last executing test programs: 21.108232099s ago: executing program 3 (id=2461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000000)) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 20.950155611s ago: executing program 3 (id=2464): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0000002f00090028bd3000000000000400000004eaa252049a9a7a6fde001e80"], 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='\x00', 0x0, &(0x7f0000000080)={@align=0x3, {0x100, 0xf, 0x7, 0x4000000000000}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x210, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x87}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "e17355bbc75974667e48886792a812f6828eb589800c04cb7704f0"}}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "e5de9663c50e0559e5ce27bb431f23b41b77b919dff8771ac824199f2e0487e6"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "b44cafaaf16c32ff42eaf58f29fcfa554b8747e8126953a699cbcaf5"}}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "4f2e6c7f673c1dd6222bd5f63abc100d785f87c8999a50d1894d50796d41edb96d800024af3fc1828f7c713c881500ae2d1cca15c3f614"}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x34}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcd9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x84}, 0x4000080) 20.923787886s ago: executing program 1 (id=2465): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan0\x00'}) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r8, &(0x7f00000002c0)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1}, "0100000000000000"}}}}}, 0x32) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}]]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x2404c044) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 20.861820431s ago: executing program 3 (id=2466): connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x100, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0xffffff88, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c43}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xf7f3}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8bf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x888ae8e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)={0x34, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x8000) 20.151658478s ago: executing program 1 (id=2473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) 20.041563631s ago: executing program 1 (id=2474): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="032b26bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x814) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x52, &(0x7f0000000380)=0x1000, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="08172bbd7000fbdbdf25040000000800020003000000f68944a1452b86cca73b1e546a2478c1a3652163a3a1349e6af42d8d33925e0c9e2e577994ea2630b7f967a0a5503685b742e05f08d287bd86a7b5223baf1c63310000001949116b9a95f37e33ff33155c7d5bad324fb248d6741507b4d63650a06a87bbae3202b476b997dafe84"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 20.027762507s ago: executing program 0 (id=2475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 19.88237106s ago: executing program 1 (id=2477): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8000) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x78}, 0x1, 0x7}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c000600010000000100000008002a"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, 0x0, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0) 19.880833737s ago: executing program 3 (id=2479): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 19.866239476s ago: executing program 0 (id=2480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_delroute={0x40, 0x19, 0x400, 0x0, 0x0, {0x2, 0x14, 0x14, 0xe, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x81}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 19.775224389s ago: executing program 0 (id=2481): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r2 = socket$inet6(0x10, 0xa, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 19.774379572s ago: executing program 2 (id=2482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) syz_emit_ethernet(0x16, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@llc={0x4, {@llc={0xaa, 0x0, 'c', "88a6a1f49f"}}}}}, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) unshare(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000070f3954ecc247a49ecf8cd9cc200c60000009500060000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r8, 0xee01}}]}, 0x28}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1f4, 0x26, 0x20, 0x70bd26, 0x25dfdbfb, {0x18}, [@nested={0x2c, 0x12c, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x89}, @nested={0x4, 0x149}, @nested={0x4, 0x77}, @nested={0x4, 0x12a}, @typed={0x8, 0xc7, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="0880fe5daa531a0189cfd80f595056ec158ef9064b1fa6129c12cae02b1d0aa92f1e534ce210f52f15c155b735065c05afa7251c2d24d22e5f2db46dcc41694b400928f8fdef25bcbece0a2adb483edbf73de17b45c497e6e24537afca0448434a9efd7890f5ea9b14273e3e90275d4c7c54c9a4d0c50a3345dc34274eee344a17e7ae06b110260df2666a2dd74a0b654a227b94369a0aeca8fd9863f58be97f2636e5888d4eeed7fd57c58e67ad3d482b718d2fd4efc5bb57c1020c6f7a924aa8", @typed={0x8, 0x27, 0x0, 0x0, @u32=0x7}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0x8}, @nested={0x24, 0x34, 0x0, 0x1, [@typed={0xc, 0xb1, 0x0, 0x0, @u64=0xfffffffffffff001}, @nested={0x4, 0xc5}, @nested={0x4, 0xb0}, @nested={0x4, 0x4}, @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xa8, 0x5d, 0x0, 0x1, [@generic="12e1620f96609164f1e7f6d91d9281cfac58f09cfec444c0fb4daaba0bdfb15e45e4d438b9dd8aec7d71e0e6da2b79484fc81992fd19342ba8bc2a88c89d1cb54d1c4012a26fba4a58c2cebfbccfb76643d22a1d21890f724e3cd4101eb610fc06b1813c055118e2aeb3a2d50bdfafa94c11810143e4c0f8db46a47c5fcb76f1a3e1f43a11658e1b2051663baead1ada527446f35b500b493ee183bb532422c41e5266dd"]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x2, 0x3, 0x3}]}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) connect$tipc(r5, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRESDEC=r0], 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf25070000001400068004000500080006006ea622c69a3b7407240009800800010039000000080002000e00000008000200ff0700000800020005000000"], 0x4c}}, 0x24004040) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000030000000007c01907800000000ac1414aa0400c67107ce7ad090780000000045000000001d000000320000000000007f000001"], 0x0) 19.713998236s ago: executing program 1 (id=2483): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1e, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYRES16=r0, @ANYRES8=r4], 0x7c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x264, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xc}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x11}, @NL80211_ATTR_IE={0x1f5, 0x2a, [@ibss={0x6, 0x2, 0xfff7}, @cf={0x4, 0x6, {0x1, 0x9, 0x8b05, 0xfff}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xcc, 0x9d, 0x8}}, @fast_bss_trans={0x37, 0xa0, {0x1, 0x4, "567c713ee84b1a748f7365e1270ab5f1", "dc961cfe0782625acd226ff14a19ba4f72e8a4310c2edc4e05fff2c651175b6a", "d9c84160260f99c96b4cb0b22e63d30ec031a1aa2b342cea1c5e3e4afcf19393", [{0x3, 0x7, "882d470bd4b115"}, {0x4, 0x2, "8cd0"}, {0x1, 0x1d, "90a981a907c79b0b071caaaf5e035507cf8dea66ac49fa47bc78530f3b"}, {0x2, 0x20, "ecc1a91819cf8c440ec61f3019bafdc7166510d5fbb78455684d5f82a17e918e"}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x8, @device_b, 0x7, @value=@broadcast, 0x9, 0x21, @device_b, 0x7fff}}, @channel_switch={0x25, 0x3, {0x0, 0xb4, 0x6}}, @perr={0x84, 0x10f, {0x10, 0x11, [{{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x2c}, {{}, @broadcast, 0x31f, @void, 0x13}, {{}, @device_b, 0xef31, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x25}, {{0x0, 0x1}, @broadcast, 0x80, @value=@device_b, 0x6}, {{}, @device_b, 0x5, @void, 0xa}, {{}, @device_b, 0x0, @void, 0x9}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x21}, {{}, @device_b, 0x40, @void, 0xa}, {{}, @device_a, 0x8, @void, 0x28}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x28}, {{0x0, 0x1}, @device_a, 0x43, @value=@broadcast, 0x20}, {{}, @device_a, 0x7, @void, 0x2b}, {{}, @broadcast, 0xff, @void, 0x22}, {{}, @device_a, 0x4, @void, 0xe}, {{0x0, 0x1}, @device_b, 0xa, @value=@device_b, 0x28}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x2d}]}}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@challenge={0x10, 0x1, 0x81}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xd, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @peer_mgmt={0x75, 0x4, {0x0, 0x8, @void, @void, @void}}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000010}, 0x85) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r6, 0x1, 0x6, @remote}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="3c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000003510009ae8e1ab0008001b000000000014001a80100002800600018008000300"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x23, &(0x7f0000000300)=""/42, &(0x7f0000000080)=0x2a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000080)=0xc) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r11, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) 19.650282142s ago: executing program 2 (id=2484): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x24000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r4, 0x2b, 0x9, 0x0, 0xec0, 0x6a, @mcast1, @local, 0x8, 0x1, 0xfffffffb, 0x7}}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x58, 0x4a, 0x200, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x18, 0x0, r6, 0xa}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)={0x14, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 19.647061829s ago: executing program 0 (id=2485): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f0000000040)="51e452bbb83aa410b80b4e5c2b0efb318e1675d157f4dbb09cf578c5d695d4c19669d6f75f4dd7fae5ca772264762e2caa7397be8dae54494bcb85b118ce878d2945924a24a25cf9c6672e7904f0301ffa0f360f9526057e1225a4d032ad0cc690cd327c226b57d5a0243bda5f379f6054b1851c1fa2cbad88d3f0039dddd6b426560bc03965da43", 0x88) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f0000000040)="51e452bbb83aa410b80b4e5c2b0efb318e1675d157f4dbb09cf578c5d695d4c19669d6f75f4dd7fae5ca772264762e2caa7397be8dae54494bcb85b118ce878d2945924a24a25cf9c6672e7904f0301ffa0f360f9526057e1225a4d032ad0cc690cd327c226b57d5a0243bda5f379f6054b1851c1fa2cbad88d3f0039dddd6b426560bc03965da43", 0x88) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) 19.563957538s ago: executing program 4 (id=2486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da16520"], 0xb4}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x1d0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x6}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xb, 0x0, &(0x7f0000000640)) 19.454497519s ago: executing program 4 (id=2487): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0x9, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61]}}, &(0x7f00000003c0)=""/114, 0x27, 0x72, 0x1, 0xfffffff6, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000006b0afcff0000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.331883256s ago: executing program 2 (id=2488): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x30fd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}]}, 0x40}}, 0x4c800) 19.331163912s ago: executing program 3 (id=2489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000170a010400fad2657ac4cb00000000000000020000000900020073797a31000000002efee7acb3381940346a3be58547e43a574fd167ff7129d04f30426391bde19fbece6882d5a16e0178f114101cbc8cc57e1f84b6f49747d5e6489878cbdd4b"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000780)={&(0x7f0000000600)={0xa, 0x4e24, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r5}}}], 0x28}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x1c, &(0x7f00000003c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @generic={0x9, 0xf, 0x6, 0x0, 0x9}, @exit, @alu={0x14eeaec54d894ec4, 0x0, 0x9, 0x1, 0x9, 0x4, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x3, 0x5, 0x6, 0xffffffffffffffec, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f00000000c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x862a}, 0x10}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c010000100001000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) 19.3241019s ago: executing program 4 (id=2490): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401}, 0x14}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) 19.205439927s ago: executing program 4 (id=2491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00005200060005000100000008000800", @ANYRES64=r3], 0x2c}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 19.1373274s ago: executing program 1 (id=2492): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0xf15cf2e2a005dc3f}, 0x40000) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="5001", @ANYRES32=r3], 0x14) socket$netlink(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x1505, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) 19.049388062s ago: executing program 2 (id=2493): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8000) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x78}, 0x1, 0x7}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c000600010000000100000008002a"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, 0x0, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 19.037187563s ago: executing program 0 (id=2494): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xb03, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[], 0x48}}, 0x40815) write(r0, &(0x7f00000000c0)="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", 0x1000) syz_emit_ethernet(0x8a, &(0x7f0000001180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x10, 0x4, 0x2, 0x2, 0x7c, 0x68, 0x0, 0x8, 0x11, 0x0, @loopback, @local, {[@timestamp={0x44, 0x8, 0xad, 0x0, 0x7, [0x1]}, @timestamp_prespec={0x44, 0x24, 0x59, 0x3, 0x3, [{@loopback, 0x90}, {@private=0xa010102, 0x1}, {@remote, 0xffffffff}, {@multicast1, 0x53a8}]}]}}, {0x4e22, 0x4e20, 0x3c, 0x0, @opaque="73cbbf122190b7d00ea84cf76847ac966f17c73cb3e740f9ad8a9e48612b617ea02efd34d9129b28867b027af199775ab91a40e6"}}}}}, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000010c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000040)="2179be65", 0x4, 0x20008040, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bde824362a89019b20000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x44, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x75}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4090) 18.802063129s ago: executing program 4 (id=2495): socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x300) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00eaff5cedc6679700bb5c0000000000", @ANYRES16=r6, @ANYBLOB="000127bd7000fcdbdf25540000000c009900020000007a0000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a0006000802110000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004080) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) write(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0xf1, 0x3}) r9 = socket$phonet(0x23, 0x2, 0x1) sendmmsg(r9, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8010) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x21, 0x3, 0x5b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4e8, 0xffffffff, 0xffffffff, 0x4e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x1}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x4}, {0x4, 0x4, 0x1}, 0xf4, 0x7}}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x618) 18.589808183s ago: executing program 3 (id=2496): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x24000000) 15.985168336s ago: executing program 0 (id=2497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf2510000000140001000a"], 0x28}}, 0x4000080) readv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000500)=""/103, 0x67}, {&(0x7f0000000580)=""/8, 0x8}, {&(0x7f0000000600)=""/178, 0xb2}], 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063110800000000008510000002000000850000000500000095000041406221d1db26d90000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x1e) 15.962699415s ago: executing program 2 (id=2498): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r2, 0xff, 0x3, &(0x7f0000000900)="7c73c6e9", 0xfffffed8) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x4, {0x2, 0x4e20, @broadcast}}) 15.665245851s ago: executing program 4 (id=2499): unshare(0x20000400) unshare(0x24020480) 15.437950472s ago: executing program 2 (id=2500): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000540)={@random="1dcaf23549ec", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x0, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "76233db76474dfb21b34b4e8907bd79711638d5e86b24120d490eebb5e63459f", "5a04fced796a40aca7d3074ae654c1b1f82dca9ce465cc236ff937d60ac2942459aabeef0d5932affbddf03b4cd6263b", "aeddff77a412e58a82615288959ef503af87c9544f615a0117e9de98", {"b5278444ff5d490fe7b1756aca9c54fc", "be7a3ee78f27b73469b6a311ce6cf599"}}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000000000001001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x7d, 0xf2, 0x8000, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast2, 0x40, 0x0, 0x2, 0x7}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000008c0)={0x6c, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e23, 0x1, 'sed\x00', 0x37, 0x6, 0x45}, 0x2c) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newchain={0x80, 0x64, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x3, 0xffe0}, {0x8, 0x6}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x1f}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xc3}]}}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @dev={0xfe, 0x80, '\x00', 0x27}}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0xfffffffffffffcf8}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x80, 0x4, {{0x3b, 0x4, 0x1, 0x7, 0xec, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xee}, @rr={0x7, 0x7, 0xdf, [@local]}, @ssrr={0x89, 0x1f, 0xc3, [@local, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}]}, @timestamp_addr={0x44, 0x34, 0xe0, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc0000000}, {@loopback, 0x1}]}, @rr={0x7, 0x1f, 0xe6, [@remote, @local, @multicast2, @multicast2, @rand_addr=0x64010102, @empty, @broadcast]}, @cipso={0x86, 0x58, 0x1, [{0x6, 0xe, "2b9c357b250a2fd2b6b23423"}, {0x2, 0xf, "cac4c863bf81eb1bf3b3996f6d"}, {0x1, 0x5, "971477"}, {0x5, 0xa, "e22a98696658d6bd"}, {0x7, 0x8, "2daa75a63556"}, {0x5, 0x8, "5b9873d32537"}, {0x2, 0x2}, {0x5, 0x8, "e203a7abbb96"}, {0x6, 0xc, "e156b1252c3081837b90"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x168, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8081}, 0x4000) 4.116387835s ago: executing program 32 (id=2492): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0xf15cf2e2a005dc3f}, 0x40000) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="5001", @ANYRES32=r3], 0x14) socket$netlink(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x1505, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) 3.020308292s ago: executing program 33 (id=2496): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x24000000) 161.622223ms ago: executing program 34 (id=2497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf2510000000140001000a"], 0x28}}, 0x4000080) readv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000500)=""/103, 0x67}, {&(0x7f0000000580)=""/8, 0x8}, {&(0x7f0000000600)=""/178, 0xb2}], 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063110800000000008510000002000000850000000500000095000041406221d1db26d90000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x1e) 58.905307ms ago: executing program 35 (id=2500): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000540)={@random="1dcaf23549ec", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x0, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "76233db76474dfb21b34b4e8907bd79711638d5e86b24120d490eebb5e63459f", "5a04fced796a40aca7d3074ae654c1b1f82dca9ce465cc236ff937d60ac2942459aabeef0d5932affbddf03b4cd6263b", "aeddff77a412e58a82615288959ef503af87c9544f615a0117e9de98", {"b5278444ff5d490fe7b1756aca9c54fc", "be7a3ee78f27b73469b6a311ce6cf599"}}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="4c0000001000010428686a000100000000000000be4936a48c933a45ab4c6df201ee7005a461386511b76d20263603e84500e3918bbe215af17d1d8c721a83dbb51997be71db2a6a7f924e960e3abc67e57a72db09956948771dc85048cc4af2546e497e52a00bc986eac267bda9337c1ac0804b576a050cc9416bb5737eb942d46130c1937682b2e5babba020722626c55302c44a2f3079abc046abdcd8507364873acddb680902c601bc2180df78a84cfe0e3aa46fe012bdfe043ecb1e461e1c3e7bc3a9a20420fb3ec7480c98ac0dfa2da657fe0aca3e7bdded9e40c2639432b7075fa69273cd4891b8b8188210b6de67dc2aabf90ebb6c373ae9b69ffd458788952fc0ae6b9c827b0a99fe0a67d4ef07ead9d9e8c491198604bb61f1522b7451a003f3b18b4261e4a7b783df44e76c1b90a920d378fdf44dab7f5629aa09eb", @ANYRES32=0x0, @ANYBLOB="08000000000001001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x7d, 0xf2, 0x8000, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast2, 0x40, 0x0, 0x2, 0x7}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000008c0)={0x6c, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e23, 0x1, 'sed\x00', 0x37, 0x6, 0x45}, 0x2c) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newchain={0x80, 0x64, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x3, 0xffe0}, {0x8, 0x6}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x1f}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xc3}]}}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @dev={0xfe, 0x80, '\x00', 0x27}}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0xfffffffffffffcf8}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x80, 0x4, {{0x3b, 0x4, 0x1, 0x7, 0xec, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xee}, @rr={0x7, 0x7, 0xdf, [@local]}, @ssrr={0x89, 0x1f, 0xc3, [@local, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}]}, @timestamp_addr={0x44, 0x34, 0xe0, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc0000000}, {@loopback, 0x1}]}, @rr={0x7, 0x1f, 0xe6, [@remote, @local, @multicast2, @multicast2, @rand_addr=0x64010102, @empty, @broadcast]}, @cipso={0x86, 0x58, 0x1, [{0x6, 0xe, "2b9c357b250a2fd2b6b23423"}, {0x2, 0xf, "cac4c863bf81eb1bf3b3996f6d"}, {0x1, 0x5, "971477"}, {0x5, 0xa, "e22a98696658d6bd"}, {0x7, 0x8, "2daa75a63556"}, {0x5, 0x8, "5b9873d32537"}, {0x2, 0x2}, {0x5, 0x8, "e203a7abbb96"}, {0x6, 0xc, "e156b1252c3081837b90"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x168, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8081}, 0x4000) 0s ago: executing program 36 (id=2499): unshare(0x20000400) unshare(0x24020480) kernel console output (not intermixed with test programs): ributes in process `syz.2.590'. [ 151.103382][ T7861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.591'. [ 151.190267][ T7864] sctp: [Deprecated]: syz.2.594 (pid 7864) Use of int in max_burst socket option deprecated. [ 151.190267][ T7864] Use struct sctp_assoc_value instead [ 151.328027][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.597'. [ 151.371637][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.597'. [ 151.486468][ T7884] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 151.548556][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 151.804788][ T7899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.983546][ T7903] batadv_slave_1: entered promiscuous mode [ 151.993017][ T7903] netlink: 'syz.2.605': attribute type 1 has an invalid length. [ 152.008629][ T7909] netlink: 'syz.1.606': attribute type 16 has an invalid length. [ 152.027786][ T7901] batadv_slave_1: left promiscuous mode [ 152.038037][ T7909] veth0_macvtap: entered allmulticast mode [ 152.241914][ T29] audit: type=1804 audit(1786468703.928:2): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.609" name="/newroot/106/cgroup.controllers" dev="tmpfs" ino=560 res=1 errno=0 [ 152.349826][ T29] audit: type=1800 audit(1786468703.938:3): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.609" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 152.713839][ T5692] IPVS: starting estimator thread 0... [ 152.740154][ T7937] bond0: ARP target 8.4.0.0 is already present [ 152.749599][ T7937] bond0: option arp_ip_target: invalid value (1032) [ 152.821258][ T7941] IPVS: using max 36 ests per chain, 86400 per kthread [ 153.530148][ T7979] trusted_key: syz.2.629 sent an empty control message without MSG_MORE. [ 153.807926][ T7992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.306349][ T8014] tipc: Failed to remove unknown binding: 66,0,0/0:1398427339/1398427340 [ 154.333999][ T8014] tipc: Failed to remove unknown binding: 66,0,0/0:1398427339/1398427340 [ 154.447153][ T8022] netlink: 'syz.4.642': attribute type 29 has an invalid length. [ 154.778441][ T5730] IPVS: starting estimator thread 0... [ 154.881167][ T8036] IPVS: using max 37 ests per chain, 88800 per kthread [ 155.143999][ T8055] __nla_validate_parse: 12 callbacks suppressed [ 155.144017][ T8055] netlink: 52 bytes leftover after parsing attributes in process `syz.1.651'. [ 155.360260][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 155.412226][ T8072] netlink: 56 bytes leftover after parsing attributes in process `syz.1.656'. [ 155.430627][ T8069] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 155.440518][ T8073] syzkaller0: entered promiscuous mode [ 155.446177][ T8073] syzkaller0: entered allmulticast mode [ 156.049522][ T8101] netlink: 104 bytes leftover after parsing attributes in process `syz.0.665'. [ 156.426341][ T8106] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 156.487822][ T8112] syzkaller1: entered promiscuous mode [ 156.511449][ T8112] syzkaller1: entered allmulticast mode [ 157.467579][ T8173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.934787][ T8186] xt_cgroup: xt_cgroup: no path or classid specified [ 157.964710][ T8184] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.984069][ T8189] xt_cgroup: xt_cgroup: no path or classid specified [ 158.804795][ T8233] netlink: 'syz.3.700': attribute type 49 has an invalid length. [ 158.865145][ T8237] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.364790][ T8265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.710'. [ 159.374648][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 159.594739][ T8275] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 159.630023][ T8277] netlink: 'syz.1.713': attribute type 4 has an invalid length. [ 159.880999][ T8288] netlink: 'syz.2.717': attribute type 12 has an invalid length. [ 160.082169][ T8297] tipc: Enabling of bearer rejected, failed to enable media [ 160.115678][ T8300] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 160.582030][ T8320] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 160.724785][ T8320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.748415][ T8324] bond4: (slave geneve2): making interface the new active one [ 160.758377][ T8324] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 160.826289][ T8333] netlink: 'syz.0.728': attribute type 61 has an invalid length. [ 160.980243][ T8338] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 161.178532][ T8339] nbd3: detected capacity change from 0 to 63 [ 161.192759][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 161.209288][ T8344] block nbd3: NBD_DISCONNECT [ 161.211624][ T8347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.250957][ T8344] block nbd3: Disconnected due to user request. [ 161.266477][ T8344] block nbd3: shutting down sockets [ 161.280291][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 161.290174][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 161.299925][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 161.309559][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 161.317413][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 161.325253][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 161.342537][ T1682] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 161.353987][ T1682] Buffer I/O error on dev nbd3, logical block 0, async page read [ 161.364567][ T1682] Buffer I/O error on dev nbd3, logical block 1, async page read [ 161.382201][ T1682] Buffer I/O error on dev nbd3, logical block 2, async page read [ 161.391317][ T1682] Buffer I/O error on dev nbd3, logical block 3, async page read [ 161.401518][ T1682] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 161.411214][ T1682] Buffer I/O error on dev nbd3, logical block 0, async page read [ 161.419088][ T1682] Buffer I/O error on dev nbd3, logical block 1, async page read [ 161.427723][ T1682] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 161.438762][ T1682] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 161.448724][ T1682] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 161.458534][ T1682] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 161.468434][ T1682] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 161.480647][ T7263] ldm_validate_partition_table(): Disk read failed. [ 161.492607][ T1682] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 161.504695][ T7263] Dev nbd3: unable to read RDB block 0 [ 161.512835][ T7263] nbd3: unable to read partition table [ 161.530560][ T7263] ldm_validate_partition_table(): Disk read failed. [ 161.542460][ T7263] Dev nbd3: unable to read RDB block 0 [ 161.549474][ T7263] nbd3: unable to read partition table [ 161.657205][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.735'. [ 161.916114][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.738'. [ 162.174166][ T8379] netlink: 256 bytes leftover after parsing attributes in process `syz.3.744'. [ 162.310969][ T8386] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 162.320041][ T8387] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 162.511637][ T4928] Bluetooth: hci1: command tx timeout [ 163.117192][ T8418] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 163.176738][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.752'. [ 163.566752][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 164.088848][ T8474] nbd: must specify a device to reconfigure [ 164.137664][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 164.214796][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 164.283470][ T8480] x_tables: duplicate underflow at hook 4 [ 164.313743][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.771'. [ 164.403930][ T8486] x_tables: duplicate underflow at hook 1 [ 164.670104][ T8497] netlink: 'syz.4.778': attribute type 10 has an invalid length. [ 164.720594][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.779'. [ 165.311694][ T8527] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 165.363712][ T8527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.536298][ T8538] ipvlan1: entered promiscuous mode [ 165.541964][ T8540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.552293][ T8538] ipvlan1: entered allmulticast mode [ 165.557892][ T8538] veth0_vlan: entered allmulticast mode [ 165.964189][ T8557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.976079][ T8559] netlink: 'syz.3.796': attribute type 21 has an invalid length. [ 166.171681][ T8570] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 166.308952][ T8575] netlink: Unknown NAT attribute (type=16383, max=9) [ 166.330268][ T8575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.408894][ T8570] macvlan2: entered promiscuous mode [ 166.439252][ T8570] macvlan2: entered allmulticast mode [ 166.465072][ T8570] bond6: entered promiscuous mode [ 166.475477][ T8570] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.489475][ T8570] bond6: left promiscuous mode [ 166.712407][ T8589] syzkaller1: entered promiscuous mode [ 166.757264][ T8589] syzkaller1: entered allmulticast mode [ 166.990072][ T8609] netlink: 'syz.2.810': attribute type 1 has an invalid length. [ 167.020166][ T10] IPVS: starting estimator thread 0... [ 167.065072][ T8605] openvswitch: netlink: Key type 170 is out of range max 32 [ 167.131225][ T8610] IPVS: using max 35 ests per chain, 84000 per kthread [ 167.135612][ T8609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.187433][ T8619] __nla_validate_parse: 6 callbacks suppressed [ 167.187449][ T8619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'. [ 167.204850][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 167.337547][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.815'. [ 167.369445][ T8626] netlink: 68 bytes leftover after parsing attributes in process `syz.2.815'. [ 167.427876][ T8630] netlink: 'syz.0.816': attribute type 49 has an invalid length. [ 167.585401][ T8635] ip6gre0: Master is either lo or non-ether device [ 167.965265][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.824'. [ 168.448868][ T8678] tipc: Started in network mode [ 168.466524][ T8678] tipc: Node identity e0000001, cluster identity 4711 [ 168.486818][ T8678] tipc: Enabling of bearer rejected, failed to enable media [ 168.523941][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 168.564393][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 169.813205][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 169.842716][ T8736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.871917][ T8734] gre0: Master is either lo or non-ether device [ 169.928301][ T8736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.936244][ T8740] netlink: 356 bytes leftover after parsing attributes in process `syz.0.845'. [ 170.118665][ T8748] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.872193][ T8767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.900710][ T8765] netlink: zone id is out of range [ 170.916973][ T8765] netlink: zone id is out of range [ 170.935774][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.947270][ T8765] netlink: zone id is out of range [ 170.947327][ T8765] netlink: zone id is out of range [ 170.947336][ T8765] netlink: zone id is out of range [ 170.947345][ T8765] netlink: zone id is out of range [ 170.947353][ T8765] netlink: zone id is out of range [ 170.947457][ T8765] netlink: zone id is out of range [ 170.970852][ T8765] netlink: zone id is out of range [ 171.019755][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.045379][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.073629][ T8765] netlink: zone id is out of range [ 171.087850][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.124043][ T5273] veth1_vlan: left promiscuous mode [ 171.198461][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 172.296109][ T8809] tipc: Enabled bearer , priority 10 [ 172.630622][ T8830] xt_hashlimit: size too large, truncated to 1048576 [ 172.635602][ T8834] netlink: 216 bytes leftover after parsing attributes in process `syz.0.864'. [ 172.893495][ T8840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.866'. [ 172.904115][ T8842] netlink: 132 bytes leftover after parsing attributes in process `syz.0.867'. [ 173.413766][ T5692] tipc: Node number set to 360516238 [ 173.474668][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'. [ 173.663641][ T8875] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 173.733396][ T8878] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 174.017121][ T8875] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 175.438917][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 175.484235][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 175.632781][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 176.109068][ T8984] netlink: 108 bytes leftover after parsing attributes in process `syz.0.890'. [ 176.174652][ T8980] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.889'. [ 176.409874][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 176.448795][ T8998] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 176.528794][ T8998] geneve2: entered promiscuous mode [ 176.549517][ T8998] geneve2: entered allmulticast mode [ 177.694333][ T29] audit: type=1800 audit(1786468729.378:4): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.909" name=680B20 dev="tmpfs" ino=998 res=0 errno=0 [ 178.087721][ T9069] __nla_validate_parse: 6 callbacks suppressed [ 178.087741][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 178.126637][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 178.146589][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 178.180188][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 178.213718][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 178.438996][ T9076] syzkaller0: entered promiscuous mode [ 178.465008][ T9076] syzkaller0: entered allmulticast mode [ 178.499912][ T9086] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 178.592539][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 178.799794][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.924'. [ 178.837867][ T9097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'. [ 178.946555][ T9100] netlink: 404 bytes leftover after parsing attributes in process `syz.0.925'. [ 179.006475][ T9100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.925'. [ 179.128853][ T8898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.165159][ T8898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.655195][ T9144] net_ratelimit: 15 callbacks suppressed [ 179.655216][ T9144] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.305377][ T9127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.649148][ T9170] Cannot find add_set index 4 as target [ 182.872335][ T9180] netlink: 'syz.4.947': attribute type 1 has an invalid length. [ 182.892510][ T9180] nbd: error processing sock list [ 182.897736][ T9183] xt_nat: multiple ranges no longer supported [ 183.123248][ T9191] xt_TCPMSS: Only works on TCP SYN packets [ 183.289387][ T9198] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 183.336304][ T9199] netlink: 'syz.2.954': attribute type 2 has an invalid length. [ 183.474198][ T9208] __nla_validate_parse: 6 callbacks suppressed [ 183.474231][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.957'. [ 183.492695][ T9198] bond2: entered promiscuous mode [ 183.498705][ T9198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.558877][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'. [ 183.933614][ T9213] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 183.969630][ T9213] bond3: option packets_per_slave: allowed values 0 - 65535 [ 184.034489][ T9213] bond3 (unregistering): Released all slaves [ 184.193914][ T9231] syzkaller0: entered promiscuous mode [ 184.199715][ T9231] syzkaller0: entered allmulticast mode [ 184.256699][ T9247] bond3: up delay (1) is not a multiple of miimon (5), value rounded to 0 ms [ 184.276561][ T9247] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 184.306004][ T9247] bond3 (unregistering): Released all slaves [ 186.849524][ T8903] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 186.900049][ T8903] bond0: (slave veth0_to_bond): link status definitely down, disabling slave [ 187.221324][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'. [ 187.231345][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.970'. [ 187.404188][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 187.458343][ T9288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.605705][ T9288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.128060][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 188.329241][ T9337] netlink: 48 bytes leftover after parsing attributes in process `syz.2.982'. [ 188.416184][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 188.462617][ T9319] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 188.569692][ T9340] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 188.628403][ T9340] bond3 (unregistering): Released all slaves [ 189.069235][ T9350] bond7: entered promiscuous mode [ 189.095959][ T9350] bond7: entered allmulticast mode [ 189.123874][ T9350] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.494975][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 189.615475][ T10] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 189.650695][ T9374] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 189.760351][ T9388] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.995'. [ 189.769948][ T9388] veth0_to_bond: default FDB implementation only supports local addresses [ 189.861792][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 190.001005][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 190.261391][ T10] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 190.360905][ T9414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1000'. [ 190.557420][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 190.560765][ T9418] : renamed from bond_slave_1 (while UP) [ 190.614196][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 190.753233][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.781417][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.881958][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 190.884782][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.020059][ T9424] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 191.043963][ T9424] syzkaller1: Refused to change device type [ 191.094821][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 191.322332][ T8902] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.527760][ T9452] nbd: must specify at least one socket [ 192.035673][ T9476] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1017'. [ 192.123903][ T9480] netlink: 'syz.3.1021': attribute type 3 has an invalid length. [ 192.149753][ T9480] netlink: 'syz.3.1021': attribute type 3 has an invalid length. [ 192.179639][ T9485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.673379][ T9508] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 192.714420][ T9509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.798148][ T9515] netlink: 'syz.3.1031': attribute type 3 has an invalid length. [ 193.069826][ T9523] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 193.220107][ T9527] bridge0: port 3(dummy0) entered blocking state [ 193.227790][ T9527] bridge0: port 3(dummy0) entered disabled state [ 193.239643][ T9527] dummy0: entered allmulticast mode [ 193.251574][ T9527] dummy0: entered promiscuous mode [ 193.515030][ T9539] syzkaller0: entered promiscuous mode [ 193.520630][ T9539] syzkaller0: entered allmulticast mode [ 193.921666][ T9553] netlink: 'syz.0.1044': attribute type 33 has an invalid length. [ 194.308268][ T9561] netlink: 'syz.1.1047': attribute type 2 has an invalid length. [ 194.335607][ T9575] bridge0: port 3(gretap0) entered blocking state [ 194.343610][ T9575] bridge0: port 3(gretap0) entered disabled state [ 194.352691][ T9575] gretap0: entered allmulticast mode [ 194.360293][ T9575] gretap0: entered promiscuous mode [ 194.512662][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 194.535793][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.543853][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.620181][ T9580] bond8 (unregistering): Released all slaves [ 194.722567][ T9588] tipc: Enabled bearer , priority 0 [ 194.756880][ T9588] gretap0: entered allmulticast mode [ 194.797829][ T9588] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 194.844247][ T9588] tipc: Resetting bearer [ 194.934405][ T9583] tipc: Disabling bearer [ 194.955046][ T9594] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 194.964504][ T9594] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 195.654142][ T9624] __nla_validate_parse: 15 callbacks suppressed [ 195.655310][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1070'. [ 195.854075][ T9635] bridge0: port 3(vlan3) entered blocking state [ 195.873387][ T9635] bridge0: port 3(vlan3) entered disabled state [ 195.901984][ T9635] vlan3: entered allmulticast mode [ 195.946635][ T9635] geneve0: entered allmulticast mode [ 195.992593][ T9635] vlan3: entered promiscuous mode [ 196.050478][ T9635] geneve0: entered promiscuous mode [ 196.370073][ T9661] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 196.427818][ T9661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 196.461788][ T9661] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1081'. [ 196.475413][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 196.500835][ T9666] netlink: 'syz.3.1084': attribute type 6 has an invalid length. [ 196.524272][ T9661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 196.540792][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 196.677439][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 196.713531][ T9666] netlink: 'syz.3.1084': attribute type 6 has an invalid length. [ 196.742266][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 196.853639][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1086'. [ 196.903396][ T9676] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 197.099373][ T9681] netlink: 'syz.4.1088': attribute type 10 has an invalid length. [ 197.282591][ T9690] veth0: entered promiscuous mode [ 197.303122][ T9688] veth0: left promiscuous mode [ 197.337290][ T9687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1089'. [ 197.391363][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 197.951673][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 198.066131][ T9725] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 198.431335][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 198.474625][ T9742] SET target dimension over the limit! [ 198.768838][ T9753] syzkaller1: entered promiscuous mode [ 198.783417][ T9753] syzkaller1: entered allmulticast mode [ 198.991405][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 199.005511][ T9763] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 199.023787][ T9758] netlink: 'syz.2.1116': attribute type 29 has an invalid length. [ 199.345943][ T9780] netlink: 'syz.1.1118': attribute type 1 has an invalid length. [ 199.685057][ T9797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.111541][ T8902] wlan1: Trigger new scan to find an IBSS to join [ 200.120738][ T9814] netlink: 'syz.4.1129': attribute type 21 has an invalid length. [ 200.389284][ T9829] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 200.567997][ T9829] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.716694][ T9838] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 200.728946][ T9838] team0: Device ipvlan2 is already an upper device of the team interface [ 200.816167][ T9841] __nla_validate_parse: 12 callbacks suppressed [ 200.816204][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1133'. [ 200.906645][ T9850] netlink: 'syz.1.1137': attribute type 3 has an invalid length. [ 200.927874][ T9840] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1134'. [ 200.938470][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 200.955089][ T9850] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1137'. [ 200.958262][ T9840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.182172][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 201.202717][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 201.218938][ T9866] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 201.245089][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 201.308299][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 201.322499][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 201.354439][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 201.712565][ T9796] Bluetooth: hci0: command 0x0406 tx timeout [ 201.726428][ T9796] Bluetooth: hci2: command 0x0406 tx timeout [ 201.733274][ T9889] Bluetooth: hci1: command 0x0406 tx timeout [ 201.733444][ T9796] Bluetooth: hci3: command 0x0406 tx timeout [ 201.792985][ T9885] erspan0: entered promiscuous mode [ 201.823844][ T9884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.887264][ T9884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.281740][ T9905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.364889][ T9916] netlink: 'syz.1.1155': attribute type 7 has an invalid length. [ 202.392855][ T9916] netlink: 'syz.1.1155': attribute type 7 has an invalid length. [ 202.654041][ T9915] macvtap1: entered promiscuous mode [ 202.676498][ T9915] vlan0: entered promiscuous mode [ 202.709758][ T9915] macvtap1: entered allmulticast mode [ 202.730872][ T9915] vlan0: entered allmulticast mode [ 202.753083][ T9915] veth0_vlan: entered allmulticast mode [ 203.151784][ T8902] wlan1: Trigger new scan to find an IBSS to join [ 203.291850][ T9957] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 203.641941][ T9970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.685680][ T9973] netlink: 'syz.2.1171': attribute type 21 has an invalid length. [ 204.527177][ T9997] netlink: 'syz.4.1174': attribute type 4 has an invalid length. [ 204.756643][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 205.136334][T10026] bridge0: port 3(veth1_to_bridge) entered blocking state [ 205.181676][T10026] bridge0: port 3(veth1_to_bridge) entered disabled state [ 205.200785][T10026] veth1_to_bridge: entered allmulticast mode [ 205.235138][T10026] veth1_to_bridge: entered promiscuous mode [ 205.604694][T10052] netlink: 'syz.4.1194': attribute type 10 has an invalid length. [ 205.687878][T10052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.730522][T10052] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 205.791299][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 205.850321][T10065] __nla_validate_parse: 82 callbacks suppressed [ 205.850341][T10065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1197'. [ 206.094206][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 206.120295][ T8902] wlan1: Trigger new scan to find an IBSS to join [ 206.154223][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 206.177306][T10069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1200'. [ 206.638794][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1211'. [ 206.662183][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 206.687102][T10097] IPVS: Unknown mcast interface: pim6reg1 [ 206.765436][T10104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1211'. [ 206.832434][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 206.890397][T10101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1213'. [ 207.054984][ T57] wlan1: Creating new IBSS network, BSSID 3a:d0:cc:36:6f:ea [ 207.135580][T10120] bridge0: port 3(dummy0) entered blocking state [ 207.142161][T10120] bridge0: port 3(dummy0) entered forwarding state [ 207.149034][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.156263][T10120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.163789][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.171014][T10120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.226916][T10120] bridge0: entered promiscuous mode [ 207.233950][T10120] bridge0: entered allmulticast mode [ 207.302235][T10124] tipc: Failed to remove unknown binding: 66,0,0/0:3162600581/3162600583 [ 207.345784][T10124] tipc: Failed to remove unknown binding: 66,0,0/0:3162600581/3162600582 [ 207.375961][T10124] tipc: Failed to remove unknown binding: 66,0,0/0:3162600581/3162600583 [ 207.385987][T10124] tipc: Failed to remove unknown binding: 66,0,0/0:3162600581/3162600582 [ 207.611982][T10140] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1222'. [ 207.890141][T10152] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 208.145071][T10169] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 208.160624][T10169] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1228'. [ 208.188740][T10162] bridge1: entered promiscuous mode [ 208.202487][T10170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.223474][T10170] v: renamed from veth0_vlan (while UP) [ 208.395094][T10135] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 208.626276][T10188] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 208.779075][ T5608] block nbd0: Receive control failed (result -32) [ 208.786626][ T4928] block nbd0: Receive control failed (result -32) [ 209.868247][T10251] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 210.255196][T10268] netlink: 'syz.3.1247': attribute type 21 has an invalid length. [ 210.339558][T10268] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.639573][T10279] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 211.157650][T10305] team0: entered promiscuous mode [ 211.188098][T10305] team_slave_0: entered promiscuous mode [ 211.209572][T10305] team_slave_1: entered promiscuous mode [ 211.259601][T10310] __nla_validate_parse: 11 callbacks suppressed [ 211.259621][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1255'. [ 211.389284][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 211.623446][T10325] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1261'. [ 211.684887][T10325] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1261'. [ 211.749799][T10325] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1261'. [ 211.827569][T10325] lo: entered promiscuous mode [ 211.834281][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 211.855776][T10325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.890782][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 211.966392][T10339] Unsupported xt match [ 211.966411][T10339] unable to load match [ 212.239482][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1269'. [ 212.287910][T10358] netlink: 'syz.0.1270': attribute type 1 has an invalid length. [ 212.387815][T10364] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 212.562955][T10375] netlink: 'syz.2.1276': attribute type 1 has an invalid length. [ 212.583877][T10358] bond6: entered promiscuous mode [ 212.589567][T10358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.602974][T10370] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1274'. [ 212.620697][T10377] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 212.668603][T10369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.707403][T10369] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 212.744789][T10369] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 212.773865][T10369] bond6: (slave ip6gre1): making interface the new active one [ 212.782283][T10369] ip6gre1: entered promiscuous mode [ 212.789562][T10369] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 212.806172][T10375] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 212.845529][T10387] sctp: [Deprecated]: syz.3.1278 (pid 10387) Use of int in maxseg socket option. [ 212.845529][T10387] Use struct sctp_assoc_value instead [ 212.879665][T10378] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 213.051447][T10399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1280'. [ 213.121397][T10402] tipc: Enabled bearer , priority 10 [ 213.162683][T10398] tipc: Enabling of bearer rejected, already enabled [ 213.544636][T10399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.838527][T10399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.119976][T10399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.231643][ T9] tipc: Node number set to 3758096385 [ 214.287556][T10448] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 214.459243][T10399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.145982][ T3314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.246134][T10481] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 215.255534][ T8903] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.962347][ T8903] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.041271][ T3314] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.334865][T10523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.425057][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056525000: rx timeout, send abort [ 216.541266][T10536] netlink: 'syz.2.1314': attribute type 21 has an invalid length. [ 216.563199][T10536] __nla_validate_parse: 4 callbacks suppressed [ 216.563218][T10536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1314'. [ 216.700449][T10539] openvswitch: netlink: Message has 8 unknown bytes. [ 216.729655][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xf [ 216.870118][T10552] openvswitch: netlink: IP tunnel dst address not specified [ 216.926933][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805821bc00: rx timeout, send abort [ 216.937717][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056525000: abort rx timeout. Force session deactivation [ 216.972289][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805821bc00: connection exists (fe ff). last cmd: 20 [ 217.069568][T10557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1320'. [ 217.222254][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031ed5000: rx timeout, send abort [ 217.296570][T10569] FAULT_INJECTION: forcing a failure. [ 217.296570][T10569] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 217.355289][T10569] CPU: 1 UID: 0 PID: 10569 Comm: syz.0.1324 Not tainted syzkaller #0 PREEMPT(full) [ 217.355321][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.355339][T10569] Call Trace: [ 217.355346][T10569] [ 217.355354][T10569] dump_stack_lvl+0xe8/0x150 [ 217.355398][T10569] should_fail_ex+0x40c/0x560 [ 217.355421][T10569] _copy_from_user+0x2d/0xb0 [ 217.355444][T10569] __sys_sendto+0x2a9/0x5a0 [ 217.355469][T10569] ? ksys_write+0x1e6/0x270 [ 217.355496][T10569] ? __pfx___sys_sendto+0x10/0x10 [ 217.355517][T10569] ? __mutex_unlock_slowpath+0x731/0x900 [ 217.355564][T10569] ? __pfx_ksys_write+0x10/0x10 [ 217.355586][T10569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.355608][T10569] __x64_sys_sendto+0xde/0x100 [ 217.355633][T10569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.355651][T10569] do_syscall_64+0x174/0x580 [ 217.355672][T10569] ? clear_bhb_loop+0x70/0xc0 [ 217.355692][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.355709][T10569] RIP: 0033:0x7f8eb599e0d9 [ 217.355730][T10569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.355742][T10569] RSP: 002b:00007f8eb6797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 217.355759][T10569] RAX: ffffffffffffffda RBX: 00007f8eb5c25fa0 RCX: 00007f8eb599e0d9 [ 217.355770][T10569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 217.355780][T10569] RBP: 00007f8eb6797090 R08: 0000200000000400 R09: 0000000000000014 [ 217.355789][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.355797][T10569] R13: 00007f8eb5c26038 R14: 00007f8eb5c25fa0 R15: 00007ffc3871a078 [ 217.355822][T10569] [ 217.497179][T10577] netlink: 'syz.1.1328': attribute type 16 has an invalid length. [ 217.557265][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 217.606807][T10577] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1328'. [ 217.841670][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031ed5000: abort rx timeout. Force session deactivation [ 217.887425][T10594] netlink: 'syz.1.1331': attribute type 12 has an invalid length. [ 217.924475][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 218.037399][T10598] team_slave_0: Caught tx_queue_len zero misconfig [ 218.099807][T10600] veth0: entered promiscuous mode [ 218.203293][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 218.302021][T10612] xt_hashlimit: size too large, truncated to 1048576 [ 218.324461][T10599] veth0: left promiscuous mode [ 218.669684][T10622] bond5 (unregistering): Released all slaves [ 219.212262][T10658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1354'. [ 219.229771][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 219.315144][T10669] SET target dimension over the limit! [ 219.607428][T10682] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 219.796823][T10691] netlink: 'syz.3.1363': attribute type 11 has an invalid length. [ 219.818531][T10685] veth5: entered promiscuous mode [ 220.077198][T10711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'. [ 220.091757][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 220.166575][T10716] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 220.242902][T10718] xt_l2tp: v2 doesn't support IP mode [ 220.267687][T10718] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 220.287914][T10725] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 220.373261][T10727] tipc: Enabled bearer , priority 0 [ 220.388859][T10726] tipc: Disabling bearer [ 220.401676][T10730] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 220.547662][T10739] veth1_to_bond: entered allmulticast mode [ 220.568139][T10742] veth1_to_bond: entered promiscuous mode [ 220.592584][T10741] veth1_to_bond (unregistering): left allmulticast mode [ 220.599608][T10741] veth1_to_bond (unregistering): left promiscuous mode [ 220.610642][T10741] bond0: (slave bond_slave_1): Releasing backup interface [ 220.809036][T10754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.816403][T10754] IPv6: NLM_F_CREATE should be set when creating new route [ 221.471366][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 221.775349][T10770] __nla_validate_parse: 5 callbacks suppressed [ 221.775369][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 221.794281][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'. [ 221.982163][T10784] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1391'. [ 222.028440][T10784] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1391'. [ 222.070807][T10784] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1391'. [ 222.193653][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1393'. [ 222.231309][T10795] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 222.300858][T10805] Cannot find add_set index 3 as target [ 222.316690][T10802] netlink: 'syz.3.1397': attribute type 1 has an invalid length. [ 222.344567][T10802] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1397'. [ 222.511343][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 222.840034][T10813] netlink: 'syz.0.1400': attribute type 3 has an invalid length. [ 222.848024][T10813] netlink: 'syz.0.1400': attribute type 3 has an invalid length. [ 222.856792][T10813] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1400'. [ 223.081902][T10836] geneve3: entered promiscuous mode [ 223.140037][T10840] netlink: 'syz.1.1409': attribute type 23 has an invalid length. [ 223.216130][ T3314] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 48121 - 0 [ 223.226464][ T3314] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 48121 - 0 [ 223.234781][ T3314] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 48121 - 0 [ 223.243067][ T3314] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 48121 - 0 [ 223.257237][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'. [ 223.315957][T10849] bond3: option lp_interval: invalid value (0) [ 223.322180][T10849] bond3: option lp_interval: allowed values 1 - 2147483647 [ 223.332476][T10849] bond3 (unregistering): Released all slaves [ 223.511369][T10863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1415'. [ 223.567189][T10839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.711642][T10876] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 223.771512][T10881] xt_hashlimit: size too large, truncated to 1048576 [ 223.893754][T10887] netlink: 'syz.3.1422': attribute type 11 has an invalid length. [ 224.312202][T10899] syzkaller1: entered promiscuous mode [ 224.317716][T10899] syzkaller1: entered allmulticast mode [ 224.532232][T10922] openvswitch: netlink: Actions may not be safe on all matching packets [ 224.594659][T10925] netlink: 'syz.1.1434': attribute type 15 has an invalid length. [ 224.610790][T10925] netlink: 'syz.1.1434': attribute type 15 has an invalid length. [ 224.622391][ T8892] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 224.622788][ T8892] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 224.622822][ T8892] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 224.622852][ T8892] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 224.898760][T10943] Bluetooth: MGMT ver 1.23 [ 224.904031][T10943] Bluetooth: hci1: too big key_count value 32778 [ 224.914689][T10943] netlink: 'syz.1.1438': attribute type 4 has an invalid length. [ 225.264092][T10970] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 225.607363][T10986] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 225.774654][T10994] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 225.906849][T10996] netlink: 'syz.4.1455': attribute type 3 has an invalid length. [ 225.927167][T10996] tipc: Invalid UDP bearer configuration [ 225.927263][T10996] tipc: Enabling of bearer rejected, failed to enable media [ 226.271407][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 226.657402][T11031] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 226.955449][T11041] __nla_validate_parse: 23 callbacks suppressed [ 226.955469][T11041] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1469'. [ 227.143475][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 227.155963][T11050] SET target dimension over the limit! [ 227.205889][T11052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'. [ 227.312868][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 227.404881][T11059] nftables ruleset with unbound chain [ 227.677520][T11070] IPVS: Unknown mcast interface: syzkaller0 [ 227.822326][T11076] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1484'. [ 227.835821][T11079] IPVS: set_ctl: invalid protocol: 43 172.20.20.58:20002 [ 227.927433][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 237.098170][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.438335][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1489'. [ 251.751446][T11105] bond7: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 251.776718][T11105] bond7 (unregistering): Released all slaves [ 252.091276][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 252.109751][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 252.294003][T11139] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 252.765205][T11167] syzkaller0: entered promiscuous mode [ 252.792109][T11167] syzkaller0: entered allmulticast mode [ 252.807433][T11167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.905812][T11175] Bluetooth: ISO socket layer initialized [ 253.220336][T11192] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 253.241329][T11192] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 253.445086][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1520'. [ 253.470450][T11206] netlink: 'syz.0.1520': attribute type 7 has an invalid length. [ 253.501212][T11206] netlink: 'syz.0.1520': attribute type 8 has an invalid length. [ 253.529169][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 253.875186][T11230] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1526'. [ 254.049419][T11246] netlink: 'syz.3.1530': attribute type 9 has an invalid length. [ 254.101322][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 254.114380][T11248] netlink: 'syz.3.1530': attribute type 9 has an invalid length. [ 254.124531][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 254.158653][T11199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.422831][T11259] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 254.433758][T11259] sctp: [Deprecated]: syz.0.1535 (pid 11259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.433758][T11259] Use struct sctp_sack_info instead [ 254.487161][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 254.532478][T11255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.712913][T11278] tipc: Enabled bearer , priority 0 [ 254.804159][T11289] IPv6: sit2: Disabled Multicast RS [ 255.097797][T11300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1547'. [ 255.169421][T11300] dvmrp0: entered allmulticast mode [ 255.187761][T11300] pimreg: entered allmulticast mode [ 255.193720][T11301] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:19999 [ 255.202249][T11300] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:19999 [ 255.232902][T11297] dvmrp0: left allmulticast mode [ 255.654567][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 255.742217][T11346] bridge0: port 4(ipvlan2) entered blocking state [ 255.754252][T11346] bridge0: port 4(ipvlan2) entered disabled state [ 255.763515][T11346] ipvlan2: entered allmulticast mode [ 255.768886][T11346] bridge0: entered allmulticast mode [ 255.776982][T11346] ipvlan2: left allmulticast mode [ 255.782478][T11346] bridge0: left allmulticast mode [ 255.954415][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.904323][T11293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.262505][T11368] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 258.429941][T11375] __nla_validate_parse: 1 callbacks suppressed [ 258.429958][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1566'. [ 258.965804][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 259.136270][T11416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1578'. [ 259.684423][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'. [ 259.737898][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1594'. [ 259.857432][T11463] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 259.937630][T11482] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1597'. [ 260.048312][T11486] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 260.236667][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'. [ 260.296388][T11495] xt_ipcomp: unknown flags 1D [ 260.349447][T11507] openvswitch: netlink: VXLAN extension 313 out of range max 1 [ 260.607227][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'. [ 260.635873][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 260.645102][T11521] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 260.664551][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 260.681981][T11521] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 261.048383][T11535] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 261.297820][T11556] netlink: 'syz.1.1627': attribute type 11 has an invalid length. [ 261.325648][T11553] bond3: option lp_interval: invalid value (0) [ 261.331973][T11553] bond3: option lp_interval: allowed values 1 - 2147483647 [ 261.344005][T11553] bond3 (unregistering): Released all slaves [ 261.777337][T11579] Unsupported ieee802154 address type: 0 [ 262.241092][T11617] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 262.299501][T11617] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 262.309064][T11617] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 262.317141][T11617] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 262.325836][T11617] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 262.333864][T11617] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 262.342003][T11617] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 262.364489][T11620] macvlan4: entered promiscuous mode [ 262.389439][T11620] macvlan4: entered allmulticast mode [ 262.395880][T11620] bond3: entered promiscuous mode [ 262.402545][T11620] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 262.412232][T11620] bond3: left promiscuous mode [ 262.430734][T11624] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 263.411543][T11673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.282004][T11703] __nla_validate_parse: 10 callbacks suppressed [ 264.282021][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1662'. [ 265.022562][T11697] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 265.032181][T11697] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 265.346683][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 265.371992][T11769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.534502][T11777] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 265.598680][ T24] hid-generic 0005:0800:05DF.0001: item fetching failed at offset 0/1 [ 265.615134][ T24] hid-generic 0005:0800:05DF.0001: probe with driver hid-generic failed with error -22 [ 265.858533][T11796] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20004 [ 266.145461][T11824] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1697'. [ 266.154753][T11824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1697'. [ 266.615295][T11838] ip_tables: iptables: counters copy to user failed while replacing table [ 267.079347][T11860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1708'. [ 267.233042][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1709'. [ 267.254605][T11864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1708'. [ 267.272251][T11868] validate_nla: 26 callbacks suppressed [ 267.272269][T11868] netlink: 'syz.4.1712': attribute type 9 has an invalid length. [ 267.323634][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1710'. [ 267.323966][T11870] netlink: 'syz.0.1711': attribute type 39 has an invalid length. [ 267.389830][T11871] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 267.664461][T11883] netlink: 'syz.4.1716': attribute type 4 has an invalid length. [ 267.821355][T11891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'. [ 267.830446][T11891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'. [ 268.081062][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 268.128452][T11904] netlink: 'syz.0.1723': attribute type 4 has an invalid length. [ 268.455473][T11920] gretap0: left allmulticast mode [ 268.475469][T11920] gretap0: left promiscuous mode [ 268.500667][T11920] bridge0: port 3(gretap0) entered disabled state [ 268.529105][T11920] bridge_slave_1: left allmulticast mode [ 268.538264][T11920] bridge_slave_1: left promiscuous mode [ 268.552366][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.599043][T11920] bridge_slave_0: left allmulticast mode [ 268.604872][T11920] bridge_slave_0: left promiscuous mode [ 268.651065][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.356758][T11953] netlink: 'syz.2.1743': attribute type 21 has an invalid length. [ 269.375381][T11953] __nla_validate_parse: 5 callbacks suppressed [ 269.375398][T11953] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1743'. [ 270.005719][T12008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1759'. [ 270.015058][T12010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1759'. [ 270.024242][T12008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1759'. [ 270.115129][T12017] netlink: 'syz.2.1760': attribute type 3 has an invalid length. [ 270.184008][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1762'. [ 270.970549][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1773'. [ 271.177050][T12062] bond5: entered promiscuous mode [ 271.213422][T12062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.269784][T12077] netlink: 'syz.4.1776': attribute type 3 has an invalid length. [ 271.341122][T12062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.370839][T12062] bond5: (slave sit3): The slave device specified does not support setting the MAC address [ 271.416285][T12062] bond5: (slave sit3): Error -95 calling set_mac_address [ 271.437978][T12084] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1778'. [ 271.543368][T12079] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 271.552079][T12087] xt_policy: output policy not valid in PREROUTING and INPUT [ 271.572633][T12079] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 271.589180][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1777'. [ 271.893308][T12104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1785'. [ 272.188014][T12119] netlink: 'syz.0.1789': attribute type 3 has an invalid length. [ 272.195804][T12119] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1789'. [ 272.334897][ T8896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.349655][ T8896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.009589][T12150] hsr_slave_1 (unregistering): left promiscuous mode [ 273.325795][T12165] syzkaller1: entered promiscuous mode [ 273.332231][T12165] syzkaller1: entered allmulticast mode [ 273.557616][T12181] blkio.reset_stats is deprecated [ 274.151524][T12205] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 274.444065][T12214] __nla_validate_parse: 6 callbacks suppressed [ 274.444084][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 274.526721][T12214] netlink: ct family unspecified [ 274.855609][T12228] netlink: 'syz.1.1834': attribute type 21 has an invalid length. [ 274.863474][T12228] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1834'. [ 274.894582][T12228] v: renamed from veth0_vlan (while UP) [ 275.044726][T12239] netlink: 888 bytes leftover after parsing attributes in process `syz.2.1837'. [ 275.198745][T12241] netlink: 'syz.1.1840': attribute type 4 has an invalid length. [ 275.206524][T12241] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1840'. [ 275.260704][T12241] .`: renamed from bond0 (while UP) [ 275.835031][T12257] bond5: entered promiscuous mode [ 275.944452][T12265] netlink: 'syz.4.1848': attribute type 2 has an invalid length. [ 275.951423][T12267] macvlan2: entered promiscuous mode [ 275.963388][T12267] macvlan2: entered allmulticast mode [ 275.971611][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 275.975208][T12267] bond5: (slave macvlan2): Opening slave failed [ 275.991347][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'. [ 276.031179][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 276.597856][T12298] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1855'. [ 276.612990][T12300] sctp: [Deprecated]: syz.0.1857 (pid 12300) Use of int in max_burst socket option. [ 276.612990][T12300] Use struct sctp_assoc_value instead [ 276.876792][T12313] x_tables: unsorted underflow at hook 3 [ 276.947845][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'. [ 277.094741][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1865'. [ 277.173758][T12330] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 277.583748][T12359] netlink: 'syz.0.1874': attribute type 4 has an invalid length. [ 277.642366][T12366] netlink: 'syz.4.1875': attribute type 2 has an invalid length. [ 277.657068][T12367] netlink: 'syz.3.1877': attribute type 3 has an invalid length. [ 277.679720][T12366] netlink: 'syz.4.1875': attribute type 11 has an invalid length. [ 277.680910][T12355] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 277.695168][T12368] netlink: 'syz.3.1877': attribute type 3 has an invalid length. [ 277.797943][T12373] pimreg: entered allmulticast mode [ 278.311597][T12410] xt_hashlimit: max too large, truncated to 1048576 [ 278.320070][T12410] No such timeout policy "syz1" [ 281.131016][T12393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.418340][T12430] __nla_validate_parse: 7 callbacks suppressed [ 281.418373][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 281.485092][T12435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'. [ 281.586146][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 281.630796][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 281.946608][T12464] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1902'. [ 282.002012][T12465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1902'. [ 282.095704][T12472] netlink: 'syz.3.1907': attribute type 32 has an invalid length. [ 282.103583][T12472] netlink: 'syz.3.1907': attribute type 32 has an invalid length. [ 282.111418][T12472] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 282.253660][T12477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1908'. [ 282.434011][T12491] netlink: 'syz.1.1912': attribute type 32 has an invalid length. [ 282.443058][T12491] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1912'. [ 282.446362][T12492] netlink: 'syz.4.1913': attribute type 5 has an invalid length. [ 282.505541][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034cd1000: rx timeout, send abort [ 282.906039][T12512] netlink: 'syz.1.1919': attribute type 64 has an invalid length. [ 282.944045][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880568da400: rx timeout, send abort [ 282.992504][T12514] vlan4: entered promiscuous mode [ 282.997600][T12514] bridge0: entered promiscuous mode [ 283.055094][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034cd1000: abort rx timeout. Force session deactivation [ 283.491859][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880568da400: abort rx timeout. Force session deactivation [ 283.610612][T12555] ip6gre0: Caught tx_queue_len zero misconfig [ 283.627128][T12555] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 283.969596][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1933'. [ 285.233517][T12567] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1935'. [ 286.462531][T12546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.629791][T12573] __nla_validate_parse: 2 callbacks suppressed [ 286.629809][T12573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1937'. [ 286.651948][T12575] rdma_op ffff8880560211f0 conn xmit_rdma 0000000000000000 [ 286.688199][T12573] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 286.715948][T12576] tipc: Enabling of bearer rejected, failed to enable media [ 286.727666][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 286.800134][T12576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.877780][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1942'. [ 286.945013][T12591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1943'. [ 286.947677][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1942'. [ 287.020774][T12598] syzkaller0: entered promiscuous mode [ 287.026901][T12598] syzkaller0: entered allmulticast mode [ 287.160895][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'. [ 287.264980][T12614] netlink: 'syz.0.1948': attribute type 21 has an invalid length. [ 287.312325][T12614] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1948'. [ 287.374073][T12614] netlink: 'syz.0.1948': attribute type 4 has an invalid length. [ 287.423737][T12620] netlink: 'syz.0.1948': attribute type 21 has an invalid length. [ 287.465365][T12614] netlink: 'syz.0.1948': attribute type 5 has an invalid length. [ 287.486331][T12620] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1948'. [ 287.535619][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'. [ 287.536978][T12614] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1948'. [ 287.605826][T12620] netlink: 'syz.0.1948': attribute type 4 has an invalid length. [ 287.613609][T12620] netlink: 'syz.0.1948': attribute type 5 has an invalid length. [ 287.802041][T12638] netlink: 'syz.1.1957': attribute type 16 has an invalid length. [ 288.241961][T12641] v: renamed from veth0_vlan [ 288.933618][T12693] netlink: 'syz.2.1972': attribute type 10 has an invalid length. [ 288.949671][T12701] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 289.605780][T12736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.720569][T12740] tipc: Enabling of bearer rejected, already enabled [ 289.745211][T12740] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 289.799720][T12744] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 290.024402][T12752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.174098][T12769] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 290.660588][T12789] bond0: entered promiscuous mode [ 290.680469][T12792] can: request_module (can-proto-0) failed. [ 290.691821][T12789] bond0: entered allmulticast mode [ 290.703238][T12789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.823784][T12791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.055389][T12822] netlink: 'syz.0.2006': attribute type 1 has an invalid length. [ 291.339299][T12822] bond7: entered promiscuous mode [ 291.344914][T12822] 8021q: adding VLAN 0 to HW filter on device bond7 [ 291.360299][T12829] vlan2: entered allmulticast mode [ 291.365481][T12829] bond7: entered allmulticast mode [ 291.553364][T12838] bond7: (slave bridge3): making interface the new active one [ 291.579137][T12838] bridge3: entered promiscuous mode [ 291.592478][T12838] bridge3: entered allmulticast mode [ 291.645877][T12838] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 291.999019][T12860] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.015469][T12860] __nla_validate_parse: 10 callbacks suppressed [ 292.015529][T12860] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2009'. [ 292.170814][T12860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2009'. [ 292.336891][T12883] syzkaller1: entered promiscuous mode [ 292.350020][T12883] syzkaller1: entered allmulticast mode [ 292.368312][T12877] netlink: 'syz.2.2013': attribute type 1 has an invalid length. [ 292.376943][T12877] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2013'. [ 292.604682][T12901] openvswitch: netlink: IP tunnel dst address not specified [ 292.685607][T12901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.075769][T12929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.218185][T12938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'. [ 293.262012][ T8896] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 293.286331][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 293.322923][ T8896] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 293.349157][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 293.535295][T12950] netlink: 'syz.0.2032': attribute type 28 has an invalid length. [ 293.543160][T12950] netlink: 'syz.0.2032': attribute type 3 has an invalid length. [ 293.550899][T12950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2032'. [ 293.662661][ T47] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 293.720075][T12962] bridge4: entered promiscuous mode [ 293.725474][T12962] bridge4: entered allmulticast mode [ 294.021650][ T47] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.986432][T12922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.559095][T12994] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 296.784772][T13003] smc: net device lo applied user defined pnetid SYZ0 [ 296.829799][T13003] smc: smcd device lo applied user defined pnetid SYZ0 [ 296.839007][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 296.870908][T13006] xt_l2tp: invalid flags combination: 8 [ 296.948473][T13006] team0: Device vlan0 failed to register rx_handler [ 297.387076][T13029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.399675][T13029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.502972][T13033] bond0: option ad_select: unable to set because the bond device is up [ 297.513745][T13033] syzkaller0: entered promiscuous mode [ 297.529307][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.552192][T13033] syzkaller0: entered allmulticast mode [ 298.043537][T13059] netlink: 'syz.1.2065': attribute type 4 has an invalid length. [ 298.213681][T13070] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 298.327885][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 298.342085][T13080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2071'. [ 298.357281][T13075] hsr_slave_0: left promiscuous mode [ 298.366013][T13075] hsr_slave_1: left promiscuous mode [ 298.761255][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 298.928474][T13110] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2081'. [ 299.195360][T13126] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 299.407392][T13126] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 299.505429][ T8902] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 299.551444][T13142] veth11: entered promiscuous mode [ 299.565640][T13142] bond8: (slave veth11): Enslaving as a backup interface with a down link [ 299.793144][T13159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.794746][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'. [ 299.940082][T13158] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 299.989213][T13158] netlink: 'syz.2.2090': attribute type 2 has an invalid length. [ 300.160521][T13181] syzkaller1: entered promiscuous mode [ 300.204572][T13181] syzkaller1: entered allmulticast mode [ 300.213836][T13181] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 300.762072][T13199] syzkaller0: entered promiscuous mode [ 300.767593][T13199] syzkaller0: entered allmulticast mode [ 300.775194][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.953666][ T4928] block nbd1: Receive control failed (result -32) [ 300.967524][ T5608] block nbd2: Receive control failed (result -32) [ 301.108032][T13206] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2104'. [ 301.176813][T13210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2104'. [ 301.388609][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 301.397565][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2106'. [ 301.444029][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 301.467918][T13223] netlink: 'syz.3.2108': attribute type 9 has an invalid length. [ 302.715524][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.918135][T13221] __nla_validate_parse: 2 callbacks suppressed [ 303.918255][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 303.933344][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2106'. [ 304.188132][T13248] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2114'. [ 304.226398][T13248] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 304.469357][T13263] xt_l2tp: missing protocol rule (udp|l2tpip) [ 305.008685][T13292] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2122'. [ 305.323031][T13311] netlink: 'syz.4.2128': attribute type 7 has an invalid length. [ 305.520617][T13321] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2130'. [ 305.659485][T13321] gretap0: entered promiscuous mode [ 305.683895][T13326] can: request_module (can-proto-0) failed. [ 305.949493][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 306.020805][T13342] bridge0: port 4(syz_tun) entered blocking state [ 306.027364][T13342] bridge0: port 4(syz_tun) entered disabled state [ 306.092390][T13342] syz_tun: entered allmulticast mode [ 306.122488][T13342] syz_tun: entered promiscuous mode [ 306.264249][T13342] xt_hashlimit: size too large, truncated to 1048576 [ 306.534225][T13375] hsr0: entered allmulticast mode [ 306.576950][T13375] hsr_slave_0: entered allmulticast mode [ 306.614019][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.640744][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 306.790683][T13382] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 307.068950][T13394] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 307.092854][T13401] xt_hashlimit: size too large, truncated to 1048576 [ 307.164380][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 307.652395][T13431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2156'. [ 308.323803][T13465] netlink: 'syz.2.2164': attribute type 12 has an invalid length. [ 308.346385][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 308.493189][T13465] netlink: 'syz.2.2164': attribute type 12 has an invalid length. [ 308.542545][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 308.970294][ T8903] tipc: Subscription rejected, illegal request [ 308.992526][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'. [ 309.115915][T13504] Bluetooth: MGMT ver 1.23 [ 309.195989][T13506] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2175'. [ 309.322133][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2180'. [ 309.498352][T13517] bond7: entered promiscuous mode [ 309.503455][T13517] bond7: entered allmulticast mode [ 309.696231][T13532] sctp: [Deprecated]: syz.1.2184 (pid 13532) Use of int in maxseg socket option. [ 309.696231][T13532] Use struct sctp_assoc_value instead [ 310.336476][T13573] netlink: 'syz.3.2196': attribute type 1 has an invalid length. [ 310.550150][T13589] netlink: 'syz.0.2200': attribute type 5 has an invalid length. [ 310.748257][T13605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2205'. [ 310.875355][T13608] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 310.967674][T13608] 8021q: adding VLAN 0 to HW filter on device bond10 [ 310.987713][T13608] bond10: (slave gretap1): Enslaving as a backup interface with an up link [ 311.013589][T13612] netlink: 'syz.4.2207': attribute type 10 has an invalid length. [ 311.272087][T13624] 8021q: adding VLAN 0 to HW filter on device bond9 [ 311.610338][T13644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2219'. [ 311.810655][T13658] openvswitch: netlink: IP tunnel dst address not specified [ 311.843128][T13658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.922265][T13669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.939523][T13669] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 312.122685][ T29] audit: type=1800 audit(1786468863.808:5): pid=13678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2226" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2392 res=0 errno=0 [ 312.221461][T13670] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 312.233591][T13670] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2225'. [ 312.459368][T13680] openvswitch: netlink: IP tunnel dst address not specified [ 312.907242][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2233'. [ 313.861361][T13744] openvswitch: netlink: IP tunnel dst address not specified [ 313.924400][T13742] vlan2: entered promiscuous mode [ 313.929571][T13742] gretap0: entered promiscuous mode [ 314.456891][T13774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.848505][T13799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2254'. [ 314.912220][T13799] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2254'. [ 314.961298][T13802] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 314.984391][T13802] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2256'. [ 315.172521][T13813] netlink: 'syz.2.2260': attribute type 13 has an invalid length. [ 315.199318][T13813] netlink: 'syz.2.2260': attribute type 17 has an invalid length. [ 315.427648][T13813] hsr0: left allmulticast mode [ 315.432565][T13813] hsr_slave_0: left allmulticast mode [ 315.450132][T13813] v: left promiscuous mode [ 315.456831][T13813] v: entered promiscuous mode [ 315.471812][T13813] veth1_vlan: entered promiscuous mode [ 315.482271][T13813] ipvlan1: left promiscuous mode [ 315.487264][T13813] ipvlan1: left allmulticast mode [ 315.492305][T13813] v: left allmulticast mode [ 315.500704][T13813] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 315.508197][T13813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.560419][T13813] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 315.569632][T13813] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 315.592073][T13819] erspan0: entered promiscuous mode [ 315.598057][T13819] vlan3: entered promiscuous mode [ 315.655841][T13823] IPv6: sit1: Disabled Multicast RS [ 315.982664][T13836] syzkaller1: entered promiscuous mode [ 316.021955][T13836] syzkaller1: entered allmulticast mode [ 316.170722][T13851] xt_hashlimit: size too large, truncated to 1048576 [ 316.178528][T13851] xt_hashlimit: max too large, truncated to 1048576 [ 316.197101][T13851] xt_hashlimit: invalid rate [ 316.230199][T13851] netlink: 'syz.4.2271': attribute type 1 has an invalid length. [ 316.243786][T13851] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2271'. [ 316.252872][T13851] netlink: 'syz.4.2271': attribute type 1 has an invalid length. [ 316.651822][T13871] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 316.660051][T13875] netlink: 'syz.4.2281': attribute type 63 has an invalid length. [ 316.668588][T13875] netlink: 'syz.4.2281': attribute type 63 has an invalid length. [ 317.442125][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.886277][T13903] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2289'. [ 317.938249][ T5608] block nbd3: Receive control failed (result -32) [ 317.952822][ T4928] block nbd3: Receive control failed (result -32) [ 317.968893][T13903] 0·: renamed from hsr0 (while UP) [ 317.976611][T13903] 0·: entered allmulticast mode [ 317.981501][T13903] hsr_slave_0: entered allmulticast mode [ 317.987150][T13903] hsr_slave_1: entered allmulticast mode [ 317.993120][T13903] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 318.015517][T13907] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 318.321682][T13923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2297'. [ 318.354985][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 318.517177][T13935] sctp: [Deprecated]: syz.2.2299 (pid 13935) Use of int in maxseg socket option. [ 318.517177][T13935] Use struct sctp_assoc_value instead [ 318.539886][T13935] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2299'. [ 318.557691][T13935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2299'. [ 318.766898][T13946] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2303'. [ 318.816588][T13949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.089276][T14006] __nla_validate_parse: 3 callbacks suppressed [ 320.089312][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2322'. [ 320.282226][T14016] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2325'. [ 320.392649][T14025] netlink: 'syz.1.2329': attribute type 1 has an invalid length. [ 320.400442][T14025] netlink: 'syz.1.2329': attribute type 2 has an invalid length. [ 320.624196][T14034] tap0: tun_chr_ioctl cmd 1074025672 [ 320.642155][T14034] tap0: ignored: set checksum disabled [ 321.345449][T14073] netlink: 'syz.0.2343': attribute type 20 has an invalid length. [ 321.383416][T14073] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.436407][T14073] netlink: 'syz.0.2343': attribute type 13 has an invalid length. [ 321.482264][T14073] gretap0: refused to change device tx_queue_len [ 321.488656][T14073] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 321.816043][T14099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2344'. [ 322.358205][T14124] netlink: 'syz.3.2351': attribute type 4 has an invalid length. [ 322.394273][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 322.450735][T14107] macvlan0: entered promiscuous mode [ 322.493071][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 323.081818][T14156] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 323.123410][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 323.132324][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'. [ 323.155306][T14156] netlink: 'syz.2.2360': attribute type 12 has an invalid length. [ 323.175557][T14156] netlink: 'syz.2.2360': attribute type 11 has an invalid length. [ 323.373655][ T29] audit: type=1804 audit(1786468875.028:6): pid=14171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2366" name="/newroot/491/cgroup.controllers" dev="tmpfs" ino=2525 res=1 errno=0 [ 323.422841][ T29] audit: type=1800 audit(1786468875.028:7): pid=14171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2366" name="cgroup.controllers" dev="tmpfs" ino=2525 res=0 errno=0 [ 323.448131][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 323.550516][T14171] pim6reg: entered allmulticast mode [ 323.774444][T14187] netlink: 'syz.4.2372': attribute type 12 has an invalid length. [ 323.814880][T14192] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 323.844430][T14195] netlink: 'syz.1.2374': attribute type 1 has an invalid length. [ 323.892555][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2375'. [ 324.034405][T14199] bond10: (slave bridge6): making interface the new active one [ 324.043166][T14199] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 324.185496][T14209] netlink: 'syz.1.2378': attribute type 64 has an invalid length. [ 324.193932][T14209] netlink: 'syz.1.2378': attribute type 64 has an invalid length. [ 324.253174][T14211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2379'. [ 324.512620][T14218] openvswitch: netlink: IP tunnel TTL not specified. [ 324.946450][T14238] skbuff: bad partial csum: csum=65535/2 headroom=8 headlen=65543 [ 326.027832][T14287] __nla_validate_parse: 3 callbacks suppressed [ 326.027867][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2401'. [ 326.066013][T14294] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.2399'. [ 326.281921][T14298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.363686][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 326.394839][T14304] syzkaller0: left promiscuous mode [ 326.427812][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2405'. [ 326.439343][T14304] syzkaller0: left allmulticast mode [ 326.449597][T14298] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 326.465984][T14304] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2407'. [ 326.477843][T14298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2405'. [ 326.488297][T14298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2405'. [ 326.501673][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2407'. [ 327.044703][T14338] validate_nla: 2 callbacks suppressed [ 327.044744][T14338] netlink: 'syz.3.2416': attribute type 3 has an invalid length. [ 327.113144][T14338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2416'. [ 327.178475][T14341] bridge0: port 4(veth1_to_bridge) entered blocking state [ 327.230459][T14341] bridge0: port 4(veth1_to_bridge) entered disabled state [ 327.237799][T14341] veth1_to_bridge: entered allmulticast mode [ 327.245436][T14341] veth1_to_bridge: entered promiscuous mode [ 327.268803][T14341] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.284257][T14341] bridge0: port 4(veth1_to_bridge) entered blocking state [ 327.291501][T14341] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 327.301889][T14345] netlink: 'syz.1.2420': attribute type 12 has an invalid length. [ 327.309740][T14345] netlink: 'syz.1.2420': attribute type 29 has an invalid length. [ 327.362269][T14345] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2420'. [ 327.400001][T14352] xt_hashlimit: size too large, truncated to 1048576 [ 327.509651][T14355] netlink: 'syz.2.2423': attribute type 6 has an invalid length. [ 328.215599][T14375] syzkaller0: entered promiscuous mode [ 328.221213][T14375] syzkaller0: entered allmulticast mode [ 328.371929][T14375] macsec1: entered promiscuous mode [ 328.777879][T14394] syzkaller0: entered promiscuous mode [ 328.783973][T14394] syzkaller0: entered allmulticast mode [ 328.911149][T14411] netlink: 'syz.3.2437': attribute type 21 has an invalid length. [ 329.061384][T14413] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 329.088025][T14420] netlink: 'syz.2.2439': attribute type 1 has an invalid length. [ 329.126800][T14420] netlink: 'syz.2.2439': attribute type 1 has an invalid length. [ 329.537263][T14446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.241307][T14469] netlink: 'syz.0.2454': attribute type 1 has an invalid length. [ 330.288743][T14469] 8021q: adding VLAN 0 to HW filter on device bond11 [ 330.392854][T14476] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 330.916942][T14502] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 331.144010][T14521] netlink: 'syz.3.2466': attribute type 27 has an invalid length. [ 331.198526][T14524] __nla_validate_parse: 232 callbacks suppressed [ 331.198577][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2466'. [ 331.247016][T14524] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2466'. [ 331.317859][T14520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2470'. [ 331.346722][T14523] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.2469'. [ 331.439789][T14529] ip_tables: iptables: counters copy to user failed while replacing table [ 331.531853][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 331.803310][T14545] veth0: entered promiscuous mode [ 331.808791][T14545] veth0: left promiscuous mode [ 331.821002][T14545] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2478'. [ 331.854843][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2478'. [ 332.044322][T14559] netlink: 'syz.2.2484': attribute type 1 has an invalid length. [ 332.105341][T14559] bond7: (slave gretap2): making interface the new active one [ 332.113901][T14559] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 332.145016][T14560] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2483'. [ 332.196871][T14567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2483'. [ 332.208316][T14568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2486'. [ 332.219059][T14568] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2486'. [ 332.309714][T14566] macsec1: entered promiscuous mode [ 332.767166][T14604] netlink: 'syz.1.2492': attribute type 1 has an invalid length. [ 332.780652][T14604] .`: (slave veth0_to_bond): Releasing backup interface [ 332.788701][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.803612][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.819431][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.833921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.848382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.861932][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.875140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.993726][T14604] veth0_to_bond: left promiscuous mode [ 333.115263][T14615] netlink: 'syz.3.2496': attribute type 10 has an invalid length. [ 334.531228][ C0] net_ratelimit: 3799 callbacks suppressed [ 334.531252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.552220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.565540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.578831][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.593024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.606191][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.619490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.632696][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.646072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.659306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.584177][T14593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.300315][T14629] __nla_validate_parse: 1 callbacks suppressed [ 336.300333][T14629] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2500'. [ 339.591193][ C0] net_ratelimit: 12246 callbacks suppressed [ 339.591215][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.611064][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.624372][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.638826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.652887][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.666654][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.679818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.693132][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.706386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.719527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.641366][ C0] net_ratelimit: 10847 callbacks suppressed [ 344.641390][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.662971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.676173][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.692612][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.706480][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.722046][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.735111][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.749299][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.762471][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.776502][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.733379][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.745093][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.754892][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.785243][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.792997][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.832537][ T4928] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.842787][ T4928] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.851227][ T4928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.859505][ T4928] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.888883][ T4928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 349.701093][ C0] net_ratelimit: 5849 callbacks suppressed [ 349.701197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.721142][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.735056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.748885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.764154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.777250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.791497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.804652][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.819067][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.832241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.871463][ T4928] Bluetooth: hci5: command tx timeout [ 350.964119][ T4928] Bluetooth: hci6: command tx timeout [ 351.969152][ T4928] Bluetooth: hci5: command tx timeout [ 351.977900][ T5613] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 351.991022][ T5613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.999661][ T5613] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.008820][ T5613] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.016758][ T5613] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.120236][ T4928] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 352.189489][ T4928] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 352.203690][ T4928] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 352.211962][ T4928] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 352.221914][ T4928] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 352.315428][ T5608] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 352.327697][ T5608] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 352.336161][ T5608] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 352.344225][ T5608] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 352.354730][ T5608] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 353.060422][ T5608] Bluetooth: hci6: command tx timeout [ 354.714892][ C0] net_ratelimit: 7668 callbacks suppressed [ 354.714925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.715517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.722261][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.733356][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.733841][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.734252][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.749745][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.758318][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.758765][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.772631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.496107][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 356.725897][ T5608] Bluetooth: hci5: command tx timeout [ 356.731385][ T5608] Bluetooth: hci7: command tx timeout [ 356.737839][ T5608] Bluetooth: hci8: command tx timeout [ 356.744125][ T5608] Bluetooth: hci9: command tx timeout [ 356.750321][ T5608] Bluetooth: hci6: command tx timeout [ 359.771221][ C1] net_ratelimit: 12436 callbacks suppressed [ 359.771243][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.772616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.777729][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.791460][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.802132][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.802596][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.803082][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.819176][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.820155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.823109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.811807][ C0] net_ratelimit: 12148 callbacks suppressed [ 364.811851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.821530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.832566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.842824][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.843283][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.843759][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.859443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.867683][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.868174][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.882083][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.861366][ C1] net_ratelimit: 12373 callbacks suppressed [ 369.861386][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.863068][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.867828][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 369.881745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.892124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.892568][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 369.892991][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.907615][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.927896][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 369.931912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.097174][ T5608] Bluetooth: hci6: command tx timeout [ 370.102635][ T5608] Bluetooth: hci9: command tx timeout [ 370.108072][ T5608] Bluetooth: hci8: command tx timeout [ 370.113478][ T5608] Bluetooth: hci7: command tx timeout [ 370.118885][ T5608] Bluetooth: hci5: command tx timeout [ 371.470090][ C0] sched: DL replenish lagged too much [ 372.687531][ T5608] Bluetooth: hci7: command tx timeout [ 372.767920][ T5608] Bluetooth: hci8: command tx timeout [ 372.773498][ T5608] Bluetooth: hci9: command tx timeout [ 374.910544][ C0] net_ratelimit: 12153 callbacks suppressed [ 374.910579][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.919707][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 374.931320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.941777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 374.942278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 374.942766][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 374.957183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.966812][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 374.967330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 374.967773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 379.912758][ C0] net_ratelimit: 12368 callbacks suppressed [ 379.912791][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.922876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 379.933372][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.943796][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.944281][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 379.944724][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.960167][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.968833][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 379.969303][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.983512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.922280][ C1] net_ratelimit: 12364 callbacks suppressed [ 384.922301][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 384.922912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.928708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 384.929114][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 384.942634][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.953198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 384.953654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 384.954169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 384.968697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.978918][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 389.971086][ C1] net_ratelimit: 12406 callbacks suppressed [ 389.971093][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.971106][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 389.971531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 389.978446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.989466][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 389.989941][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 389.990399][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 390.005958][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.014524][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.015033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 394.981088][ C1] net_ratelimit: 12240 callbacks suppressed [ 394.981109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 394.982621][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.987530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.002025][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.012027][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 395.012502][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.027258][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.048081][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 395.051807][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.061965][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.162837][ T4928] Bluetooth: hci9: command tx timeout [ 395.168294][ T4928] Bluetooth: hci8: command tx timeout [ 395.173703][ T4928] Bluetooth: hci7: command tx timeout [ 396.936633][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.025706][ C0] net_ratelimit: 12881 callbacks suppressed [ 400.025740][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.034470][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.046405][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.056777][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 400.057318][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.057789][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 400.072365][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.081799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.082295][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 400.082745][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 405.039463][ C1] net_ratelimit: 12079 callbacks suppressed [ 405.039485][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 405.040228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.045976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 405.046447][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 405.059972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.070371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 405.070856][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 405.071299][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 405.086548][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.095559][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 410.091202][ C1] net_ratelimit: 12525 callbacks suppressed [ 410.091224][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 410.091278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.097668][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 410.098125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 410.111647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.122103][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 410.122613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 410.137494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.158363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 410.161479][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.101186][ C1] net_ratelimit: 12583 callbacks suppressed [ 415.101209][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 415.102651][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.107637][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.121426][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.132080][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 415.132620][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.148436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.149241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.151667][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.156169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.137151][ C0] net_ratelimit: 12505 callbacks suppressed [ 420.137184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.145894][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.157723][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.168058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 420.168469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.168881][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 420.184170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.193101][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.193525][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 420.193891][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 425.150584][ C1] net_ratelimit: 12484 callbacks suppressed [ 425.150606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 425.151712][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.157725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 425.171028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.181369][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 425.181862][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 425.182301][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 425.196576][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.206365][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 425.206856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 430.042850][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 430.201311][ C1] net_ratelimit: 12059 callbacks suppressed [ 430.201332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 430.201356][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.207767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 430.208229][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 430.222953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.232328][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 430.232850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 430.233282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 430.247298][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.250406][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.240151][ C0] net_ratelimit: 12016 callbacks suppressed [ 435.240197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.249699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 435.260819][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.271204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.271684][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 435.272155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.286686][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.296321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 435.296815][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.297272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 439.352361][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 439.359352][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5692/1:b..l [ 439.367737][ C1] rcu: (detected by 1, t=10505 jiffies, g=50249, q=5361 ncpus=2) [ 439.375555][ C1] task:kworker/0:4 state:R running task stack:23816 pid:5692 tgid:5692 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 439.390470][ C1] Workqueue: events free_obj_work [ 439.395719][ C1] Call Trace: [ 439.399031][ C1] [ 439.402075][ C1] __schedule+0x17d9/0x56c0 [ 439.406739][ C1] ? __lock_acquire+0x683/0x2cf0 [ 439.411981][ C1] ? __pfx___schedule+0x10/0x10 [ 439.416862][ C1] preempt_schedule_irq+0x4d/0xa0 [ 439.421907][ C1] irqentry_exit+0x14f/0x8f0 [ 439.426588][ C1] ? trace_irq_disable+0x3b/0x140 [ 439.431665][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.437722][ C1] RIP: 0010:unwind_next_frame+0xcbc/0x2550 [ 439.443617][ C1] Code: c0 20 c8 3c 01 0f 85 76 0e 00 00 48 89 d7 e8 eb 23 00 00 48 89 c3 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 20 42 80 3c 20 00 <4d> 8d 7e 48 74 08 4c 89 ff e8 f6 0d bd 00 49 89 1f 48 8b 44 24 38 [ 439.463684][ C1] RSP: 0000:ffffc90003eff580 EFLAGS: 00000246 [ 439.469884][ C1] RAX: 1ffff920007dfece RBX: ffffffff82349470 RCX: 1ffff920007dfe01 [ 439.477875][ C1] RDX: ffffc90003eff9a8 RSI: 0000000000000002 RDI: ffffc90003eff9a8 [ 439.485862][ C1] RBP: 1ffffffff21f8ec3 R08: ffffc90003eff9b0 R09: 0000000000000000 [ 439.493847][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 439.501875][ C1] R13: ffffc90003f00000 R14: ffffc90003eff628 R15: ffffc90003ef8000 [ 439.509871][ C1] ? kasan_save_free_info+0x40/0x50 [ 439.515157][ C1] ? kasan_save_track+0x3e/0x80 [ 439.520036][ C1] ? unwind_next_frame+0x8f/0x2550 [ 439.525167][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 439.531370][ C1] arch_stack_walk+0x11b/0x150 [ 439.536193][ C1] ? kasan_save_track+0x3e/0x80 [ 439.541068][ C1] stack_trace_save+0xa9/0x100 [ 439.545848][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 439.551244][ C1] ? stack_depot_save_flags+0x33/0x800 [ 439.556806][ C1] ? pick_task_fair+0x13d/0x1320 [ 439.561791][ C1] kasan_save_track+0x3e/0x80 [ 439.566485][ C1] ? kasan_save_track+0x3e/0x80 [ 439.571399][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 439.576707][ C1] ? free_obj_work+0x357/0x490 [ 439.581496][ C1] kasan_save_free_info+0x40/0x50 [ 439.586555][ C1] __kasan_slab_free+0x5c/0x80 [ 439.591353][ C1] kmem_cache_free+0x182/0x650 [ 439.596165][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 439.602071][ C1] free_obj_work+0x357/0x490 [ 439.606685][ C1] ? __pfx_free_obj_work+0x10/0x10 [ 439.611821][ C1] ? rcu_is_watching+0x15/0xb0 [ 439.616622][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 439.622377][ C1] process_scheduled_works+0xa8e/0x14e0 [ 439.627968][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 439.633974][ C1] ? assign_work+0x3cf/0x5d0 [ 439.638591][ C1] worker_thread+0xa47/0xfb0 [ 439.643216][ C1] ? __kthread_parkme+0x71/0x1f0 [ 439.648193][ C1] kthread+0x388/0x470 [ 439.652290][ C1] ? __pfx_worker_thread+0x10/0x10 [ 439.657421][ C1] ? __pfx_kthread+0x10/0x10 [ 439.662298][ C1] ret_from_fork+0x514/0xb70 [ 439.666933][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 439.672076][ C1] ? __switch_to+0xc89/0x1420 [ 439.676779][ C1] ? __pfx_kthread+0x10/0x10 [ 439.681392][ C1] ret_from_fork_asm+0x1a/0x30 [ 439.686224][ C1] [ 439.689350][ C1] rcu: rcu_preempt kthread starved for 1124 jiffies! g50249 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 439.700469][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 439.710452][ C1] rcu: RCU grace-period kthread stack dump: [ 439.716350][ C1] task:rcu_preempt state:R running task stack:26848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 439.729851][ C1] Call Trace: [ 439.733142][ C1] [ 439.736086][ C1] __schedule+0x17d9/0x56c0 [ 439.740612][ C1] ? __lock_acquire+0x683/0x2cf0 [ 439.745683][ C1] ? __pfx___schedule+0x10/0x10 [ 439.750563][ C1] ? schedule+0x90/0x2b0 [ 439.754840][ C1] schedule+0x164/0x2b0 [ 439.759017][ C1] schedule_timeout+0x152/0x2c0 [ 439.763893][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 439.769289][ C1] ? __pfx_process_timeout+0x10/0x10 [ 439.774614][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 439.780447][ C1] ? prepare_to_swait_event+0x322/0x350 [ 439.786095][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 439.791018][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 439.797200][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 439.802506][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 439.807730][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 439.813561][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 439.818183][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 439.823399][ C1] ? __kthread_parkme+0x71/0x1f0 [ 439.828354][ C1] ? __kthread_parkme+0x196/0x1f0 [ 439.833402][ C1] kthread+0x388/0x470 [ 439.837489][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 439.842701][ C1] ? __pfx_kthread+0x10/0x10 [ 439.847318][ C1] ret_from_fork+0x514/0xb70 [ 439.851935][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 439.857080][ C1] ? __switch_to+0xc89/0x1420 [ 439.861773][ C1] ? __pfx_kthread+0x10/0x10 [ 439.866737][ C1] ret_from_fork_asm+0x1a/0x30 [ 439.871539][ C1] [ 439.874566][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 439.880911][ C1] Sending NMI from CPU 1 to CPUs 0: [ 439.886143][ C0] NMI backtrace for cpu 0 [ 439.886178][ C0] CPU: 0 UID: 101 PID: 5272 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 439.886215][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.886235][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 [ 439.886283][ C0] Code: 00 00 00 48 8b 3d c4 6d 88 0c 48 89 de 5b e9 93 0f 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 0d 68 7d a5 11 65 8b 15 89 7d a5 11 81 e2 00 [ 439.886296][ C0] RSP: 0000:ffffc900000070f8 EFLAGS: 00000216 [ 439.886310][ C0] RAX: ffffffff8aaabdde RBX: ffffc90000007240 RCX: 0000000000000100 [ 439.886321][ C0] RDX: ffff88801ebb0000 RSI: 000000000000dd86 RDI: 0000000000000008 [ 439.886331][ C0] RBP: 000000000000dd86 R08: ffff88801ebb0000 R09: 0000000000000004 [ 439.886341][ C0] R10: 0000000000000003 R11: ffffffff8aaabd50 R12: 0000000000000001 [ 439.886351][ C0] R13: ffff88809cb7c780 R14: ffff88809cb7c834 R15: dffffc0000000000 [ 439.886362][ C0] FS: 00007f60b3d5f780(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 439.886375][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.886385][ C0] CR2: 00007f9d6e397996 CR3: 000000007e582000 CR4: 00000000003526f0 [ 439.886398][ C0] Call Trace: [ 439.886404][ C0] [ 439.886409][ C0] br_nf_forward+0xa2/0x18d0 [ 439.886518][ C0] ? NF_HOOK+0xa2/0x3f0 [ 439.886572][ C0] ? NF_HOOK+0xa2/0x3f0 [ 439.886586][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 439.886602][ C0] nf_hook_slow+0xc5/0x220 [ 439.886688][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 439.886702][ C0] NF_HOOK+0x23e/0x3f0 [ 439.886717][ C0] ? NF_HOOK+0xa2/0x3f0 [ 439.886729][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 439.886744][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 439.886760][ C0] ? br_handle_vlan+0x5e/0x530 [ 439.886833][ C0] __br_forward+0x397/0x540 [ 439.886846][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 439.886862][ C0] br_flood+0x3e6/0x8d0 [ 439.886882][ C0] br_handle_frame_finish+0x1175/0x1990 [ 439.886898][ C0] ? kasan_save_track+0x4f/0x80 [ 439.886922][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 439.886941][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 439.886994][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 439.887013][ C0] ? nf_hook_slow+0x176/0x220 [ 439.887031][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 439.887046][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 439.887062][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 439.887112][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 439.887129][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 439.887144][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 439.887159][ C0] ? lock_acquire+0x106/0x350 [ 439.887187][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 439.887204][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 439.887224][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 439.887242][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 439.887258][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 439.887277][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 439.887294][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 439.887314][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 439.887329][ C0] br_handle_frame+0x127f/0x1510 [ 439.887350][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 439.887367][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 439.887383][ C0] ? ktime_get+0x45/0x220 [ 439.887404][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 439.887419][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 439.887489][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 439.887518][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 439.887535][ C0] ? irqentry_exit+0x218/0x8f0 [ 439.887553][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 439.887569][ C0] ? irqentry_exit+0x218/0x8f0 [ 439.887592][ C0] ? process_backlog+0x3c3/0x1860 [ 439.887613][ C0] ? lock_acquire+0x221/0x350 [ 439.887630][ C0] ? process_backlog+0x3c3/0x1860 [ 439.887651][ C0] process_backlog+0x706/0x1860 [ 439.887672][ C0] ? process_backlog+0x3c3/0x1860 [ 439.887697][ C0] __napi_poll+0xaa/0x330 [ 439.887716][ C0] net_rx_action+0x61d/0xf50 [ 439.887741][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 439.887758][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 439.887886][ C0] ? net_tx_action+0xbff/0xc30 [ 439.887907][ C0] handle_softirqs+0x225/0x840 [ 439.887931][ C0] ? __irq_exit_rcu+0xca/0x220 [ 439.887950][ C0] __irq_exit_rcu+0xca/0x220 [ 439.887966][ C0] irq_exit_rcu+0x9/0x30 [ 439.887980][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 439.887998][ C0] [ 439.888003][ C0] [ 439.888009][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.888026][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 439.888044][ C0] Code: ff ff ff e8 51 7d 2d 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db c7 c9 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 80 7f 30 0a cc 48 8d 3d c8 0d b8 [ 439.888057][ C0] RSP: 0000:ffffc9000204efc0 EFLAGS: 00000286 [ 439.888070][ C0] RAX: 5ac91f2b0745f300 RBX: 0000000000000000 RCX: 0000000000000046 [ 439.888080][ C0] RDX: 00000000cdf111e1 RSI: ffffffff8e4acee1 RDI: ffffffff8c4bba80 [ 439.888091][ C0] RBP: ffffffff8177827f R08: ffffffff8177827f R09: 0000000000000000 [ 439.888101][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 439.888111][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 439.888123][ C0] ? unwind_next_frame+0x8f/0x2550 [ 439.888137][ C0] ? unwind_next_frame+0x8f/0x2550 [ 439.888155][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 439.888178][ C0] ? unwind_next_frame+0x8f/0x2550 [ 439.888192][ C0] unwind_next_frame+0xac/0x2550 [ 439.888205][ C0] ? unwind_next_frame+0x8f/0x2550 [ 439.888221][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 439.888238][ C0] ? unwind_next_frame+0x8f/0x2550 [ 439.888253][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 439.888271][ C0] arch_stack_walk+0x11b/0x150 [ 439.888296][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 439.888316][ C0] stack_trace_save+0xa9/0x100 [ 439.888333][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 439.888355][ C0] save_stack+0x122/0x230 [ 439.888381][ C0] ? __pfx_save_stack+0x10/0x10 [ 439.888397][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 439.888418][ C0] ? __slab_free+0x274/0x2c0 [ 439.888434][ C0] ? qlist_free_all+0x99/0x100 [ 439.888449][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 439.888465][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 439.888487][ C0] ? page_ext_put+0x97/0xc0 [ 439.888507][ C0] __reset_page_owner+0x71/0x1f0 [ 439.888526][ C0] __free_frozen_pages+0xc1e/0xd10 [ 439.888543][ C0] ? __free_slab+0x172/0x280 [ 439.888559][ C0] __slab_free+0x274/0x2c0 [ 439.888580][ C0] ? qlist_free_all+0x8e/0x100 [ 439.888598][ C0] qlist_free_all+0x99/0x100 [ 439.888616][ C0] kasan_quarantine_reduce+0x148/0x160 [ 439.888634][ C0] __kasan_slab_alloc+0x22/0x80 [ 439.888651][ C0] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 439.888667][ C0] kmem_cache_alloc_node_noprof+0x355/0x610 [ 439.888681][ C0] ? preempt_schedule_common+0x82/0xd0 [ 439.888697][ C0] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 439.888713][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 439.888728][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 439.888803][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 439.888825][ C0] __alloc_skb+0x1d7/0x7a0 [ 439.888847][ C0] alloc_skb_with_frags+0xc6/0x760 [ 439.888894][ C0] ? __lock_acquire+0x683/0x2cf0 [ 439.888915][ C0] sock_alloc_send_pskb+0x878/0x990 [ 439.888941][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 439.888961][ C0] ? __lock_acquire+0x683/0x2cf0 [ 439.888980][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 439.889009][ C0] unix_dgram_sendmsg+0x4da/0x17b0 [ 439.889066][ C0] ? aa_file_perm+0x18b/0x15f0 [ 439.889130][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 439.889151][ C0] ? aa_sock_msg_perm+0xda/0x1b0 [ 439.889202][ C0] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 439.889222][ C0] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 439.889240][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 439.889259][ C0] sock_write_iter+0x2de/0x3e0 [ 439.889276][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 439.889303][ C0] do_iter_readv_writev+0x612/0x8c0 [ 439.889319][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 439.889343][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 439.889360][ C0] ? security_file_permission+0x75/0x260 [ 439.889435][ C0] ? rw_verify_area+0x203/0x4c0 [ 439.889457][ C0] vfs_writev+0x343/0x990 [ 439.889479][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 439.889514][ C0] do_writev+0x154/0x2e0 [ 439.889531][ C0] ? __pfx_do_writev+0x10/0x10 [ 439.889550][ C0] ? __secure_computing+0xe7/0x2b0 [ 439.889570][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.889591][ C0] do_syscall_64+0x174/0x580 [ 439.889641][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.889656][ C0] ? clear_bhb_loop+0x70/0xc0 [ 439.889672][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.889687][ C0] RIP: 0033:0x7f60b3de9407 [ 439.889702][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 439.889714][ C0] RSP: 002b:00007fff1b28a9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 439.889730][ C0] RAX: ffffffffffffffda RBX: 00007f60b3d5f780 RCX: 00007f60b3de9407 [ 439.889741][ C0] RDX: 0000000000000005 RSI: 00007fff1b28aa00 RDI: 000000000000000a [ 439.889750][ C0] RBP: 000055887c14d870 R08: 0000000000000000 R09: 0000000000000000 [ 439.889760][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055889609ae90 [ 439.889770][ C0] R13: 000000000000012c R14: 0000000000004801 R15: 0000558896094024 [ 439.889790][ C0] [ 440.263532][ C0] net_ratelimit: 10251 callbacks suppressed [ 440.263561][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.369484][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 440.373640][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.377575][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 440.388201][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.393642][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 440.394106][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 440.403647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.410405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 440.410865][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 445.321275][ C1] net_ratelimit: 11483 callbacks suppressed [ 445.321296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 445.322935][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.327723][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.341434][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.352220][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 445.352704][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.353157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:53:09:fb:e6:26, vlan:0) [ 445.369044][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.388563][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.392323][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.947217][ T1304] ieee802154 phy1 wpan1: encryption failed: -22