][T17769] netlink: 'syz.3.3002': attribute type 4 has an invalid length. [ 285.294708][T17627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.294745][T17627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.294771][T17627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49737 - 0 [ 285.412558][T17785] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.412766][T17785] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.413030][T17785] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.413236][T17785] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.413435][T17785] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.413634][T17785] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.413852][T17785] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.424217][T17785] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.547513][T17784] gtp0: entered promiscuous mode [ 285.547535][T17784] gtp0: entered allmulticast mode [ 285.642062][T17627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.642098][T17627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.642125][T17627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49737 - 0 [ 285.842245][T17803] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 285.842269][T17803] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 285.911181][T17627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.911214][T17627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.911238][T17627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49737 - 0 [ 286.047646][T17627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.047682][T17627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.047706][T17627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49737 - 0 [ 286.148309][T17823] tipc: New replicast peer: 172.20.20.187 [ 286.148531][T17823] tipc: Enabled bearer , priority 10 [ 286.197006][ T4938] Bluetooth: hci3: command tx timeout [ 286.394827][T17627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.408535][T17627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.411207][T17627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 286.434766][T17627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.443854][T17627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.463534][T17627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.464420][T17627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.500404][T17627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.589574][T17849] netlink: 'syz.4.3023': attribute type 3 has an invalid length. [ 286.616261][T17850] netlink: 'syz.0.3021': attribute type 2 has an invalid length. [ 286.737473][T17627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.776595][T17627] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.786827][T14869] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.786926][T14869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.834230][T14893] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.834337][T14893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.331945][T17874] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 287.332055][T17874] gretap0: entered promiscuous mode [ 287.332071][T17874] gretap0: entered allmulticast mode [ 287.642531][T17899] __nla_validate_parse: 50 callbacks suppressed [ 287.642552][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3030'. [ 287.800176][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3033'. [ 287.800211][T17907] netlink: 'syz.0.3033': attribute type 30 has an invalid length. [ 287.800227][T17907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3033'. [ 288.029890][T17627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.082392][T17935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3036'. [ 288.126037][T17935] netlink: 'syz.0.3036': attribute type 16 has an invalid length. [ 288.126059][T17935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3036'. [ 288.165978][T17627] veth0_vlan: entered promiscuous mode [ 288.188306][T17627] veth1_vlan: entered promiscuous mode [ 288.276879][ T5626] Bluetooth: hci3: command tx timeout [ 288.326273][T17627] veth0_macvtap: entered promiscuous mode [ 288.331979][T17627] veth1_macvtap: entered promiscuous mode [ 288.379163][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 288.386140][T17627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.394804][T17627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.487538][T14893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.488376][T14893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.488940][T14893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.489128][T14893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.355671][ T4938] Bluetooth: hci3: command tx timeout [ 290.701101][T17906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.707275][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3038'. [ 290.843095][T17956] syzkaller0: entered promiscuous mode [ 290.843120][T17956] syzkaller0: entered allmulticast mode [ 290.916898][T14873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.916920][T14873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.028967][T14873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.028989][T14873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.084654][T17962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'. [ 291.084737][T17962] ip6tnl0: Caught tx_queue_len zero misconfig [ 291.172045][T17958] syzkaller1: entered allmulticast mode [ 291.312759][T14869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.312780][T14869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.449506][T17971] tc action pedit offset must be on 32 bit boundaries [ 291.488521][T17971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2964'. [ 291.667542][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.670749][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.671456][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.673129][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.673782][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.884611][T17984] xt_socket: unknown flags 0xc [ 291.925876][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 292.041482][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079bbcc00: rx timeout, send abort [ 292.041651][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079bbc800: rx timeout, send abort [ 292.041827][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079bbcc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.041966][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079bbc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.085217][T17991] batadv_slave_0: entered promiscuous mode [ 292.164588][T17996] netlink: 'syz.3.3052': attribute type 4 has an invalid length. [ 292.221087][T17998] netlink: 'syz.0.3051': attribute type 10 has an invalid length. [ 292.232472][T17999] netlink: 'syz.0.3051': attribute type 10 has an invalid length. [ 292.362901][T18003] net_ratelimit: 29 callbacks suppressed [ 292.362921][T18003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.517881][T17989] batadv_slave_0: left promiscuous mode [ 292.772370][T18018] Cannot find set identified by id 4 to match [ 292.842728][T14869] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.842763][T14869] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.842787][T14869] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 40346 - 0 [ 292.904713][T17979] virt_wifi0 speed is unknown, defaulting to 1000 [ 292.916341][T18027] __nla_validate_parse: 2 callbacks suppressed [ 292.916360][T18027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3061'. [ 292.973390][T18021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3058'. [ 293.145215][T18033] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 293.433589][T14869] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.433634][T14869] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.433659][T14869] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 40346 - 0 [ 293.733748][T14869] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.733784][T14869] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.733810][T14869] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 40346 - 0 [ 293.795445][ T5626] Bluetooth: hci0: command tx timeout [ 293.863604][T14869] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.863626][T14869] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.863639][T14869] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 40346 - 0 [ 293.920526][T18037] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 293.920552][T18037] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 294.037433][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 294.133846][T18037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.133867][T18037] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 294.282267][T17979] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.282584][T17979] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.282730][T17979] bridge_slave_0: entered allmulticast mode [ 294.285814][T17979] bridge_slave_0: entered promiscuous mode [ 294.288358][T17979] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.288453][T17979] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.288575][T17979] bridge_slave_1: entered allmulticast mode [ 294.290286][T17979] bridge_slave_1: entered promiscuous mode [ 294.387750][T18037] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 294.387773][T18037] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 294.430334][T17979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.491094][T17979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.537480][T14885] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.607307][T18085] netlink: 'syz.1.3073': attribute type 1 has an invalid length. [ 294.635302][T14885] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.669946][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3076'. [ 294.689725][T17979] team0: Port device team_slave_0 added [ 294.699426][T17979] team0: Port device team_slave_1 added [ 294.977200][T17979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.977218][T17979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.980122][T17979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.985828][T14886] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.993690][T17979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.993704][T17979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.993729][T17979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.996142][T14886] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.185681][T14869] bridge_slave_1: left promiscuous mode [ 295.189658][T14869] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.213592][T18105] netlink: 'syz.1.3078': attribute type 1 has an invalid length. [ 295.232748][T14869] bridge_slave_0: left allmulticast mode [ 295.232772][T14869] bridge_slave_0: left promiscuous mode [ 295.242490][T14869] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.328812][T14869] pimreg: left allmulticast mode [ 295.328953][T14869] dvmrp8: left allmulticast mode [ 295.698067][T18123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3081'. [ 295.698098][T18123] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 296.104203][T18135] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3084'. [ 296.104231][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3084'. [ 296.387915][T14869] bond6 (unregistering): (slave geneve3): Releasing active interface [ 296.522740][T14869] bond9 (unregistering): (slave bridge3): Releasing backup interface [ 296.522769][T14869] bridge3 (unregistering): left promiscuous mode [ 296.551640][T14869] bond11 (unregistering): (slave bridge4): Releasing backup interface [ 296.551667][T14869] bridge4 (unregistering): left promiscuous mode [ 296.551685][T14869] bridge4 (unregistering): left allmulticast mode [ 296.606439][T14869] bond15 (unregistering): (slave bridge8): Releasing backup interface [ 296.606466][T14869] bridge8 (unregistering): left promiscuous mode [ 296.631597][T14869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.634299][T14869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.654243][T14869] bond0 (unregistering): (slave bond4): Releasing backup interface [ 296.654826][T14869] bond0 (unregistering): Released all slaves [ 296.673394][T14869] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 296.673419][T14869] wireguard0: left promiscuous mode [ 296.678477][T14869] bond1 (unregistering): Released all slaves [ 296.692780][T14869] bond2 (unregistering): Released all slaves [ 296.722581][T14869] bond3 (unregistering): Released all slaves [ 296.736711][T14869] bond4 (unregistering): Released all slaves [ 296.744225][T14869] bond5 (unregistering): Released all slaves [ 296.770958][T14869] bond6 (unregistering): Released all slaves [ 296.780944][T14869] bond7 (unregistering): Released all slaves [ 296.792906][T14869] bond8 (unregistering): Released all slaves [ 296.805507][T14869] bond9 (unregistering): Released all slaves [ 296.814243][T14869] bond10 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 296.825505][T14869] bond10 (unregistering): Released all slaves [ 296.856271][T14869] bond11 (unregistering): Released all slaves [ 296.863656][T14869] bond12 (unregistering): Released all slaves [ 296.875615][T14869] bond13 (unregistering): Released all slaves [ 296.888695][T14869] bond14 (unregistering): Released all slaves [ 296.897098][T14869] bond15 (unregistering): Released all slaves [ 296.955639][T17979] hsr_slave_0: entered promiscuous mode [ 296.956337][T17979] hsr_slave_1: entered promiscuous mode [ 296.956971][T17979] debugfs: 'hsr0' already exists in 'hsr' [ 296.956994][T17979] Cannot create hsr debugfs directory [ 297.061368][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 297.218847][T18164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3087'. [ 297.300880][T14869] ovs-dp0: left promiscuous mode [ 297.601123][T18178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3091'. [ 297.603113][T14869] tipc: Left network mode [ 297.963248][T17979] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.998215][T18203] vxcan0: tx address claim with different name [ 298.272557][T17979] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.341235][T14869] IPVS: stopping master sync thread 16872 ... [ 298.358054][T18214] netlink: 'syz.0.3096': attribute type 1 has an invalid length. [ 298.372439][T14869] IPVS: stopping backup sync thread 7763 ... [ 298.394194][T17979] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.802567][T17979] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.158605][T18247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3104'. [ 299.283895][T18251] netlink: 'syz.3.3107': attribute type 4 has an invalid length. [ 299.307169][T18254] netlink: 'syz.1.3105': attribute type 4 has an invalid length. [ 299.339457][T18255] netlink: 'syz.3.3107': attribute type 4 has an invalid length. [ 299.372044][T18249] macvtap1: entered promiscuous mode [ 299.372065][T18249] hsr0: entered promiscuous mode [ 299.373498][T18249] macvtap1: entered allmulticast mode [ 299.373515][T18249] hsr0: entered allmulticast mode [ 299.373529][T18249] hsr_slave_0: entered allmulticast mode [ 299.373545][T18249] hsr_slave_1: entered allmulticast mode [ 299.622962][T18268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3111'. [ 299.750476][T17979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.775975][T17979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.779131][T17979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.830656][T17979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.836400][T17979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.862191][T17979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.933243][T14869] hsr_slave_0: left promiscuous mode [ 299.934130][T14869] hsr_slave_1: left promiscuous mode [ 299.957886][T14869] veth0_to_batadv: left allmulticast mode [ 299.958103][T14869] veth0_to_batadv: left promiscuous mode [ 299.958207][T14869] veth1_macvtap: left promiscuous mode [ 299.958233][T14869] veth0_macvtap: left promiscuous mode [ 299.958320][T14869] veth1_vlan: left promiscuous mode [ 300.092352][T18295] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3117'. [ 300.255903][T18304] netlink: 'syz.3.3116': attribute type 1 has an invalid length. [ 300.327795][T18307] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 300.599439][T14869] team0 (unregistering): Port device macvlan2 removed [ 300.688432][T18321] Bluetooth: MGMT ver 1.23 [ 300.762786][T18320] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3120'. [ 300.852781][T14885] smbdirect: ib_dev[syz2] removed [ 301.028208][T14869] team0 (unregistering): Port device team_slave_1 removed [ 301.051972][T14869] team0 (unregistering): Port device team_slave_0 removed [ 301.316766][T17979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.319357][T17979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.373830][T18304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.391513][T18305] h: entered promiscuous mode [ 301.391938][T18291] syzkaller1: entered promiscuous mode [ 301.391955][T18291] syzkaller1: entered allmulticast mode [ 301.405473][T18313] bond1: (slave veth0_to_bond): making interface the new active one [ 301.411133][T18313] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 301.411198][T18299] syzkaller1: left promiscuous mode [ 301.411214][T18299] syzkaller1: left allmulticast mode [ 301.699059][T17979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.788841][T17979] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.813528][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.813651][T14873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.846687][T14887] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.846776][T14887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.931159][T14869] IPVS: stop unused estimator thread 0... [ 302.010613][T18367] sctp: [Deprecated]: syz.3.3124 (pid 18367) Use of int in max_burst socket option. [ 302.010613][T18367] Use struct sctp_assoc_value instead [ 302.338151][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3131'. [ 302.338192][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3131'. [ 302.550664][T18404] netlink: 'syz.3.3134': attribute type 16 has an invalid length. [ 302.550686][T18404] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3134'. [ 302.550711][T18404] veth0_macvtap: entered allmulticast mode [ 302.571132][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 302.586670][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 302.603570][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 302.635704][T14887] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.635746][T14887] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.635780][T14887] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.635812][T14887] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.967368][T18418] netlink: 'syz.4.3136': attribute type 16 has an invalid length. [ 302.967391][T18418] netlink: 'syz.4.3136': attribute type 17 has an invalid length. [ 302.969705][T18418] tunl0: left promiscuous mode [ 303.055196][T18418] bond0: left promiscuous mode [ 303.055969][T18418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.058177][T18418] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.058670][T18418] tipc: Resetting bearer [ 303.059129][T18418] tipc: Resetting bearer [ 303.077858][T18418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.125718][T14883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.126105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.144297][T14869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.144502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.176235][T14873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.176757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.220762][T18418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.220789][T18418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.248172][T18418] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 303.274665][T17979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.459444][T18439] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 303.494466][T18439] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 303.507329][T18440] netlink: zone id is out of range [ 303.529677][T18440] bridge0: port 3(veth1_to_bridge) entered blocking state [ 303.530479][T18440] bridge0: port 3(veth1_to_bridge) entered disabled state [ 303.530640][T18440] veth1_to_bridge: entered allmulticast mode [ 303.545689][T18440] veth1_to_bridge: entered promiscuous mode [ 303.545847][T18440] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 303.556252][T18440] bridge0: port 3(veth1_to_bridge) entered blocking state [ 303.556376][T18440] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 303.563583][T17979] veth0_vlan: entered promiscuous mode [ 303.570079][T18449] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 303.651937][T17979] veth1_vlan: entered promiscuous mode [ 303.718413][T18456] ip_tables: iptables: counters copy to user failed while replacing table [ 303.786778][T17979] veth0_macvtap: entered promiscuous mode [ 303.807661][T17979] veth1_macvtap: entered promiscuous mode [ 303.850384][T17979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.883111][T18459] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 303.918570][T17979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.934058][T18468] xt_recent: Unsupported userspace flags (000000b1) [ 303.978584][T14871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.978628][T14871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.978662][T14871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.978694][T14871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.160680][T18474] xt_l2tp: missing protocol rule (udp|l2tpip) [ 304.348053][T18477] __nla_validate_parse: 20 callbacks suppressed [ 304.348073][T18477] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3148'. [ 304.376874][T14887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.376894][T14887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.478905][T18496] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3154'. [ 304.549944][T14873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.549967][T14873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.690456][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 304.690491][T18504] netlink: 'syz.0.3156': attribute type 10 has an invalid length. [ 304.690508][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 304.694758][T18505] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3157'. [ 304.714019][T18508] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3158'. [ 304.800217][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 304.968791][T18516] x_tables: duplicate underflow at hook 2 [ 305.093781][ T4938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.104810][ T4938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.113550][ T4938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.122591][ T4938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.124321][ T4938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.610199][T18547] syzkaller0: entered promiscuous mode [ 305.610223][T18547] syzkaller0: entered allmulticast mode [ 305.896270][ T5620] syz_tun (unregistering): left allmulticast mode [ 305.896296][ T5620] syz_tun (unregistering): left promiscuous mode [ 305.896390][ T5620] bridge0: port 3(syz_tun) entered disabled state [ 305.907429][T18562] x_tables: duplicate underflow at hook 3 [ 305.928440][T18568] net_ratelimit: 6 callbacks suppressed [ 305.928458][T18568] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 306.011224][T14893] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.046948][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.047130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.088052][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3173'. [ 306.107184][T14893] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.186518][T18575] netlink: 'syz.1.3174': attribute type 3 has an invalid length. [ 306.310835][T14893] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.453692][T14893] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.815716][T14887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.872156][T14887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.903402][T18619] netlink: 'syz.3.3184': attribute type 1 has an invalid length. [ 306.939901][T18619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.016108][T18619] veth0_virt_wifi: entered promiscuous mode [ 307.076869][T14893] veth1_to_bridge: left allmulticast mode [ 307.076895][T14893] veth1_to_bridge: left promiscuous mode [ 307.077099][T14893] bridge0: port 5(veth1_to_bridge) entered disabled state [ 307.081354][T18631] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 307.082256][T14893] bond5: left allmulticast mode [ 307.082278][T14893] bond5: left promiscuous mode [ 307.082467][T14893] bridge0: port 4(bond5) entered disabled state [ 307.129900][T14893] vlan5: left allmulticast mode [ 307.129922][T14893] geneve0: left allmulticast mode [ 307.129940][T14893] vlan5: left promiscuous mode [ 307.129952][T14893] geneve0: left promiscuous mode [ 307.151485][T14893] bridge0: port 1(vlan5) entered disabled state [ 307.153644][T14893] bridge_slave_1: left allmulticast mode [ 307.153666][T14893] bridge_slave_1: left promiscuous mode [ 307.153844][T14893] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.165368][T14871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.165573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.198343][T18634] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001 [ 307.203694][T18635] netlink: 'syz.2.3188': attribute type 9 has an invalid length. [ 307.235559][ T4938] Bluetooth: hci2: command tx timeout [ 307.243777][T14893] tipc: Resetting bearer [ 307.292879][T14893] bond6 (unregistering): (slave ip6erspan0): Releasing active interface [ 307.500198][T14893] tipc: Disabling bearer [ 307.524856][T14893] bond4 (unregistering): (slave bridge1): Releasing active interface [ 307.574117][T14893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.574407][T14893] bond_slave_0: left allmulticast mode [ 307.592353][T14893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.592607][T14893] bond_slave_1: left allmulticast mode [ 307.593812][T14893] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 307.594557][T14893] dummy0: left allmulticast mode [ 307.627363][T14893] bond0 (unregistering): (slave team0): Releasing backup interface [ 307.627852][T14893] team0: left allmulticast mode [ 307.627863][T14893] team_slave_0: left allmulticast mode [ 307.627873][T14893] team_slave_1: left allmulticast mode [ 307.628217][T14893] bond0 (unregistering): Released all slaves [ 307.632702][T14893] bond1 (unregistering): Released all slaves [ 307.681410][T14893] bond2 (unregistering): Released all slaves [ 307.698476][T14893] bond3 (unregistering): Released all slaves [ 307.738147][T14893] bond4 (unregistering): Released all slaves [ 307.764049][T14893] bond5 (unregistering): Released all slaves [ 307.779000][T14893] bond6 (unregistering): Released all slaves [ 307.793634][T14893] bond7 (unregistering): Released all slaves [ 307.811021][T18527] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.811120][T18527] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.811258][T18527] bridge_slave_0: entered allmulticast mode [ 307.812990][T18527] bridge_slave_0: entered promiscuous mode [ 307.851192][T18527] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.851648][T18527] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.851801][T18527] bridge_slave_1: entered allmulticast mode [ 307.879780][T18527] bridge_slave_1: entered promiscuous mode [ 307.889368][T18631] IPVS: Unknown mcast interface: syzkaller0 [ 307.942520][T18650] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 307.984677][T18527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.986682][T14887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.987636][T14887] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.036165][T18527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.112123][T18527] team0: Port device team_slave_0 added [ 308.125743][T18527] team0: Port device team_slave_1 added [ 308.174757][T14893] tipc: Disabling bearer [ 308.174887][T14893] tipc: Left network mode [ 308.188292][T18527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.188309][T18527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.188334][T18527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.192430][T18527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.192444][T18527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.192467][T18527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.265866][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.266094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.528100][T18527] hsr_slave_0: entered promiscuous mode [ 308.529116][T18527] hsr_slave_1: entered promiscuous mode [ 308.530082][T18527] debugfs: 'hsr0' already exists in 'hsr' [ 308.530101][T18527] Cannot create hsr debugfs directory [ 308.757918][T14871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.758135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.762234][T14887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.909639][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 309.325175][ T4938] Bluetooth: hci2: command tx timeout [ 309.367975][T18694] netlink: 'syz.4.3202': attribute type 12 has an invalid length. [ 309.795778][T14894] wlan1: Trigger new scan to find an IBSS to join [ 309.833578][T18527] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.876053][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 309.876074][T18733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3211'. [ 309.876097][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3211'. [ 309.992570][T18739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3212'. [ 310.057477][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 310.057502][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 310.213981][T18527] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.345468][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 310.345494][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 310.345530][T18734] netlink: 'syz.2.3210': attribute type 3 has an invalid length. [ 310.622593][T14893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.243788][T14893] team0 (unregistering): Port device team_slave_1 removed [ 311.268077][T14893] team0 (unregistering): Port device team_slave_0 removed [ 311.395332][ T4938] Bluetooth: hci2: command tx timeout [ 311.506178][T18730] syzkaller1: entered promiscuous mode [ 311.506200][T18730] syzkaller1: entered allmulticast mode [ 311.539166][T18527] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.646714][T14894] net_ratelimit: 7 callbacks suppressed [ 311.646733][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.646914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.765626][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 311.908870][T18769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3218'. [ 312.238815][T18782] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.275558][T18771] netlink: 'syz.1.3215': attribute type 83 has an invalid length. [ 312.331482][T18769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.348485][T18768] ipvlan2: entered allmulticast mode [ 312.348504][T18768] bond3: entered allmulticast mode [ 312.348745][T18768] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 312.348764][T18768] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 312.349959][T18768] bond3: (slave ipvlan2): Error -95 calling set_mac_address [ 312.507598][T18527] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.556692][T18780] syzkaller0: entered promiscuous mode [ 312.556715][T18780] syzkaller0: entered allmulticast mode [ 312.779817][T14873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.780037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.979236][T18802] lo: entered allmulticast mode [ 313.104711][T18809] nftables ruleset with unbound set [ 313.388183][T18801] lo: left allmulticast mode [ 313.405886][T14894] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.405939][T14894] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.405972][T14894] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.406027][T14894] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.506197][ T4938] Bluetooth: hci2: command tx timeout [ 313.872907][T18527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.876491][T14869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.876683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.903481][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.903667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.940556][T18527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.943158][T18527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.136263][T18527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.154357][T18527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.192733][T14893] IPVS: stop unused estimator thread 0... [ 314.269709][T18527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.396732][T18527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.515978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 314.567583][T18527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.584268][T18825] netlink: 'syz.4.3229': attribute type 15 has an invalid length. [ 314.838325][T14885] wlan1: Trigger new scan to find an IBSS to join [ 315.253634][T18859] SET target dimension over the limit! [ 315.349859][T18527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.351304][T18865] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20000 [ 315.409338][T18527] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.437645][T14885] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.437748][T14885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.484813][T14887] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.485010][T14887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.582531][T18869] __nla_validate_parse: 3 callbacks suppressed [ 315.582551][T18869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3237'. [ 315.674304][T18873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3237'. [ 316.157488][T14894] wlan1: Creating new IBSS network, BSSID e6:37:f5:ac:db:26 [ 316.655026][ C1] net_ratelimit: 5907 callbacks suppressed [ 316.655047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.655453][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 316.655835][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.656236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 316.656668][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.657077][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 316.657458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.657838][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 316.658240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.658643][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 316.844331][T18881] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.845038][T18881] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.152220][T18881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.169588][T18881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.214071][T18881] veth0_virt_wifi: left promiscuous mode [ 317.261786][T18881] veth0_macvtap: left allmulticast mode [ 317.566192][T18881] gtp0: left promiscuous mode [ 317.566215][T18881] gtp0: left allmulticast mode [ 317.648402][T18881] h: left promiscuous mode [ 317.777124][T18892] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 317.900345][T14869] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.902941][T14869] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.903491][T14869] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.903738][T14869] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.200162][T18915] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 318.308298][T18925] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 318.308319][T18925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3245'. [ 318.429198][T18915] bond4: option mode: invalid value (8) [ 318.450423][T18915] bond4 (unregistering): Released all slaves [ 318.613528][T18925] dummy0: entered promiscuous mode [ 318.628974][T18915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3245'. [ 318.716612][T18929] netlink: 'syz.4.3247': attribute type 2 has an invalid length. [ 319.158876][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 319.158911][T18934] netlink: 'syz.1.3248': attribute type 30 has an invalid length. [ 319.222974][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 319.223034][T18937] netlink: 'syz.1.3248': attribute type 30 has an invalid length. [ 319.418324][T18945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3249'. [ 319.435280][T14894] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.435326][T14894] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.435494][T14894] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.435531][T14894] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.592919][T18939] xt_CT: No such helper "netbios-ns" [ 320.418507][T18963] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3251'. [ 320.623287][T18527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.981968][T18527] veth0_vlan: entered promiscuous mode [ 321.039246][T18527] veth1_vlan: entered promiscuous mode [ 321.403154][T18527] veth0_macvtap: entered promiscuous mode [ 321.447315][T18527] veth1_macvtap: entered promiscuous mode [ 321.585475][T18992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3258'. [ 321.665908][ C1] net_ratelimit: 10597 callbacks suppressed [ 321.665928][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 321.666463][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 321.666874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.667287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.668625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 321.669022][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 321.670124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.670557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.671976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 321.672398][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 322.014604][T18527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.029313][T18996] netlink: 420 bytes leftover after parsing attributes in process `syz.4.3257'. [ 322.061643][T18527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.082157][T18998] netlink: 'syz.3.3259': attribute type 3 has an invalid length. [ 322.116044][T14869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.228473][T18999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3260'. [ 322.290855][T14894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.291961][T14893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.292034][T14893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.803348][T19027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3261'. [ 323.567699][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3265'. [ 323.609899][T14883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.609920][T14883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.838553][T14883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.838575][T14883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.039200][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'. [ 324.039223][T19048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3266'. [ 324.040618][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'. [ 324.040637][T19048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3266'. [ 325.981532][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.994149][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.000878][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.018287][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.020244][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.675611][ C1] net_ratelimit: 8256 callbacks suppressed [ 326.675632][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 326.675972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 326.676333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.676736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.678419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 326.678773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 326.679141][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.679497][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.680749][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 326.681162][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 326.790985][ C1] sched: DL replenish lagged too much [ 326.882488][T19113] netlink: 'syz.0.3275': attribute type 21 has an invalid length. [ 326.882511][T19113] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3275'. [ 326.882579][T19113] netlink: 'syz.0.3275': attribute type 5 has an invalid length. [ 326.882593][T19113] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3275'. [ 327.021071][T19051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.116590][ T4938] Bluetooth: hci1: command tx timeout [ 328.221169][T19141] netlink: 'syz.2.3280': attribute type 8 has an invalid length. [ 329.002493][T19153] netlink: 'syz.2.3282': attribute type 9 has an invalid length. [ 329.559520][T19163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3284'. [ 330.195638][ T4938] Bluetooth: hci1: command tx timeout [ 330.532236][T19102] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.534166][T19102] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.534323][T19102] bridge_slave_0: entered allmulticast mode [ 330.568798][T19102] bridge_slave_0: entered promiscuous mode [ 330.590900][T19102] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.591037][T19102] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.591319][T19102] bridge_slave_1: entered allmulticast mode [ 330.650503][T19102] bridge_slave_1: entered promiscuous mode [ 330.947042][T19102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.990406][T19102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.252727][T19185] pim6reg1: entered promiscuous mode [ 331.252750][T19185] pim6reg1: entered allmulticast mode [ 331.556359][T19102] team0: Port device team_slave_0 added [ 331.573571][T19102] team0: Port device team_slave_1 added [ 331.685063][ C1] net_ratelimit: 7944 callbacks suppressed [ 331.685082][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.685490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.686925][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 331.687360][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 331.687760][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.688177][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.689587][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 331.690005][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 331.690404][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.690809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.972579][T19208] bridge_slave_0: left allmulticast mode [ 331.972605][T19208] bridge_slave_0: left promiscuous mode [ 331.972826][T19208] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.106309][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 332.199697][T19208] bridge_slave_1: left allmulticast mode [ 332.199722][T19208] bridge_slave_1: left promiscuous mode [ 332.199967][T19208] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.275459][ T4938] Bluetooth: hci1: command tx timeout [ 332.284306][T19208] bond0: (slave bond_slave_0): Releasing backup interface [ 332.357591][T19208] bond0: (slave bond_slave_1): Releasing backup interface [ 332.463528][T19208] team0: Port device team_slave_0 removed [ 332.524024][T19208] team0: Port device team_slave_1 removed [ 332.536049][T19208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.536071][T19208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.573670][T19208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.573693][T19208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.816954][T19102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.816973][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.817025][T19102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.823824][T19102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.823840][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.823867][T19102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.322464][T19251] IPVS: length: 139 != 8 [ 334.362916][ T4938] Bluetooth: hci1: command tx timeout [ 335.054791][T19102] hsr_slave_0: entered promiscuous mode [ 335.073752][T19102] hsr_slave_1: entered promiscuous mode [ 335.074500][T19102] debugfs: 'hsr0' already exists in 'hsr' [ 335.074520][T19102] Cannot create hsr debugfs directory [ 335.511162][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 335.547559][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 335.577494][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 336.695028][ C1] net_ratelimit: 8698 callbacks suppressed [ 336.695049][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 336.695566][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 336.696117][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.696709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.698552][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 336.699115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 336.699662][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.700245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.702081][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 336.702623][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 338.656249][T19102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.656286][T19102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 46224 - 0 [ 338.656312][T19102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 339.402948][T19102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.403009][T19102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 46224 - 0 [ 339.403036][T19102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 339.704692][T19102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.723559][T19102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 46224 - 0 [ 339.723594][T19102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 339.956391][T19102] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 339.990545][T19102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.990586][T19102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 46224 - 0 [ 339.990612][T19102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 341.653234][T19102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 341.705424][ C1] net_ratelimit: 8817 callbacks suppressed [ 341.705445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 341.705840][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.706335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.707728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 341.708112][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 341.708475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.708861][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.710330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 341.710718][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 341.711094][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.737100][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.737485][T19417] netlink: 3604 bytes leftover after parsing attributes in process `syz.0.3329'. [ 341.908843][T19102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.029909][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.034019][T19102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.151555][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.164830][T19102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.223125][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.722945][T19102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.823732][T19102] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.868431][T14894] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.868538][T14894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.926545][T14894] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.926659][T14894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.131618][T14867] IPVS: starting estimator thread 0... [ 343.147823][T19449] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 343.225120][T19451] IPVS: using max 28 ests per chain, 67200 per kthread [ 343.258820][T19454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3337'. [ 343.258855][T19454] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3337'. [ 343.412755][T19454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3337'. [ 344.799119][T19482] netlink: 'syz.3.3344': attribute type 29 has an invalid length. [ 345.790713][T19512] netlink: 'syz.3.3351': attribute type 10 has an invalid length. [ 345.790914][T19512] dummy0: left promiscuous mode [ 345.839406][T19512] team0: Port device dummy0 added [ 345.856589][T19514] tipc: Started in network mode [ 345.856611][T19514] tipc: Node identity ffff1083, cluster identity 4711 [ 345.856624][T19514] tipc: Node number set to 4294905987 [ 345.856839][T19514] tipc: Cannot configure node identity twice [ 345.989826][T19516] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 346.140051][T19102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.164116][T14873] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.715564][ C1] net_ratelimit: 8665 callbacks suppressed [ 346.715585][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 346.716395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 346.716745][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 346.717110][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.717500][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 346.717852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.718679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 346.719676][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 346.720044][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 346.720499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.006614][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3361'. [ 347.542919][T19560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3363'. [ 347.581127][T19560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3363'. [ 347.682131][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 347.772059][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 348.076613][T19102] veth0_vlan: entered promiscuous mode [ 348.099131][T19578] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3365'. [ 348.136597][T19102] veth1_vlan: entered promiscuous mode [ 348.257032][T19584] netlink: 'syz.1.3367': attribute type 9 has an invalid length. [ 348.441528][T19102] veth0_macvtap: entered promiscuous mode [ 348.471650][T19102] veth1_macvtap: entered promiscuous mode [ 348.504802][T19102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.531306][T19102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.598672][T14885] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.604599][T14885] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.624332][T14867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.659097][T14883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.960806][T14873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.960828][T14873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.209595][T14885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.209617][T14885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.577932][T19603] netlink: 'syz.0.3371': attribute type 30 has an invalid length. [ 349.764023][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 351.725259][ C0] net_ratelimit: 10840 callbacks suppressed [ 351.725283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.725494][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 351.725909][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.725972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.726517][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.727063][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 351.727122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.727759][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.728099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 351.728370][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.734993][ C1] net_ratelimit: 15046 callbacks suppressed [ 356.735015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.735114][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.735523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.735620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.736163][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.736648][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 356.736662][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.737167][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.737665][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.737747][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.037078][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 361.744990][ C1] net_ratelimit: 15274 callbacks suppressed [ 361.745013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.745242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.745782][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.746122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 361.746327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.746937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.747232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 361.747484][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.747735][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 361.748031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.754965][ C1] net_ratelimit: 15296 callbacks suppressed [ 366.755003][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.755221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.755833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.756072][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 366.756444][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.757055][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.757077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 366.757584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 366.757654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.758076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.765223][ C0] net_ratelimit: 15378 callbacks suppressed [ 371.765245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.765419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.765766][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.766291][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.766802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.767030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 371.767325][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.767500][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.767832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.767990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.775141][ C0] net_ratelimit: 15269 callbacks suppressed [ 376.775164][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.775662][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.776173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.776431][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 376.776706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.776905][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.777228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.777455][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.777724][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.777929][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.785303][ C0] net_ratelimit: 15421 callbacks suppressed [ 381.785326][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.785853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.786438][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.786487][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 381.786976][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.786993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.787473][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.787499][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.788016][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.788034][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.794983][ C1] net_ratelimit: 15594 callbacks suppressed [ 386.795005][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.795105][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.795588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.796100][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.796550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 386.797067][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.797229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.797533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.797776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.798015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.805062][ C1] net_ratelimit: 15317 callbacks suppressed [ 391.805084][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 391.805323][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.805572][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 391.805879][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.806075][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.806450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.807002][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.807602][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.807710][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 391.808167][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.815223][ C0] net_ratelimit: 15427 callbacks suppressed [ 396.815236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 396.815246][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.815756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.815756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.816252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.816734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.817221][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.817611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 396.817699][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.818145][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.825137][ C1] net_ratelimit: 16140 callbacks suppressed [ 401.825159][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.825303][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.825772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.826268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.826268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.826735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.827230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.827390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.827697][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.827889][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 406.835195][ C0] net_ratelimit: 15798 callbacks suppressed [ 406.835217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.835219][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.835693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.835732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.836219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.836255][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.836687][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.837181][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.837447][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.837648][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.844988][ C0] net_ratelimit: 15978 callbacks suppressed [ 411.845011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.845016][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 411.845628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.846090][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.846257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.846616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 411.846873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.847109][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.847522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.848146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.854972][ C0] net_ratelimit: 15979 callbacks suppressed [ 416.854995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.855008][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.855468][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 416.855526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.856065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.856524][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 416.856631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.857007][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 416.857177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.857692][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.865250][ C0] net_ratelimit: 15517 callbacks suppressed [ 421.865271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.865651][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 421.865839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.866288][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 421.866388][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.866910][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.867455][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.867631][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 421.867993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.868270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 426.875301][ C0] net_ratelimit: 15326 callbacks suppressed [ 426.875327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.875806][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.876115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 426.876276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.876755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.877205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 426.877247][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.877682][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 426.877764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.878254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.885665][ C0] net_ratelimit: 15413 callbacks suppressed [ 431.885685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.885802][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 431.886197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.886290][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.886731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.886767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.887228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.887277][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.887699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.887791][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.520419][ T4938] Bluetooth: hci2: command 0x0406 tx timeout [ 436.895264][ C0] net_ratelimit: 15310 callbacks suppressed [ 436.895284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.895804][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 436.895826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.896356][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.896366][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 436.896854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.896913][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.897378][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.897870][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.898410][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.905268][ C0] net_ratelimit: 15692 callbacks suppressed [ 441.905279][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.905288][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.905785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 441.905809][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.906358][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.906878][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.906897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.907464][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 441.907513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.907987][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.914953][ C1] net_ratelimit: 15479 callbacks suppressed [ 446.914975][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 446.915274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.915484][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.915779][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.916013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.916309][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.916759][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.916778][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.917288][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.917348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.925058][ C1] net_ratelimit: 15527 callbacks suppressed [ 451.925070][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.925079][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.925562][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.926080][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.926616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.927043][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 451.927121][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.927600][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.928143][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.928145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 456.934955][ C0] net_ratelimit: 15300 callbacks suppressed [ 456.934978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.935500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.936030][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 456.936061][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.936546][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ba:a5:89:71:fb:80, vlan:0) [ 456.936617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.937066][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.937159][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.937680][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.938253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.594884][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 457.726754][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19614/1:b..l [ 457.734760][ C0] rcu: (detected by 0, t=10515 jiffies, g=74453, q=1685 ncpus=2) [ 457.742589][ C0] task:syz.3.3374 state:R running task stack:25608 pid:19614 tgid:19614 ppid:17222 task_flags:0x40004c flags:0x00080000 [ 457.756102][ C0] Call Trace: [ 457.759398][ C0] [ 457.762338][ C0] __schedule+0x17db/0x58f0 [ 457.766880][ C0] ? __queue_work+0x1f8/0x10d0 [ 457.771669][ C0] ? __lock_acquire+0x747/0x2de0 [ 457.776626][ C0] ? __pfx___schedule+0x10/0x10 [ 457.781514][ C0] preempt_schedule_irq+0x4b/0x90 [ 457.786559][ C0] irqentry_exit+0x14f/0x910 [ 457.791168][ C0] ? trace_irq_disable+0x3b/0x140 [ 457.796212][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.802213][ C0] RIP: 0010:unwind_next_frame+0xae5/0x2550 [ 457.808039][ C0] Code: 48 85 ff 0f 84 b9 0d 00 00 48 83 c7 70 e8 c3 25 00 00 49 89 c0 48 8b 54 24 08 48 8d 5a 01 48 8b 44 24 30 42 0f b6 04 20 84 c0 <4c> 89 04 24 0f 85 26 14 00 00 48 89 dd 48 c1 ed 03 42 0f b6 44 25 [ 457.827651][ C0] RSP: 0018:ffffc900035af560 EFLAGS: 00000246 [ 457.833730][ C0] RAX: 0000000000000000 RBX: ffffffff911fcdb3 RCX: ffffffff909c90b4 [ 457.841710][ C0] RDX: ffffffff911fcdb2 RSI: ffffffff911fcda2 RDI: ffffffff8c6dad20 [ 457.849684][ C0] RBP: ffffc900035af640 R08: ffffc900035afb00 R09: 0000000000000000 [ 457.857665][ C0] R10: ffffc900035af658 R11: ffffffff81b2a310 R12: dffffc0000000000 [ 457.865646][ C0] R13: ffffffff911fcdae R14: ffffc900035af608 R15: 1ffff920006b5ec1 [ 457.873631][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.879818][ C0] ? __slab_free+0x274/0x2c0 [ 457.884419][ C0] ? unwind_next_frame+0x8f/0x2550 [ 457.889545][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.895708][ C0] arch_stack_walk+0x11b/0x150 [ 457.900494][ C0] ? __slab_free+0x274/0x2c0 [ 457.905100][ C0] stack_trace_save+0xa9/0x100 [ 457.909875][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 457.915266][ C0] ? __lock_acquire+0x747/0x2de0 [ 457.920221][ C0] kasan_save_track+0x3e/0x80 [ 457.924915][ C0] ? kasan_save_track+0x3e/0x80 [ 457.929775][ C0] ? kasan_save_free_info+0x40/0x50 [ 457.934993][ C0] ? __kasan_slab_free+0x5c/0x80 [ 457.939940][ C0] ? kfree+0x1c5/0x650 [ 457.944025][ C0] ? __free_slab+0x130/0x280 [ 457.948625][ C0] ? __slab_free+0x274/0x2c0 [ 457.953284][ C0] kasan_save_free_info+0x40/0x50 [ 457.958330][ C0] __kasan_slab_free+0x5c/0x80 [ 457.963108][ C0] kfree+0x1c5/0x650 [ 457.967019][ C0] ? __free_slab+0x130/0x280 [ 457.971630][ C0] __free_slab+0x130/0x280 [ 457.976069][ C0] __slab_free+0x274/0x2c0 [ 457.980504][ C0] ? qlist_free_all+0x8e/0x100 [ 457.985285][ C0] qlist_free_all+0x99/0x100 [ 457.989885][ C0] ? taskstats_exit+0x19e/0xe10 [ 457.994747][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 458.000392][ C0] kasan_quarantine_reduce+0x148/0x160 [ 458.005868][ C0] __kasan_slab_alloc+0x22/0x80 [ 458.010742][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 458.016221][ C0] ? taskstats_exit+0x19e/0xe10 [ 458.021083][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 458.026724][ C0] ? taskstats_exit+0x19e/0xe10 [ 458.031591][ C0] taskstats_exit+0x19e/0xe10 [ 458.036282][ C0] ? acct_update_integrals+0x342/0x410 [ 458.041757][ C0] ? acct_update_integrals+0x38a/0x410 [ 458.047231][ C0] ? __pfx_taskstats_exit+0x10/0x10 [ 458.052448][ C0] ? __pfx_exit_signals+0x10/0x10 [ 458.057490][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 458.062702][ C0] ? sched_mm_cid_exit+0x355/0x490 [ 458.067826][ C0] ? seccomp_filter_release+0x18a/0x2d0 [ 458.073391][ C0] do_exit+0x6ad/0x2360 [ 458.077558][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 458.082699][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 458.087650][ C0] ? __pfx_do_exit+0x10/0x10 [ 458.092267][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.097494][ C0] do_group_exit+0x22d/0x2f0 [ 458.102103][ C0] __x64_sys_exit_group+0x3f/0x40 [ 458.107140][ C0] x64_sys_call+0x18c6/0x18d0 [ 458.111825][ C0] do_syscall_64+0x166/0x520 [ 458.116437][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.122514][ C0] ? clear_bhb_loop+0x70/0xc0 [ 458.127213][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.133133][ C0] RIP: 0033:0x7f7ee5b9e199 [ 458.137556][ C0] RSP: 002b:00007ffeb6ddbc58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 458.145979][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7ee5b9e199 [ 458.153957][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.161948][ C0] RBP: 00007ffeb6ddbcbc R08: 0000000000000000 R09: 00000000000927c0 [ 458.169936][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 000000000000006c [ 458.177916][ C0] R13: 00000000000927c0 R14: 00000000000555b7 R15: 00007ffeb6ddbd10 [ 458.185915][ C0] [ 458.188939][ C0] rcu: rcu_preempt kthread starved for 915 jiffies! g74453 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 458.199788][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 458.209764][ C0] rcu: RCU grace-period kthread stack dump: [ 458.215653][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 458.229158][ C0] Call Trace: [ 458.232442][ C0] [ 458.235383][ C0] __schedule+0x17db/0x58f0 [ 458.239905][ C0] ? __lock_acquire+0x747/0x2de0 [ 458.244865][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 458.249998][ C0] ? __pfx___schedule+0x10/0x10 [ 458.254859][ C0] ? lock_acquire+0x115/0x350 [ 458.259554][ C0] ? schedule+0x90/0x2b0 [ 458.263814][ C0] schedule+0x164/0x2b0 [ 458.267987][ C0] schedule_timeout+0x152/0x2c0 [ 458.272850][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 458.278242][ C0] ? __pfx_process_timeout+0x10/0x10 [ 458.283537][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 458.289359][ C0] ? prepare_to_swait_event+0x322/0x350 [ 458.294926][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 458.299806][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 458.305974][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 458.311267][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 458.316490][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 458.322312][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 458.326921][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 458.332134][ C0] ? __kthread_parkme+0x71/0x1f0 [ 458.337100][ C0] ? __kthread_parkme+0x199/0x1f0 [ 458.342153][ C0] kthread+0x38b/0x480 [ 458.346235][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 458.351444][ C0] ? __pfx_kthread+0x10/0x10 [ 458.356048][ C0] ret_from_fork+0x514/0xb70 [ 458.360648][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 458.365769][ C0] ? __switch_to+0xc89/0x1420 [ 458.370462][ C0] ? __pfx_kthread+0x10/0x10 [ 458.375063][ C0] ret_from_fork_asm+0x1a/0x30 [ 458.379947][ C0] [ 458.382966][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 458.389301][ C0] Sending NMI from CPU 0 to CPUs 1: [ 458.394528][ C1] NMI backtrace for cpu 1 [ 458.394551][ C1] CPU: 1 UID: 0 PID: 14868 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 458.394572][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 458.394583][ C1] Workqueue: bat_events batadv_tt_purge [ 458.394609][ C1] RIP: 0010:__kasan_check_byte+0x0/0x40 [ 458.394634][ C1] Code: e8 75 2f 00 00 48 89 df 4c 89 f6 5b 41 5c 41 5e 41 5f e9 43 fa ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 41 56 53 48 89 f3 49 89 fe e8 3e 15 00 00 84 c0 75 16 [ 458.394651][ C1] RSP: 0018:ffffc90000a17a20 EFLAGS: 00000202 [ 458.394665][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8000000000000102 [ 458.394678][ C1] RDX: 0000000000000000 RSI: ffffffff8177f1fc RDI: ffffffff8ed5c8a0 [ 458.394691][ C1] RBP: 1ffff92000142f74 R08: 0000000000000000 R09: 0000000000000000 [ 458.394703][ C1] R10: ffffc90000a17bb8 R11: ffffffff81b2a310 R12: ffffffff8ed5c8a0 [ 458.394717][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 458.394734][ C1] FS: 0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 458.394749][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.394761][ C1] CR2: 00007efeb33f5ff8 CR3: 00000000353c4000 CR4: 00000000003526f0 [ 458.394778][ C1] Call Trace: [ 458.394784][ C1] [ 458.394791][ C1] lock_acquire+0x7d/0x350 [ 458.394815][ C1] ? unwind_next_frame+0x8f/0x2550 [ 458.394836][ C1] ? br_handle_frame_finish+0x1136/0x1950 [ 458.394856][ C1] ? unwind_next_frame+0x8f/0x2550 [ 458.394876][ C1] unwind_next_frame+0xac/0x2550 [ 458.394895][ C1] ? unwind_next_frame+0x8f/0x2550 [ 458.394917][ C1] ? NF_HOOK+0xa4/0x3a0 [ 458.394933][ C1] ? unwind_next_frame+0x8f/0x2550 [ 458.394954][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 458.394973][ C1] arch_stack_walk+0x11b/0x150 [ 458.394996][ C1] ? br_handle_frame_finish+0x1136/0x1950 [ 458.395016][ C1] stack_trace_save+0xa9/0x100 [ 458.395032][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 458.395053][ C1] ? __lock_acquire+0x747/0x2de0 [ 458.395073][ C1] kasan_save_track+0x3e/0x80 [ 458.395091][ C1] ? kasan_save_track+0x3e/0x80 [ 458.395109][ C1] ? kasan_save_free_info+0x40/0x50 [ 458.395134][ C1] ? __kasan_slab_free+0x5c/0x80 [ 458.395152][ C1] ? kmem_cache_free+0x182/0x650 [ 458.395170][ C1] ? skb_release_head_state+0x274/0x370 [ 458.395194][ C1] ? __kfree_skb+0x24/0x210 [ 458.395216][ C1] ? ip6_mc_input+0x878/0xc80 [ 458.395240][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 458.395256][ C1] ? nf_hook_slow+0xc5/0x220 [ 458.395275][ C1] ? NF_HOOK+0x21f/0x3c0 [ 458.395298][ C1] ? netif_receive_skb+0x278/0xbf0 [ 458.395316][ C1] ? NF_HOOK+0xa4/0x3a0 [ 458.395330][ C1] ? br_handle_frame_finish+0x1136/0x1950 [ 458.395370][ C1] ? skb_release_head_state+0x274/0x370 [ 458.395392][ C1] kasan_save_free_info+0x40/0x50 [ 458.395417][ C1] __kasan_slab_free+0x5c/0x80 [ 458.395437][ C1] kmem_cache_free+0x182/0x650 [ 458.395455][ C1] ? __skb_ext_put+0x221/0x2f0 [ 458.395482][ C1] skb_release_head_state+0x274/0x370 [ 458.395507][ C1] __kfree_skb+0x24/0x210 [ 458.395531][ C1] ip6_mc_input+0x878/0xc80 [ 458.395559][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 458.395587][ C1] ? ip6_rcv_finish+0x265/0x280 [ 458.395611][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 458.395635][ C1] ip_sabotage_in+0x1e1/0x270 [ 458.395651][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 458.395670][ C1] nf_hook_slow+0xc5/0x220 [ 458.395692][ C1] NF_HOOK+0x21f/0x3c0 [ 458.395717][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 458.395745][ C1] ? NF_HOOK+0x9e/0x3c0 [ 458.395768][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 458.395790][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 458.395815][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 458.395842][ C1] ? netif_receive_skb+0x102/0xbf0 [ 458.395862][ C1] netif_receive_skb+0x278/0xbf0 [ 458.395880][ C1] ? lock_acquire+0x115/0x350 [ 458.395900][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 458.395922][ C1] ? br_netif_receive_skb+0x126/0x190 [ 458.395941][ C1] NF_HOOK+0xa4/0x3a0 [ 458.395956][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 458.395974][ C1] ? NF_HOOK+0xfa/0x3a0 [ 458.395989][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 458.396006][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 458.396027][ C1] ? br_pass_frame_up+0x275/0x420 [ 458.396046][ C1] br_handle_frame_finish+0x1136/0x1950 [ 458.396069][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 458.396087][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 458.396109][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 458.396130][ C1] ? nf_hook_slow+0x176/0x220 [ 458.396151][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 458.396168][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 458.396184][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 458.396206][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 458.396225][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 458.396242][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 458.396260][ C1] ? lock_acquire+0x115/0x350 [ 458.396281][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 458.396300][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 458.396321][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 458.396340][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 458.396359][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 458.396379][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 458.396398][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 458.396419][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 458.396435][ C1] br_handle_frame+0x1329/0x1600 [ 458.396459][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 458.396477][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 458.396494][ C1] ? packet_rcv+0x16e/0x16f0 [ 458.396517][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 458.396533][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 458.396564][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 458.396584][ C1] ? ip6_rcv_finish+0x265/0x280 [ 458.396609][ C1] ? NF_HOOK+0x336/0x3c0 [ 458.396643][ C1] ? process_backlog+0x3de/0x18b0 [ 458.396663][ C1] ? process_backlog+0x3de/0x18b0 [ 458.396686][ C1] process_backlog+0x727/0x18b0 [ 458.396710][ C1] ? process_backlog+0x3de/0x18b0 [ 458.396743][ C1] __napi_poll+0xaa/0x330 [ 458.396765][ C1] net_rx_action+0x61d/0xf50 [ 458.396793][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 458.396813][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 458.396853][ C1] handle_softirqs+0x226/0x860 [ 458.396877][ C1] ? do_softirq+0x77/0xd0 [ 458.396901][ C1] ? batadv_tt_local_purge+0x2c1/0x340 [ 458.396920][ C1] do_softirq+0x77/0xd0 [ 458.396941][ C1] [ 458.396947][ C1] [ 458.396953][ C1] __local_bh_enable_ip+0x100/0x140 [ 458.396976][ C1] batadv_tt_local_purge+0x2c1/0x340 [ 458.396999][ C1] ? process_scheduled_works+0x97a/0x1630 [ 458.397022][ C1] batadv_tt_purge+0x35/0xa10 [ 458.397042][ C1] ? rcu_is_watching+0x16/0xb0 [ 458.397065][ C1] ? process_scheduled_works+0x97a/0x1630 [ 458.397087][ C1] process_scheduled_works+0xc3d/0x1630 [ 458.397126][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.397152][ C1] ? assign_work+0x3cf/0x5d0 [ 458.397176][ C1] worker_thread+0xa47/0xfb0 [ 458.397214][ C1] kthread+0x38b/0x480 [ 458.397231][ C1] ? __pfx_worker_thread+0x10/0x10 [ 458.397253][ C1] ? __pfx_kthread+0x10/0x10 [ 458.397270][ C1] ret_from_fork+0x514/0xb70 [ 458.397288][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 458.397304][ C1] ? __switch_to+0xc89/0x1420 [ 458.397329][ C1] ? __pfx_kthread+0x10/0x10 [ 458.397346][ C1] ret_from_fork_asm+0x1a/0x30 [ 458.397381][ C1]