last executing test programs: 51.861125947s ago: executing program 4 (id=3663): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/277, @ANYRESHEX, @ANYRES64], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 51.537728544s ago: executing program 4 (id=3666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc00}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10}}, 0xec}}, 0x4008050) 51.334659081s ago: executing program 4 (id=3670): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000600)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b22d1b682f00000031fd9900a442f0b24bf430d59c9efa8c8106d22e21d6e7ae8eefa0"], 0x8) write$nci(r0, &(0x7f0000000240)=ANY=[], 0x7) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2fb2e5b8eb00a2cbd208396799614311ab99b4096baa345cc31a897a4ac494620cbf6db7b44b6bdfa26ab88f615399f78f566c8a4ca866ce282f73aac133fcd24fc802b0438d26c4e5b7596e2e6351c28995577221a6c877f4ac778df8bc896e42398fe95ef991fbcdd9"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x88}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000c40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'dummy0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000780)="0bbeb99c0e5d8a180588c8472c2b1883cb5839bf3c0aaeb0de2abfd200cafac6db4191e333f51cda770d479008914fff5d0ee6fd8ae768c9c07c559bbaceceb9f08e390a0ce9f8430b0c59c4496501b74cc1200da6a04827eb6962e469a9cab195353bfc9b3aa29e34c4bafd4d2c46d4d399a78c98838d94aa036236b3fd976863a3fb3a740c12132563a3b126a45b2d21ba047982e8d471cdaf9b14f607c887f1f6b938430839876971b7296b6c30eb3da64826cc41bac80736557115a2f3b8fa5e81dfc8bb452c81", 0xc9}, {&(0x7f0000000880)="59eef582640a749369e2408d4c5abb20ba46593f3851bb15fbb62cf4dead5178c29c6a3854fc9d4c31e49b033d53793105", 0x31}], 0x2) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x7}, {0x6}]}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 50.70253985s ago: executing program 4 (id=3678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r5, 0x700, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb42}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44094}, 0x4000800) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000fbdbdf251b0000000e0001c3f9a3ccdac1c4bf0b30006e657464657673006d000000d988ebbd83740a8072a52d4de10f696d30000008000b000018001900000000000000000000063b0d4d7045"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000007300000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) 50.667632691s ago: executing program 2 (id=3679): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001b80)={{r0, &(0x7f0000000040)='&\x00', 0x505200, &(0x7f0000000240)={@_ha_fsid={[0x100, 0x1]}, {0xc45f, 0x8, 0xfffffff8, 0xfffffffffffffffe}}, 0xfff, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0xc62a}, {[0x1, 0x57d2, 0x9, 0x7]}, 0x10001, 0x1000, &(0x7f0000000b80)=""/4096}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001c00)={'dummy0\x00', 0x200}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400000005000000006900b3b900000000800000000000000000"], 0x50) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x8, 0x7, {{0x14, 0x4, 0x1, 0x26, 0x50, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0xb, 0x96, [@rand_addr=0x64010102, @broadcast]}, @timestamp={0x44, 0x14, 0x73, 0x0, 0x7, [0x6, 0x7, 0x67f, 0x10001]}, @rr={0x7, 0xf, 0x2d, [@broadcast, @local, @multicast2]}, @timestamp={0x44, 0x8, 0x80, 0x0, 0xb, [0x7]}, @ra={0x94, 0x4}]}}}}}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) read(r5, &(0x7f0000000480)=""/138, 0x8a) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f0000001f40)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)=ANY=[@ANYBLOB="04010000", @ANYRES16=r7, @ANYBLOB="04002abd7000ffdbdf25060000005c000180080003000200000008000100", @ANYRES32=r8, @ANYBLOB="080003000200000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030001000000140002007465616d5f736c6176655f3000000000140002006d6163766c616e3000000000000000001800018014000200627269646765300000000000000000007000018008000100", @ANYRES32=r4, @ANYBLOB="0800030000000000080003080000000014ff0100673000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14000200766c616e300000000000000000000000140002006970365f76746930000000000000000008000300020000000c0001800800030000000000"], 0x104}, 0x1, 0x0, 0x0, 0x4090}, 0x1) bind$can_raw(r5, &(0x7f0000000580)={0x1d, r6}, 0x10) r10 = socket$l2tp6(0xa, 0x2, 0x73) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000001f80)=0x474c, 0x4) bind$inet(r11, &(0x7f0000001fc0)={0x2, 0x0, @local}, 0x6f) connect$inet(r11, &(0x7f0000002000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r11, &(0x7f0000002040), 0x800001d, 0x300) setsockopt$inet_int(r11, 0x0, 0x8, &(0x7f0000002080)=0x3d, 0x4) recvmmsg(r11, &(0x7f00000020c0), 0x291962b, 0x45833af92e4b39ff, 0x0) getsockopt$IP6T_SO_GET_INFO(r10, 0x29, 0xb, 0x0, &(0x7f0000000a40)=0x1a) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000005c0)=0x1, 0x4) sendmsg$can_raw(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0xd209f6d81082d3d6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000001c0)=""/123, 0x7b, 0x0, &(0x7f0000000240)}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r13, 0x4) 50.516458002s ago: executing program 4 (id=3682): r0 = socket(0x1f, 0x80000, 0x2) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x200488d5) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f00000004c0), 0x4) (async, rerun: 32) r3 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, &(0x7f0000000680)) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000940)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r9 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000980)={'syzkaller1\x00', @link_local}) (async) write$tun(r8, &(0x7f00000009c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) (async) r10 = socket(0xa, 0x3, 0x3a) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SIOCGSKNS(r12, 0x894c, 0x0) bind$inet6(r10, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xf, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x841) (async, rerun: 32) r13 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020f00000800000000037dbe6627bc7f2d00000000000000030005000000000002000000acfa13aa0000000000000000030006000000000002000000000000004f5dfa8f64bdc71312d67b780048d1cacc687c79ba3de233cf6cbb3b2e05b191932e9fa7f3a4807c65ef2dc48d7d648f7b26c4252e89a34a66f61c389d0d58782ffc5d26fcf062bbe14d8988be01fce8c4a54c8bb2554486d0cd3051d4bb0a2977cf097252c4b009c4e9a29d95d334c1aafb"], 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x10c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x8, 0x2, 0x2, 0x1, 0x7, 0xf, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0xf78a, 0x6, 0x2, 0x3, 0x3]}}, {{0x1c, 0x1, {0xe7, 0x18, 0x0, 0x2290, 0x2, 0x699, 0x200, 0x5}}, {0xe, 0x2, [0xe2, 0x9, 0x740d, 0x2, 0x4]}}, {{0x1c, 0x1, {0x73, 0x8, 0x9, 0xfffffff7, 0x2, 0x34d30, 0x5, 0x6}}, {0x10, 0x2, [0x1, 0x1ff, 0x330b, 0x4, 0x1, 0x5]}}, {{0x1c, 0x1, {0x4e, 0x0, 0x6, 0x6, 0x2, 0x7, 0x8, 0xa}}, {0x18, 0x2, [0x4, 0x7, 0x4, 0x3, 0x59d, 0x2, 0x460c, 0x7, 0x2, 0x8]}}, {{0x1c, 0x1, {0x7f, 0x3, 0x4, 0x380, 0x2, 0x1, 0x101, 0x2}}, {0x8, 0x2, [0x101, 0x0]}}]}]}, 0x10c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004500)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (rerun: 64) 49.444206159s ago: executing program 3 (id=3688): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r0, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x41}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x2, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x8, 0x8]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) r5 = socket(0x28, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x18c, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x320}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8acc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x234}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x961d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 49.24337779s ago: executing program 1 (id=3689): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x1000100, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x1000100, 0x4) 49.181470793s ago: executing program 2 (id=3690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x400b4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000002d0007012abd7000ffdbdf250a"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071041b000000000095000000000000004f1fef70b7cef611150df25fbd85dc5c3baacca9797004c35de388d2c1a73f1384ef9f34b4ba66f40bf272d3898a3371177c609bca1b6ef4cc314dcdfc0fe338c47bf810ec21372dc92a829b39260f628e1d11540f41eab8f45cff4119f60145bbc609c9600ff351b48f87bad1b9f6986c5ee76a438a31fb6cce73dd2decc170dcaa806012bc740e5f92fff1"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000980)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x14, 0xff, 0x0, @empty}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000540)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1b, &(0x7f0000000a00)={0x0, 0x0}, 0x10) sendto$packet(r3, &(0x7f0000000900)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f0000000940)={0x11, 0xd, r4, 0x1, 0x7, 0x6, @local}, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000880)=0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0xc8, &(0x7f00000006c0)=""/200, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000000c0)=0x8001, 0x4) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f00000002c0)={0x0, 0x4}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x2}, &(0x7f0000000680)=0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x14, 0x18, 0x107, 0x70bd25, 0x25dfdbff, {0x1e, 0x7c, 0x3f}}, 0x14}, 0x1, 0x0, 0x0, 0x4040895}, 0x4) socket$tipc(0x1e, 0x5, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000440)=@name, &(0x7f00000009c0)=0x8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 49.023551294s ago: executing program 1 (id=3691): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={r2, 0x5, 0x0, 0x400004}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f0000000280)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x1, 0x8, 0x5b9}, 0x8) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x0, 0x8}, 0xc) 48.865351322s ago: executing program 3 (id=3692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x1000, 0x6b}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20c0}, 0x4000000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x92, 0x0, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x7800, 0x80, 0x7, 0xffffffff}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x788f, 0x8000, 0x9, 0xc0000000, {{0x18, 0x4, 0x0, 0x9, 0x60, 0x66, 0x0, 0x6, 0x29, 0x0, @loopback, @private=0xa010100, {[@cipso={0x86, 0x22, 0x2, [{0x2, 0xd, "c1aa61d6b147ec99527de3"}, {0x5, 0x6, "e597a5b2"}, {0x7, 0x9, "fcef154745b58d"}]}, @timestamp={0x44, 0x20, 0x40, 0x0, 0x0, [0x7, 0x80000000, 0x3, 0x10, 0xffff, 0x5, 0x8c9]}, @rr={0x7, 0x7, 0xf6, [@empty]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xb, 0xfff, 0x39, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8700, 0x40, 0xc9e7, 0x2}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000700)={@initdev, @multicast2, 0x0}, &(0x7f0000000740)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x50, 0x7, 0x80000001, 0x2, @private1, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7800, 0x8726, 0xfffffffa}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xae, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x118, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9bf376f75757eac1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000d00)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000d40)=0xc) setsockopt$inet_sctp6_SCTP_NODELAY(r13, 0x84, 0x3, &(0x7f0000000d80)=0x2, 0x4) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000e00), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000001100)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e40)={0x254, r15, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r12}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3c7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0xe, 0x3, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x8000}, 0x20000880) r16 = socket$kcm(0x29, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r16, 0x119, 0x1, &(0x7f0000001140), 0x4) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x8000, 0x0) write$tun(r17, &(0x7f00000011c0)={@void, @val={0x2, 0x1, 0x6, 0xa94, 0xe, 0x800}, @x25={0x2, 0x6d, 0x1b, "c81e3e1b2970b98d540c018835a16c34e227caeb6b50ff629d8de318c6cb938ab204e828e611a91b01b3f3597885412996290c54"}}, 0x41) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) ioctl$XFS_IOC_START_COMMIT(r14, 0x80585882, &(0x7f0000001340)={0xffffffffffffffff}) r19 = openat$cgroup_ro(r18, &(0x7f00000013c0)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r19, &(0x7f0000001400)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, r1, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x3b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048d1) 48.775735792s ago: executing program 2 (id=3693): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x22, &(0x7f0000000500)={&(0x7f0000000540)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4041080) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x8, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x5, 0x0, r5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f00000002c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a000018010280140117800e"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r10, 0x300, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xe6fb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000780)={r3, &(0x7f0000000680)='+\xb2(+*\\{}\'\x00', 0x80, &(0x7f00000006c0)={@_ha_fsid={[0x9, 0x6]}, {0x2, 0x8000, 0x7ff, 0x5}}, 0x49, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x80000001}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x8, 0x0}, 0x8) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x17, &(0x7f0000000580)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7}, @map_fd={0x18, 0x9, 0x1, 0x0, r6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, @fallback=0x4, r11, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r12, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r5, r6, r5, r6, r5, r1, r5, r13], 0x0, 0x10, 0x3}, 0x94) 48.680904242s ago: executing program 1 (id=3694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) (async) close(0x3) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback, 0xfffffff9}, 0x1c) (async) write(r0, &(0x7f0000000280)="da", 0xffd1) 48.364639832s ago: executing program 1 (id=3695): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/174, 0xae}], 0x1, &(0x7f0000000180)=""/65, 0xfffffffffffffde0}, 0x4}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="c9aa78c37d080000000000005a389162cb5dc330", 0x14}, {&(0x7f0000000300)="e9a13bf9163ed7ff3d1e8fae", 0xc}], 0x2, 0x0, 0x0, 0x20004800}, 0x4800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 48.332922824s ago: executing program 0 (id=3696): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000f3ffffff00000000ff0f000085200000cc43030095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 48.119258876s ago: executing program 3 (id=3697): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/86, 0x56}, {0x0}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000600)=""/250, 0xfa}], 0x5}, 0x100) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="59cf0000000010000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r8, 0x25, 0x2, @void}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa050045f0003000040a010102ac1414aa040290780100000045a400000064000001110006ac1414aae000000100000000000001f5b9e5a476a3b7a5fb23d66f1c97910b928f93dc50308a9b721989202566f0df3cae0077af7bbf799cd5e7a71d7dcad5ad29ab84bee514999c3a41af67282f"], 0x0) 48.114184334s ago: executing program 0 (id=3698): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a004400fe0300010000000008000400010000000600150007000000280016800800010002000000140005"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000200)=@ethtool_coalesce={0xe, 0x8, 0xffffffff, 0x3, 0xffffffff, 0xcc4, 0xffff, 0x1, 0xa, 0x9, 0xb53, 0x2, 0xd, 0x7c, 0xc, 0x8, 0x6, 0x4, 0x7, 0x2, 0x0, 0x6, 0x8}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 47.817472994s ago: executing program 2 (id=3699): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0xc8, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2fc, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feff0000"]}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @generic="64d97e433d7b5de84ebea7e50c6377b48e54720d30b090c88f8c74c0573aa5cbd12857c18e825121e0a8c2cb62f63c0a718c671ff440b9bc117c71b965a58a8530fdb3eb1388262e77d99252b0bff0c81245789cb76cee99dd989cad0839b565b4b61e3ff0537736d4ff604d9941dc31f80d205a38770fe7b8f34229d4a2814acf1ce0c7c63150abea34b3f5c161cf40a9fbbcc0", @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="0218000010000000000000000000000003000600000000000200000400000000000000000000000008001200000000000000000000000000170000000000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000300000000000000000800028004000500"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd25, 0x25dfdbf8, {0x7, r5}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0xc005}, 0x20004090) 47.758467435s ago: executing program 0 (id=3700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) listen(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, 0x0, &(0x7f0000000100)) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x200, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0xffffffff, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 'veth0_vlan\x00', 'virt_wifi0\x00', {}, {0xff}, 0x87, 0x7, 0x5, 0x45}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x9, 0x1, 0xa, 0x3, 0xfffb, 0xe00, 0xffff, 0x7, 0x8, 0x5, 0x2, 0x2, 0x7, 0xa, 0xa, 0xf], 0x6}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0xa, "7a05aa8a10bf9ae13b1f3c88968eee32c1f8b1aa90d06db2c3178b3b9d4a"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0xffffff00, 0xffffff00, 0x1000001ff], [0xff, 0xffffff00, 0xffffffff], 'veth1_to_bridge\x00', 'sit0\x00', {}, {0xff}, 0x0, 0x6, 0x6, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) 47.549065689s ago: executing program 1 (id=3701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x1d, 0x0, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 47.547036552s ago: executing program 3 (id=3702): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f00000000c0)=0x80, 0x80800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800452e0030006a0000080190780a010102ac14142ada43aadefb0027d92b71c295a4b949f178c3c5e2b729c927bb0000f238a3f8f0380064a604ff040fed8f0b3f9ea82e867c77dcc558c7ba71e7637c9ec3a57047cae7807e36de2ebe60200ce9faaf0400730fa889bdaaa1e2f8c12d020a09f74c5cbc906dc3d2090378d4f47203c9462541f86f638aba6d1ff45fbd5aaccc65958dcfd8b6819382c770af4a6e788220ad820935018f178c820f27c4be060df90b6d2d7283c68b846ee509d3a7dca042afbe6b4915c6905e383ef2118c320713a50dcb624cb8028b35b03ac3aacfea3455d2bcd910fb3d534c5184a08a9103be21b2063768c7044bdd0eb90a04bee773731dcce9e7c684fb555f5b005baa909f20b87b1bfabc5cc38ea19ff37d2a1c955eadec45941c5a72e3fcab50605d182b5d27c36ce4cc27b39d2aeec2f5df101ffc3fe784113df01d78daaa0eff5011a959e70e04214d5895d664d0"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newchain={0x94, 0x64, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x3, 0x1}, {0xffff, 0x10}, {0x0, 0xfff2}}, [@f_rsvp6={{0xa}, {0x20, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}, @f_rsvp6={{0xa}, {0x38, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x5, 0xc899}, {0x2, 0x3, 0x7f}, 0x8, 0x5, 0x3}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x4000000) 47.433164944s ago: executing program 2 (id=3703): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250201f28008001800e00000011400010000000000000000000000fffaac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0400e9000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @empty}, &(0x7f00000003c0)=0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r2, &(0x7f00000004c0), 0x400000000000235, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) socket(0xb, 0x4, 0xe172) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @empty}, &(0x7f00000003c0)=0xc) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async) sendmmsg(r2, &(0x7f00000004c0), 0x400000000000235, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) (async) socket(0xb, 0x4, 0xe172) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) (async) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) 47.401438224s ago: executing program 0 (id=3704): syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x19a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c000040"], 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x40, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 47.256863022s ago: executing program 3 (id=3705): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000024c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xd, 0xf, &(0x7f00000026c0)=ANY=[@ANYBLOB="180000005a00000000000000a60b000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000066090100000003e716000000060000003c32000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000002680)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) getsockname$packet(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000300)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002300)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000002340)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000002380)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002400)={'bridge_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000002440)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x180000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000002480), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000014b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 47.215273999s ago: executing program 1 (id=3706): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x2e}, 0x49cf75490397e68f) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'bond_slave_0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x3, 0xfe, 0xe, 0x40, 0x6, 0x6, 0x4, 0x59, 0x4, [0x8, 0x3, 0x20ef, 0x8, 0x10000, 0x5, 0x9]}}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f0000000b40)={0xabc, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0xa58, 0x8, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @empty, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb}]}, {0x108, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "39b0f12bc5b727c58aa65c0c649f215f6d4a3c1604517cbe8680b6cd2b468f44"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "83dbc9473144c9a55574bda9ccc6ec23034946da9d4ec8e419f89b7ceca99207"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x35, @dev={0xfe, 0x80, '\x00', 0x4}, 0xa}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d84746b01998be29ffcf6bcc63ab3f90c92a579e18225f94f3df2b9d05eb44fb"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x4}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}]}]}, {0x3c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x364, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc0ecd5e6643c32d5cb3997c673e320d22fd466b5a5d17c080720554785b5785"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa9d2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}]}, {0x2d0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x80}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f221e621cdea268db5cb06a73fcd08c7f39670e4f2c7d08b912df09f3a6c98a"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0xabc}, 0x1, 0x0, 0x0, 0x4004800}, 0x48050) write(r3, &(0x7f0000000180)="4c00000011000f14001100020000190002000000200000", 0x17) recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f00000003c0)="ffffffffffff0211223344550806000108000604000243054305123400123400ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000400)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x80000) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) 47.014581275s ago: executing program 4 (id=3707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000540)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) write(r1, &(0x7f0000000540)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000980), &(0x7f0000000f40)=0x4) (async) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000980), &(0x7f0000000f40)=0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0206020002000000c23f16779a6e79aa3acd5fdc41c6956567866d2f36df2aa2e97ac66909088aff98be68d687ae518bf2c01fcf6d894a171dad71293106f79cec51740c9caa77e5541ab2733d2a67a9a406f3887f5c969942e120c9feac721fa9e7c145c298862b2e14412351a9a02e34192bb49ef65a7aaa713e02a122f7a55896ee1b2cfcf2c47ad40669c285332d05fa24c2c019148b1b66328c185dd318f567b4e729c3af2491f34597ac8ec1816aff8217ee649f03b3e45bd31179feed22"], 0x10}}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x2daa5c9010a13af6, r3, 0x61738000) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x2daa5c9010a13af6, r3, 0x61738000) splice(r2, 0x0, r1, 0x0, 0x2, 0x2) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000840)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000220) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000880), 0x4) bind$inet(r5, &(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r5, &(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a40)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f0000000e40)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000e80)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000f00)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000010000104fceffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c327050001190000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2004d809}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 46.760015608s ago: executing program 0 (id=3708): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000200000008002500000000000c0099"], 0x28}}, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x40010040, 0x0, 0x0) 46.185259935s ago: executing program 3 (id=3709): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f00000000c0)={0x9, 0x0, 0x6, 0x1, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000100001048ac29ebc18bfbb2da0c2dc572394175de9656c0d48b90000", @ANYRES32=0x0, @ANYBLOB="2b0300000000000024001280080001006772650018000280080005000600000004001200060010004e21000008001f0009000000"], 0x4c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x1a0, 0x30, 0x9, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x100, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x1a0}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x1, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) socket$inet6_udp(0xa, 0x2, 0x0) 46.087504579s ago: executing program 2 (id=3710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000071127e000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)=ANY=[@ANYBLOB="48000000420001000000000000000000030100000f0000002600010000112233445566778899aabb08004500001c00002000011100000101010102020202000004000280040003"], 0x48}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f00000001c0)='\x00', 0x20800, &(0x7f0000000200)={@_ha_fsid={[0xffffffff, 0xcd]}, {0xfffa, 0x4000, 0x1, 0x1}}, 0x5, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xfffffffd}, {[0x10001, 0x8, 0xffffa100, 0x200]}, 0x2, 0x2d, &(0x7f00000002c0)=""/45}) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0x1ff, @remote}, 0x1c) 45.959372206s ago: executing program 0 (id=3711): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x200, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240), 0x22}}], 0x2, 0x2004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000480)=@req={0x3fc, 0x4, 0x0, 0xfffffffb}, 0x10) r5 = socket(0x1e, 0x4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000004c0)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000500)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f0000000540)=[{{0x0, 0xa9cc7003, &(0x7f0000000580)=[{&(0x7f00000005c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r5, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) close(0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) vmsplice(r2, &(0x7f00000009c0)=[{&(0x7f0000000980)="d591ee626ca3400ae3c47f8f810b8391164a1dcae26624d0568b759074c8f4c6735ff5d8755aea900b809e439c66", 0x2e}], 0x1, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r8, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xde}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa744}]}, 0x80}, 0x1, 0x0, 0x0, 0x10000000}, 0x8455) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000003c000000060a01240000000000000000020000020073797a3000000000100004800c000180080001003b3956c514000000110007000000564dc065d6ed3532a58ffbcd574bb4d347aa302c2f56b30955e1ed00"/117], 0x64}}, 0x0) 0s ago: executing program 32 (id=3706): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x2e}, 0x49cf75490397e68f) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'bond_slave_0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x3, 0xfe, 0xe, 0x40, 0x6, 0x6, 0x4, 0x59, 0x4, [0x8, 0x3, 0x20ef, 0x8, 0x10000, 0x5, 0x9]}}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f0000000b40)={0xabc, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0xa58, 0x8, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @empty, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb}]}, {0x108, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "39b0f12bc5b727c58aa65c0c649f215f6d4a3c1604517cbe8680b6cd2b468f44"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "83dbc9473144c9a55574bda9ccc6ec23034946da9d4ec8e419f89b7ceca99207"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x35, @dev={0xfe, 0x80, '\x00', 0x4}, 0xa}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d84746b01998be29ffcf6bcc63ab3f90c92a579e18225f94f3df2b9d05eb44fb"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x4}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}]}]}, {0x3c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x364, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc0ecd5e6643c32d5cb3997c673e320d22fd466b5a5d17c080720554785b5785"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa9d2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}]}, {0x2d0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x80}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f221e621cdea268db5cb06a73fcd08c7f39670e4f2c7d08b912df09f3a6c98a"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0xabc}, 0x1, 0x0, 0x0, 0x4004800}, 0x48050) write(r3, &(0x7f0000000180)="4c00000011000f14001100020000190002000000200000", 0x17) recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f00000003c0)="ffffffffffff0211223344550806000108000604000243054305123400123400ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000400)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x80000) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) kernel console output (not intermixed with test programs): ] ? bpf_compute_scc+0xb8/0xb10 [ 412.438494][T17858] bpf_compute_scc+0xb8/0xb10 [ 412.438542][T17858] bpf_check+0x271e/0x2ef0 [ 412.438591][T17858] ? __pfx_bpf_check+0x10/0x10 [ 412.438622][T17858] ? bpf_obj_name_cpy+0x194/0x1e0 [ 412.438661][T17858] bpf_prog_load+0x14d6/0x1c20 [ 412.438704][T17858] ? __pfx_bpf_prog_load+0x10/0x10 [ 412.438771][T17858] __sys_bpf+0xd0d/0xd90 [ 412.438809][T17858] ? __pfx___sys_bpf+0x10/0x10 [ 412.438850][T17858] ? __fget_files+0x2a/0x420 [ 412.438892][T17858] ? ksys_write+0x242/0x270 [ 412.438919][T17858] ? __pfx_ksys_write+0x10/0x10 [ 412.438949][T17858] __x64_sys_bpf+0xba/0xd0 [ 412.438978][T17858] do_syscall_64+0x166/0x520 [ 412.439004][T17858] ? trace_irq_disable+0x3b/0x140 [ 412.439029][T17858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.439052][T17858] ? clear_bhb_loop+0x70/0xc0 [ 412.439081][T17858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.439102][T17858] RIP: 0033:0x7f603779e559 [ 412.439122][T17858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.439140][T17858] RSP: 002b:00007f6038740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.439163][T17858] RAX: ffffffffffffffda RBX: 00007f6037a25fa0 RCX: 00007f603779e559 [ 412.439179][T17858] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 412.439194][T17858] RBP: 00007f6038740090 R08: 0000000000000000 R09: 0000000000000000 [ 412.439207][T17858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.439221][T17858] R13: 00007f6037a26038 R14: 00007f6037a25fa0 R15: 00007fff27a4c918 [ 412.439258][T17858] [ 412.563692][ T5627] Bluetooth: hci1: command tx timeout [ 412.580075][T17597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.759159][T17597] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.824794][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.824908][ T7130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.858645][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.858769][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.138033][T17877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3084'. [ 413.238998][T17881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3085'. [ 413.267511][T17882] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3085'. [ 413.339492][T17890] FAULT_INJECTION: forcing a failure. [ 413.339492][T17890] name failslab, interval 1, probability 0, space 0, times 0 [ 413.339532][T17890] CPU: 1 UID: 0 PID: 17890 Comm: syz.1.3089 Not tainted syzkaller #0 PREEMPT(full) [ 413.339557][T17890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 413.339572][T17890] Call Trace: [ 413.339580][T17890] [ 413.339590][T17890] dump_stack_lvl+0xe8/0x150 [ 413.339628][T17890] should_fail_ex+0x410/0x560 [ 413.339667][T17890] should_failslab+0xa8/0x100 [ 413.339710][T17890] __kvmalloc_node_noprof+0x176/0x820 [ 413.339742][T17890] ? __kvmalloc_node_noprof+0x345/0x820 [ 413.339771][T17890] ? bpf_compute_scc+0xec/0xb10 [ 413.339795][T17890] ? bpf_compute_scc+0xec/0xb10 [ 413.339826][T17890] bpf_compute_scc+0xec/0xb10 [ 413.339863][T17890] bpf_check+0x271e/0x2ef0 [ 413.339900][T17890] ? __pfx_bpf_check+0x10/0x10 [ 413.339924][T17890] ? bpf_obj_name_cpy+0x194/0x1e0 [ 413.339954][T17890] bpf_prog_load+0x14d6/0x1c20 [ 413.339987][T17890] ? __pfx_bpf_prog_load+0x10/0x10 [ 413.340032][T17890] __sys_bpf+0xd0d/0xd90 [ 413.340060][T17890] ? __pfx___sys_bpf+0x10/0x10 [ 413.340092][T17890] ? __fget_files+0x2a/0x420 [ 413.340124][T17890] ? ksys_write+0x242/0x270 [ 413.340145][T17890] ? __pfx_ksys_write+0x10/0x10 [ 413.340167][T17890] __x64_sys_bpf+0xba/0xd0 [ 413.340195][T17890] do_syscall_64+0x166/0x520 [ 413.340216][T17890] ? trace_irq_disable+0x3b/0x140 [ 413.340236][T17890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.340253][T17890] ? clear_bhb_loop+0x70/0xc0 [ 413.340275][T17890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.340293][T17890] RIP: 0033:0x7fbeb6b9e559 [ 413.340309][T17890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.340325][T17890] RSP: 002b:00007fbeb4df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.340344][T17890] RAX: ffffffffffffffda RBX: 00007fbeb6e25fa0 RCX: 00007fbeb6b9e559 [ 413.340357][T17890] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 413.340368][T17890] RBP: 00007fbeb4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 413.340379][T17890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.340390][T17890] R13: 00007fbeb6e26038 R14: 00007fbeb6e25fa0 R15: 00007ffd3582db98 [ 413.340418][T17890] [ 413.919879][T17909] net_ratelimit: 121 callbacks suppressed [ 413.919904][T17909] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 413.986729][T17916] x_tables: duplicate underflow at hook 2 [ 414.639481][T17597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.648151][ T5627] Bluetooth: hci1: command tx timeout [ 414.810004][T17597] veth0_vlan: entered promiscuous mode [ 414.848670][T17597] veth1_vlan: entered promiscuous mode [ 414.978818][T17597] veth0_macvtap: entered promiscuous mode [ 415.020660][T17597] veth1_macvtap: entered promiscuous mode [ 415.134039][T17597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.197072][T17597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.209232][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3111'. [ 415.252529][ T1367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.253696][ T1367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.253743][ T1367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.253783][ T1367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.364831][T17967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3111'. [ 415.705925][T17987] 8021q: VLANs not supported on bond0 [ 415.732274][ T6951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.732300][ T6951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.798548][ T7145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.798572][ T7145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.859425][T17991] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3115'. [ 416.086167][T17997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.486490][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.499533][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.508672][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.520402][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.529106][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.544271][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 416.990500][T18028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.102836][T18038] syzkaller0: entered promiscuous mode [ 417.102862][T18038] syzkaller0: entered allmulticast mode [ 417.786899][T18007] wlan1 speed is unknown, defaulting to 1000 [ 417.828026][T18007] rxe_eth0 speed is unknown, defaulting to 1000 [ 417.896690][T18077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3138'. [ 417.896900][T18076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3138'. [ 417.948118][T18081] x_tables: unsorted entry at hook 4 [ 418.069692][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 418.069729][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 418.126119][T18090] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3139'. [ 418.651636][ T5627] Bluetooth: hci4: command tx timeout [ 418.830082][T18118] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3147'. [ 419.055748][T18124] tipc: Enabling of bearer rejected, failed to enable media [ 419.118424][T18136] tipc: Enabling of bearer rejected, failed to enable media [ 419.159689][T18142] xt_REDIRECT: bad rangesize 26624. [ 419.498078][T18007] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.498267][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.498399][T18007] bridge_slave_0: entered allmulticast mode [ 419.500394][T18007] bridge_slave_0: entered promiscuous mode [ 419.532463][T18007] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.532668][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.532816][T18007] bridge_slave_1: entered allmulticast mode [ 419.534746][T18007] bridge_slave_1: entered promiscuous mode [ 419.598263][T18007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.611295][T18007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.653388][T18007] team0: Port device team_slave_0 added [ 419.656497][T18007] team0: Port device team_slave_1 added [ 419.716000][T18007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.716022][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.716050][T18007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.787009][T18007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.787028][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.787057][T18007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.975642][T18007] hsr_slave_0: entered promiscuous mode [ 419.976762][T18007] hsr_slave_1: entered promiscuous mode [ 419.977516][T18007] debugfs: 'hsr0' already exists in 'hsr' [ 419.977537][T18007] Cannot create hsr debugfs directory [ 420.028017][T18172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.079622][T18176] batman_adv: batadv0: Adding interface: veth0 [ 420.079640][T18176] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.079671][T18176] batman_adv: batadv0: Interface activated: veth0 [ 420.080213][T18178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.080231][T18178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.134853][T18178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.134879][T18178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.139017][T18178] batman_adv: batadv0: Interface deactivated: veth0 [ 420.139042][T18178] batman_adv: batadv0: Removing interface: veth0 [ 420.188838][T18181] netlink: 'syz.3.3159': attribute type 64 has an invalid length. [ 420.250076][T18185] netlink: 'syz.3.3159': attribute type 64 has an invalid length. [ 420.250104][T18185] __nla_validate_parse: 5 callbacks suppressed [ 420.250117][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 420.294775][T18186] GUP no longer grows the stack in syz.2.3160 (18186): 200000003000-20000000a000 (200000001000) [ 420.294814][T18186] CPU: 1 UID: 0 PID: 18186 Comm: syz.2.3160 Not tainted syzkaller #0 PREEMPT(full) [ 420.294841][T18186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 420.294855][T18186] Call Trace: [ 420.294865][T18186] [ 420.294875][T18186] dump_stack_lvl+0xe8/0x150 [ 420.294916][T18186] __get_user_pages+0x23b6/0x2750 [ 420.294956][T18186] ? lock_acquire+0x115/0x350 [ 420.295002][T18186] ? __gup_longterm_locked+0xc3b/0x15c0 [ 420.295048][T18186] __gup_longterm_locked+0xd52/0x15c0 [ 420.295088][T18186] ? lock_acquire+0x115/0x350 [ 420.295134][T18186] gup_fast_fallback+0x1d92/0x20e0 [ 420.295213][T18186] ? __pfx_gup_fast_fallback+0x10/0x10 [ 420.295252][T18186] ? lock_acquire+0x115/0x350 [ 420.295275][T18186] ? is_valid_gup_args+0x11f/0x200 [ 420.295313][T18186] ? get_user_pages_fast+0x4d/0xb0 [ 420.295352][T18186] __iov_iter_get_pages_alloc+0x378/0xa40 [ 420.295397][T18186] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 420.295438][T18186] iov_iter_get_pages2+0x5e/0xa0 [ 420.295479][T18186] __se_sys_vmsplice+0x7b5/0x1660 [ 420.295529][T18186] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 420.295555][T18186] ? __pfx_futex_wait+0x10/0x10 [ 420.295661][T18186] do_syscall_64+0x166/0x520 [ 420.295690][T18186] ? trace_irq_disable+0x3b/0x140 [ 420.295716][T18186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.295740][T18186] ? clear_bhb_loop+0x70/0xc0 [ 420.295770][T18186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.295793][T18186] RIP: 0033:0x7f351f19e559 [ 420.295815][T18186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.295835][T18186] RSP: 002b:00007f352002f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 420.295861][T18186] RAX: ffffffffffffffda RBX: 00007f351f425fa0 RCX: 00007f351f19e559 [ 420.295878][T18186] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000006 [ 420.295894][T18186] RBP: 00007f351f235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 420.295908][T18186] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 420.295923][T18186] R13: 00007f351f426038 R14: 00007f351f425fa0 R15: 00007ffd935412d8 [ 420.295963][T18186] [ 420.667749][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 420.722733][ T5627] Bluetooth: hci4: command tx timeout [ 420.747141][T18193] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 420.775399][T18194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3163'. [ 420.863904][T18007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.863946][T18007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.863975][T18007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 421.157692][T18007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.157735][T18007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.157765][T18007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 421.432630][T18007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.432671][T18007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.432699][T18007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 421.594518][T18007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.594561][T18007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.594591][T18007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 421.859382][T18228] netlink: 'syz.1.3170': attribute type 30 has an invalid length. [ 421.926027][T18007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.955464][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.956544][T18007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.978222][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.979405][T18232] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3174'. [ 421.979520][T18007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.007905][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.008821][T18007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.037519][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.428236][T18007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.485670][T18007] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.510322][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.510448][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.555417][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.555543][ T6951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.593907][T18255] can: request_module (can-proto-0) failed. [ 422.802315][ T5627] Bluetooth: hci4: command tx timeout [ 422.803383][T18266] No such timeout policy "syz0" [ 422.909279][T18272] tipc: Enabled bearer , priority 11 [ 423.015461][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3186'. [ 423.460172][T18304] PKCS7: Unknown OID: [4] (bad) [ 423.460221][T18304] PKCS7: Only support pkcs7_signedData type [ 423.817376][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3198'. [ 423.825096][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3198'. [ 423.909274][T18330] netlink: 'syz.0.3197': attribute type 1 has an invalid length. [ 423.909302][T18330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3197'. [ 424.006868][T18330] syzkaller0: entered promiscuous mode [ 424.006896][T18330] syzkaller0: entered allmulticast mode [ 424.232702][T18007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.353722][T18347] netlink: 'syz.0.3202': attribute type 1 has an invalid length. [ 424.621348][T18357] bridge_slave_0: default FDB implementation only supports local addresses [ 424.622706][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3204'. [ 424.622732][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3204'. [ 424.881934][ T5627] Bluetooth: hci4: command tx timeout [ 424.905088][T18364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.021446][T18373] netlink: 'syz.0.3206': attribute type 3 has an invalid length. [ 425.096107][T18368] can: request_module (can-proto-0) failed. [ 425.258618][T18382] __nla_validate_parse: 1 callbacks suppressed [ 425.258639][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'. [ 425.307139][T18007] veth0_vlan: entered promiscuous mode [ 425.320687][T18382] Bluetooth: MGMT ver 1.23 [ 425.368451][T18007] veth1_vlan: entered promiscuous mode [ 425.407219][T18387] FAULT_INJECTION: forcing a failure. [ 425.407219][T18387] name failslab, interval 1, probability 0, space 0, times 0 [ 425.407289][T18387] CPU: 0 UID: 0 PID: 18387 Comm: syz.3.3210 Not tainted syzkaller #0 PREEMPT(full) [ 425.407314][T18387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 425.407329][T18387] Call Trace: [ 425.407340][T18387] [ 425.407348][T18387] dump_stack_lvl+0xe8/0x150 [ 425.407378][T18387] should_fail_ex+0x410/0x560 [ 425.407407][T18387] should_failslab+0xa8/0x100 [ 425.407433][T18387] __kvmalloc_node_noprof+0x176/0x820 [ 425.407457][T18387] ? __kvmalloc_node_noprof+0x345/0x820 [ 425.407479][T18387] ? analyze_subprog+0x8ac/0x9e00 [ 425.407500][T18387] ? analyze_subprog+0x8ac/0x9e00 [ 425.407528][T18387] analyze_subprog+0x8ac/0x9e00 [ 425.407549][T18387] ? is_bpf_text_address+0x292/0x2b0 [ 425.407577][T18387] ? kernel_text_address+0xa5/0xe0 [ 425.407617][T18387] ? __pfx_stack_trace_save+0x10/0x10 [ 425.407649][T18387] ? call_instance+0x263/0x560 [ 425.407669][T18387] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 425.407691][T18387] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 425.407714][T18387] ? __pfx_analyze_subprog+0x10/0x10 [ 425.407735][T18387] ? __x64_sys_bpf+0xba/0xd0 [ 425.407753][T18387] ? do_syscall_64+0x166/0x520 [ 425.407774][T18387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.407824][T18387] ? call_instance+0x263/0x560 [ 425.407845][T18387] ? rcu_is_watching+0x16/0xb0 [ 425.407867][T18387] ? call_instance+0x263/0x560 [ 425.407891][T18387] ? trace_kmalloc+0x2a/0xf0 [ 425.407911][T18387] ? call_instance+0x263/0x560 [ 425.407931][T18387] ? __kvmalloc_node_noprof+0x52f/0x820 [ 425.407955][T18387] ? __kvmalloc_node_noprof+0x345/0x820 [ 425.407976][T18387] ? call_instance+0x263/0x560 [ 425.407996][T18387] ? call_instance+0x263/0x560 [ 425.408023][T18387] ? call_instance+0x42e/0x560 [ 425.408050][T18387] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 425.408074][T18387] ? btf_type_by_id+0xe6/0x180 [ 425.408112][T18387] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 425.408140][T18387] ? __kvmalloc_node_noprof+0x345/0x820 [ 425.408161][T18387] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 425.408184][T18387] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 425.408218][T18387] bpf_compute_live_registers+0x8d3/0x1ff0 [ 425.408263][T18387] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 425.408296][T18387] bpf_check+0x2744/0x2ef0 [ 425.408332][T18387] ? __pfx_bpf_check+0x10/0x10 [ 425.408356][T18387] ? bpf_obj_name_cpy+0x194/0x1e0 [ 425.408386][T18387] bpf_prog_load+0x14d6/0x1c20 [ 425.408419][T18387] ? __pfx_bpf_prog_load+0x10/0x10 [ 425.408463][T18387] __sys_bpf+0xd0d/0xd90 [ 425.408491][T18387] ? __pfx___sys_bpf+0x10/0x10 [ 425.408522][T18387] ? __fget_files+0x2a/0x420 [ 425.408554][T18387] ? ksys_write+0x242/0x270 [ 425.408574][T18387] ? __pfx_ksys_write+0x10/0x10 [ 425.408596][T18387] __x64_sys_bpf+0xba/0xd0 [ 425.408618][T18387] do_syscall_64+0x166/0x520 [ 425.408638][T18387] ? trace_irq_disable+0x3b/0x140 [ 425.408657][T18387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.408675][T18387] ? clear_bhb_loop+0x70/0xc0 [ 425.408696][T18387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.408713][T18387] RIP: 0033:0x7f603779e559 [ 425.408729][T18387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.408745][T18387] RSP: 002b:00007f6038740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.408768][T18387] RAX: ffffffffffffffda RBX: 00007f6037a25fa0 RCX: 00007f603779e559 [ 425.408785][T18387] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 425.408799][T18387] RBP: 00007f6038740090 R08: 0000000000000000 R09: 0000000000000000 [ 425.408812][T18387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 425.408826][T18387] R13: 00007f6037a26038 R14: 00007f6037a25fa0 R15: 00007fff27a4c918 [ 425.408860][T18387] [ 425.815280][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3211'. [ 425.815304][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3211'. [ 425.845124][T18389] vlan0: entered promiscuous mode [ 425.875043][T18389] syzkaller0: entered promiscuous mode [ 425.875067][T18389] syzkaller0: entered allmulticast mode [ 425.876363][T18389] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 425.905857][ T27] IPVS: starting estimator thread 0... [ 425.968027][T18007] veth0_macvtap: entered promiscuous mode [ 425.983218][T18007] veth1_macvtap: entered promiscuous mode [ 425.992272][T18390] IPVS: using max 30 ests per chain, 72000 per kthread [ 426.044956][T18007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.086592][T18007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.142025][ T7162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.142082][ T7162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.142140][ T7162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.142204][ T7162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.208882][T18406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3216'. [ 426.511675][ T1367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.511699][ T1367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.660634][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 426.676965][T18422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3221'. [ 426.677007][T18422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.708988][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.709011][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.779522][T18424] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 426.832545][T18424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3222'. [ 426.900419][T18431] FAULT_INJECTION: forcing a failure. [ 426.900419][T18431] name failslab, interval 1, probability 0, space 0, times 0 [ 426.900455][T18431] CPU: 1 UID: 0 PID: 18431 Comm: syz.0.3223 Not tainted syzkaller #0 PREEMPT(full) [ 426.900481][T18431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 426.900508][T18431] Call Trace: [ 426.900517][T18431] [ 426.900528][T18431] dump_stack_lvl+0xe8/0x150 [ 426.900566][T18431] should_fail_ex+0x410/0x560 [ 426.900604][T18431] should_failslab+0xa8/0x100 [ 426.900640][T18431] __kmalloc_cache_noprof+0xa3/0x600 [ 426.900667][T18431] ? btf_type_is_void+0xd/0x20 [ 426.900701][T18431] ? do_check_common+0x26e/0x5610 [ 426.900731][T18431] ? do_check_common+0x26e/0x5610 [ 426.900770][T18431] do_check_common+0x26e/0x5610 [ 426.900826][T18431] ? bpf_compute_live_registers+0x1f40/0x1ff0 [ 426.900856][T18431] ? bpf_insn_def32+0x1ae/0x650 [ 426.900892][T18431] ? mark_fastcall_patterns+0xf32/0xf90 [ 426.900925][T18431] ? __pfx_do_check_common+0x10/0x10 [ 426.900973][T18431] do_check_main+0xa2/0x1f0 [ 426.901056][T18431] bpf_check+0x2775/0x2ef0 [ 426.901119][T18431] ? __pfx_bpf_check+0x10/0x10 [ 426.901150][T18431] ? bpf_obj_name_cpy+0x194/0x1e0 [ 426.901190][T18431] bpf_prog_load+0x14d6/0x1c20 [ 426.901233][T18431] ? __pfx_bpf_prog_load+0x10/0x10 [ 426.901291][T18431] __sys_bpf+0xd0d/0xd90 [ 426.901329][T18431] ? __pfx___sys_bpf+0x10/0x10 [ 426.901369][T18431] ? __fget_files+0x2a/0x420 [ 426.901409][T18431] ? ksys_write+0x242/0x270 [ 426.901435][T18431] ? __pfx_ksys_write+0x10/0x10 [ 426.901477][T18431] __x64_sys_bpf+0xba/0xd0 [ 426.901506][T18431] do_syscall_64+0x166/0x520 [ 426.901532][T18431] ? trace_irq_disable+0x3b/0x140 [ 426.901557][T18431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.901580][T18431] ? clear_bhb_loop+0x70/0xc0 [ 426.901607][T18431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.901630][T18431] RIP: 0033:0x7fabbb59e559 [ 426.901651][T18431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.901670][T18431] RSP: 002b:00007fabbc4c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.901694][T18431] RAX: ffffffffffffffda RBX: 00007fabbb825fa0 RCX: 00007fabbb59e559 [ 426.901721][T18431] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 426.901736][T18431] RBP: 00007fabbc4c8090 R08: 0000000000000000 R09: 0000000000000000 [ 426.901756][T18431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.901775][T18431] R13: 00007fabbb826038 R14: 00007fabbb825fa0 R15: 00007ffdde1b09d8 [ 426.901812][T18431] [ 427.188201][T18446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3222'. [ 427.238585][T18436] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 427.354242][T18432] netlink: 'syz.2.3224': attribute type 14 has an invalid length. [ 427.354266][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 427.425808][T18432] netlink: 'syz.2.3224': attribute type 14 has an invalid length. [ 427.430216][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 427.616975][ T27] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.822049][ T7162] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.823596][ T7162] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.823641][ T7162] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.008806][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.026553][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.027446][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.029738][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.042292][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.194928][T18469] netlink: 'syz.1.3231': attribute type 15 has an invalid length. [ 428.352235][T18472] h: entered promiscuous mode [ 428.773170][T18461] wlan1 speed is unknown, defaulting to 1000 [ 428.775172][T18461] rxe_eth0 speed is unknown, defaulting to 1000 [ 429.430456][T18538] x_tables: duplicate underflow at hook 1 [ 429.655903][T18549] tipc: Enabling of bearer rejected, media not registered [ 430.163610][ T5627] Bluetooth: hci0: command tx timeout [ 430.185994][T18461] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.186217][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.186365][T18461] bridge_slave_0: entered allmulticast mode [ 430.188324][T18461] bridge_slave_0: entered promiscuous mode [ 430.200751][T18461] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.203013][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.204461][T18461] bridge_slave_1: entered allmulticast mode [ 430.210160][T18461] bridge_slave_1: entered promiscuous mode [ 430.397576][T18461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.435045][T18461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.492105][T18461] team0: Port device team_slave_0 added [ 430.495239][T18461] team0: Port device team_slave_1 added [ 430.544851][T18461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.544870][T18461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.544898][T18461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.549266][T18461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.549282][T18461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.549311][T18461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.650815][T18591] __nla_validate_parse: 5 callbacks suppressed [ 430.650836][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'. [ 430.650853][T18591] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3257'. [ 430.724861][T18595] Cannot find add_set index 0 as target [ 430.727448][T18597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.754675][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'. [ 430.758546][T18591] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3257'. [ 430.789035][T18591] netlink: 'syz.2.3257': attribute type 1 has an invalid length. [ 430.789056][T18591] nbd: error processing sock list [ 430.921628][T18600] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3259'. [ 430.931016][T18461] hsr_slave_0: entered promiscuous mode [ 430.947883][T18461] hsr_slave_1: entered promiscuous mode [ 430.948799][T18461] debugfs: 'hsr0' already exists in 'hsr' [ 430.948821][T18461] Cannot create hsr debugfs directory [ 431.337395][T18620] xt_cgroup: path and classid specified [ 431.337523][T18620] xt_cgroup: path and classid specified [ 431.337642][T18620] xt_cgroup: path and classid specified [ 431.366012][T18620] xt_cgroup: path and classid specified [ 431.366207][T18620] xt_cgroup: path and classid specified [ 431.366318][T18620] xt_cgroup: path and classid specified [ 431.366424][T18620] xt_cgroup: path and classid specified [ 431.366530][T18620] xt_cgroup: path and classid specified [ 431.366701][T18620] xt_cgroup: path and classid specified [ 431.366808][T18620] xt_cgroup: path and classid specified [ 431.537813][T18625] x_tables: duplicate underflow at hook 3 [ 431.565081][T18631] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3268'. [ 431.711547][T18638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3270'. [ 431.744447][T18638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3270'. [ 431.745090][T18636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3269'. [ 431.812997][T18461] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.813037][T18461] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 431.813065][T18461] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 431.813093][T18461] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 431.974984][T18461] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.975024][T18461] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 431.975054][T18461] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 431.975081][T18461] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 432.106915][T18461] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.106956][T18461] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 432.106986][T18461] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 432.107013][T18461] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 432.242025][ T5627] Bluetooth: hci0: command tx timeout [ 432.264177][T18461] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.264218][T18461] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 432.264247][T18461] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 432.264275][T18461] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 432.410291][T18655] syzkaller0: entered promiscuous mode [ 432.410316][T18655] syzkaller0: entered allmulticast mode [ 432.712842][T18671] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3278'. [ 433.122159][T18461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 433.145164][T18461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.146333][T18461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 433.159167][T18461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.184863][T18461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 433.221961][T18461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.225738][T18461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 433.268948][T18461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.736396][T18461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.780404][T18725] netlink: 'syz.4.3289': attribute type 83 has an invalid length. [ 433.795000][T18461] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.813429][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.813506][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.856020][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.856106][ T7145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.885763][T18727] TCP: TCP_TX_DELAY enabled [ 433.948973][T18733] syzkaller0: entered promiscuous mode [ 433.948999][T18733] syzkaller0: entered allmulticast mode [ 434.069920][T18735] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 434.069960][T18735] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 434.070000][T18735] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 434.159584][T18735] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 434.322045][ T5627] Bluetooth: hci0: command tx timeout [ 435.134608][T18461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.263669][T18461] veth0_vlan: entered promiscuous mode [ 435.288699][T18461] veth1_vlan: entered promiscuous mode [ 435.340376][T18461] veth0_macvtap: entered promiscuous mode [ 435.353633][T18461] veth1_macvtap: entered promiscuous mode [ 435.379284][T18461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.396344][T18461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.432953][ T7145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.434018][ T1406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.434094][ T1406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.434130][ T1406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.889903][ T7130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.889927][ T7130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.959538][ T7130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.959561][ T7130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.274886][T18785] bond1: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 436.276705][T18785] bond1 (unregistering): Released all slaves [ 436.403106][ T5627] Bluetooth: hci0: command tx timeout [ 436.679411][T18809] syzkaller0: entered promiscuous mode [ 436.679438][T18809] syzkaller0: entered allmulticast mode [ 436.940594][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 436.952092][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 436.953515][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 436.956382][ T5640] syz_tun (unregistering): left allmulticast mode [ 436.957624][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 436.958725][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 437.414615][T18832] __nla_validate_parse: 3 callbacks suppressed [ 437.414636][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3310'. [ 437.468907][ T7146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.468948][ T7146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56473 - 0 [ 437.539398][T18839] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 437.616217][T18839] netlink: 'syz.1.3314': attribute type 1 has an invalid length. [ 437.720822][T18839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.810839][T18843] bond2: Unable to set up delay as MII monitoring is disabled [ 437.825167][T18843] bond2 (unregistering): Released all slaves [ 437.955742][ T7146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.955782][ T7146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56473 - 0 [ 438.139624][T18862] netlink: 'syz.1.3317': attribute type 62 has an invalid length. [ 438.205203][T18861] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3317'. [ 438.205262][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 438.348033][ T7146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.348073][ T7146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56473 - 0 [ 438.429536][T18815] wlan1 speed is unknown, defaulting to 1000 [ 438.499704][ T7146] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 438.500879][ T7146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.500913][ T7146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56473 - 0 [ 438.573386][T18815] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.590944][T18874] tipc: Started in network mode [ 438.590976][T18874] tipc: Node identity ac14140f, cluster identity 4711 [ 438.603794][T18874] tipc: New replicast peer: 255.255.255.255 [ 438.604455][T18874] tipc: Enabled bearer , priority 10 [ 438.906609][T18883] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3323'. [ 438.906637][T18883] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3323'. [ 438.906652][T18883] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3323'. [ 438.909195][T18869] netlink: 'syz.4.3318': attribute type 6 has an invalid length. [ 438.989715][T18870] bridge0: port 3(batadv1) entered blocking state [ 438.989906][T18870] bridge0: port 3(batadv1) entered disabled state [ 438.990229][T18870] batadv1: entered allmulticast mode [ 439.011861][T18870] batadv1: entered promiscuous mode [ 439.121604][ T5627] Bluetooth: hci2: command tx timeout [ 439.422943][ T7146] gretap0: left allmulticast mode [ 439.425771][ T7146] bridge0: port 1(gretap0) entered disabled state [ 439.471300][ T1406] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 439.471322][ T1406] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 439.639366][ T7146] dvmrp0: left allmulticast mode [ 439.778381][T18920] netlink: 'syz.4.3332': attribute type 6 has an invalid length. [ 440.276643][T18945] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3334'. [ 440.478201][ T7146] bond14 (unregistering): (slave geneve4): Releasing active interface [ 440.571926][ T7146] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 440.590911][ T7146] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 440.636955][ T7146] bond1 (unregistering): Released all slaves [ 440.654935][ T7146] bond2 (unregistering): Released all slaves [ 440.676911][ T7146] bond3 (unregistering): Released all slaves [ 440.703999][ T7146] bond4 (unregistering): Released all slaves [ 440.720994][ T7146] bond5 (unregistering): Released all slaves [ 440.740964][ T7146] bond6 (unregistering): Released all slaves [ 440.760355][ T7146] bond7 (unregistering): Released all slaves [ 440.780399][ T7146] bond8 (unregistering): Released all slaves [ 440.811522][ T7146] bond9 (unregistering): Released all slaves [ 440.828758][ T7146] bond10 (unregistering): (slave veth3): Releasing active interface [ 440.830543][ T7146] bond10 (unregistering): Released all slaves [ 440.863271][ T7146] bond11 (unregistering): Released all slaves [ 440.879200][ T7146] bond0 (unregistering): Released all slaves [ 440.906758][ T7146] bond12 (unregistering): Released all slaves [ 440.926330][ T7146] bond13 (unregistering): Released all slaves [ 440.950966][ T7146] bond14 (unregistering): Released all slaves [ 440.969557][ T7146] bond15 (unregistering): Released all slaves [ 440.987395][ T7146] bond16 (unregistering): Released all slaves [ 441.014922][ T5621] tipc: Node number set to 2886997007 [ 441.155586][T18958] IPv6: addrconf: prefix option has invalid lifetime [ 441.201709][ T5627] Bluetooth: hci2: command tx timeout [ 441.325585][T18949] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 441.329054][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 441.391679][ T7146] : left promiscuous mode [ 441.586442][ T7146] tipc: Left network mode [ 441.990537][T18981] netlink: 'syz.1.3339': attribute type 21 has an invalid length. [ 442.064853][T18981] netlink: 'syz.1.3339': attribute type 6 has an invalid length. [ 442.064873][T18981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3339'. [ 442.688162][T19031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.800567][T19033] ip_tables: iptables: counters copy to user failed while replacing table [ 443.282410][ T5627] Bluetooth: hci2: command tx timeout [ 443.614238][T18815] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.614391][T18815] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.614571][T18815] bridge_slave_0: entered allmulticast mode [ 443.661877][T18815] bridge_slave_0: entered promiscuous mode [ 443.682694][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 443.687770][T18815] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.689617][T18815] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.689791][T18815] bridge_slave_1: entered allmulticast mode [ 443.723595][T18815] bridge_slave_1: entered promiscuous mode [ 443.879294][T18815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.894425][T18815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.962869][T19066] Bluetooth: MGMT ver 1.23 [ 444.088228][T18815] team0: Port device team_slave_0 added [ 444.129486][T18815] team0: Port device team_slave_1 added [ 444.242166][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3354'. [ 444.278760][T19064] syzkaller0: entered promiscuous mode [ 444.278785][T19064] syzkaller0: entered allmulticast mode [ 444.325670][T18815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.325691][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.325719][T18815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.399592][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3354'. [ 444.590460][T18815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.590478][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.590507][T18815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.941540][T19100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.232572][T19115] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3359'. [ 445.333375][ T7146] hsr_slave_0: left promiscuous mode [ 445.339449][ T7146] hsr_slave_1: left promiscuous mode [ 445.340459][ T7146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.340500][ T7146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.365687][ T5627] Bluetooth: hci2: command tx timeout [ 445.407292][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3360'. [ 445.507714][ T7146] veth0_vlan: left promiscuous mode [ 445.837443][ T7146] team0 (unregistering): Port device team_slave_1 removed [ 445.869991][ T7146] team0 (unregistering): Port device team_slave_0 removed [ 446.155660][T19121] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 446.177500][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 446.196752][T18815] hsr_slave_0: entered promiscuous mode [ 446.197949][T18815] hsr_slave_1: entered promiscuous mode [ 446.198742][T18815] debugfs: 'hsr0' already exists in 'hsr' [ 446.198765][T18815] Cannot create hsr debugfs directory [ 446.475400][T19136] ip_tables: iptables: counters copy to user failed while replacing table [ 446.598751][T19146] ip_tables: iptables: counters copy to user failed while replacing table [ 446.669272][T19154] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3366'. [ 446.899555][T19163] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 447.036670][T19169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3371'. [ 447.039808][T19150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.156877][T19166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.228049][ T7146] IPVS: stop unused estimator thread 0... [ 447.690906][T19195] netlink: 'syz.4.3376': attribute type 1 has an invalid length. [ 449.087442][T19253] openvswitch: netlink: Duplicate or invalid key (type 0). [ 449.087481][T19253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.175493][T19258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.989504][T18815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 450.008651][T18815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.104079][T19291] bond1: option all_slaves_active: invalid value (179) [ 450.106748][T19291] bond1 (unregistering): Released all slaves [ 450.153606][T18815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 450.173979][T18815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.174791][T19296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.175642][T18815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 450.217266][T18815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.238659][T19297] gretap0: entered promiscuous mode [ 450.238817][T19297] vlan2: entered promiscuous mode [ 450.445490][T18815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 450.490706][T18815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.824024][T18815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.877869][T18815] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.919069][ T1367] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.919145][ T1367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.944384][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.944494][ T6951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.240611][T19357] openvswitch: netlink: EtherType 500 is less than min 600 [ 451.944668][T19391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3406'. [ 452.396566][T18815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.557298][T18815] veth0_vlan: entered promiscuous mode [ 452.610669][T18815] veth1_vlan: entered promiscuous mode [ 452.765099][T18815] veth0_macvtap: entered promiscuous mode [ 452.793690][T18815] veth1_macvtap: entered promiscuous mode [ 452.797000][T19438] netlink: 'syz.2.3419': attribute type 3 has an invalid length. [ 452.882705][T18815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.955989][T18815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.043916][ T7162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.056387][ T7162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.161509][ T7162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.172272][ T7145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.315046][T19463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3424'. [ 453.498265][ T7146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.498289][ T7146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.596736][T19471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3426'. [ 453.612617][ T5627] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 453.612708][ T5627] Bluetooth: hci5: Injecting HCI hardware error event [ 453.615917][ T52] Bluetooth: hci5: hardware error 0x00 [ 453.663233][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3426'. [ 453.690937][T19479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3429'. [ 453.742275][T19472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3426'. [ 453.948271][T19483] macvtap1: entered promiscuous mode [ 453.948296][T19483] hsr0: entered promiscuous mode [ 453.948566][T19483] macvtap1: entered allmulticast mode [ 453.948582][T19483] hsr0: entered allmulticast mode [ 453.948595][T19483] hsr_slave_0: entered allmulticast mode [ 453.948611][T19483] hsr_slave_1: entered allmulticast mode [ 454.110386][ T6951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.110411][ T6951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.139943][T19458] infiniband syz0: set active [ 454.140141][T19458] infiniband syz0: added bond_slave_1 [ 454.265275][T19458] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 454.265316][T19458] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 454.265360][T19458] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 454.536201][T19458] RDS/IB: syz0: added [ 454.536272][T19458] smc: adding ib device syz0 with port count 1 [ 454.536296][T19458] smc: ib device syz0 port 1 has no pnetid [ 455.061304][T19529] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3439'. [ 455.092703][T19527] bond1 (unregistering): Released all slaves [ 455.361342][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 455.847019][ T52] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 455.922649][T19560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3445'. [ 456.145414][T19577] ip_tables: iptables: counters copy to user failed while replacing table [ 456.726070][T19594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3450'. [ 456.820506][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 456.955692][T19594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.047962][T19606] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 457.059484][T19606] 0ªX¹¦Dö»: entered allmulticast mode [ 457.149545][T19620] __nla_validate_parse: 1 callbacks suppressed [ 457.149567][T19620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3454'. [ 457.149584][T19620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3454'. [ 457.149601][T19620] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3454'. [ 457.218256][T19620] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 457.661696][T19633] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 458.159027][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3462'. [ 458.178254][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3463'. [ 458.288449][T19655] Cannot find del_set index 1 as target [ 458.613594][T19671] ip_tables: iptables: counters copy to user failed while replacing table [ 458.650638][T19677] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3470'. [ 458.685795][T19677] netlink: 12927 bytes leftover after parsing attributes in process `syz.3.3470'. [ 460.033765][T19733] syzkaller0: entered promiscuous mode [ 460.033829][T19733] syzkaller0: entered allmulticast mode [ 463.757099][T19833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3493'. [ 464.050259][T19845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.508242][T19874] bond1: (slave bond_slave_0): Device is not our slave [ 464.508270][T19874] bond1: option active_slave: invalid value (bond_slave_0) [ 464.546728][T19878] ip_tables: iptables: counters copy to user failed while replacing table [ 464.560500][T19879] ip_tables: iptables: counters copy to user failed while replacing table [ 464.560676][T19874] bond1 (unregistering): Released all slaves [ 464.822437][T19882] bond1 (unregistering): Released all slaves [ 464.844364][ T32] audit: type=1800 audit(1792455674.008:4): pid=19890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3507" name="memory.events" dev="tmpfs" ino=682 res=0 errno=0 [ 464.844448][T19889] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 464.845075][ T32] audit: type=1804 audit(1792455674.008:5): pid=19890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3507" name="/newroot/130/memory.events" dev="tmpfs" ino=682 res=1 errno=0 [ 465.168863][T19895] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.260773][T19907] openvswitch: netlink: Invalid VLAN frame [ 465.278524][T19907] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3512'. [ 465.278556][T19907] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3512'. [ 465.403322][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 465.546573][T19920] mac80211_hwsim hwsim47 ÿ: renamed from wlan1 (while UP) [ 465.664235][T19925] batman_adv: batadv0: Adding interface: syz_tun [ 465.664255][T19925] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.664288][T19925] batman_adv: batadv0: Interface activated: syz_tun [ 465.857331][T19934] sctp: [Deprecated]: syz.3.3522 (pid 19934) Use of int in maxseg socket option. [ 465.857331][T19934] Use struct sctp_assoc_value instead [ 466.042412][T19944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3526'. [ 466.138860][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.152878][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.153557][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.154309][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.155911][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.156559][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.157323][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.157974][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.159601][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.160261][T19947] netlink: 'syz.3.3527': attribute type 2 has an invalid length. [ 466.606286][T19973] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 466.750584][T19977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'. [ 466.835276][T19977] bond4: option coupled_control: invalid value (192) [ 466.849250][T19977] bond4 (unregistering): Released all slaves [ 467.457862][T20016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.469795][T20016] bond2: (slave bond3): making interface the new active one [ 467.470733][T20016] bond2: (slave bond3): Enslaving as an active interface with an up link [ 467.576865][ T7146] IPVS: starting estimator thread 0... [ 467.579568][T20016] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 467.629977][T20020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.675435][T20021] IPVS: using max 24 ests per chain, 57600 per kthread [ 467.743493][ T52] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 467.840201][T20028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3543'. [ 467.913545][T20035] x_tables: duplicate underflow at hook 1 [ 467.938317][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 468.200212][T20045] bond0: option miimon: invalid value (18446744071829782528) [ 468.200242][T20045] bond0: option miimon: allowed values 0 - 2147483647 [ 468.258067][T20048] openvswitch: netlink: ct_state flags ffffffff unsupported [ 468.347868][T20054] sock: sock_timestamping_bind_phc: sock not bind to device [ 468.369584][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3550'. [ 468.523340][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'. [ 468.886123][T20091] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 469.025789][T20104] No such timeout policy "syz0" [ 470.378492][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'. [ 470.378533][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3571'. [ 470.408658][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'. [ 470.408695][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3571'. [ 470.433106][ T27] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.433754][ T6951] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.433794][ T6951] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.433828][ T6951] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.508601][T20130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3572'. [ 470.508642][T20130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3572'. [ 471.435530][T20060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.666359][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 471.668042][T20147] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 471.833519][ T32] audit: type=1107 audit(1792455680.988:6): pid=20154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 471.884336][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 472.144759][T20164] ip_tables: iptables: counters copy to user failed while replacing table [ 472.358911][T20168] netlink: Failed to add helper -22 [ 472.359078][T20168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.657839][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 472.657861][T20180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 472.657885][T20180] validate_nla: 26 callbacks suppressed [ 472.657898][T20180] netlink: 'syz.3.3586': attribute type 15 has an invalid length. [ 472.659855][T20178] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 472.749683][T20180] netlink: 'syz.3.3586': attribute type 15 has an invalid length. [ 472.762362][ T1367] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 472.762517][ T1367] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 472.762556][ T1367] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 472.762591][ T1367] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 472.844259][ T7146] IPVS: starting estimator thread 0... [ 472.933561][T20186] IPVS: using max 37 ests per chain, 88800 per kthread [ 473.020252][T20195] geneve2: entered allmulticast mode [ 473.188480][T20202] netlink: 'syz.4.3592': attribute type 21 has an invalid length. [ 473.715784][ T7145] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 473.716069][ T7145] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 473.716413][ T7145] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 473.716456][ T7145] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 474.183129][T20259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.303583][T20259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.253829][T20308] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 475.276264][T20308] vlan3: entered allmulticast mode [ 475.276289][T20308] bond0: entered allmulticast mode [ 475.276378][T20308] bond_slave_0: entered allmulticast mode [ 475.276397][T20308] bond_slave_1: entered allmulticast mode [ 475.535432][T20320] bridge0: port 4(veth1_to_bridge) entered blocking state [ 475.535535][T20320] bridge0: port 4(veth1_to_bridge) entered disabled state [ 475.535713][T20320] veth1_to_bridge: entered allmulticast mode [ 475.569353][T20320] veth1_to_bridge: entered promiscuous mode [ 475.569516][T20320] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 475.577695][T20320] bridge0: port 4(veth1_to_bridge) entered blocking state [ 475.577976][T20320] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 475.613906][T20325] ip_tables: iptables: counters copy to user failed while replacing table [ 476.009227][T20345] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 476.057713][T20359] ip_vti0: entered promiscuous mode [ 476.117457][T20359] __nla_validate_parse: 13 callbacks suppressed [ 476.117481][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3633'. [ 476.189786][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3636'. [ 476.189810][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3636'. [ 476.195732][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'. [ 476.287779][T20368] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 476.360249][T20370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3637'. [ 476.444889][T20373] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 476.472322][T20374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3637'. [ 477.067468][T20405] syzkaller1: entered promiscuous mode [ 477.067494][T20405] syzkaller1: entered allmulticast mode [ 477.106758][T20411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3647'. [ 477.488934][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3651'. [ 477.558736][T20429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3651'. [ 477.828660][T20445] netlink: 83 bytes leftover after parsing attributes in process `syz.0.3654'. [ 477.887142][T20450] netlink: 'syz.2.3656': attribute type 1 has an invalid length. [ 477.968917][T20451] netlink: 'syz.1.3657': attribute type 1 has an invalid length. [ 478.015241][T20448] bond4: (slave veth0_to_bond): making interface the new active one [ 478.020525][T20448] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 478.167883][T20460] openvswitch: netlink: Message has 512 unknown bytes. [ 478.269954][T20468] netlink: 'syz.1.3662': attribute type 1 has an invalid length. [ 478.349204][T20468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.436865][T20469] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 478.879739][T20495] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.889219][T20495] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.940464][T20497] digital: digital_start_poll: Unknown protocol [ 479.008817][T20497] tipc: Started in network mode [ 479.008851][T20497] tipc: Node identity 82cfa9559039, cluster identity 4711 [ 479.009023][T20497] tipc: Enabled bearer , priority 0 [ 479.107642][T20514] openvswitch: netlink: Flow key attr not present in new flow. [ 479.135956][T20496] tipc: Disabling bearer [ 479.216967][T20519] bridge_slave_1: left allmulticast mode [ 479.216997][T20519] bridge_slave_1: left promiscuous mode [ 479.217227][T20519] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.257605][T20519] bridge_slave_0: left allmulticast mode [ 479.257638][T20519] bridge_slave_0: left promiscuous mode [ 479.257882][T20519] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.673130][T20532] netlink: 'syz.0.3680': attribute type 1 has an invalid length. [ 479.975632][T20532] bond4: entered promiscuous mode [ 479.990196][T20532] 8021q: adding VLAN 0 to HW filter on device bond4 [ 480.050565][T20558] ipvlan2: entered allmulticast mode [ 480.050588][T20558] bond4: entered allmulticast mode [ 480.050784][T20558] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.050804][T20558] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 480.050820][T20558] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 480.108762][T20558] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 480.323990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 480.324447][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 480.324915][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 480.325366][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 480.325797][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 480.326215][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 480.326631][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 480.327028][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 481.239922][T20582] pim6reg: entered allmulticast mode [ 481.509814][T20591] __nla_validate_parse: 9 callbacks suppressed [ 481.509838][T20591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3694'. [ 481.646892][T20593] netlink: 'syz.2.3693': attribute type 1 has an invalid length. [ 482.151676][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3698'. [ 482.187825][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3698'. [ 482.336482][T20607] xt_TCPMSS: Only works on TCP SYN packets [ 482.459253][T20612] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3699'. [ 482.548312][T20616] x_tables: duplicate underflow at hook 2 [ 482.825726][T20624] netlink: 'syz.2.3703': attribute type 1 has an invalid length. [ 482.825749][T20624] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3703'. [ 482.859805][T20624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3703'. [ 482.975416][T20625] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 483.085354][T20630] netlink: 'syz.2.3703': attribute type 1 has an invalid length. [ 483.085379][T20630] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3703'. [ 483.171386][ C1] net_ratelimit: 5772 callbacks suppressed [ 483.171411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.171834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.172310][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 483.172792][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.173249][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.173675][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 483.174121][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.174579][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.175008][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 483.175469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.393540][T20636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3703'. [ 487.371049][ C0] sched: DL replenish lagged too much [ 488.181445][ C1] net_ratelimit: 12177 callbacks suppressed [ 488.181468][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.181909][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 488.182323][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 488.182375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.182808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.183274][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 488.183704][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.183924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 488.184140][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.184679][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 493.191058][ C1] net_ratelimit: 13848 callbacks suppressed [ 493.191084][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 493.191574][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.192030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.192052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 493.192554][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 493.193003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.193496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.193549][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 493.194423][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 493.194915][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.201350][ C1] net_ratelimit: 14096 callbacks suppressed [ 498.201378][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 498.201864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.201940][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 498.202369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.202854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 498.203360][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.203580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 498.203892][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.204399][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 498.204884][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.211099][ C0] net_ratelimit: 13794 callbacks suppressed [ 503.211129][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.211306][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 503.211728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.212194][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.212569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.212618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 503.213082][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.213535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.213960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.213998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 508.221199][ C0] net_ratelimit: 13940 callbacks suppressed [ 508.221226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 508.221410][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.221857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.222340][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 508.222791][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.222805][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 508.223313][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.223763][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 508.224242][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.224707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.231218][ C1] net_ratelimit: 13764 callbacks suppressed [ 513.231243][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.231506][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.231766][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.232282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 513.232750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.233012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.233247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.233713][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 513.234254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.234452][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.241394][ C1] net_ratelimit: 13621 callbacks suppressed [ 518.241420][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 518.241721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.241821][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.242244][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.242645][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 518.243036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.243284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.243454][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.243853][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 518.244266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.251324][ C1] net_ratelimit: 13448 callbacks suppressed [ 523.251348][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.251534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 523.251863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 523.252393][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.252902][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.253120][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 523.253439][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 523.253955][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.254491][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.254691][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 528.261274][ C1] net_ratelimit: 13519 callbacks suppressed [ 528.261301][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 528.261722][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.262092][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 528.262161][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.262609][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 528.263114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.263560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.263574][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 528.263974][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 528.264429][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.196299][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 533.271480][ C1] net_ratelimit: 13751 callbacks suppressed [ 533.271499][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.271506][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 533.271955][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.272421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.272868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 533.272995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.273332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.273816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.274286][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 533.274437][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.281373][ C1] net_ratelimit: 13537 callbacks suppressed [ 538.281398][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 538.281571][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.281875][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.282389][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.282895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 538.283000][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.283407][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.283908][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.284404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.284411][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 543.291047][ C1] net_ratelimit: 13624 callbacks suppressed [ 543.291074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.291593][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 543.292066][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 543.292463][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.293314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.293780][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.294063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.294274][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 543.294736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 543.295332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.301254][ C1] net_ratelimit: 13544 callbacks suppressed [ 548.301281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.301445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.301721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.302175][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 548.302599][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.303013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.303459][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 548.303636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.303881][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.304319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.311328][ C1] net_ratelimit: 13577 callbacks suppressed [ 553.311353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.311773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 553.312228][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.312647][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.312831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.313073][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 553.313556][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.313730][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.313979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.314421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 558.321269][ C1] net_ratelimit: 14030 callbacks suppressed [ 558.321295][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 558.321323][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.321735][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.322195][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.322632][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 558.323060][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.323377][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.323560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.323972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 558.324245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.331165][ C1] net_ratelimit: 13923 callbacks suppressed [ 563.331190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.331599][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 563.332054][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.332108][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.332522][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.332933][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 563.333024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.333362][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.333764][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.334200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 568.341210][ C1] net_ratelimit: 13799 callbacks suppressed [ 568.341237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.341702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.341702][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.342193][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 568.342651][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.343118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.343605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 568.343775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.344078][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.344564][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.351299][ C1] net_ratelimit: 13814 callbacks suppressed [ 573.351325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.351398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.351745][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 573.352192][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.352611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.353026][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 573.353182][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.353475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.353930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.354053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.361299][ C1] net_ratelimit: 14220 callbacks suppressed [ 578.361325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 578.361795][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.362001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.362325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.362793][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 578.362902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.363279][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.363786][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.364273][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 578.364737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.371234][ C1] net_ratelimit: 13839 callbacks suppressed [ 583.371258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.371740][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 583.372007][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.372490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.372936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.372957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.373440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 583.373896][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.374371][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.374835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 588.381249][ C1] net_ratelimit: 14217 callbacks suppressed [ 588.381275][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.381735][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.381755][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.382241][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 588.382711][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.383196][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.383587][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.383664][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 588.384152][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.384409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.495009][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 593.391603][ C1] net_ratelimit: 13867 callbacks suppressed [ 593.391629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.391678][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.392135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.392556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 593.392981][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.393422][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.393502][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.393848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 593.394291][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.394312][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.401241][ C1] net_ratelimit: 14173 callbacks suppressed [ 598.401267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 598.401792][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.402282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.402493][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.402741][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 598.403233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.403362][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.403697][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.404193][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 598.404654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.411363][ C1] net_ratelimit: 14658 callbacks suppressed [ 603.411389][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 603.411815][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.412271][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.412694][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 603.412869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.413146][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.413567][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.413746][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.414001][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 603.414440][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.421165][ C1] net_ratelimit: 14155 callbacks suppressed [ 608.421190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 608.421308][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.421682][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.422183][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.422642][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 608.423097][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.423281][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.423588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.424048][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 608.424161][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.431068][ C0] net_ratelimit: 14059 callbacks suppressed [ 613.431094][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.431431][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.431856][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 613.431999][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.432317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.432738][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.433194][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 613.434006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.434020][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.434498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.440991][ C1] net_ratelimit: 13975 callbacks suppressed [ 618.441018][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.441462][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.441496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.441962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 618.442441][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.442933][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.443438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 618.443446][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.443893][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.444342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.451143][ C1] net_ratelimit: 14028 callbacks suppressed [ 623.451169][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.451621][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 623.451654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.452148][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.452589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.452597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.453050][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 623.453534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.454079][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.454590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 628.461279][ C1] net_ratelimit: 14164 callbacks suppressed [ 628.461303][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 628.461707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.461753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.462210][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.462532][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.462696][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 628.463154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.463608][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.464045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 628.464376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.471088][ C1] net_ratelimit: 14159 callbacks suppressed [ 633.471136][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.471555][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 633.471870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.471980][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.472440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.472836][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.472867][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 633.473312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.473736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.474179][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 638.481252][ C1] net_ratelimit: 13727 callbacks suppressed [ 638.481277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.481495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.481702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.482142][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 638.482441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.482566][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.482983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.483468][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 638.483893][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.484335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.491172][ C1] net_ratelimit: 13744 callbacks suppressed [ 643.491199][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.491417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.491649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.492085][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 643.492331][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.492551][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.492997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.493468][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 643.493918][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.494368][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.501439][ C1] net_ratelimit: 14279 callbacks suppressed [ 648.501466][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.501751][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.501976][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.502474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 648.502658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.502933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.503423][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.503883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 648.504376][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.504539][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.511319][ C1] net_ratelimit: 14082 callbacks suppressed [ 653.511343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.512234][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.512323][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.512738][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 653.513659][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.514774][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.515862][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 653.516982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.518157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.519296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 658.521145][ C1] net_ratelimit: 14101 callbacks suppressed [ 658.521170][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 658.521641][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.522127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.522511][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 658.522626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 658.523840][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 658.523989][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.524490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.524950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 658.525503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.531172][ C0] net_ratelimit: 13820 callbacks suppressed [ 663.531186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 663.531197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 663.531649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 663.532136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.532596][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.532648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 663.533066][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 663.533608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.534075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.534496][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 668.541358][ C1] net_ratelimit: 13989 callbacks suppressed [ 668.541384][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.541845][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 668.542066][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 668.542345][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 668.542803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.542964][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 668.543291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.543788][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 668.544279][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.544734][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.551101][ C1] net_ratelimit: 14066 callbacks suppressed [ 673.551126][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.551577][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.552001][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 673.552453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.552629][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 673.552887][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.553332][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 673.553593][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 673.553822][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:b3:bc:3e:af:c6, vlan:0) [ 673.554264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.798159][ T33] INFO: task kworker/u9:0:52 blocked for more than 144 seconds. [ 677.798187][ T33] Not tainted syzkaller #0 [ 677.798200][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 677.798211][ T33] task:kworker/u9:0 state:D stack:27080 pid:52 tgid:52 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 677.798281][ T33] Workqueue: hci1 hci_cmd_sync_work [ 677.798320][ T33] Call Trace: [ 677.798329][ T33] [ 677.798346][ T33] __schedule+0x17db/0x58f0 [ 677.798373][ T33] ? __lock_acquire+0x747/0x2de0 [ 677.798431][ T33] ? __pfx___schedule+0x10/0x10 [ 677.798453][ T33] ? lock_acquire+0x115/0x350 [ 677.798490][ T33] ? schedule+0x90/0x2b0 [ 677.798518][ T33] schedule+0x164/0x2b0 [ 677.798546][ T33] synchronize_rcu_expedited+0x619/0x770 [ 677.798585][ T33] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 677.798620][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 677.798654][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 677.798710][ T33] hci_chan_del+0x114/0x1d0 [ 677.798746][ T33] l2cap_conn_del+0x3c8/0x550 [ 677.798786][ T33] l2cap_connect_cfm+0x12b/0x1620 [ 677.798815][ T33] ? hci_conn_failed+0x17f/0x370 [ 677.798850][ T33] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 677.798880][ T33] ? lock_acquire+0x115/0x350 [ 677.798913][ T33] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 677.798944][ T33] hci_conn_failed+0x1e8/0x370 [ 677.798972][ T33] ? hci_abort_conn_sync+0xa7b/0x1190 [ 677.799000][ T33] hci_abort_conn_sync+0xdd0/0x1190 [ 677.799037][ T33] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 677.799069][ T33] ? abort_conn_sync+0x26/0x210 [ 677.799113][ T33] ? abort_conn_sync+0x26/0x210 [ 677.799142][ T33] ? abort_conn_sync+0x19c/0x210 [ 677.799171][ T33] ? __pfx_abort_conn_sync+0x10/0x10 [ 677.799202][ T33] hci_cmd_sync_work+0x280/0x430 [ 677.799245][ T33] ? process_scheduled_works+0x97a/0x1630 [ 677.799277][ T33] process_scheduled_works+0xc3d/0x1630 [ 677.799347][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 677.799387][ T33] ? assign_work+0x3cf/0x5d0 [ 677.799425][ T33] worker_thread+0xa47/0xfb0 [ 677.799491][ T33] kthread+0x38b/0x480 [ 677.799516][ T33] ? __pfx_worker_thread+0x10/0x10 [ 677.799547][ T33] ? __pfx_kthread+0x10/0x10 [ 677.799573][ T33] ret_from_fork+0x514/0xb70 [ 677.799600][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 677.799623][ T33] ? __switch_to+0xc89/0x1420