last executing test programs: 44.914272398s ago: executing program 0 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xf42, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000780), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000a40), 0x10) sendmmsg(r7, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000b40)={0x20000000}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRES32=r4], 0x50}}, 0x0) sendto$packet(r1, &(0x7f00000001c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c64324a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000240)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3d, &(0x7f0000000400)={0xb}, 0x8) connect$inet6(r9, &(0x7f0000000440)={0xa, 0x4f20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000007c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) preadv(r11, &(0x7f0000000800)=[{&(0x7f0000000840)=""/210, 0xd2}], 0x1, 0x2, 0x1) read$alg(r11, &(0x7f0000000940)=""/136, 0x88) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r5, &(0x7f0000000a00)={0x40000000}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) 44.480788667s ago: executing program 0 (id=1387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00'}) r2 = socket$inet(0x2, 0x2, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0x2, 0x6, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xff29) (async) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x80) (async) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000200)=0xe) (async) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x64) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) close(r0) 44.352864593s ago: executing program 1 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x8040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x38, r3, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xffffffffffffff3e, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xe, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000500), 0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000680)='FROZEN\x00', 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000480)=[{&(0x7f00000004c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r7, 0x89eb, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0xcc4ffcba40bbde6c, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8840) 43.491668442s ago: executing program 2 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) (async) 43.319398845s ago: executing program 0 (id=1395): ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @multicast}, @isdn={0x22, 0x7, 0xf7, 0xf7, 0x3}, @sco, 0x5646, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='sit0\x00', 0x7, 0x0, 0x5}) (async) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @multicast}, @isdn={0x22, 0x7, 0xf7, 0xf7, 0x3}, @sco, 0x5646, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='sit0\x00', 0x7, 0x0, 0x5}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='-!:!@\x00', 0x800, &(0x7f0000000100)={@_ha_fsid={[0x9, 0xaa7]}, {0x7, 0xffff, 0x2, 0x7fffffff}}, 0xd37, &(0x7f0000000140), &(0x7f0000000180)=0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xb, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0xd, 0x1}, {0xa, 0x4}, {0xd, 0x2}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x30, 0x61, 0x2d, 0x61, 0x61, 0x0]}}, &(0x7f0000000280)=""/7, 0x4f, 0x7, 0x0, 0x80, 0x10000}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xb, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0xd, 0x1}, {0xa, 0x4}, {0xd, 0x2}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x30, 0x61, 0x2d, 0x61, 0x61, 0x0]}}, &(0x7f0000000280)=""/7, 0x4f, 0x7, 0x0, 0x80, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x10, 0x4, 0x9, 0x2000, r0, 0x3, '\x00', 0x0, r1, 0x2, 0x1, 0x3}, 0x50) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) (async) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000003c0)={'veth1\x00', {0x2, 0x0, @multicast2}}) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e22, 0x3, @local, 0xfffffff2}, {0xa, 0x4e23, 0x9, @private0, 0x7}, 0x1, {[0x7, 0x3ff, 0x101, 0x1, 0x2, 0x1, 0x5, 0x6]}}, 0x5c) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x158, r3, 0x420, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x8014) r4 = socket$netlink(0x10, 0x3, 0xa) socket(0x10, 0x2, 0x7) (async) r5 = socket(0x10, 0x2, 0x7) accept$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000780)={{r5}, "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"}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001780)={'wg0\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001840)={0x1, 0x74, &(0x7f00000017c0)=[@in6={0xa, 0x4e23, 0x9, @private0, 0x3}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000001880)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001840)={0x1, 0x74, &(0x7f00000017c0)=[@in6={0xa, 0x4e23, 0x9, @private0, 0x3}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000001880)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000018c0)=@assoc_value={r6, 0xda}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40050) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40050) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000001a40)={r6, 0xffffffffffffffff, 0x800}, &(0x7f0000001a80)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001b80)={r6, 0x84, &(0x7f0000001ac0)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1e}, @in6={0xa, 0x4e22, 0xfffffff3, @local, 0x5}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x9, @loopback, 0x1}]}, &(0x7f0000001bc0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000001c00)={r9, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x1, 0x5}, &(0x7f0000001cc0)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000001c00)={r9, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x1, 0x5}, &(0x7f0000001cc0)=0x90) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, r10, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x81}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xf}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x84}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, r10, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x81}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xf}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x84}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000001e80)={r9, 0xf4, 0x10}, &(0x7f0000001ec0)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000001f00)={r12, @in6={{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}}, 0x1, 0xb, 0x2, 0xf9, 0xe, 0x10001, 0x66}, &(0x7f0000001fc0)=0x9c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000002000)={{0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'nq\x00', 0x0, 0x8, 0x5e}, {@private=0xa010101, 0x4e20, 0x4, 0x10000, 0x24, 0x3}}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000002080), r13) 43.119954085s ago: executing program 2 (id=1396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0xffffffffffffff04, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008840) (async) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={r4}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(0x0, 0x480000000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd, 0x21}}}}, [@NL80211_ATTR_IE={0x50, 0x2a, [@supported_rates={0x1, 0x8, [{0x6, 0x1}, {0x3}, {0x5}, {0x1}, {0x9}, {0x37}, {0x16}, {0x5, 0x1}]}, @mic={0x8c, 0x18, {0x119, "e0c90aede9bd", @long="68a71a08cceb5408c9bd44ed024e76cd"}}, @mic={0x8c, 0x10, {0xf23, "ae969303dcf8", @short="db0a6779fb36c916"}}, @ibss={0x6, 0x2, 0x9}, @mic={0x8c, 0x10, {0x64a, "6708807106be", @short="e9030c279bf3c03a"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 42.602657876s ago: executing program 2 (id=1399): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xacbe}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) 42.56631363s ago: executing program 3 (id=1400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)=""/27, &(0x7f0000000080)=0x1b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x8, 0x0, &(0x7f00000000c0)="e0b9547ed387a030", 0x0, 0xec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x50) 42.510818016s ago: executing program 0 (id=1401): r0 = socket$inet(0x2, 0x3, 0x1) recvfrom$inet(r0, &(0x7f0000000280)=""/170, 0xaa, 0x0, &(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) 42.492062942s ago: executing program 1 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x0, 0x10, &(0x7f0000001080), 0xfffffffffffffdbb}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x8, [@float={0xd, 0x0, 0x0, 0x10, 0x2}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @int={0x6, 0x0, 0x0, 0x1, 0x10, 0x15, 0x0, 0x8, 0x7}, @ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @struct={0x8, 0x2, 0x0, 0x4, 0x0, 0x3157a3e9, [{0xe, 0x0, 0x3}, {0x80000004, 0x0, 0xcf92}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7}}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x1, 0x22f1, 0x17d5}, {0x8, 0xb, 0x3}]}, @var={0x4, 0x0, 0x0, 0xe, 0x6, 0x1}, @const={0xc, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x2e, 0x5f, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f00000012c0)=""/170, 0xd0, 0xaa, 0x0, 0xffff}, 0x28) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001100), 0x8) r3 = openat$cgroup_ro(r2, &(0x7f00000010c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000001100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000001140)=0x2, 0x4) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001280)=0x200, 0x4) setsockopt(r4, 0x11b, 0x9, 0x0, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0x180, 0xffffffff, 0x228, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@addrtype={{0x30}, {0x1, 0x1c, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @gre_key=0x7fff, @port=0x4e24}}}}, {{@ip={@remote, @empty, 0xff000000, 0xff, 'nicvf0\x00', 'pim6reg0\x00', {}, {0xff}, 0x6c}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010100, @multicast1, @icmp_id=0x67, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x67, @port=0x4e24}}}}, {{@ip={@empty, @empty, 0xffffff00, 0x0, 'veth0_to_team\x00', 'ip6gretap0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @empty, @icmp_id=0x65, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 42.175451766s ago: executing program 3 (id=1404): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000480)="dc", &(0x7f00000004c0)=@udp}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0xfffffffd}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x5, 0x4}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_newaddr={0x11, 0x14, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="020027bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) 42.05148014s ago: executing program 2 (id=1405): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@float={0x5, 0x0, 0x0, 0x10, 0x10}, @float={0xc, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f, 0x61, 0x2e, 0x61, 0x30, 0x61]}}, &(0x7f0000000c00)=""/4096, 0x38, 0x1000, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@arena={0x21, 0x0, 0x0, 0x37, 0x40400, 0x1, 0xfff, '\x00', 0x0, r0, 0x4, 0x1, 0x1}, 0x50) r2 = socket(0x1e, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, &(0x7f0000000940)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r1, &(0x7f0000000140), &(0x7f0000000180)=""/6, 0x2}, 0x20) r3 = socket$inet6(0xa, 0x4, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000001d00)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000001d40)={'syzkaller0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001dc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001ec0)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f0000001f00)={&(0x7f0000001f40)=@xdp={0x2c, 0x7, r9, 0x2f}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000002000)='t(', 0x2}], 0x1}, 0x5) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) sendmsg$inet6(r3, &(0x7f0000000900)={&(0x7f0000000780)={0xa, 0x4e24, 0x3, @loopback, 0x4}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000007c0)="a5ed9f", 0x3}], 0x1, &(0x7f0000000840)=[@rthdrdstopts={{0x18}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts={{0x60, 0x29, 0x37, {0x29, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x8253}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x86c}}], 0xa8}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x240, 0x240, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x7e, 0x2, {0x3}}}, @common=@unspec=@time={{0x38}, {0xa, 0xa, 0x800a18f, 0xfd25, 0x81, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0xc7995fa2be0944df}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private=0xa010100, @icmp_id=0x68, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'veth0_vlan\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "a334", 0xfd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 42.050921648s ago: executing program 1 (id=1406): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb1842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x40) (async) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8148, 0x542a}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xb}, @IFLA_LINKMODE={0x5, 0x11, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40821}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000c4ccf7d11dc1f3f7000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x0) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0xf000, &(0x7f0000000380)={&(0x7f00000003c0)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x10000000, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) (async) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a40)={'batadv_slave_0\x00', &(0x7f0000000a80)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) (async) r12 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400"], 0x2c}}, 0x0) (async) sendto$inet6(r12, &(0x7f0000000b80)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) listen(r11, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) (async) write(0xca, &(0x7f00000007c0)="0405e1f21393bf", 0x7) 41.833248641s ago: executing program 4 (id=1407): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x0}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01002c18000000000000004400000044000000090000000d00000200000011feffffff080000000f0000000000000b0100000003000000000000080204000009000000000000101400000001000000000000110400000006000000005f305f305f3061"], &(0x7f00000002c0)=""/73, 0x65, 0x49, 0x0, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x5, 0x7, 0x4, 0x1, r2, 0x1, '\x00', r1, r3, 0x3, 0x0, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x6, 0x4, 0x6, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x40, 0x5, 0xb0000000}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@mpls_getroute={0x38, 0x1a, 0x300, 0x70bd29, 0x25dfdbfe, {0x1c, 0x0, 0x10, 0x81, 0x0, 0x2, 0x0, 0xc, 0x1200}, [@RTA_MULTIPATH={0xc, 0x9, {0x2, 0x131756f2f3d23fe3, 0xf9, r1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x40}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@mpls_getroute={0x38, 0x1a, 0x300, 0x70bd29, 0x25dfdbfe, {0x1c, 0x0, 0x10, 0x81, 0x0, 0x2, 0x0, 0xc, 0x1200}, [@RTA_MULTIPATH={0xc, 0x9, {0x2, 0x131756f2f3d23fe3, 0xf9, r1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x40}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 41.583800436s ago: executing program 3 (id=1408): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x3c}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) socket$netlink(0x10, 0x3, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000008c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) write(r7, &(0x7f00000008c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x24040401) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000580)={0x0, 0x3, &(0x7f00000005c0)={&(0x7f0000000600)={0x2c, r9, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x18000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x5) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.340737534s ago: executing program 0 (id=1409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a6800000006a98a2fc10a010400000000000000000a0000040900010073797a31000000000900020073797a320000000059000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffd080003400000000214000000110001000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x48c0}, 0x2404c810) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000100000000000000000008000a0078563412", 0x5c}], 0x1}, 0x0) 40.904100332s ago: executing program 4 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480}, 0x50) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_PIM(r2, 0x29, 0xd0, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000009, 0x50, r2, 0xa7a4d000) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0xd0, 0x0, &(0x7f0000000100)) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0x5, {{0xa, 0x4e24, 0x9c, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x88) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000080)={0x1, 0x9, 0xfffa, @empty, 'tunl0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000001c0)="1a00000002000000", 0x8) read(r3, &(0x7f0000000180)=""/58, 0x3a) mmap(&(0x7f0000fa1000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r1, 0xdad39000) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) 38.906130596s ago: executing program 3 (id=1411): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x2, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0x1, "9a299f6cdf94f6a7b85166e4bf9e7d9ebf41f09979aba432227475fcdcf1b283", 0x0, 0x7, 0xd4c, 0xfffffc00}, 0x3c) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x7) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0xa, 0xfffffff9, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0x10) 38.905218093s ago: executing program 0 (id=1412): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001640)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001b80)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001bc0)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000020c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket(0x1f, 0x800, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001f00)={0x2, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000001fc0)=0x84) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r10, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000002000)={r9, 0x5, 0xa5, 0x400}, 0x10) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r6, 0x40106e80, &(0x7f0000002100)={0x6}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000002f40)=""/145, 0x91}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000005c0)=""/4067, 0xfe3}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2003}], 0x7, 0x100, 0x0) 38.742541572s ago: executing program 1 (id=1413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7e}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x5b}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000014) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x4, 0xc3, &(0x7f0000000c80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000d80), 0x8, 0x10, &(0x7f0000000dc0), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[], 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000e80)={r9, r10, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={r11, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf258100000008000300", @ANYRES32=r7, @ANYBLOB="14003300f4000100ffffffffffffffffffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000012c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r4, @ANYBLOB="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", @ANYBLOB="afa30d318a5c9ca1814d5d88872a81a2ee3476d18a160f0545d92f207c17162ececa74875d0bce7797bbd2d5998c07b90d309fca85f80d2119a7cac3db", @ANYBLOB="0800a4000200000005001301020000000500c20002000000", @ANYRES64=r9, @ANYRES8=r4, @ANYBLOB="548022dfcf0179ac23f8f5f16089fa84582815b639f70bfa043ab4f3b3123418a16b6c002365548969c02c117a7005224561670801c363fcc3ad1b6b0c9c4d95d97ca25f90bc9626759a", @ANYRESOCT=r0, @ANYBLOB="8b9c08facfdc1a37c6cd7ae06cb8431c20784de0957ce1715f029942c9e911b1afbb70c967718284629ce5e80a5ace1e65c3660fd22e7fea15c85e18264fb0b0da43bfc00b9e643a16d2d43d21f581b65004c039a832648d71c5098af09f4afb31bd41d103602c65a2b309c8096a38fbaec5e3d717ecebe1d66a28c7f1d8707e1c93b20e08675e196cc397f24d39a94b291e7fee4ae0ad13baaca4877f2ef3905e70fac4072397895f07b699f4d9cf75842c4bcd727c581b66ca5904758f1a2c678d937574711de54f963ee5", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040080) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r12) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)={0x8c, r13, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0x8c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan1\x00'}) r14 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r14, 0x1, 0x2, &(0x7f0000000100)=0x7f, 0x4) bind$inet(r14, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) (async) socket$inet(0x2, 0x1, 0x0) (async) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f00000005c0), &(0x7f0000000800)=0x10) (async) r16 = socket$netlink(0x10, 0x3, 0x4) writev(r16, &(0x7f0000000840)=[{&(0x7f0000000880)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 38.613003246s ago: executing program 4 (id=1414): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000680)={r0, &(0x7f0000000340)='$(\x00', 0x400000, &(0x7f0000000380)={@_ha_fsid={[0x5, 0x1c6]}, {0xfffc, 0x7fff, 0x714, 0xf}}, 0x2, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x8}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000700)={'tunl0\x00'}) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000840)=0x5f53, 0x4) bind$inet6(r5, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x0, 0x80000000, {{0x11, 0x4, 0x2, 0x1b, 0x44, 0x7f, 0x0, 0x7f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010100, {[@timestamp={0x44, 0xc, 0xfd, 0x0, 0x9, [0x6, 0x5]}, @noop, @lsrr={0x83, 0xb, 0x82, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}]}, @generic={0x82, 0x7, "f0c1e90194"}, @generic={0x60fad298b5148e0d, 0x4, "cc09"}, @timestamp={0x44, 0xc, 0xab, 0x0, 0xb, [0x0, 0x4]}]}}}}}) bind$packet(r0, &(0x7f0000000800)={0x11, 0x0, r6, 0x1, 0xff, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r8) (async) readv(r8, &(0x7f0000000400)=[{&(0x7f0000000440)=""/63, 0x3f}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r10], 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x5c, 0x2c, 0x601, 0x0, 0x200, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000044) (async) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0xffffffffffffff77, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9b060000000000001c00128009000100626f64000000000c00028005f845c331050001"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000050) 38.18431234s ago: executing program 3 (id=1415): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa29000008000300", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) sendmmsg(r0, &(0x7f0000000140), 0x400000000000235, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 38.084584801s ago: executing program 2 (id=1416): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async) accept4(r0, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bind$netlink(r2, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000340), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000380)=0x7, 0x4) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c0000200002801400020020"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) (async) r8 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f00000015c0)={&(0x7f0000000980)=@can={0x1d, r5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="fb5227c823b8b918587d9cd618900faf125f41ccdc7b789dfe27280016e237e609c0393ca94d6f5e35a2b1101a1769de8fdf15d38766e702518a032e83cf07d06792e8e9f6e30095664361aaf2a293a0c707eb99d7d1a13c0f1295183519701339abf9be800fe56c2b701ab348ab5bc7f79f1ea640159e5e12ea6ffccfa5d30a8e1c6281e6cb66a2c81239f7598a75ba0338", 0x92}], 0x1, &(0x7f0000001040)=[{0x60, 0x434fd337f7f1229a, 0x0, "45f30af4f6aafd7771a1e3ff1ca3d4e203651dfe34ccf58220f2dc5e2c8635019eedfa47ac0bd9d5441d76b001295fa8c857b27d63b7d9df905e1761d13593add3f43d4065e7db1042fd0f79"}, {0xf8, 0x103, 0x4, "c641a98505854c1b8a5ddadf2d7fb27299dafea7e4be8fd9ef99e4563af26f49d3b22015bbcf06d67268f85865aec8a4a8c327b4205bc6b128cdbec26a399ef56c14db1aea0c28a35523a77d46ef6b60d5632d43a9a716865d246d4576e540ca8dcac8af14a8b47731cf51a91fdb960683eb6b67e5e51cbe8c0ea791602cca8c478414c69c056ed89b4b4fcfcf38075c45bd99c8c6154cb2bff76b54097b61341d993421bcd6f11790bd20fcc84c6b332d51d4d42b66a53258aa33d9d7e389901524969fb00679fbc170b2d25489a193a3730d1d5a6ae5898ab423a3a08a803b54419308745a7a"}, {0xc0, 0x10b, 0x80000001, "777e63dfe178134d262d9fdc0d417088e418d3f8e9b88c23c99ee77ecc0f6eaffee2da949a84454c1688819b9c6dff033594d3ee0be21f4e1026757a7d10edcead14ebc10193b786a970f091c8aa10e116cee7963dd976436b18a925acdc13cb3b7078728a34fbe9f0bf1cb862c581e923c938ac6c055fb769979dad648247e3212db07ecd07417f630960a77282fb88698e0de533a0c3f5b0529a6973dab6e349694e1588ef0429deafe40c8fc3"}, {0xd8, 0x111, 0x6, "d2e6f26457171d2e9b641d80e3b9235de803b4e64204cf8ee3e6c07edb4cc8bd6d84d1a20a9ffb91c110cab9c2a71c38aa71722fe1a942d21f08ca67b42e5dbeb1c0020c6706bbe45b1bad51d30f34bc598f4424f3b508d590a786c0b22ebd07571b2449d985b2126be43576cccbbcf241c7d3b4744e2f618c5d0e61ca9b2232465e348d7571b11c79e696fc4eb4aa77018d8a2d545da04be60fe62055ae66abc4ead5d76dd8ed0ef090df3fd4e0aa065393c391ecee8699d1c1bd94fde80fdb166f718e523dc328"}, {0x70, 0x10a, 0x2, "07e78117a25c9ef03386f0350099e411d1054f36a9b0a8c555bf0e015f8560eaf08fd587b6d1cd5591f26bab97826fcd1a45e1f2f07069926a50a2f3ef0c3eb727bcf222e0cd42431994b2b20acc7dc39aba692d6f3673c9027f0bea"}, {0xd8, 0x119, 0x8, "2dc67ea3540df6ec07e279ce759f420a9835547c27ac9ab1c82d22372a003bdca0320cc5e290303185a6fa78524489dc01f64db8185d6297de3ba5b45ffe1b51c2725e30373d7e8e46ca696757e85c4dbbf74298eb7ebfc6d3d1de6fe2b605ba90d3611bbb4f0b02d7231973fd0a0b18ca49eec79968fc8dd964c6e218de61d227c388c8f8610374a53a128fa15b9e847bab56581942342663980b0dfb5140f9bca0d164f4bb55fadd67d684f76fe5507189b2351aa8bca909d4a39ab06017c07e"}, {0x20, 0x6, 0x8, "9c6be953f14246c81b26679587418c"}, {0x18, 0x111, 0x400, "aa"}, {0xd8, 0x101, 0xfff, "e69cf3316ed6de6b0d3d65b6d9c481af361fcedfa4acb803c237a071fe2b7cdc07925837d59becee0891a25e2d5d627a23feee746c98ba92794e482ed641beb2f07f05ee1934398c3c7c21d26dc2c1752804e11acf1bafddaf545b8fdd628d2b21d7547528ffb9fa4a109aba7b55855ef7c7483c7186d6dd45769d9b61d53e25342bef0c64911c470c2906e09bbf500aa1f6576f53a9fdada068cbf0cdb75c3a5594b453443b79ef86ded1bc2ae28a0c20f43c757a849825807fad6eb9e0539d1f18"}], 0x548}, 0x44800) (async) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f0000000000008ae200", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000006118fdff0000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150902000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.766042883s ago: executing program 1 (id=1417): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000a00)={{r0, &(0x7f0000000300)='\x00', 0x105001, &(0x7f0000000840)={@_ha_fsid={[0xf, 0xffffff00]}, {0xfff7, 0x4, 0x9, 0x7fff}}, 0x2, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x1}, {[0x2, 0x5, 0x80]}, 0x6, 0xd2, &(0x7f0000000900)=""/210}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x12c, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) (async, rerun: 64) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000001c0)={r4, r4, 0xc, 0x1, &(0x7f00000002c0)='\x00', 0xe, 0x1, 0xc45, 0x2, 0x9, 0x2, 0x1, 'syz1\x00'}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x0) (async) listen(r6, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000100)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) (async) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000007c0)=0x3) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000800)=0xfffefffe) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r11, &(0x7f0000000140)={0x1d, r12}, 0x10) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r13, 0x65, 0x1, 0x0, 0x0) (async, rerun: 32) bind$can_raw(r11, &(0x7f0000000180), 0x10) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYRES8=r10, @ANYRES64=r7, @ANYRESDEC=r8, @ANYRESDEC=r7, @ANYRES64, @ANYBLOB="949af285f82196e4094402688cca0667e81da8084562ffd111589b29f6901bc5eb8f54acb05840e04f14667c356d792afa65a78151d01e070e0be9aac75263ec352f31ca339b06614ab273cc2f421bb19582a04a4aec7873afd99b0e659dbdae91230951b7f9404f8138e1fc7132cebbe6b367d49024ab94f39a8096fd6f768aecfb2380d1d5c11a5fb18249b5e3e5aaf2f1640202b288b8119fba6bff0ca141079f71f2d703f2e5a7a2e1ef70e76831620c927ec53b615eedaa41072d40da369b02da5a7848e5023dcf7186416f29fe388a4e62b8aeeecb7565c6b6d95782e6b0b14eb33c8905a44666e676c681f340e6bc", @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 35.035947403s ago: executing program 4 (id=1418): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40500000000000079108100000000000500000000000000950004000000000060a633a45c6314764f8f0d80197bcfaae5c754979187bfd9a21bb0d7209bb7a0807413d4926746aa34"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$inet(0x2, 0x3, 0x5) 34.96542778s ago: executing program 2 (id=1419): r0 = socket(0x23, 0x2, 0x0) r1 = socket(0x13, 0x4, 0xffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'vlan0\x00', 0xe}) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdd0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006002000884800000c00030008000c0004"]}, 0x58}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) socket(0x23, 0x2, 0x0) (async) socket(0x13, 0x4, 0xffffffff) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'vlan0\x00', 0xe}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdd0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006002000884800000c00030008000c0004"]}, 0x58}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) (async) 34.819216863s ago: executing program 4 (id=1420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000019000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40d0000000000007910a2000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 34.644890067s ago: executing program 4 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) close(0x4) 25.869321761s ago: executing program 3 (id=1422): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xf5, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="e90c610faca20180c200000008004500401c"], 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x4) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x3a) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xf5, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="e90c610faca20180c200000008004500401c"], 0x0) (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) (async) 23.349183638s ago: executing program 1 (id=1423): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @broadcast}, &(0x7f0000000680)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000000b06010284000000000000c2037ab2a5"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0100001200050106000000ffdbdf2505001900ff00000028001a000a010102000000000000000000000000ff01000000000000000000000000000102007a"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x20040840) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000004c0)={r6, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000500)=0x14) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000540)={0x0, 0xf0ffffff, &(0x7f0000000580)=[{&(0x7f00000005c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0xb, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0xd4a31a9a61bbc765]}}, &(0x7f0000000180)=""/200, 0x27, 0xc8, 0x1, 0x3}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x9, r8}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @broadcast}, &(0x7f0000000680)=0xc) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000000b06010284000000000000c2037ab2a5"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0100001200050106000000ffdbdf2505001900ff00000028001a000a010102000000000000000000000000ff01000000000000000000000000000102007a"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x20040840) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000480)=0x8) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000004c0)={r6, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000500)=0x14) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r7, &(0x7f0000000540)={0x0, 0xf0ffffff, &(0x7f0000000580)=[{&(0x7f00000005c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0xb, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0xd4a31a9a61bbc765]}}, &(0x7f0000000180)=""/200, 0x27, 0xc8, 0x1, 0x3}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x9, r8}, 0x94) (async) 0s ago: executing program 32 (id=1412): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001640)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001b80)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001bc0)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000020c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket(0x1f, 0x800, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001f00)={0x2, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000001fc0)=0x84) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r10, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000002000)={r9, 0x5, 0xa5, 0x400}, 0x10) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r6, 0x40106e80, &(0x7f0000002100)={0x6}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000002f40)=""/145, 0x91}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000005c0)=""/4067, 0xfe3}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2003}], 0x7, 0x100, 0x0) kernel console output (not intermixed with test programs): mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 104.343360][ T6307] team0: Port device wlan0 added [ 104.362977][ T6313] netlink: 256 bytes leftover after parsing attributes in process `syz.0.136'. [ 104.486258][ T6315] batman_adv: batadv0: Adding interface: syzkaller0 [ 104.486277][ T6315] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.486317][ T6315] batman_adv: batadv0: Interface activated: syzkaller0 [ 104.501570][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 104.507221][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 104.541247][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 104.552042][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 104.563981][ T6314] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 104.601409][ T6314] batman_adv: batadv0: Removing interface: syzkaller0 [ 104.903223][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 104.990787][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.045640][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.098016][ T6364] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 105.160236][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 105.160264][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 105.186320][ T6364] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 105.216020][ T6363] bond1: (slave veth0_to_bond): making interface the new active one [ 105.217364][ T6363] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 105.220832][ T6364] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 105.250830][ T6364] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 105.251082][ T6364] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 105.369659][ T6372] syzkaller1: entered promiscuous mode [ 105.369685][ T6372] syzkaller1: entered allmulticast mode [ 105.472623][ T1166] IPVS: starting estimator thread 0... [ 105.555649][ T31] bond0: (slave bond_slave_0): interface is now down [ 105.555676][ T31] bond0: (slave bond_slave_1): interface is now down [ 105.559099][ T6381] IPVS: using max 26 ests per chain, 62400 per kthread [ 105.629046][ T6379] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 105.642605][ T6379] team0: Port device wlan0 added [ 105.822145][ T6400] sock: sock_timestamping_bind_phc: sock not bind to device [ 106.268052][ T6443] ip_tables: iptables: counters copy to user failed while replacing table [ 107.699060][ T6535] gre0: Master is either lo or non-ether device [ 107.774920][ T6541] validate_nla: 61 callbacks suppressed [ 107.774943][ T6541] netlink: 'syz.1.190': attribute type 16 has an invalid length. [ 108.018061][ T6555] Driver unsupported XDP return value 0 on prog (id 158) dev N/A, expect packet loss! [ 108.089298][ T6567] netlink: 'syz.1.198': attribute type 29 has an invalid length. [ 108.115754][ T12] bond0: (slave bond_slave_0): interface is now down [ 108.115779][ T12] bond0: (slave bond_slave_1): interface is now down [ 108.126829][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.126870][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.126899][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.127560][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.249858][ T6572] xt_bpf: check failed: parse error [ 108.585694][ T6589] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 108.585718][ T6589] __nla_validate_parse: 14 callbacks suppressed [ 108.585730][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 108.718114][ T6595] ip6t_srh: unknown srh invflags 4000 [ 108.718239][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.205'. [ 108.755064][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.755219][ T5618] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.822899][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 108.970247][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 108.970278][ T6607] block nbd0: Unsupported socket: should be TCP or UNIX. [ 108.987012][ T6598] netlink: 112 bytes leftover after parsing attributes in process `syz.0.206'. [ 108.987765][ T6599] netlink: 112 bytes leftover after parsing attributes in process `syz.0.206'. [ 109.056278][ T6612] ip_tables: iptables: counters copy to user failed while replacing table [ 109.085663][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.208'. [ 109.126602][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 109.126890][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 109.127229][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 109.355481][ T6629] ip_tables: iptables: counters copy to user failed while replacing table [ 109.379020][ T6630] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 109.544617][ T6620] bridge1: entered promiscuous mode [ 109.544646][ T6620] bridge1: entered allmulticast mode [ 109.600035][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.610416][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.677730][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.678391][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.695433][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.695822][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.700407][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.705201][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.705567][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.705913][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.723170][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.723896][ T6647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.274682][ T6704] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 110.676139][ T1119] bond0: (slave bond_slave_0): interface is now down [ 110.676167][ T1119] bond0: (slave bond_slave_1): interface is now down [ 110.722541][ T1119] bond0: now running without any active interface! [ 111.128434][ T6799] tipc: Started in network mode [ 111.128466][ T6799] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 111.128688][ T6799] tipc: Enabled bearer , priority 0 [ 111.129099][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.133443][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.133948][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.138163][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.141156][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.141590][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.143217][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.143962][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.145747][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.146232][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.147879][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.148297][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.149273][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.151633][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.152106][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.152529][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.162217][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.162675][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.163904][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.170089][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.170596][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.172699][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.173196][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.173684][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.177066][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.177581][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.178002][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.180625][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.181270][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.183112][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.187443][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.190198][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.190646][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.191062][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.195049][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.196544][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.197074][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.199354][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.199866][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.201253][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.201712][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.202570][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.212986][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.221127][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.221575][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.226482][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.239352][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.239879][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.240304][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.257168][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.258532][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.258981][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.259443][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.268140][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.268632][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.269271][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.271948][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.278178][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.280272][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.280721][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.284651][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.296812][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.297297][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.297772][ T6799] tipc: Enabling of bearer rejected, already enabled [ 111.842426][ T6815] 8021q: VLANs not supported on vcan0 [ 112.113273][ T6825] xfrm1: entered allmulticast mode [ 112.126430][ T5744] tipc: Node number set to 43690 [ 112.134756][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.134756][ T6827] Use struct sctp_sack_info instead [ 112.134806][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.134806][ T6827] Use struct sctp_sack_info instead [ 112.134832][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.134832][ T6827] Use struct sctp_sack_info instead [ 112.134858][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.134858][ T6827] Use struct sctp_sack_info instead [ 112.134883][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.134883][ T6827] Use struct sctp_sack_info instead [ 112.134909][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.134909][ T6827] Use struct sctp_sack_info instead [ 112.134934][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.134934][ T6827] Use struct sctp_sack_info instead [ 112.134959][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.134959][ T6827] Use struct sctp_sack_info instead [ 112.134984][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.134984][ T6827] Use struct sctp_sack_info instead [ 112.135008][ T6827] sctp: [Deprecated]: syz.0.238 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.135008][ T6827] Use struct sctp_sack_info instead [ 112.400743][ T6838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.410571][ T6836] netlink: Conntrack attr has 1 unknown bytes [ 112.410606][ T6836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.844329][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.844442][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.844475][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.854521][ T6391] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.360537][ T6880] lo: Caught tx_queue_len zero misconfig [ 113.640090][ T6900] __nla_validate_parse: 45 callbacks suppressed [ 113.640148][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.258'. [ 113.695581][ T6898] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 113.704703][ T6898] bond2 (unregistering): Released all slaves [ 114.294732][ T6938] batadv_slave_1: mtu less than device minimum [ 114.449159][ T6944] tipc: Enabling of bearer rejected, failed to enable media [ 114.474838][ T6425] tipc: Subscription rejected, illegal request [ 114.544499][ T6947] netlink: 44 bytes leftover after parsing attributes in process `syz.4.268'. [ 114.545976][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 114.809925][ T6971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 114.823927][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 114.891935][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 114.891961][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 114.893420][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 114.927181][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 115.040856][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 115.094018][ T6987] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 115.095371][ T6987] ip6erspan0: left allmulticast mode [ 115.100588][ T6987] macvtap1: left allmulticast mode [ 115.101088][ T6987] macvtap2: left allmulticast mode [ 115.101553][ T6987] bridge1: left allmulticast mode [ 116.347143][ T6391] IPVS: starting estimator thread 0... [ 116.378644][ T7051] sctp: [Deprecated]: syz.1.295 (pid 7051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.378644][ T7051] Use struct sctp_sack_info instead [ 116.454744][ T7055] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.597359][ T7063] gretap0: entered promiscuous mode [ 116.733358][ T7079] tls_set_device_offload: netdev not found [ 116.780483][ T7081] ip_tables: iptables: counters copy to user failed while replacing table [ 117.132128][ T7100] bond2: option lp_interval: invalid value (0) [ 117.132154][ T7100] bond2: option lp_interval: allowed values 1 - 2147483647 [ 117.149959][ T7100] bond2 (unregistering): Released all slaves [ 117.322535][ T7107] bond2: option lp_interval: invalid value (0) [ 117.322561][ T7107] bond2: option lp_interval: allowed values 1 - 2147483647 [ 117.349376][ T7107] bond2 (unregistering): Released all slaves [ 117.847520][ T7142] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 117.872153][ T7142] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 117.948951][ T7146] bridge1: entered allmulticast mode [ 118.093135][ T7149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.104481][ T7160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.151938][ T7154] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 118.188353][ T7159] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 118.367945][ T7178] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 118.397729][ T7163] bond2: (slave bridge2): making interface the new active one [ 118.398926][ T7163] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 118.607996][ T7182] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.676562][ T7184] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 118.676587][ T7184] netlink: 'syz.4.330': attribute type 2 has an invalid length. [ 118.765711][ T7192] syzkaller1: entered promiscuous mode [ 118.765735][ T7192] syzkaller1: entered allmulticast mode [ 118.910324][ T7199] Bluetooth: hci0: unsupported parameter 5135 [ 118.910349][ T7199] Bluetooth: hci0: unsupported parameter 8192 [ 118.910362][ T7199] Bluetooth: hci0: unsupported parameter 5135 [ 118.910374][ T7199] Bluetooth: hci0: unsupported parameter 8192 [ 119.035337][ T7197] bond1: Removing last arp target with arp_interval on [ 119.228681][ T7219] __nla_validate_parse: 18 callbacks suppressed [ 119.228706][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 119.512740][ T7234] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 119.512787][ T7234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.607616][ T7240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.902487][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.153758][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.349'. [ 120.244893][ T7264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.349'. [ 121.730572][ T7276] geneve2: entered promiscuous mode [ 121.849075][ T7289] x_tables: duplicate underflow at hook 2 [ 121.901276][ T7292] Unsupported ieee802154 address type: 0 [ 121.936935][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 122.057326][ T7305] sctp: [Deprecated]: syz.0.361 (pid 7305) Use of int in max_burst socket option. [ 122.057326][ T7305] Use struct sctp_assoc_value instead [ 122.198331][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 122.499983][ T7329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.370'. [ 122.555591][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 122.576744][ T7332] ªªªªª»: renamed from dummy0 (while UP) [ 122.618386][ T7337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.373'. [ 122.768498][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 123.042075][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 123.225156][ T7364] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 123.279464][ T7364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.360811][ T7369] bond2: (slave gretap1): making interface the new active one [ 123.382309][ T7369] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 123.492078][ T7378] 8021q: VLANs not supported on ip6_vti0 [ 123.639565][ T5618] block nbd0: Receive control failed (result -107) [ 123.868523][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 123.868918][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 123.869295][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 123.869627][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 123.869970][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 123.923825][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 123.924376][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 123.924719][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 123.925065][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 123.963812][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 124.210893][ T7409] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 124.238469][ T7409] bond2 (unregistering): Released all slaves [ 124.331581][ T7416] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 124.347249][ T7416] bond2 (unregistering): Released all slaves [ 124.377511][ T7426] netlink: 'syz.3.401': attribute type 12 has an invalid length. [ 124.670527][ T7431] __nla_validate_parse: 4 callbacks suppressed [ 124.670550][ T7431] netlink: 256 bytes leftover after parsing attributes in process `syz.1.403'. [ 125.111690][ T7460] netlink: 104 bytes leftover after parsing attributes in process `syz.0.409'. [ 125.275957][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 125.413859][ T7465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.644355][ T7490] set match dimension is over the limit! [ 125.718676][ T7494] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 125.742053][ T7494] bond2: entered promiscuous mode [ 125.742397][ T7494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.766985][ T7494] bond2: (slave bridge1): making interface the new active one [ 125.767007][ T7494] bridge1: entered promiscuous mode [ 125.767956][ T7494] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 126.414048][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.414067][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.414136][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.414149][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.414160][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.414170][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.414180][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.414190][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.414200][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.414210][ T7508] tc action pedit 'at' offset 5 out of bounds [ 126.426331][ T7509] No such timeout policy "syz1" [ 126.427531][ T7508] No such timeout policy "syz1" [ 126.540190][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 127.412565][ T7514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.494638][ T7519] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 127.494663][ T7519] netlink: 'syz.3.422': attribute type 268 has an invalid length. [ 127.494678][ T7519] netlink: 224 bytes leftover after parsing attributes in process `syz.3.422'. [ 128.316724][ T7469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.466140][ T7525] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 128.466164][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 128.491002][ T7528] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 128.491023][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 128.562668][ T7531] syzkaller1: entered promiscuous mode [ 128.562693][ T7531] syzkaller1: entered allmulticast mode [ 128.595905][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.651708][ T7531] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 128.742143][ T7531] team0: Port device dummy0 added [ 128.919724][ T7556] netlink: 'syz.2.430': attribute type 4 has an invalid length. [ 128.966917][ T7556] netlink: 48 bytes leftover after parsing attributes in process `syz.2.430'. [ 129.046428][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 129.046452][ T7565] netlink: 14 bytes leftover after parsing attributes in process `syz.0.434'. [ 129.887258][ T7593] xt_l2tp: invalid flags combination: 8 [ 129.913479][ T7594] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 129.913502][ T7594] __nla_validate_parse: 1 callbacks suppressed [ 129.913511][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 129.913522][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 130.004930][ T7598] Bluetooth: MGMT ver 1.23 [ 130.071706][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 130.084539][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'. [ 130.084597][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.445'. [ 130.084609][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.445'. [ 130.085726][ T7612] net_ratelimit: 25 callbacks suppressed [ 130.085743][ T7612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.221467][ T7616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.591592][ T7636] netlink: 232 bytes leftover after parsing attributes in process `syz.0.452'. [ 130.623444][ T7636] netlink: 232 bytes leftover after parsing attributes in process `syz.0.452'. [ 130.812658][ T7647] syzkaller0: entered promiscuous mode [ 130.812683][ T7647] syzkaller0: entered allmulticast mode [ 130.965227][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.458'. [ 131.277075][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 131.421202][ T7653] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 131.522532][ T7653] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 131.676550][ T7671] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 131.720900][ T7671] bond3: entered promiscuous mode [ 131.721366][ T7671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.740317][ T7671] bond3: entered allmulticast mode [ 131.761668][ T7674] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 131.775117][ T7671] bond3: (slave bridge2): making interface the new active one [ 131.775143][ T7671] bridge2: entered promiscuous mode [ 131.775329][ T7671] bridge2: entered allmulticast mode [ 131.776897][ T7671] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 131.992276][ T7676] bond2: (slave geneve2): making interface the new active one [ 131.993858][ T7676] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 132.049787][ T7680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.079890][ T7690] gretap0: entered promiscuous mode [ 132.113807][ T7688] netlink: 'syz.2.468': attribute type 64 has an invalid length. [ 132.161932][ T7693] netlink: 'syz.2.468': attribute type 64 has an invalid length. [ 132.541602][ T7690] gretap0: left promiscuous mode [ 132.615421][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.617351][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.656867][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.659628][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.659678][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.659714][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.078649][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.078736][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.164032][ T7731] ip_tables: iptables: counters copy to user failed while replacing table [ 133.197688][ T7739] ip_tables: iptables: counters copy to user failed while replacing table [ 133.204798][ T7744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.300512][ T7747] openvswitch: netlink: Multiple metadata blocks provided [ 133.449427][ T7760] team_slave_1: Caught tx_queue_len zero misconfig [ 133.691111][ T7769] syzkaller0: entered promiscuous mode [ 133.691137][ T7769] syzkaller0: entered allmulticast mode [ 133.789331][ T7774] validate_nla: 2 callbacks suppressed [ 133.789352][ T7774] netlink: 'syz.0.492': attribute type 12 has an invalid length. [ 133.989162][ T7783] netlink: 'syz.2.496': attribute type 7 has an invalid length. [ 133.989177][ T7783] netlink: 'syz.2.496': attribute type 8 has an invalid length. [ 134.763820][ T7807] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 134.831924][ T7812] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 135.179172][ T7834] netlink: 'syz.3.509': attribute type 7 has an invalid length. [ 135.179196][ T7834] netlink: 'syz.3.509': attribute type 5 has an invalid length. [ 135.179208][ T7834] __nla_validate_parse: 47 callbacks suppressed [ 135.179219][ T7834] netlink: 17 bytes leftover after parsing attributes in process `syz.3.509'. [ 135.203805][ T7836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.508'. [ 135.457172][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.511'. [ 135.457197][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 135.970413][ T7867] batman_adv: batadv0: Adding interface: syzkaller0 [ 135.970431][ T7867] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.970457][ T7867] batman_adv: batadv0: Interface activated: syzkaller0 [ 136.143300][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 136.164114][ T7869] block nbd1: shutting down sockets [ 136.194430][ T5618] Bluetooth: hci4: command tx timeout [ 136.589076][ T7889] netlink: 'syz.3.525': attribute type 3 has an invalid length. [ 137.112810][ T7867] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 137.210098][ T7867] batman_adv: batadv0: Removing interface: syzkaller0 [ 137.268042][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 137.268091][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 137.315927][ T7906] geneve2: entered promiscuous mode [ 137.383849][ T7908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.494362][ T7923] xt_cluster: node mask cannot exceed total number of nodes [ 137.666806][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 137.668423][ T7931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.669067][ T7915] syzkaller1: entered promiscuous mode [ 137.669084][ T7915] syzkaller1: entered allmulticast mode [ 138.272901][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.545'. [ 138.336361][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.545'. [ 138.410956][ T7962] openvswitch: netlink: EtherType 101 is less than min 600 [ 138.461520][ T7974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.585916][ T7981] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.586083][ T7981] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.627297][ T7986] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 138.732489][ T7986] veth7: entered allmulticast mode [ 138.740879][ T7986] bond3: (slave veth7): Enslaving as an active interface with a down link [ 138.771935][ T7994] bond3: (slave veth0_to_bond): making interface the new active one [ 138.773044][ T7994] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.938381][ T7998] netlink: 'syz.2.554': attribute type 5 has an invalid length. [ 138.938404][ T7998] netlink: 'syz.2.554': attribute type 9 has an invalid length. [ 139.147911][ T8019] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 139.431309][ T8039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.653338][ T8053] team0: Cannot enslave team device to itself [ 139.699263][ T5618] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 139.699298][ T5618] Bluetooth: unknown link type 48 [ 139.699365][ T5618] Bluetooth: hci0: connection err: -111 [ 139.789217][ T8064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.878975][ T8067] netlink: 'syz.2.578': attribute type 3 has an invalid length. [ 140.027687][ T8072] syzkaller1: entered promiscuous mode [ 140.027709][ T8072] syzkaller1: entered allmulticast mode [ 140.258254][ T8082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.276034][ T8084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.356035][ T8087] __nla_validate_parse: 12 callbacks suppressed [ 140.356059][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 140.502544][ T8095] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 140.552642][ T8095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.817706][ T8110] openvswitch: netlink: Flow key attr not present in new flow. [ 140.819765][ T8110] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 141.052749][ T8127] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 141.208443][ T8134] netlink: 72 bytes leftover after parsing attributes in process `syz.1.599'. [ 141.397885][ T8137] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.405554][ T8137] netlink: 'syz.3.601': attribute type 29 has an invalid length. [ 141.464312][ T1166] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.464364][ T1166] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.464397][ T1166] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.464428][ T1166] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.472857][ T8146] lo speed is unknown, defaulting to 1000 [ 141.472935][ T8146] lo speed is unknown, defaulting to 1000 [ 141.547590][ T8146] lo speed is unknown, defaulting to 1000 [ 141.549887][ T8146] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 141.549924][ T8146] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 141.549960][ T8146] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 141.619745][ T8146] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 141.703536][ T8146] lo speed is unknown, defaulting to 1000 [ 141.722623][ T8146] lo speed is unknown, defaulting to 1000 [ 141.750407][ T8146] lo speed is unknown, defaulting to 1000 [ 141.759709][ T8161] vlan0: entered allmulticast mode [ 141.759729][ T8161] veth0_vlan: entered allmulticast mode [ 141.765917][ T8146] lo speed is unknown, defaulting to 1000 [ 141.769996][ T8146] lo speed is unknown, defaulting to 1000 [ 141.893918][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.610'. [ 141.893943][ T8168] openvswitch: netlink: Flow key attr not present in new flow. [ 142.302004][ T8189] netlink: 204 bytes leftover after parsing attributes in process `syz.2.615'. [ 142.565946][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 142.565974][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 142.568808][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 142.581905][ T8204] netlink: 'syz.2.617': attribute type 13 has an invalid length. [ 142.581926][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 142.599238][ T8204] netlink: 'syz.2.617': attribute type 13 has an invalid length. [ 142.599260][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 142.645415][ T8200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.619'. [ 142.780449][ T8222] Bluetooth: hci0: unsupported parameter 5134 [ 142.780467][ T8222] Bluetooth: hci0: unsupported parameter 8192 [ 142.780474][ T8222] Bluetooth: hci0: unsupported parameter 5134 [ 142.780481][ T8222] Bluetooth: hci0: unsupported parameter 8192 [ 142.851351][ T8222] tbf_change: 23 callbacks suppressed [ 142.851365][ T8222] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 143.794352][ T5618] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 143.794710][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.956653][ T5716] net_ratelimit: 2 callbacks suppressed [ 143.956677][ T5716] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 144.596877][ T5350] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 145.516281][ T8199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.658069][ T8229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.624'. [ 145.680580][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 145.680960][ T8229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.624'. [ 145.906719][ T8246] openvswitch: netlink: Invalid VLAN frame [ 145.912429][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 146.142698][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.630'. [ 146.241390][ T8254] netlink: 84 bytes leftover after parsing attributes in process `syz.3.632'. [ 146.782334][ T8288] lo speed is unknown, defaulting to 1000 [ 146.792542][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 146.817363][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 146.890309][ T8292] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 146.912398][ T8296] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 147.209039][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.638'. [ 147.298145][ T8306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.298203][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 147.564429][ T8320] sctp: [Deprecated]: syz.4.645 (pid 8320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.564429][ T8320] Use struct sctp_sack_info instead [ 147.721478][ T8323] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 148.120418][ T8348] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 148.153497][ T8341] bond3 (unregistering): Released all slaves [ 148.217060][ T8352] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 148.373288][ T8352] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.665660][ T8371] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.069658][ T8405] IPv6: addrconf: prefix option has invalid lifetime [ 149.069676][ T8405] IPv6: addrconf: prefix option has invalid lifetime [ 149.240068][ T8421] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 149.327215][ T8421] bond3: entered promiscuous mode [ 149.327680][ T8421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.348204][ T8428] bond3: (slave bridge1): making interface the new active one [ 149.348228][ T8428] bridge1: entered promiscuous mode [ 149.374029][ T8428] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 149.428513][ T8439] openvswitch: netlink: Missing valid actions attribute. [ 149.966209][ T8477] Failed to decode metaid 3 dlen 0 err -22 [ 150.768710][ T8486] netlink: 'syz.1.680': attribute type 1 has an invalid length. [ 151.512086][ T8491] syzkaller0: entered promiscuous mode [ 151.512103][ T8491] syzkaller0: entered allmulticast mode [ 151.533101][ T8491] __nla_validate_parse: 20 callbacks suppressed [ 151.533115][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.683'. [ 152.203634][ T8416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.225941][ T8492] netlink: 'syz.1.682': attribute type 3 has an invalid length. [ 152.225965][ T8492] netlink: 244 bytes leftover after parsing attributes in process `syz.1.682'. [ 152.231952][ T8501] netlink: 'syz.1.682': attribute type 3 has an invalid length. [ 152.231973][ T8501] netlink: 244 bytes leftover after parsing attributes in process `syz.1.682'. [ 152.441030][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'. [ 152.445026][ T8521] netlink: 104 bytes leftover after parsing attributes in process `syz.0.689'. [ 152.500860][ T5618] Bluetooth: hci2: Unexpected cc 0x2753 with no status [ 152.569927][ T8534] macvlan0: entered promiscuous mode [ 152.573469][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 152.685932][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.695'. [ 152.688933][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 152.689823][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.695'. [ 152.741419][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 153.289634][ T8571] bridge3: entered promiscuous mode [ 153.289659][ T8571] bridge3: entered allmulticast mode [ 153.308036][ T8571] team0: Port device bridge3 added [ 153.572877][ T8583] bond5: Unable to set up delay as MII monitoring is disabled [ 153.585465][ T8583] bond5 (unregistering): Released all slaves [ 153.848997][ T8600] netlink: 'syz.0.717': attribute type 8 has an invalid length. [ 153.849134][ T8600] sch_fq: defrate 0 ignored. [ 153.885229][ T8606] netlink: 'syz.0.717': attribute type 8 has an invalid length. [ 153.885254][ T8606] sch_fq: defrate 0 ignored. [ 154.256694][ T8629] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 154.581762][ T8647] pim6reg527: entered allmulticast mode [ 154.709206][ T8652] dvmrp1: entered allmulticast mode [ 154.721754][ T8652] ip6tnl0: Caught tx_queue_len zero misconfig [ 154.837863][ T8660] IPv6: addrconf: prefix option has invalid lifetime [ 155.011911][ T8670] ip_tables: iptables: counters copy to user failed while replacing table [ 155.475399][ T5716] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 155.755409][ T8706] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 156.159167][ T8726] xt_cgroup: no path or classid specified [ 156.211749][ T8728] ipvlan1: Caught tx_queue_len zero misconfig [ 156.442799][ T8742] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 156.496947][ T8742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.525530][ T8744] tc_dump_action: action bad kind [ 156.546748][ T8742] bond3: (slave geneve3): making interface the new active one [ 156.549671][ T8742] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 156.549814][ T8744] __nla_validate_parse: 91 callbacks suppressed [ 156.549830][ T8744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.756'. [ 156.606105][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 156.711978][ T8759] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 156.713052][ T8760] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 157.015920][ T8780] netlink: 112 bytes leftover after parsing attributes in process `syz.0.766'. [ 157.017094][ T8782] netlink: 112 bytes leftover after parsing attributes in process `syz.0.766'. [ 157.035187][ T8784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.768'. [ 157.039356][ T8784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.768'. [ 157.180867][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.770'. [ 157.180964][ T8790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.180976][ T8790] IPv6: NLM_F_CREATE should be set when creating new route [ 157.248927][ T8798] tunl0: Caught tx_queue_len zero misconfig [ 157.306837][ T8800] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 157.387178][ T8806] netlink: 156 bytes leftover after parsing attributes in process `syz.4.776'. [ 157.405657][ T8806] netlink: 156 bytes leftover after parsing attributes in process `syz.4.776'. [ 157.483042][ T8800] netlink: Failed to add nat helper -22 [ 157.483106][ T8800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.561459][ T8820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.778'. [ 157.751019][ T8827] netlink: 'syz.4.780': attribute type 8 has an invalid length. [ 158.418353][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.478402][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.185457][ T1166] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.185494][ T1166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.185852][ T1166] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.185879][ T1166] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.185915][ T1166] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.185939][ T1166] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.185973][ T1166] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.185997][ T1166] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.215593][ T8813] lo speed is unknown, defaulting to 1000 [ 159.345247][ T8870] xt_l2tp: wrong L2TP version: 255 [ 159.551078][ T1166] IPVS: starting estimator thread 0... [ 159.634426][ T8886] IPVS: using max 24 ests per chain, 57600 per kthread [ 160.013555][ T8904] ip_tables: iptables: counters copy to user failed while replacing table [ 160.013971][ T8904] ip_tables: iptables: counters copy to user failed while replacing table [ 160.346806][ T8919] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 160.370808][ T8921] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 160.492767][ T8930] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x3 [ 160.492896][ T8930] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x3 [ 160.493012][ T8930] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x3 [ 160.493128][ T8930] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x3 [ 160.493226][ T8930] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x3 [ 160.493324][ T8930] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x3 [ 160.493422][ T8930] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x3 [ 160.556005][ T8924] bond4: (slave geneve4): making interface the new active one [ 160.558860][ T8924] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 160.573088][ T8921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.636016][ T6393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.644780][ T6393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.647449][ T1166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.647496][ T1166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.766427][ T8943] SET target dimension over the limit! [ 160.773104][ T8944] SET target dimension over the limit! [ 161.163355][ T8974] netlink: 'syz.1.815': attribute type 3 has an invalid length. [ 161.249370][ T8974] bond5: option xmit_hash_policy: invalid value (64) [ 161.252479][ T8974] bond5 (unregistering): Released all slaves [ 161.296755][ T8976] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 161.585223][ T8998] bond0: entered promiscuous mode [ 161.585247][ T8998] bond_slave_0: entered promiscuous mode [ 161.585580][ T8998] bond_slave_1: entered promiscuous mode [ 161.585816][ T8998] bond0: entered allmulticast mode [ 161.585828][ T8998] bond_slave_0: entered allmulticast mode [ 161.585840][ T8998] bond_slave_1: entered allmulticast mode [ 161.589068][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.907314][ T9014] team0: Port device macvlan0 added [ 162.567195][ T9048] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 162.567220][ T9048] netlink: 'syz.3.837': attribute type 4 has an invalid length. [ 162.567232][ T9048] __nla_validate_parse: 48 callbacks suppressed [ 162.567243][ T9048] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.837'. [ 162.569559][ T9048] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 162.569579][ T9048] netlink: 'syz.3.837': attribute type 4 has an invalid length. [ 162.569591][ T9048] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.837'. [ 163.082758][ T30] audit: type=1804 audit(1792004320.989:4): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.841" name="/newroot/154/cgroup.controllers" dev="tmpfs" ino=802 res=1 errno=0 [ 163.083019][ T30] audit: type=1800 audit(1792004320.989:5): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.841" name="cgroup.controllers" dev="tmpfs" ino=802 res=0 errno=0 [ 163.152949][ T9068] pim6reg: entered allmulticast mode [ 163.201098][ T9066] IPv6: sit1: Disabled Multicast RS [ 163.469260][ T9089] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.846'. [ 163.497484][ T9089] 0ªX¹¦Dö»: renamed from gretap0 [ 163.518268][ T9089] 0ªX¹¦Dö»: entered allmulticast mode [ 164.079261][ T9129] netlink: 'syz.0.857': attribute type 2 has an invalid length. [ 164.079286][ T9129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.857'. [ 164.153826][ T9129] : entered promiscuous mode [ 164.163312][ T9132] netlink: 48 bytes leftover after parsing attributes in process `syz.3.858'. [ 164.239742][ T9132] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 164.482185][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 164.782967][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 165.051897][ T9188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.146699][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'. [ 165.269653][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 165.312391][ T9207] trusted_key: syz.2.883 sent an empty control message without MSG_MORE. [ 165.640710][ T9231] net_ratelimit: 61 callbacks suppressed [ 165.640731][ T9231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.017276][ T9256] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 166.165291][ T9263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.185829][ T9270] tipc: Enabled bearer , priority 0 [ 166.330346][ T9274] 8021q: adding VLAN 0 to HW filter on device bond6 [ 166.331011][ T9276] tipc: Enabling of bearer rejected, already enabled [ 166.451137][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 166.875480][ T9321] openvswitch: netlink: Multiple metadata blocks provided [ 166.941999][ T9319] Bluetooth: ISO socket layer initialized [ 166.997541][ T189] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 167.138373][ T9333] netlink: 'syz.3.922': attribute type 10 has an invalid length. [ 167.167789][ T9333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.207721][ T9336] bridge0: port 3(veth1_to_bridge) entered blocking state [ 167.207904][ T9336] bridge0: port 3(veth1_to_bridge) entered disabled state [ 167.208065][ T9336] veth1_to_bridge: entered allmulticast mode [ 167.210204][ T9336] veth1_to_bridge: entered promiscuous mode [ 167.210359][ T9336] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.210905][ T9336] bridge0: port 3(veth1_to_bridge) entered blocking state [ 167.211026][ T9336] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 167.222562][ T9344] netlink: 'syz.3.922': attribute type 10 has an invalid length. [ 167.261002][ T9344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.302610][ T9345] batadv0: entered promiscuous mode [ 167.306675][ T9345] macsec1: entered promiscuous mode [ 167.310472][ T9345] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 167.316242][ T9345] batadv0: left promiscuous mode [ 167.348849][ T44] tipc: Node number set to 3540418091 [ 167.667636][ T9359] __nla_validate_parse: 3 callbacks suppressed [ 167.667659][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 167.790887][ T9361] lo speed is unknown, defaulting to 1000 [ 167.903797][ T9371] syzkaller1: entered promiscuous mode [ 167.903824][ T9371] syzkaller1: entered allmulticast mode [ 167.959780][ T9381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.971850][ T9379] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.102170][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 168.177783][ T9391] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 168.247731][ T9391] team0: Device wg2 is of different type [ 168.637710][ T9411] netlink: 256 bytes leftover after parsing attributes in process `syz.3.947'. [ 168.716823][ T9414] ip6gre1: entered allmulticast mode [ 168.815572][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 169.214546][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 169.237829][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'. [ 169.244485][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 169.244507][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.953'. [ 169.269554][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.954'. [ 169.300779][ T9441] bridge0: port 3(batadv1) entered blocking state [ 169.307222][ T9441] bridge0: port 3(batadv1) entered disabled state [ 169.307394][ T9441] batadv1: entered allmulticast mode [ 169.317824][ T9441] batadv1: entered promiscuous mode [ 169.331795][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 169.784411][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 169.784434][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 170.355570][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 170.592443][ T9496] netlink: 'syz.4.973': attribute type 2 has an invalid length. [ 170.634719][ T9496] : entered promiscuous mode [ 170.689870][ T9503] batman_adv: batadv0: Adding interface: veth0 [ 170.689890][ T9503] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.689921][ T9503] batman_adv: batadv0: Interface activated: veth0 [ 170.711108][ T9502] ip_tables: iptables: counters copy to user failed while replacing table [ 170.717175][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.717198][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.728766][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.728791][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.746203][ T9503] batman_adv: batadv0: Interface deactivated: veth0 [ 170.746225][ T9503] batman_adv: batadv0: Removing interface: veth0 [ 170.839512][ T9506] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 170.979106][ T9506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.983827][ T9514] openvswitch: netlink: Message has 8 unknown bytes. [ 170.983878][ T9514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.102198][ T9518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.110622][ T9518] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 171.857367][ T9560] x_tables: unsorted entry at hook 3 [ 172.098527][ T9572] veth0: entered promiscuous mode [ 172.168038][ T9576] xt_socket: unknown flags 0x4 [ 172.169038][ T9576] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.170567][ T9577] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.256292][ T9571] veth0: left promiscuous mode [ 172.680021][ T9589] syz.3.1004 (9589) used greatest stack depth: 14504 bytes left [ 172.757577][ T5731] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 172.899757][ T9616] __nla_validate_parse: 11 callbacks suppressed [ 172.899779][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 172.942826][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1013'. [ 173.012357][ T9621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1014'. [ 173.012385][ T9621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1014'. [ 173.042462][ T9623] syzkaller0: entered promiscuous mode [ 173.042487][ T9623] syzkaller0: entered allmulticast mode [ 173.131065][ T9626] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.131301][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 173.192223][ T9625] netlink: 'syz.4.1016': attribute type 32 has an invalid length. [ 173.578978][ T9649] netlink: 'syz.4.1022': attribute type 2 has an invalid length. [ 173.715911][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 173.904739][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1031'. [ 174.042992][ T9688] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 174.496702][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 174.755069][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 174.839867][ T6393] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 175.009988][ T9748] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 177.713130][ T9728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.722899][ T9744] netlink: 'syz.2.1048': attribute type 2 has an invalid length. [ 177.722924][ T9744] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1048'. [ 178.026412][ T9779] syzkaller0: entered promiscuous mode [ 178.026438][ T9779] syzkaller0: entered allmulticast mode [ 178.076939][ T9784] xt_limit: Overflow, try lower: 536871034/127 [ 178.517422][ T5716] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 178.831655][ T9832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.883807][ T9839] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 178.953155][ T9842] Bluetooth: MGMT ver 1.23 [ 178.980793][ T9839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 178.998348][ T9842] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 179.001536][ T9842] bond7: entered allmulticast mode [ 179.055077][ T9839] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 179.071837][ T9849] __nla_validate_parse: 3 callbacks suppressed [ 179.071855][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 179.071883][ T9849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.381202][ T9859] GUP no longer grows the stack in syz.2.1070 (9859): 200000003000-20000000a000 (200000001000) [ 179.381237][ T9859] CPU: 0 UID: 0 PID: 9859 Comm: syz.2.1070 Not tainted syzkaller #0 PREEMPT(full) [ 179.381258][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 179.381269][ T9859] Call Trace: [ 179.381277][ T9859] [ 179.381285][ T9859] dump_stack_lvl+0xe8/0x150 [ 179.381322][ T9859] __get_user_pages+0x23b6/0x2750 [ 179.381355][ T9859] ? lock_acquire+0x115/0x350 [ 179.381395][ T9859] ? __gup_longterm_locked+0xc3b/0x15c0 [ 179.381435][ T9859] __gup_longterm_locked+0xd52/0x15c0 [ 179.381467][ T9859] ? lock_acquire+0x115/0x350 [ 179.381521][ T9859] gup_fast_fallback+0x1d92/0x20e0 [ 179.381591][ T9859] ? __pfx_gup_fast_fallback+0x10/0x10 [ 179.381627][ T9859] ? lock_acquire+0x115/0x350 [ 179.381646][ T9859] ? is_valid_gup_args+0x11f/0x200 [ 179.381678][ T9859] ? get_user_pages_fast+0x4d/0xb0 [ 179.381710][ T9859] __iov_iter_get_pages_alloc+0x378/0xa40 [ 179.381748][ T9859] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 179.381777][ T9859] iov_iter_get_pages2+0x5e/0xa0 [ 179.381809][ T9859] __se_sys_vmsplice+0x7b5/0x1660 [ 179.381852][ T9859] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 179.381874][ T9859] ? __pfx_futex_wait+0x10/0x10 [ 179.381935][ T9859] ? lock_acquire+0x115/0x350 [ 179.381998][ T9859] do_syscall_64+0x166/0x520 [ 179.382019][ T9859] ? trace_irq_disable+0x3b/0x140 [ 179.382037][ T9859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.382057][ T9859] ? clear_bhb_loop+0x70/0xc0 [ 179.382082][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.382101][ T9859] RIP: 0033:0x7f1ecb39e2d9 [ 179.382121][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.382137][ T9859] RSP: 002b:00007f1ecc311028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 179.382158][ T9859] RAX: ffffffffffffffda RBX: 00007f1ecb625fa0 RCX: 00007f1ecb39e2d9 [ 179.382172][ T9859] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 179.382185][ T9859] RBP: 00007f1ecb435888 R08: 0000000000000000 R09: 0000000000000000 [ 179.382197][ T9859] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 179.382209][ T9859] R13: 00007f1ecb626038 R14: 00007f1ecb625fa0 R15: 00007ffc45a08698 [ 179.382245][ T9859] [ 179.408300][ T9865] netlink: 'syz.4.1071': attribute type 7 has an invalid length. [ 179.412534][ T9862] netlink: 'syz.4.1071': attribute type 7 has an invalid length. [ 179.780577][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 179.833107][ T9880] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 180.033662][ T9895] 0: reclassify loop, rule prio 0, protocol 03 [ 180.228192][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 180.332566][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 180.491197][ T9917] 0: reclassify loop, rule prio 0, protocol 03 [ 180.561691][ T9923] sctp: [Deprecated]: syz.1.1083 (pid 9923) Use of int in max_burst socket option deprecated. [ 180.561691][ T9923] Use struct sctp_assoc_value instead [ 181.305094][ T9958] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1087'. [ 181.555977][ T9974] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1090'. [ 181.779895][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1091'. [ 181.896049][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 182.067976][ T9991] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 182.096963][ T9995] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 182.251515][T10003] netlink: 'syz.3.1097': attribute type 2 has an invalid length. [ 182.262577][ T9998] netlink: 'syz.3.1097': attribute type 2 has an invalid length. [ 182.330381][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 182.330433][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'. [ 182.720613][T10022] gre0: Caught tx_queue_len zero misconfig [ 183.230711][T10057] Bluetooth: hci0: unsupported parameter 5161 [ 183.230735][T10057] Bluetooth: hci0: unsupported parameter 8192 [ 183.230747][T10057] Bluetooth: hci0: unsupported parameter 5161 [ 183.230759][T10057] Bluetooth: hci0: unsupported parameter 8192 [ 183.305741][T10056] veth2: entered promiscuous mode [ 183.305766][T10056] veth2: entered allmulticast mode [ 183.615469][T10082] netlink: 'syz.1.1120': attribute type 2 has an invalid length. [ 183.891331][T10101] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 183.967387][T10118] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.197426][T10129] __nla_validate_parse: 7 callbacks suppressed [ 184.197450][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 184.198195][T10129] set match dimension is over the limit! [ 184.284906][ T5731] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 184.436461][T10146] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1134'. [ 184.442588][T10147] netlink: 'syz.2.1134': attribute type 16 has an invalid length. [ 184.442612][T10147] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1134'. [ 184.442633][T10147] veth0_macvtap: entered allmulticast mode [ 184.481767][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1134'. [ 184.821040][T10166] IPVS: length: 239 != 24 [ 184.971029][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 184.971055][T10180] openvswitch: netlink: Flow actions attr not present in new flow. [ 185.035725][T10176] netlink: 'syz.3.1144': attribute type 4 has an invalid length. [ 185.245833][T10194] syzkaller0: entered promiscuous mode [ 185.245860][T10194] syzkaller0: entered allmulticast mode [ 185.365340][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1153'. [ 185.444462][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1154'. [ 185.526673][T10212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.597129][ T6423] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 185.616891][T10216] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 185.769496][T10224] netlink: 'syz.3.1164': attribute type 9 has an invalid length. [ 185.930766][T10232] netlink: 'syz.3.1167': attribute type 10 has an invalid length. [ 185.956169][T10232] team0: Device wg2 is of different type [ 185.998066][T10238] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20002 [ 185.998168][T10238] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20002 [ 186.101800][T10245] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1171'. [ 186.205744][T10251] syzkaller1: entered promiscuous mode [ 186.205768][T10251] syzkaller1: entered allmulticast mode [ 186.440622][T10265] ip_tables: iptables: counters copy to user failed while replacing table [ 186.514772][ T5625] Bluetooth: hci3: command 0x1407 tx timeout [ 186.516544][ T5618] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 187.311182][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 187.311220][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 187.518863][T10309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.761076][T10320] netlink: 'syz.4.1190': attribute type 21 has an invalid length. [ 187.761169][T10320] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 187.761183][T10320] netlink: 'syz.4.1190': attribute type 5 has an invalid length. [ 187.761843][T10318] netlink: 'syz.4.1190': attribute type 21 has an invalid length. [ 187.761932][T10318] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 187.761945][T10318] netlink: 'syz.4.1190': attribute type 5 has an invalid length. [ 188.232986][T10338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.653075][T10360] syzkaller0: entered promiscuous mode [ 188.653101][T10360] syzkaller0: entered allmulticast mode [ 188.755697][T10367] syz_tun: entered allmulticast mode [ 188.762941][T10366] syz_tun: left allmulticast mode [ 188.779145][T10370] veth1_to_bond: entered allmulticast mode [ 188.780062][T10369] veth1_to_bond: left allmulticast mode [ 188.820943][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.821318][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.821662][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.844201][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.983526][T10372] net_ratelimit: 25 callbacks suppressed [ 188.983549][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.983904][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.984380][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.984689][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.989951][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.990262][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.990571][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.990887][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.005939][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.006311][T10372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.516028][T10415] validate_nla: 3 callbacks suppressed [ 189.516051][T10415] netlink: 'syz.1.1215': attribute type 23 has an invalid length. [ 189.521264][T10413] syzkaller1: entered promiscuous mode [ 189.521289][T10413] syzkaller1: entered allmulticast mode [ 189.538812][T10413] __nla_validate_parse: 20 callbacks suppressed [ 189.538833][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 189.539085][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.540453][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.545168][T10413] bridge0: entered promiscuous mode [ 189.566449][ T6423] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.625911][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 189.794379][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 189.972128][T10436] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1221'. [ 190.035950][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1222'. [ 190.086336][T10444] dummy0: entered promiscuous mode [ 190.086655][T10444] dummy0: entered allmulticast mode [ 190.087554][T10444] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.123931][T10447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1224'. [ 190.185056][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1226'. [ 190.950407][T10485] syzkaller0: entered promiscuous mode [ 190.950434][T10485] syzkaller0: entered allmulticast mode [ 193.752848][T10548] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 194.260863][T10588] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 194.502620][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 194.598796][T10602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1265'. [ 194.700642][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 194.752907][ T6390] tipc: Subscription rejected, illegal request [ 194.771680][T10610] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 194.771729][T10610] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 194.771747][T10610] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 195.161829][ T5723] net_ratelimit: 28 callbacks suppressed [ 195.161853][ T5723] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 195.225092][T10639] netlink: 'syz.3.1277': attribute type 2 has an invalid length. [ 195.392839][T10645] SET target dimension over the limit! [ 195.396434][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1279'. [ 195.459882][T10645] bond5: entered promiscuous mode [ 195.460024][T10645] bond5: entered allmulticast mode [ 195.627077][T10660] xt_l2tp: invalid flags combination: 8 [ 195.840191][T10669] IPVS: length: 169 != 24 [ 196.148853][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1282'. [ 196.469997][T10693] syzkaller0: entered promiscuous mode [ 196.470022][T10693] syzkaller0: entered allmulticast mode [ 196.493273][T10696] tipc: Started in network mode [ 196.493303][T10696] tipc: Node identity 269b5f6dc022, cluster identity 4711 [ 196.493466][T10696] tipc: Enabled bearer , priority 0 [ 196.600190][T10692] tipc: Resetting bearer [ 196.680653][T10692] tipc: Disabling bearer [ 196.875916][T10721] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1300'. [ 196.875943][T10721] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1300'. [ 196.875959][T10721] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1300'. [ 196.961262][T10730] netlink: 'syz.1.1303': attribute type 3 has an invalid length. [ 196.978185][T10730] xt_hashlimit: size too large, truncated to 1048576 [ 197.038232][T10733] xt_hashlimit: size too large, truncated to 1048576 [ 197.442118][T10752] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 197.468222][T10752] bridge_slave_0: left allmulticast mode [ 197.468253][T10752] bridge_slave_0: left promiscuous mode [ 197.469649][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.509720][T10752] bridge_slave_1: left promiscuous mode [ 197.510033][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.570586][T10752] bond3: (slave veth0_to_bond): Releasing active interface [ 197.609971][T10752] bond0: (slave bond_slave_0): Releasing backup interface [ 197.643861][T10752] bond0: (slave bond_slave_1): Releasing backup interface [ 197.695583][T10752] team0: Port device team_slave_0 removed [ 197.720528][T10752] team0: Port device team_slave_1 removed [ 197.721557][T10752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.721579][T10752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.759651][T10752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.759677][T10752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.768611][T10752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.857467][T10755] team0: Device xfrm0 is of different type [ 197.866043][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1310'. [ 197.866074][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1310'. [ 197.890527][T10762] tipc: Enabled bearer , priority 0 [ 197.918110][T10760] netlink: 'syz.0.1310': attribute type 9 has an invalid length. [ 198.068527][T10778] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 198.069205][T10778] gretap1: entered promiscuous mode [ 198.069224][T10778] gretap1: entered allmulticast mode [ 198.077521][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 198.354269][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 198.413871][T10798] netlink: 'syz.4.1324': attribute type 14 has an invalid length. [ 198.459432][T10803] netlink: 'syz.4.1324': attribute type 14 has an invalid length. [ 198.530836][T10808] ip_tables: iptables: counters copy to user failed while replacing table [ 199.014298][ T44] tipc: Node number set to 3870908269 [ 199.410626][T10849] syzkaller0: entered promiscuous mode [ 199.410654][T10849] syzkaller0: entered allmulticast mode [ 199.502098][T10852] netlink: Conntrack attr has 8 unknown bytes [ 199.502827][T10852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.503478][T10849] netlink: 'syz.0.1335': attribute type 26 has an invalid length. [ 199.542598][ T5618] Bluetooth: hci3: unexpected event for opcode 0x0005 [ 199.718061][T10857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.806242][T10866] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 199.988981][T10881] __nla_validate_parse: 3 callbacks suppressed [ 199.989004][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'. [ 200.047023][T10873] bond1: (slave veth0_to_bond): Releasing backup interface [ 200.100306][T10873] bond6: (slave veth0_to_bond): making interface the new active one [ 200.102055][T10873] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 200.132956][T10881] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.276686][ T5716] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 200.323495][T10890] netlink: 'syz.4.1344': attribute type 4 has an invalid length. [ 200.483890][T10905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1348'. [ 200.708954][T10915] veth0: Caught tx_queue_len zero misconfig [ 200.762974][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 200.804244][T10919] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 200.804276][T10919] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 200.984890][T10890] netlink: 'syz.4.1344': attribute type 10 has an invalid length. [ 201.048722][T10926] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 201.063663][T10890] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 201.071053][T10926] netlink: NAT attribute has 8 unknown bytes [ 201.071087][T10926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.210574][T10937] sctp_getsockopt_delayed_ack: 55 callbacks suppressed [ 201.210600][T10937] sctp: [Deprecated]: syz.2.1359 (pid 10937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.210600][T10937] Use struct sctp_sack_info instead [ 201.213474][ T5618] Bluetooth: hci3: connection err: -111 [ 201.216654][T10937] set match dimension is over the limit! [ 201.590951][T10953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1362'. [ 201.593441][T10953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1362'. [ 201.593581][T10953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1362'. [ 201.713113][T10957] netlink: 'syz.0.1364': attribute type 1 has an invalid length. [ 201.715627][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.720910][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 201.720961][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 201.725396][ T52] Bluetooth: hci3: command 0x1407 tx timeout [ 201.732237][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'. [ 202.630166][T10986] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 202.630410][T10986] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 202.630619][T10986] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 202.630888][T10986] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 202.631121][T10986] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 202.631361][T10986] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 202.631581][T10986] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 202.943339][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 202.996958][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1375'. [ 204.083849][T10930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.143723][T11000] netlink: 'syz.4.1378': attribute type 11 has an invalid length. [ 204.346037][T11017] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.351946][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 204.764871][ T189] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 205.427631][T11041] validate_nla: 26 callbacks suppressed [ 205.427656][T11041] netlink: 'syz.1.1391': attribute type 4 has an invalid length. [ 205.547185][T11036] __nla_validate_parse: 6 callbacks suppressed [ 205.547208][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 205.548055][T11048] netlink: 'syz.4.1389': attribute type 3 has an invalid length. [ 205.551500][ T189] lo speed is unknown, defaulting to 1000 [ 205.589751][ T189] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 205.888449][T11060] tipc: Failed to remove unknown binding: 66,0,0/0:378939065/378939067 [ 205.888486][T11060] tipc: Failed to remove unknown binding: 66,0,0/0:378939065/378939066 [ 205.889707][T11060] tipc: Failed to remove unknown binding: 66,0,0/0:378939065/378939067 [ 205.889735][T11060] tipc: Failed to remove unknown binding: 66,0,0/0:378939065/378939066 [ 206.030586][T11063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1393'. [ 206.056623][T11063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1393'. [ 206.203493][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1396'. [ 206.698194][T11080] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1398'. [ 206.894372][T11091] netlink: 'syz.0.1401': attribute type 3 has an invalid length. [ 206.894397][T11091] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1401'. [ 207.023555][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1403'. [ 207.361096][T11107] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 207.362229][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 208.048304][T11130] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 210.193341][T11128] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 210.328788][T11128] syzkaller0: entered promiscuous mode [ 210.328817][T11128] syzkaller0: entered allmulticast mode [ 210.813116][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1414'. [ 211.345610][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 211.345645][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 212.064083][ C1] sched: DL replenish lagged too much [ 213.871999][ T5744] IPVS: ovf: UDP 127.0.0.1:20003 - no destination available [ 214.324636][T11189] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1419'. [ 214.324666][T11189] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1419'. [ 214.325015][T11189] netlink: Unknown conntrack attr (0) [ 214.378587][T11192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1419'. [ 214.378617][T11192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1419'. [ 214.413977][T11195] netlink: Unknown conntrack attr (0) [ 215.003114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.004343][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.004804][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.005201][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.005581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.005964][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.006359][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 216.278483][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 218.874141][ C0] net_ratelimit: 8426 callbacks suppressed [ 218.874168][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.874624][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.875125][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.875697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.876174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.876668][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.877135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.877591][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.878062][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.878534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 223.884179][ C0] net_ratelimit: 14728 callbacks suppressed [ 223.884205][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 223.884683][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 223.885186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 223.885552][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.885625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 223.885990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.886091][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 223.886576][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 223.887064][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 223.887446][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.894358][ C0] net_ratelimit: 15772 callbacks suppressed [ 228.894386][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 228.894438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.894854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 228.895302][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 228.895750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 228.895952][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.896202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 228.896380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.896652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 228.897107][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 233.904213][ C0] net_ratelimit: 15917 callbacks suppressed [ 233.904249][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 233.904371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.904736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 233.904804][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.905194][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 233.905667][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 233.906121][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 233.906282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.906597][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 233.906717][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.914427][ C0] net_ratelimit: 15781 callbacks suppressed [ 238.914454][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 238.914883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 238.914975][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.915351][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 238.915392][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.915811][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 238.916281][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 238.916791][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 238.916797][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.917212][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.924307][ C0] net_ratelimit: 16445 callbacks suppressed [ 243.924332][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.924777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 243.925233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.925633][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.925664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 243.926092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.926109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.926545][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 243.926998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.927430][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 248.934185][ C0] net_ratelimit: 16078 callbacks suppressed [ 248.934212][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.934696][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 248.935193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.935320][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.935693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 248.935735][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.936193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.936682][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 248.937177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.937188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.487211][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 253.944281][ C0] net_ratelimit: 16007 callbacks suppressed [ 253.944309][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.944745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 253.944777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.945192][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.945202][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.945666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 253.946102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.946587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 253.946623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.947018][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.954142][ C0] net_ratelimit: 16085 callbacks suppressed [ 258.954170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 258.954568][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.954622][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.954993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.955080][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 258.955538][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.955991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 258.956458][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 258.956497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.956909][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 263.964252][ C0] net_ratelimit: 16085 callbacks suppressed [ 263.964280][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 263.964697][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 263.964762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.965176][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.965495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 263.965935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 263.966378][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 263.966810][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 263.967220][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 263.967324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.974092][ C0] net_ratelimit: 16373 callbacks suppressed [ 268.974118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 268.974592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.974617][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.975019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 268.975127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.975488][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.975910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 268.976340][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.976683][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.976768][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 273.984290][ C0] net_ratelimit: 16914 callbacks suppressed [ 273.984316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 273.984343][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.984743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 273.985160][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 273.985597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 273.986004][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.986040][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 273.986433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.986469][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 273.986905][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.994160][ C0] net_ratelimit: 16203 callbacks suppressed [ 278.994188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.994624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 278.995051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.995181][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.995494][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 278.995607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.995915][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.996337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 278.996855][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.997107][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.004066][ C0] net_ratelimit: 16788 callbacks suppressed [ 284.004094][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.004513][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 284.004939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.005354][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 284.005441][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.005774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.005877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.006193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 284.006965][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.007413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 289.014166][ C0] net_ratelimit: 16325 callbacks suppressed [ 289.014192][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.014297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.014665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 289.015190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.015638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 289.015920][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.016065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.016380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.016550][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 289.016979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.024107][ C0] net_ratelimit: 15872 callbacks suppressed [ 294.024134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.024296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.024590][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 294.025061][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.025515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 294.025873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.026005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.026341][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.026462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 294.026977][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.034137][ C0] net_ratelimit: 15954 callbacks suppressed [ 299.034164][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.034377][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.034631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 299.035087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.035550][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 299.035903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.036010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.036457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 299.036752][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.036922][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.044160][ C1] net_ratelimit: 15694 callbacks suppressed [ 304.044189][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.044296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 304.044665][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.044752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.045212][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 304.045662][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.046125][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 304.046253][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.046618][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.046720][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.054178][ C0] net_ratelimit: 15908 callbacks suppressed [ 309.054206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 309.054638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 309.055071][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 309.055381][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.055574][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 309.055929][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.056007][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 309.056490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 309.056924][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 309.057374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.064156][ C1] net_ratelimit: 16073 callbacks suppressed [ 314.064183][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.064342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 314.064803][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.065269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 314.065735][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.065735][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.066190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.066205][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 314.066668][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.067204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 319.074265][ C0] net_ratelimit: 15733 callbacks suppressed [ 319.074293][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 319.074750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.075217][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 319.075280][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.075674][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.075843][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.076176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 319.076633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.077100][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 319.077617][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.084071][ C1] net_ratelimit: 14971 callbacks suppressed [ 324.084100][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.084427][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 324.084878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.085313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 324.085796][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.086251][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 324.086442][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.086688][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.086880][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.087176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 327.635559][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 329.094123][ C0] net_ratelimit: 14496 callbacks suppressed [ 329.094151][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.094433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.094617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 329.094888][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.095133][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.095586][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 329.096011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.096651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 329.097110][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.097576][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 334.104256][ C0] net_ratelimit: 14432 callbacks suppressed [ 334.104284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.104688][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.104719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 334.105133][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.105150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.105583][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 334.106011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.106490][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 334.106916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.107388][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 335.676272][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 339.114446][ C0] net_ratelimit: 15362 callbacks suppressed [ 339.114472][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 339.114562][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.114911][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 339.115028][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.115332][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 339.115772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 339.116196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 339.116618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 339.117046][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 339.117506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 344.124140][ C0] net_ratelimit: 15424 callbacks suppressed [ 344.124168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 344.124590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.125030][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.125288][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.125437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 344.125845][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.125910][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.126250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.126706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 344.127112][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.134392][ C0] net_ratelimit: 15343 callbacks suppressed [ 349.134419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.134899][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.134921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.135391][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.135409][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 349.135894][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.136405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.136875][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 349.137341][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.137808][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.144096][ C1] net_ratelimit: 14606 callbacks suppressed [ 354.144123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.144214][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.144590][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.144679][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 354.145048][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.145188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.145513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.145645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.146109][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 354.146574][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.154160][ C1] net_ratelimit: 16372 callbacks suppressed [ 359.154188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.154392][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.154620][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.154909][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 359.155039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.155380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.155462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.155833][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.156304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 359.156760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.652668][ T32] INFO: task syz.4.1421:11197 blocked for more than 143 seconds. [ 359.652699][ T32] Not tainted syzkaller #0 [ 359.652729][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.652739][ T32] task:syz.4.1421 state:D stack:25576 pid:11197 tgid:11197 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 359.652875][ T32] Call Trace: [ 359.652907][ T32] [ 359.652923][ T32] __schedule+0x17db/0x58f0 [ 359.652954][ T32] ? __lock_acquire+0x747/0x2de0 [ 359.653007][ T32] ? __pfx___schedule+0x10/0x10 [ 359.653026][ T32] ? lock_acquire+0x115/0x350 [ 359.653060][ T32] ? schedule+0x90/0x2b0 [ 359.653086][ T32] schedule+0x164/0x2b0 [ 359.653110][ T32] synchronize_rcu_expedited+0x619/0x770 [ 359.653160][ T32] ? __flush_work+0x101/0xca0 [ 359.653193][ T32] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 359.653223][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 359.653286][ T32] nft_rcv_nl_event+0xc69/0xe60 [ 359.653327][ T32] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 359.653356][ T32] ? nfulnl_rcv_nl_event+0x433/0x470 [ 359.653383][ T32] ? nfqnl_rcv_nl_event+0x392/0x3d0 [ 359.653417][ T32] notifier_call_chain+0x1a5/0x3d0 [ 359.653450][ T32] blocking_notifier_call_chain+0x6a/0x90 [ 359.653476][ T32] netlink_release+0x11fb/0x1a80 [ 359.653511][ T32] ? netlink_release+0x106/0x1a80 [ 359.653539][ T32] ? __pfx_netlink_release+0x10/0x10 [ 359.653561][ T32] ? down_write+0x16b/0x200 [ 359.653586][ T32] ? __pfx_down_write+0x10/0x10 [ 359.653623][ T32] __sock_release+0xa0/0x1f0 [ 359.653651][ T32] ? __pfx_sock_close+0x10/0x10 [ 359.653676][ T32] sock_close+0x1c/0x30 [ 359.653699][ T32] __fput+0x418/0xa50 [ 359.653738][ T32] task_work_run+0x1d9/0x270 [ 359.653765][ T32] ? __pfx_task_work_run+0x10/0x10 [ 359.653799][ T32] exit_to_user_mode_loop+0x204/0x770 [ 359.653824][ T32] ? rcu_is_watching+0x16/0xb0 [ 359.653853][ T32] do_syscall_64+0x328/0x520 [ 359.653875][ T32] ? trace_irq_disable+0x3b/0x140 [ 359.653896][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.653917][ T32] ? clear_bhb_loop+0x70/0xc0 [ 359.653944][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.653963][ T32] RIP: 0033:0x7faa4159e2d9 [ 362.593284][ T32] RSP: 002b:00007ffd36aedcb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 362.593319][ T32] RAX: 0000000000000000 RBX: 00007faa41827da0 RCX: 00007faa4159e2d9 [ 362.593335][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 362.593350][ T32] RBP: 00007faa41827da0 R08: 00007faa41826128 R09: 0000000000000000 [ 362.593363][ T32] R10: 000000000003fda0 R11: 0000000000000246 R12: 0000000000034923 [ 362.593376][ T32] R13: 00007faa4182627c R14: 0000000000034622 R15: 00007faa41826270 [ 362.593414][ T32] [ 362.593460][ T32] [ 362.593460][ T32] Showing all locks held in the system: [ 362.593471][ T32] locks held by kworker/u8:0/12: 4, on CPU#1: [ 362.593487][ T32] #0: ffff8880339b6940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.593557][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.593614][ T32] #2: ffff8880760e5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 362.593670][ T32] #3: ffff88807acdbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 362.593723][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 362.593738][ T32] #0: ffffffff8fc364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 362.593793][ T32] locks held by kworker/1:0/25: 4, on CPU#1: [ 362.593806][ T32] #0: ffff88807f2e0940 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.593865][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.593935][ T32] #2: ffff8880760e5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 362.608266][ T32] #3: ffff88807acdbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 362.608339][ T32] locks held by kworker/u8:2/31: 2, last CPU#0: [ 362.608355][ T32] #0: ffff8880339b5940 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.608416][ T32] #1: ffffc90000a77c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.608473][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 362.608487][ T32] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 362.608538][ T32] locks held by kworker/1:1/44: 7, last CPU#1: [ 362.608552][ T32] #0: ffff88807f266140 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.608611][ T32] #1: ffffc90000b47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.608682][ T32] #2: ffff888078995440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 362.608734][ T32] #3: ffff8880333c6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 362.608786][ T32] #4: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 362.608845][ T32] #5: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 362.608897][ T32] #6: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 362.608949][ T32] locks held by kworker/u8:3/49: 4, last CPU#1: [ 362.608963][ T32] #0: ffff8880339c5140 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609027][ T32] #1: ffffc90000ba7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609082][ T32] #2: ffff888076fd5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 362.609134][ T32] #3: ffff8880333c7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 362.609186][ T32] locks held by kworker/u8:4/59: 2, last CPU#0: [ 362.609200][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609254][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609311][ T32] locks held by kworker/0:2/189: 2, last CPU#0: [ 362.609326][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609381][ T32] #1: ffffc90002f67c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609439][ T32] locks held by kworker/u8:7/1094: 4, last CPU#1: [ 362.609453][ T32] #0: ffff888078a33940 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609506][ T32] #1: ffffc90004f5fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609562][ T32] #2: ffff88802b68d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 362.609613][ T32] #3: ffff88807acddc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 362.609665][ T32] locks held by kworker/u8:11/1166: 4, last CPU#0: [ 362.609680][ T32] #0: ffff888034a43140 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609738][ T32] #1: ffffc900052afc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609793][ T32] #2: ffff888036ab1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 362.609846][ T32] #3: ffff8880333c5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 362.609909][ T32] locks held by kworker/u9:1/4935: 6, last CPU#1: [ 362.609923][ T32] #0: ffff88807aba7940 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.609977][ T32] #1: ffffc90005acfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.610041][ T32] #2: ffff888029194ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 362.610095][ T32] #3: ffff8880291940b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 362.610145][ T32] #4: ffffffff913dc9c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 362.610194][ T32] #5: ffff888076a4baf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 362.610253][ T32] locks held by klogd/4973: 1, last CPU#0: [ 362.610267][ T32] #0: ffffffff8feac570 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 362.610318][ T32] locks held by dhcpcd/5278: 2, last CPU#1: [ 362.610332][ T32] #0: ffffffff8feac570 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 362.610381][ T32] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 362.610431][ T32] locks held by dhcpcd/5279: 2, last CPU#1: [ 362.610445][ T32] #0: ffffffff8feac570 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 362.610494][ T32] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 362.610545][ T32] locks held by getty/5377: 2, on CPU#1: [ 362.610558][ T32] #0: ffff888036dc10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 362.610609][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 362.610665][ T32] locks held by syz-executor/5605: 1, last CPU#1: [ 362.610680][ T32] #0: ffffffff8feac570 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 362.610732][ T32] locks held by syz-executor/5619: 5, last CPU#0: [ 362.610746][ T32] #0: ffff88802c0dc460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 362.610801][ T32] #1: ffff88807982d0f0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 [ 362.610865][ T32] #2: ffffffff904f28f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 362.610918][ T32] #3: ffffffff8feac570 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 362.610967][ T32] #4: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 362.611027][ T32] locks held by syz-executor/5626: 2, last CPU#1: [ 362.611041][ T32] #0: ffffffff904f28f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 362.611092][ T32] #1: ffffffff8feac570 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 362.611147][ T32] locks held by kworker/0:4/5716: 2, last CPU#0: [ 362.611160][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611214][ T32] #1: ffffc90004c37c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611268][ T32] locks held by kworker/1:3/5723: 2, last CPU#1: [ 362.611282][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611337][ T32] #1: ffffc90004c87c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611394][ T32] locks held by kworker/1:6/5744: 3, last CPU#1: [ 362.611407][ T32] #0: ffff88803239b540 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611466][ T32] #1: ffffc90004e8fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611534][ T32] #2: ffff888034ea1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 362.611588][ T32] locks held by kworker/0:5/5752: 3, last CPU#0: [ 362.611601][ T32] #0: ffff88807f266140 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611661][ T32] #1: ffffc90004f6fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611731][ T32] #2: ffff888078995440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 362.611785][ T32] locks held by kworker/u8:12/6388: 3, last CPU#1: [ 362.611799][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611853][ T32] #1: ffffc9000d87fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.611909][ T32] #2: ffff88802cf99258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 362.611965][ T32] locks held by kworker/u8:14/6390: 3, last CPU#1: [ 362.611979][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612040][ T32] #1: ffffc9000dadfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612094][ T32] #2: ffff888067620800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 362.612151][ T32] locks held by kworker/u8:15/6391: 3, last CPU#0: [ 362.612165][ T32] #0: ffff88807a7bb940 ((wq_completion)bond4#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612224][ T32] #1: ffffc9000daefc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612280][ T32] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x1820 [ 362.612332][ T32] locks held by kworker/u8:17/6393: 4, last CPU#0: [ 362.612346][ T32] #0: ffff888078a33940 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612399][ T32] #1: ffffc9000db0fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612454][ T32] #2: ffff88802b68d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 362.612504][ T32] #3: ffff88807acde640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 362.612557][ T32] locks held by kworker/u8:20/6401: 4, last CPU#1: [ 362.612571][ T32] #0: ffff888034a47940 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612629][ T32] #1: ffffc9000db7fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612707][ T32] #2: ffff888078991440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 362.612760][ T32] #3: ffff888029c56640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 362.612813][ T32] locks held by kworker/u8:25/6412: 3, last CPU#1: [ 362.612827][ T32] #0: ffff888067a48940 ((wq_completion)krds_cp_wq#5/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612882][ T32] #1: ffffc9000dc0fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.612936][ T32] #2: ffff888036820fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2d0 [ 362.612986][ T32] locks held by kworker/u8:26/6414: 4, last CPU#1: [ 362.613008][ T32] #0: ffff8880339b6140 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613066][ T32] #1: ffffc9000dc1fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613121][ T32] #2: ffff8880760e1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 362.613173][ T32] #3: ffff8880333c3ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 362.613225][ T32] locks held by kworker/u8:27/6416: 3, last CPU#1: [ 362.613239][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613294][ T32] #1: ffffc9000dc2fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613349][ T32] #2: ffff888056643258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 362.613403][ T32] locks held by kworker/u8:28/6417: 4, last CPU#1: [ 362.613417][ T32] #0: ffff8880339b7940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613476][ T32] #1: ffffc9000dc3fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613528][ T32] #2: ffff8880760f5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 362.613581][ T32] #3: ffff88807acd8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 362.613635][ T32] locks held by kworker/u8:29/6418: 2, last CPU#0: [ 362.613649][ T32] #0: ffff88803376b940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613702][ T32] #1: ffffc9000dc4fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613758][ T32] locks held by kworker/u8:30/6420: 3, last CPU#1: [ 362.613772][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613825][ T32] #1: ffffc9000da9fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.613882][ T32] #2: ffff88807b0b5258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 362.613931][ T32] locks held by kworker/u8:31/6421: 4, last CPU#1: [ 362.613944][ T32] #0: ffff8880339b7940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0} [ 364.164014][ C1] net_ratelimit: 16190 callbacks suppressed [ 364.164043][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.164143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 364.164512][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.164560][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.164971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.164977][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.165402][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 364.165430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.165815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:33:dd:67:4e:42, vlan:0) [ 364.166283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 367.491412][ T32] , at: process_scheduled_works+0x97a/0x1630 [ 367.491454][ T32] #1: ffffc9000dc6fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.491518][ T32] #2: ffff8880760f5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 367.491588][ T32] #3: ffff88807acd8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 367.491645][ T32] locks held by kworker/u8:32/6423: 3, last CPU#1: [ 367.491661][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.491717][ T32] #1: ffffc9000dc8fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.491773][ T32] #2: ffff888067500800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 367.491830][ T32] locks held by kworker/u8:33/6424: 3, last CPU#1: [ 367.491844][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.491898][ T32] #1: ffffc9000dc9fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.491952][ T32] #2: ffff888067c10800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 367.492007][ T32] locks held by kworker/u8:34/6425: 3, last CPU#1: [ 367.492022][ T32] #0: ffff8880796ec940 ((wq_completion)krds_cp_wq#6/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.492074][ T32] #1: ffffc9000e0bfc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.492130][ T32] #2: ffff88807ad59d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2d0 [ 367.492182][ T32] locks held by kworker/u8:35/6427: 2, last CPU#1: [ 367.492197][ T32] #0: ffff88801c0ab940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.492259][ T32] #1: ffffc9000e10fc40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.492319][ T32] locks held by kworker/0:6/8830: 4, last CPU#0: [ 367.492334][ T32] #0: ffff88807f2e0940 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.492392][ T32] #1: ffffc90006b7fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.492463][ T32] #2: ffff8880760e5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 367.492516][ T32] #3: ffff88807acdbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 367.492578][ T32] locks held by kworker/0:8/8834: 3, last CPU#0: [ 367.492592][ T32] #0: ffff88803239b540 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.492672][ T32] #1: ffffc9000588fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.492741][ T32] #2: ffff888034ea1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 367.492798][ T32] locks held by syz.4.1421/11197: 2, last CPU#0: [ 367.492813][ T32] #0: ffff88802a6c0f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 367.492860][ T32] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 367.492920][ T32] [ 367.492925][ T32] ============================================= [ 367.492925][ T32] [ 367.492935][ T32] NMI backtrace for cpu 1 [ 367.493039][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 367.493062][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 367.493073][ T32] Call Trace: [ 367.493082][ T32] [ 367.493092][ T32] dump_stack_lvl+0xe8/0x150 [ 367.493124][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 367.493153][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 367.493187][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 367.493229][ T32] sys_info+0x135/0x170 [ 367.493263][ T32] watchdog+0xfd7/0x1030 [ 367.493293][ T32] ? watchdog+0x1c7/0x1030 [ 367.493323][ T32] kthread+0x38b/0x480 [ 367.493343][ T32] ? __pfx_watchdog+0x10/0x10 [ 367.493363][ T32] ? __pfx_kthread+0x10/0x10 [ 367.493386][ T32] ret_from_fork+0x514/0xb70 [ 367.493410][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 367.493430][ T32] ? __switch_to+0xc89/0x1420 [ 367.493461][ T32] ? __pfx_kthread+0x10/0x10 [ 367.493482][ T32] ret_from_fork_asm+0x1a/0x30 [ 367.493519][ T32] [ 367.493527][ T32] Sending NMI from CPU 1 to CPUs 0: [ 367.493565][ C0] NMI backtrace for cpu 0 [ 367.493580][ C0] CPU: 0 UID: 0 PID: 1119 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 367.493600][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 367.493612][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 367.493637][ C0] RIP: 0010:__siphash_unaligned+0x18c/0x3e0 [ 367.493660][ C0] Code: 0d 4c 31 f5 49 c1 c6 20 4c 01 eb 49 c1 c5 10 49 31 dd 4d 01 ee 49 c1 c5 15 4d 31 f5 48 01 eb 48 c1 c5 11 48 31 dd 48 c1 c3 20 <49> 31 c6 4c 39 fe 0f 84 82 00 00 00 4c 89 64 24 08 4d 89 fc 49 89 [ 367.493675][ C0] RSP: 0018:ffffc90000007370 EFLAGS: 00000287 [ 367.493691][ C0] RAX: 0000000002000000 RBX: ca8439342a55f51d RCX: ffff888029130000 [ 367.493704][ C0] RDX: dffffc0000000000 RSI: 0000000000000040 RDI: ffffc900000077bf [ 367.493717][ C0] RBP: f8c6be58b2771521 R08: 0000000000000100 R09: 0000000000000003 [ 367.493729][ C0] R10: 0000000000000008 R11: 0000000000000100 R12: ffffc900000077b8 [ 367.493741][ C0] R13: b1d45e4ac06bcebd R14: 979e7a2ec16194c4 R15: 0000000000000040 [ 367.493754][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 367.493769][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.493782][ C0] CR2: 000055558a2044e8 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 367.493800][ C0] Call Trace: [ 367.493807][ C0] [ 367.493818][ C0] __flow_hash_from_keys+0x431/0x6c0 [ 367.493841][ C0] rt6_multipath_hash+0x65d/0x19b0 [ 367.493868][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 367.493896][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 367.493919][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 367.493945][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 367.493970][ C0] ? nf_hook_slow+0x176/0x220 [ 367.494002][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 367.494026][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 367.494062][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 367.494093][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 367.494120][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 367.494147][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 367.494174][ C0] ? lock_acquire+0x115/0x350 [ 367.494201][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 367.494248][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 367.494284][ C0] ip6_route_input+0x954/0xb20 [ 367.494319][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 367.494354][ C0] ? nf_nat_ipv6_in+0x200/0x2c0 [ 367.494384][ C0] ? lock_acquire+0x115/0x350 [ 367.494409][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 367.494435][ C0] ip6_rcv_finish+0x141/0x280 [ 367.494459][ C0] NF_HOOK+0x336/0x3c0 [ 367.494483][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 367.494506][ C0] ? NF_HOOK+0x9e/0x3c0 [ 367.494527][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 367.494550][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 367.494580][ C0] process_backlog+0x795/0x18b0 [ 367.494611][ C0] ? call_timer_fn+0xd5/0x5f0 [ 367.494639][ C0] ? process_backlog+0x3de/0x18b0 [ 367.494676][ C0] __napi_poll+0xaa/0x330 [ 367.494706][ C0] net_rx_action+0x61d/0xf50 [ 367.494743][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 367.494787][ C0] handle_softirqs+0x226/0x860 [ 367.494818][ C0] ? do_softirq+0x77/0xd0 [ 367.494847][ C0] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 367.494870][ C0] do_softirq+0x77/0xd0 [ 367.494894][ C0] [ 367.494900][ C0] [ 367.494908][ C0] __local_bh_enable_ip+0x100/0x140 [ 367.494936][ C0] nsim_dev_trap_report_work+0x7a4/0xb40 [ 367.494967][ C0] ? process_scheduled_works+0x97a/0x1630 [ 367.494995][ C0] process_scheduled_works+0xc3d/0x1630 [ 367.495048][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.495080][ C0] ? assign_work+0x3cf/0x5d0 [ 367.495110][ C0] worker_thread+0xa47/0xfb0 [ 367.495146][ C0] ? __kthread_parkme+0x71/0x1f0 [ 367.495182][ C0] kthread+0x38b/0x480 [ 367.495202][ C0] ? __pfx_worker_thread+0x10/0x10 [ 367.495230][ C0] ? __pfx_kthread+0x10/0x10 [ 367.495251][ C0] ret_from_fork+0x514/0xb70 [ 367.495272][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 367.495292][ C0] ? __switch_to+0xc89/0x1420 [ 367.495322][ C0] ? __pfx_kthread+0x10/0x10 [ 367.495344][ C0] ret_from_fork_asm+0x1a/0x30 [ 367.495373][ C0] [ 367.508833][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 370.141974][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 370.151105][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 370.161180][ T32] Call Trace: [ 370.164488][ T32] [ 370.167438][ T32] vpanic+0x56d/0xa60 [ 370.171470][ T32] ? __pfx_vpanic+0x10/0x10 [ 370.176004][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 370.181583][ T32] panic+0xc5/0xd0 [ 370.185331][ T32] ? __pfx_panic+0x10/0x10 [ 370.189778][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 370.194828][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 370.201015][ T32] watchdog+0x1030/0x1030 [ 370.205381][ T32] ? watchdog+0x1c7/0x1030 [ 370.209827][ T32] kthread+0x38b/0x480 [ 370.213917][ T32] ? __pfx_watchdog+0x10/0x10 [ 370.218617][ T32] ? __pfx_kthread+0x10/0x10 [ 370.223233][ T32] ret_from_fork+0x514/0xb70 [ 370.227848][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 370.232979][ T32] ? __switch_to+0xc89/0x1420 [ 370.237686][ T32] ? __pfx_kthread+0x10/0x10 [ 370.242303][ T32] ret_from_fork_asm+0x1a/0x30 [ 370.247111][ T32] [ 370.250461][ T32] Kernel Offset: disabled [ 370.254786][ T32] Rebooting in 86400 seconds..