last executing test programs: 48.433721326s ago: executing program 2 (id=3470): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x51, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "c911cc5408bb328b", "0afe3b56d7f233b1f92e86190f5e8f9dd2562cd7b912c308e32d490587af5ff5", "1c775060", "cce7cfd682baf04c"}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c0002800600270001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000068000100fdfc0200fbdbdf25020001000000000004000b00010041454eb5d25ea379eaf46542b6175c50c86b95bd9a226d2036909e62bbe00143048ea18339202e67849f55da8440c69db1f5569d6a23740a6bf6b2de15a48cfd7e77129122cf8c2cfe4847a6ae57cb62684cff0ac53f61b05ff87d6cb33276cf9c61f3d1e4deb8ab9adc49ad819aeeab3242f87d6aa0797644f2d275a96da18b3a9194", @ANYRES16=r3, @ANYRESOCT, @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x0) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x400, 0x1, {{0x7, 0x4, 0x3, 0x1, 0x1c, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @local, {[@generic={0x86, 0x2}, @rr={0x7, 0x3, 0x1e}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gre0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0xc0}], 0x1, 0x0, 0x0, 0x0) 48.222254345s ago: executing program 4 (id=3473): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340)=0x8, 0x4) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r8, 0xda90) (async, rerun: 64) r9 = accept4(r8, 0x0, 0x0, 0x800) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) r10 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r10, @ANYRES16=r1, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) 47.488275029s ago: executing program 1 (id=3477): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002a00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000004000000081400000100000000000000", @ANYRES32, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES64=r1, @ANYRESOCT, @ANYRES64=r0, @ANYRESDEC=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, &(0x7f0000000100), &(0x7f00000001c0)=""/5}, 0x20) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC, @ANYRES32, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) close(0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x5, 0x1, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x80000001, @remote, 0x3}}, @sadb_sa={0x2, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}]}, 0x60}, 0x1, 0x7}, 0x20000030) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x22, &(0x7f00000007c0)=ANY=[@ANYBLOB="950000000000000018270000", @ANYRES32=r4, @ANYBLOB="00000000010000001869000010000000000000000a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c002000b7000000000000004985060000000000f341c32af38d6bf484f46cf4c86c7e7f0a59b632add9d652b3b4ca4ddb3f0ae01c70e9e77a7c1972bdd6b80930028fd10fd33888574433dbe8ee69471fac46530a2aec03f5081aea3c3c32dcedbcb42620b0922c062d6f81a899b051745b55ceee9c78"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket(0xf, 0x800, 0x3ff) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x0, r11, 0x1, 0x2, 0x6, @broadcast}, 0x14) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) 47.458445885s ago: executing program 2 (id=3478): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000180)='G', 0x1}], 0x1}}], 0x1, 0x40088d4) shutdown(r0, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f00000008c0)="5c4d445d8ae29bc1d5b8ad6d8a98459487277ef223bd736900000000baf60280d3d967f1484ac995a4ef9a1a109ea94c36a001ee049132902cfbdaec64e27bda184c5e4c46685d9bb62996e1691b61c4094a66eb6ec09611261b34c2432c0618cc", 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x20, 0x2, 0x1}, &(0x7f0000000040)=0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010004b0400000020000000007a000000", @ANYRES32=0x0, @ANYBLOB="a800050000a00000240012800b00"], 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5c4a, 0x101}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e"], 0x28}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r2, 0x0, 0x8001, 0x2}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000200)={r3}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080)=r3, 0x4) 47.389691449s ago: executing program 0 (id=3479): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x15, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r5, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}]}, 0x28}}, 0x0) 47.195697016s ago: executing program 0 (id=3480): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x100100, 0xc6e248cb96ff7733) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) getsockname$inet(r2, 0x0, &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0xa4}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000002c0)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 47.194955487s ago: executing program 2 (id=3481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x9) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0xaa0, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, 0x0) r5 = socket(0x2, 0x805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000280)={r7, @in={{0x2, 0x4e24, @empty}}, 0x0, 0xa1d8}, 0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340), 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x4000) 47.137551155s ago: executing program 1 (id=3483): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000100)="05000000010001", 0x7) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) (async) write(r1, &(0x7f0000000580)="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", 0x11f) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000780)={r3, @in6={{0xa, 0x4e20, 0x1fa0e2e2, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000040)=0x84) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000a40)="13000000010203", 0x7}, {&(0x7f0000000000)='hOk', 0x29}], 0x2) (async) read(r2, &(0x7f0000000400)=""/128, 0x80) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0x8000080, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r5, 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x8001}, 0xc) (async) write$cgroup_int(r6, &(0x7f0000000000)=0x7, 0x46) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000086cb09b3e2264ae7e45987b398353dab8a5db5b25ec2733a8c369506a076b1317fe684747dc4150f3f28c4846b6d750cf5f23661dfec61869351", @ANYRES16=r8, @ANYBLOB="000300400000fbdbdf250c00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xbfc945c1b5370232}, 0x4800) (async) sendfile(r5, r6, 0x0, 0xffffffff004) (async) write(r1, &(0x7f0000000180)="3300000008000102030405060101", 0xe) 47.13589963s ago: executing program 4 (id=3484): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f20ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0xce, @mcast2, 0xae}}, [0x715, 0x3, 0x2, 0x5, 0x1, 0x2, 0x200, 0x2, 0x0, 0x1000, 0x2, 0x5, 0x7, 0x1ac2, 0x4]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x7, 0x20}, &(0x7f0000000180)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffffe}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) 46.958263051s ago: executing program 4 (id=3485): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0xffffffff, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e1f, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x66, 0x8, 0x0, 0xfffd}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x24, &(0x7f00000005c0)=""/229, 0x41000, 0x8}, 0x94) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000042c0)=""/4120, 0x1018}, {&(0x7f0000002b80)=""/4094, 0xffe}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000040)=""/83, 0x53}], 0x5}, 0x22) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x29}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4040151) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@empty, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x32}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@broadcast, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000200)={0x29, 0x1}) 46.87860179s ago: executing program 2 (id=3487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@gettaction={0x5c, 0x32, 0xa84053c42c89434b, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x28) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x800, 0x1) sendmsg$tipc(r5, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {0x0}, {&(0x7f0000002dc0)="3336f70cd0e0e42718329330f8b1453fa54879ffb9a0e2383e3b54cdcabe57e9253ff776cab55ce561139eba62ea", 0x2e}], 0x3, 0x0, 0x0, 0x4000}, 0x8000) close(0x3) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x8776, 0x401, 0x0, 0x21e000, 0x80080000}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_FLOW={0x8, 0xb, 0x90}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 46.73093621s ago: executing program 1 (id=3488): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030009"], 0x50}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r8, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00"], 0x30}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30, 0x4}], 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, &(0x7f0000000140)={0xe, "93dd5d"}, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2821ab78a5f3d6b6", "06968e081f6e5ed4cc03ec1d7bc183f0", '\x00', "ac4f47a4e0f276d4"}, 0x28) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, 0x0) 46.506361234s ago: executing program 0 (id=3490): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2400000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200)=0x1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x4f, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2663}, 0x8840) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "96"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd4}, 0x1, 0x0, 0x0, 0x40048d1}, 0x20008040) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket(0x1f, 0x2, 0x3) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x2}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000000)={{0x1d, @local, 0x4e20, 0x4, 'none\x00', 0x12, 0x3d, 0x7e}, {@empty, 0x4e22, 0x4, 0x9, 0x41ac, 0x8}}, 0x44) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r4], 0x48}}, 0x2404c054) readv(r4, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1) 46.465557663s ago: executing program 2 (id=3493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x5, 0x5f, @vifc_lcl_addr=@broadcast, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x18, 0x48, 0x66, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}}, @payload_mcast={{{{{{0x34, 0x0, 0x0, 0x1, 0x0, 0xb, 0x3, 0x2, 0x8, 0x0, 0x1, 0xa, 0x2, 0x1, 0x401, 0x8, 0x2, 0x4e20, 0x4e24}, 0x4}, 0x3, 0x2}, 0xfffffffe}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0}, 0x10) 46.301696928s ago: executing program 3 (id=3494): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x205, 0x100, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x85e}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0xc4, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0xb0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x7, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4ad}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x5, 0xd}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 46.200107989s ago: executing program 3 (id=3495): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @mcast1, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xd, &(0x7f0000001180)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x1000, &(0x7f00000012c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.099207407s ago: executing program 1 (id=3496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) close(r1) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r5}, 0x18) close(0x3) (async) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 46.038467082s ago: executing program 3 (id=3497): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x4040801, &(0x7f0000000200)={0x11, 0x3, r2, 0x1, 0x4, 0x6, @local}, 0x14) 45.880210045s ago: executing program 3 (id=3498): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x12, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000390400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="019800000000000008000f000100000028912297aaa9f69cc111cf4cf9e68b61d5dd0662a17a3cd2a72958ac5f9b3ebdd502dd4696a27ccf5670d1170cff682193dbbc6aa828684c94b616afe7e3eec363ea51278ade95226025abe4259e4a8cdb158390d12376799d39dce5434c89bf56469dca2fea2c60b45bfc4464d244ca745209854d1aa230766b14038a828db478a2a58563b1535ff9e948ce8d"], 0x28}}, 0x0) 45.878443483s ago: executing program 4 (id=3499): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x33, 0x107, 0x0, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@remote}]}]}, 0x20}}, 0x4010) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRES8=0x0, @ANYBLOB="e1e1e0ec8a45cb6758749c9a738782334e8b4fa9709e71ea2996041e1468a2306b2d39df2ff5aa994cc1b6d14ad9db7605fed4b79c64dd0ca72016a1e1501c0295bdfbdbc4e87ef72566a8c5a34d8980d28e8e9969706b35024ef20d2b3a39728581fc7afd39d7e337bc4f00c110c543f9847b92ecbe348761f46b2c9f8eb89bec21639fc5ec6f5de977cfcdd96f61c38f5f8fa399bcbf4b69776f956eb26c6821eb921312f36517a511bf02540cf837d9783e41ba91a4929396bed97f592065a384b68170fdaf2097fef8a48189111fa01278b4412e080f59bb65834976cc526eb6f1daf30a6900f0e31e7c3c051698debaef", @ANYRESDEC=r0, @ANYRES8=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x800a0c0}, 0x6584f2c77c205b5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 45.799983939s ago: executing program 1 (id=3500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0xff03, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @multicast1, 0xffffff00, 0x0, 0xb, 0xfc, {@mac=@local, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x1c8, 0xf, 0x6, 0x0, 0xfff7, 'veth0_to_hsr\x00', 'veth0_to_team\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @multicast2, @private=0xa010101, 0x2}}}, {{@arp={@local, @empty, 0xff, 0xffffff00, 0xb, 0xd, {}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x103, 0x7fe, 0xa, 'bond_slave_0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@broadcast, @broadcast, 0x0, 0x0, 0x7, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x100, 0xff, 0xff]}}, {@mac=@random="7f13ea2e6715", {[0x0, 0xff, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7bff, 0x1, 'syzkaller0\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x164}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="92c067597e4a", @mac, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) 45.754146357s ago: executing program 3 (id=3501): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)={0xb0, r3, 0x1da7b7b02c8526a0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21af}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6e}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24008004}, 0x402c880) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f14010828bd7000fddbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r4) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0x74, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x537436c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="1c0000000206030000000000000000000000000005000100070000008f13389fb96f218869eaa1c052cc2f2c197773717a353281957320ffc5fe1e4a4fbac97887c11ea76b1c14f2e8b1438ba95c8db1ab0c002f7a5a118826890d650c99ee0652f3440263626c11601660c97502c22406d817df981cdc6d6380ce2f674deb7996cc608a8d1248f06253da269fa69185890d9920ea05c28c8654ba232ed1073abe85f3f17a88421317886846cfac9d0fcfb150daac991190aa03aaff88e8978a3ce453d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 45.75181438s ago: executing program 4 (id=3502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400302, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="09e4ffff090000000800000040000000c0008bc48597e250f31b0000", @ANYRES32=r0, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x4000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1103, r1}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r1}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x200000000000009d, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa3000000000000070300000dfeffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000100000006a0af2fe00000000850000001a00000062030100000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee23404aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459664124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2) getsockopt$inet6_mreq(r2, 0x29, 0xb1969a7af4f3b393, &(0x7f0000000580)={@dev}, &(0x7f00000005c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="43aa4d176c747363000000000000691d4cb9e0d5612d3b0ecea5b4a49202d55ab1699efd63e63299da7c1e5670b052773981e8bbc14b847cbf4e9bd7dbceda06f4dc3ad7d33da1421b09181291b20d4fbf7bf1fee7bb381453e45018ac2fa4c55b28a3054b70467944f457cc8665cf3d17d48771da63248a4a7f8b42"], 0x14}, 0x1, 0x0, 0x0, 0xa40363da73a73f82}, 0x40810) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$kcm(0x23, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = socket$kcm(0x10, 0x7, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000008c0)="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", 0x156}], 0x1}, 0x20004000) sendmsg$inet_sctp(r3, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)='A', 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000084000000000000007b89030206000004180000000000000084000000070000006401010100000000853b4a81771343fe442f43dbcd3bbbc0af6150a0008ccb2464a92149d3bfd4780bace3f55b5cf2c53f71f9140ade61cf2b95dca5200459959674fa01b612c6d897487fd6cf098f53b3cf0779416f5c5ba1b2b4cea1717c745be600922fb59d89ba5f14593e2909c9eac504a63d20a4f5806b6a673daa0b20461f8a1d67c209208735a4c326a8fd54c2ccf0a6baa2fd73f864c439b0688f6aedf179b1363ebf"], 0x30, 0x44014}, 0x2c0408d0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r7) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) openat$cgroup_ro(r8, &(0x7f00000004c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 45.665862625s ago: executing program 1 (id=3503): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x122, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r6, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @fwd={0x8}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x10, [{0xa, 0x1, 0x81}, {0x3, 0x5}, {0x8, 0x1, 0xe34b}, {0x4, 0x5, 0x5}, {0x5, 0x5, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000a00)=""/59, 0x99, 0x3b, 0x0, 0x4}, 0x28) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x98c, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x58e}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x5, 0x3c, &(0x7f00000008c0)=""/60, 0x41000, 0x20, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x7, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r8, r9], 0x0, 0x10, 0x5a}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000005000a14000000000a01020000e8cbed17153e1ed10000140000001000010000000000000000000084000a"], 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) 45.523249842s ago: executing program 0 (id=3504): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071001e000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000040"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) 45.390364827s ago: executing program 2 (id=3505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}, [@TCA_RATE={0x6, 0x5, {0xb0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) (async) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x10, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000500)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}, 0x1, 0x0, 0x0, 0x881}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcc, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xcc}}, 0x24000000) 45.375346569s ago: executing program 4 (id=3506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000580640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="c0081001907800000204"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428e06800fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES8=r1], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2400c0d4) 45.323620857s ago: executing program 0 (id=3507): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="95ab8caad55817c0450000000000000085100000feffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4380, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000040)={0xc029, 0x2}) close(0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x401}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x4010) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x43084) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7c0000001000030425bd70000000200000000300", @ANYRES32=0x0, @ANYBLOB="032e0000030000004c0012800e0001006970366772657461700000003800028014000700feffffc7b9000000000000000000000108000c0000000000060011004e24000008000c0007000000080015000e1f030008000d000008000008000a00", @ANYRES32], 0x7c}}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="95ab8caad55817c0450000000000000085100000feffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4380, 0x0) (async) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000040)={0xc029, 0x2}) (async) close(0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x401}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x4010) (async) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x43084) (async) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7c0000001000030425bd70000000200000000300", @ANYRES32=0x0, @ANYBLOB="032e0000030000004c0012800e0001006970366772657461700000003800028014000700feffffc7b9000000000000000000000108000c0000000000060011004e24000008000c0007000000080015000e1f030008000d000008000008000a00", @ANYRES32], 0x7c}}, 0x90) (async) 45.177667473s ago: executing program 3 (id=3508): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008200005000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x24, 0x0, 0x8fbb, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000b40)={&(0x7f0000000140)=0x3f, 0x1, &(0x7f0000000740)=[{}, {}, {}, {}, {}], &(0x7f0000000b00)}) 45.174877123s ago: executing program 0 (id=3509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x80) (async) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0xb, 0xb, 0xfffffffffffffffe, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x14}], &(0x7f0000000100)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x1, 0x1], &(0x7f00000002c0)=[{0x0, 0x2, 0xf, 0x7}, {0x0, 0x2, 0x1, 0x9}, {0x3, 0x3, 0x9, 0xc}, {0x5, 0x3, 0x10, 0x5}, {0x4, 0x3, 0x6, 0x8}, {0x1, 0x5, 0x4, 0x8}, {0x4, 0x4, 0x9, 0xd}], 0x10, 0x80000001}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r4, 0x4) 22.355893945s ago: executing program 32 (id=3509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x80) (async) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0xb, 0xb, 0xfffffffffffffffe, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x14}], &(0x7f0000000100)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x1, 0x1], &(0x7f00000002c0)=[{0x0, 0x2, 0xf, 0x7}, {0x0, 0x2, 0x1, 0x9}, {0x3, 0x3, 0x9, 0xc}, {0x5, 0x3, 0x10, 0x5}, {0x4, 0x3, 0x6, 0x8}, {0x1, 0x5, 0x4, 0x8}, {0x4, 0x4, 0x9, 0xd}], 0x10, 0x80000001}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r4, 0x4) 0s ago: executing program 33 (id=3503): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x122, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r6, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @fwd={0x8}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x10, [{0xa, 0x1, 0x81}, {0x3, 0x5}, {0x8, 0x1, 0xe34b}, {0x4, 0x5, 0x5}, {0x5, 0x5, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000a00)=""/59, 0x99, 0x3b, 0x0, 0x4}, 0x28) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x98c, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x58e}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x5, 0x3c, &(0x7f00000008c0)=""/60, 0x41000, 0x20, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x7, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r8, r9], 0x0, 0x10, 0x5a}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000005000a14000000000a01020000e8cbed17153e1ed10000140000001000010000000000000000000084000a"], 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): ted=40280) [ 498.153285][T18711] openvswitch: netlink: Message has 2 unknown bytes. [ 498.153561][T18711] openvswitch: netlink: Message has 2 unknown bytes. [ 498.153833][T18711] openvswitch: netlink: Message has 2 unknown bytes. [ 498.154092][T18711] openvswitch: netlink: Message has 2 unknown bytes. [ 498.156803][T18453] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.157819][T18711] openvswitch: netlink: Message has 2 unknown bytes. [ 498.303467][T18719] netlink: 'syz.1.2942': attribute type 2 has an invalid length. [ 498.405755][T17217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.405779][T17217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.457839][T18453] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.608276][T17219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.602415][ T5622] Bluetooth: hci5: command tx timeout [ 499.626869][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 499.776793][T18453] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.903473][T18453] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.355117][T17219] IPVS: stop unused estimator thread 0... [ 500.786591][T18453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 500.810200][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.820349][T18453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 500.845674][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.849990][T18453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 500.890378][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.892923][T18453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 500.925912][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.099471][T18453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.218305][T18453] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.252244][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.252376][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.335748][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.335867][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.589718][T18834] : renamed from bridge_slave_1 (while UP) [ 502.000984][ C0] net_ratelimit: 64 callbacks suppressed [ 502.001011][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 502.234865][T18858] __nla_validate_parse: 18 callbacks suppressed [ 502.234889][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 502.234904][T18858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2962'. [ 502.771245][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2967'. [ 502.833003][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 503.040790][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 503.066461][T18892] netlink: 'syz.0.2969': attribute type 11 has an invalid length. [ 503.066486][T18892] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2969'. [ 503.170342][T18453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.240098][T18898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2970'. [ 503.474290][T18910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'. [ 503.511561][T18910] syzkaller1: entered promiscuous mode [ 503.511588][T18910] syzkaller1: entered allmulticast mode [ 503.824250][T18922] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2976'. [ 504.080906][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 504.126569][T18939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2978'. [ 504.126594][T18939] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2978'. [ 504.132361][T18453] veth0_vlan: entered promiscuous mode [ 504.291054][T18453] veth1_vlan: entered promiscuous mode [ 504.381019][T18453] veth0_macvtap: entered promiscuous mode [ 504.390571][T18453] veth1_macvtap: entered promiscuous mode [ 504.425955][T18453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.447263][T18453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.690990][T17217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.691147][T17217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.691183][T17217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.691216][T17217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.963706][T17220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.963731][T17220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.074330][ T6785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.074354][ T6785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.120974][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 505.279760][T18973] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 505.356389][T18980] netlink: 'syz.3.2988': attribute type 21 has an invalid length. [ 505.356451][T18980] netlink: 'syz.3.2988': attribute type 6 has an invalid length. [ 505.577261][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 505.589355][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 505.599735][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.601169][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.610581][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.160898][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 506.169357][T19009] netlink: 'syz.1.2996': attribute type 1 has an invalid length. [ 506.233516][T19009] netlink: 'syz.1.2996': attribute type 1 has an invalid length. [ 506.746516][T19037] sctp: [Deprecated]: syz.4.3001 (pid 19037) Use of int in maxseg socket option. [ 506.746516][T19037] Use struct sctp_assoc_value instead [ 507.005194][T18985] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.005309][T18985] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.005392][T18985] bridge_slave_0: entered allmulticast mode [ 507.006590][T18985] bridge_slave_0: entered promiscuous mode [ 507.009565][T18985] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.009731][T18985] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.010173][T18985] bridge_slave_1: entered allmulticast mode [ 507.012106][T18985] bridge_slave_1: entered promiscuous mode [ 507.049438][T18985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.054765][T18985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.088392][T18985] team0: Port device team_slave_0 added [ 507.096131][T18985] team0: Port device team_slave_1 added [ 507.138294][T18985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.138312][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.138331][T18985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.139632][T18985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.139646][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.139671][T18985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.200906][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 507.259718][T18985] hsr_slave_0: entered promiscuous mode [ 507.260458][T18985] hsr_slave_1: entered promiscuous mode [ 507.262619][T18985] debugfs: 'hsr0' already exists in 'hsr' [ 507.262638][T18985] Cannot create hsr debugfs directory [ 507.421994][T19058] TC_ACT_REPEAT abuse ? [ 507.526382][T18985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.526420][T18985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.526446][T18985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 507.607163][T18951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.656112][T18985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.656139][T18985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.656154][T18985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 507.694918][ T5622] Bluetooth: hci0: command tx timeout [ 507.757114][T19066] x_tables: duplicate underflow at hook 2 [ 507.781903][T18985] bond0: (slave netdevsim1): Releasing backup interface [ 507.784195][T18985] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 507.784225][T18985] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 507.786742][T18985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.786764][T18985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.786780][T18985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 507.899919][T18985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.899957][T18985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.899983][T18985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 508.165789][T19079] vlan2: left promiscuous mode [ 508.165807][T19079] geneve0: left promiscuous mode [ 508.241015][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 509.280950][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 509.957558][T19051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.983283][T18985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 510.059726][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.064025][T18985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 510.128898][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.130572][T18985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 510.169508][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.177172][T18985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 510.186753][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.220937][T19105] xt_policy: output policy not valid in PREROUTING and INPUT [ 510.226698][T19105] xt_policy: output policy not valid in PREROUTING and INPUT [ 510.320799][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 510.344954][T19111] xt_CONNSECMARK: invalid mode: 254 [ 510.419116][T18985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.444236][T18985] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.453099][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.453206][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.463651][T19116] netlink: 'syz.1.3020': attribute type 1 has an invalid length. [ 510.485115][T19119] __nla_validate_parse: 7 callbacks suppressed [ 510.485137][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 510.485164][T19119] netlink: 'syz.4.3021': attribute type 30 has an invalid length. [ 510.541149][T19116] 8021q: adding VLAN 0 to HW filter on device bond10 [ 510.545238][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 510.545271][T19122] netlink: 'syz.4.3021': attribute type 30 has an invalid length. [ 510.580272][T19119] vxlan0: entered promiscuous mode [ 510.580297][T19119] vxlan0: entered allmulticast mode [ 510.671967][T19117] bond10: (slave gretap1): making interface the new active one [ 510.678223][T19117] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 510.715592][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3023'. [ 510.715648][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3023'. [ 510.801146][T19127] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.806613][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.806768][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.815458][T19138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3025'. [ 510.853231][T19130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.856551][T19130] bond7: (slave bond0): making interface the new active one [ 510.860076][T19130] bond7: (slave bond0): Enslaving as an active interface with an up link [ 510.868035][T19140] netlink: 'syz.1.3025': attribute type 11 has an invalid length. [ 510.901094][ T6785] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.994438][T17216] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.995952][T17216] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 510.996128][T17216] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 510.997219][T17216] bond0: now running without any active interface! [ 511.085010][T19146] netlink: 'syz.2.3028': attribute type 61 has an invalid length. [ 511.163439][ T6785] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.223372][T19153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.227892][T19153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.251013][T17220] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.276414][T19148] syzkaller0: entered promiscuous mode [ 511.276440][T19148] syzkaller0: entered allmulticast mode [ 511.336909][ T6785] bond7: (slave bond0): link status definitely down, disabling slave [ 511.361026][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 511.369946][ T6785] bond7: now running without any active interface! [ 511.400409][T19148] tipc: Enabled bearer , priority 0 [ 512.231726][T19145] tipc: Resetting bearer [ 512.272818][T19145] tipc: Disabling bearer [ 512.401222][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 512.678514][ T465] block nbd4: Possible stuck request ffff88802789e000: control (read@0,1024B). Runtime 60 seconds [ 512.678554][ T465] block nbd4: Possible stuck request ffff88802789e1c0: control (read@1024,1024B). Runtime 60 seconds [ 512.678577][ T465] block nbd4: Possible stuck request ffff88802789e380: control (read@2048,1024B). Runtime 60 seconds [ 512.678598][ T465] block nbd4: Possible stuck request ffff88802789e540: control (read@3072,1024B). Runtime 60 seconds [ 513.031462][T18985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.146872][T18985] veth0_vlan: entered promiscuous mode [ 513.179029][T18985] veth1_vlan: entered promiscuous mode [ 513.362854][ T4985] udevd[4985]: worker [17066] /devices/virtual/block/nbd4 is taking a long time [ 513.426753][T18985] veth0_macvtap: entered promiscuous mode [ 513.441004][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 513.447021][T18985] veth1_macvtap: entered promiscuous mode [ 513.519517][T18985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.558835][T18985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.621453][T17219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.623032][T17220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.623075][T17220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.623110][T17220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.794567][T19231] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3049'. [ 513.825211][T19231] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.3049'. [ 513.958400][T19219] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 514.075126][T17219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.075152][T17219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.135911][T19239] syzkaller1: entered promiscuous mode [ 514.135938][T19239] syzkaller1: entered allmulticast mode [ 514.240264][T17219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.240287][T17219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.273570][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 514.274300][T19245] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3053'. [ 514.316538][T19243] xt_TPROXY: Can be used only with -p tcp or -p udp [ 514.386026][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3054'. [ 514.480958][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 514.545087][ T6785] IPVS: starting estimator thread 0... [ 514.568752][T19258] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 514.688466][T19258] IPVS: Scheduler module ip_vs_sip not found [ 514.688531][T19260] IPVS: using max 36 ests per chain, 86400 per kthread [ 514.980185][T19272] netlink: 'syz.4.3056': attribute type 11 has an invalid length. [ 515.520873][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 515.618128][T19293] __nla_validate_parse: 2 callbacks suppressed [ 515.618151][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'. [ 515.856212][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.863111][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.872480][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.885070][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.885746][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.187970][T19310] netlink: 'syz.1.3065': attribute type 1 has an invalid length. [ 516.242921][T19311] bond9: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 516.246572][T19311] bond9 (unregistering): Released all slaves [ 516.406630][T19313] bond11: (slave veth11): Enslaving as an active interface with a down link [ 516.458423][T19327] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3068'. [ 516.492887][T19317] bond11: (slave veth13): Enslaving as an active interface with a down link [ 516.514137][T19320] bond11: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 516.547777][T12719] bond_slave_0: entered promiscuous mode [ 516.547817][T12719] bond_slave_1: entered promiscuous mode [ 516.560867][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 516.892573][T19343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3072'. [ 517.418746][T19362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3076'. [ 517.418775][T19362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3076'. [ 517.418791][T19362] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3076'. [ 517.462922][T19362] vlan2: entered allmulticast mode [ 517.462946][T19362] bridge_slave_0: entered allmulticast mode [ 517.463418][T19362] bridge0: port 1(vlan2) entered blocking state [ 517.463645][T19362] bridge0: port 1(vlan2) entered disabled state [ 517.466289][T19362] vlan2: entered promiscuous mode [ 517.600848][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 517.656425][T19300] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.656593][T19300] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.656859][T19300] bridge_slave_0: entered allmulticast mode [ 517.658180][T19300] bridge_slave_0: entered promiscuous mode [ 517.686968][T19300] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.687085][T19300] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.687172][T19300] bridge_slave_1: entered allmulticast mode [ 517.688395][T19300] bridge_slave_1: entered promiscuous mode [ 517.734783][T19300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.738264][T19300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.775452][T19300] team0: Port device team_slave_0 added [ 517.777726][T19300] team0: Port device team_slave_1 added [ 517.804965][T19300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.804994][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.805013][T19300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.806538][T19300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.806553][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.806574][T19300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.892864][T19300] hsr_slave_0: entered promiscuous mode [ 517.894093][T19300] hsr_slave_1: entered promiscuous mode [ 517.895015][T19300] debugfs: 'hsr0' already exists in 'hsr' [ 517.895035][T19300] Cannot create hsr debugfs directory [ 518.001072][ T5622] Bluetooth: hci3: command tx timeout [ 518.640915][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 519.681603][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 519.977939][T19346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.987478][T19300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.032836][T19300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.086181][T19300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 520.090867][ T5622] Bluetooth: hci3: command tx timeout [ 520.124982][T19300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 520.144363][T19380] tipc: Enabled bearer , priority 0 [ 520.144787][T19300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 520.174787][T19300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 520.179527][T19300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 520.219806][T19300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 520.283998][T19388] netlink: 'syz.2.3083': attribute type 61 has an invalid length. [ 520.284028][T19388] netlink: 'syz.2.3083': attribute type 105 has an invalid length. [ 520.345097][T19397] Unsupported ieee802154 address type: 0 [ 520.467826][T19397] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 520.579053][T19300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.646660][T19300] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.680523][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.680717][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.704091][T11935] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.704263][T11935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.730836][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 520.760166][T19418] syzkaller0: entered promiscuous mode [ 520.760190][T19418] syzkaller0: entered allmulticast mode [ 520.766813][T19416] tipc: Started in network mode [ 520.766840][T19416] tipc: Node identity 2279cc54160f, cluster identity 4711 [ 520.766996][T19416] tipc: Enabled bearer , priority 0 [ 520.967788][T19429] nbd: must specify at least one socket [ 520.973356][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3089'. [ 521.012271][T19414] tipc: Resetting bearer [ 521.038811][T19414] tipc: Disabling bearer [ 521.085756][T19433] nftables ruleset with unbound chain [ 521.267464][T19442] batadv_slave_0: entered promiscuous mode [ 521.277713][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'. [ 521.459825][T19440] batadv_slave_0: left promiscuous mode [ 521.625212][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 521.626407][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 521.770916][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 521.946949][T19468] veth0_to_bond: entered allmulticast mode [ 522.064074][T19470] tun0: tun_chr_ioctl cmd 1074025675 [ 522.064100][T19470] tun0: persist disabled [ 522.138899][T19464] Bluetooth: MGMT ver 1.23 [ 522.144997][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 522.163179][ T5622] Bluetooth: hci3: command tx timeout [ 522.264373][T19478] bond3: (slave bond0): Releasing active interface [ 522.266484][T19478] batman_adv: batadv0: Removing interface: veth0 [ 522.272729][T19480] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3101'. [ 522.280401][T19481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3101'. [ 522.306326][T19478] bond2: (slave ip6gretap1): Removing an active aggregator [ 522.310285][T19478] bond2: (slave ip6gretap1): Releasing backup interface [ 522.310305][T19478] bond2: (slave ip6gretap1): the permanent HWaddr of slave - d6:86:8b:1b:b2:8b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 522.343051][T19478] bond2: (slave veth5): Releasing backup interface [ 522.358501][T19478] bond2: (slave veth7): Releasing backup interface [ 522.375926][T19478] bond5: (slave bridge2): Releasing backup interface [ 522.375954][T19478] bridge2: left promiscuous mode [ 522.376060][T19478] bridge2: left allmulticast mode [ 522.377371][T19478] vlan2: left allmulticast mode [ 522.377384][T19478] geneve0: left allmulticast mode [ 522.377479][T19478] bridge0: port 1(vlan2) entered disabled state [ 522.399327][T19485] sctp: [Deprecated]: syz.1.3102 (pid 19485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.399327][T19485] Use struct sctp_sack_info instead [ 522.434480][T19478] bond8: (slave geneve3): Releasing active interface [ 522.532907][T19478] syzkaller0: entered promiscuous mode [ 522.532931][T19478] syzkaller0: entered allmulticast mode [ 522.556108][T19490] netlink: 'syz.1.3103': attribute type 28 has an invalid length. [ 522.556132][T19490] netlink: 'syz.1.3103': attribute type 3 has an invalid length. [ 522.556146][T19490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3103'. [ 522.591630][T19300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.653557][T11935] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 522.653800][T11935] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 522.671529][T11935] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 522.747270][T19493] netlink: ct family unspecified [ 522.747317][T19493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.778173][T19300] veth0_vlan: entered promiscuous mode [ 522.800856][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 522.803058][T19300] veth1_vlan: entered promiscuous mode [ 522.878955][T19300] veth0_macvtap: entered promiscuous mode [ 522.895863][T19300] veth1_macvtap: entered promiscuous mode [ 522.937095][T19300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.992023][T19300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.027714][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3107'. [ 523.050043][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3107'. [ 523.075247][T19503] netlink: 'syz.2.3108': attribute type 1 has an invalid length. [ 523.089793][ T6770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.090151][ T6770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.090324][ T6770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.152960][T19503] 8021q: adding VLAN 0 to HW filter on device bond9 [ 523.154694][T19502] netlink: 'syz.4.3106': attribute type 1 has an invalid length. [ 523.243824][T19508] bond9: (slave veth13): Enslaving as an active interface with a down link [ 523.270096][T19502] team0: Port device team_slave_1 removed [ 523.308868][T19503] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 523.309008][T19503] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 523.338778][T19506] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 523.508337][T19510] bond2: peer notification delay (2048) is not a multiple of miimon (100), value rounded to 2000 ms [ 523.622432][T19530] netlink: 'syz.2.3112': attribute type 1 has an invalid length. [ 523.639765][T19528] netlink: 'syz.0.3111': attribute type 1 has an invalid length. [ 523.657322][T19529] erspan2: entered allmulticast mode [ 523.679015][T11935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.679037][T11935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.741472][ T32] audit: type=1800 audit(1790817203.831:17): pid=19535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3113" name=CB dev="tmpfs" ino=186 res=0 errno=0 [ 523.836645][ T6785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.836669][ T6785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.840809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 523.845854][T17220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.242237][ T5622] Bluetooth: hci3: command tx timeout [ 524.431195][T19557] syzkaller0: entered promiscuous mode [ 524.431224][T19557] syzkaller0: entered allmulticast mode [ 524.642211][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.658062][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.667597][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.679898][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.692719][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.880787][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 524.936953][T19567] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 524.982838][T19567] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 525.003700][T19571] netlink: 'syz.0.3123': attribute type 1 has an invalid length. [ 525.004192][T19579] bridge0: port 2(ip6gretap0) entered blocking state [ 525.005565][T19579] bridge0: port 2(ip6gretap0) entered disabled state [ 525.005751][T19579] ip6gretap0: entered allmulticast mode [ 525.034449][T19579] ip6gretap0: left allmulticast mode [ 525.312841][ T5618] syz_tun (unregistering): left allmulticast mode [ 525.422658][ T5618] tipc: Disabling bearer [ 525.500220][T19594] gre0: Caught tx_queue_len zero misconfig [ 525.920973][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 526.134936][T19625] netlink: 'syz.4.3134': attribute type 1 has an invalid length. [ 526.154313][T19625] __nla_validate_parse: 41 callbacks suppressed [ 526.154334][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'. [ 526.571372][ T6770] IPVS: starting estimator thread 0... [ 526.574388][T19563] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.576970][T19563] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.577510][T19563] bridge_slave_0: entered allmulticast mode [ 526.586733][T19563] bridge_slave_0: entered promiscuous mode [ 526.593111][T19563] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.594082][T19563] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.594500][T19563] bridge_slave_1: entered allmulticast mode [ 526.600966][T19563] bridge_slave_1: entered promiscuous mode [ 526.682853][T19653] IPVS: using max 49 ests per chain, 117600 per kthread [ 526.689956][T19563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.704483][T19563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.787082][T19563] team0: Port device team_slave_0 added [ 526.793261][T19563] team0: Port device team_slave_1 added [ 526.811566][ T5632] Bluetooth: hci4: command tx timeout [ 526.867665][T19563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.867684][T19563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.867711][T19563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.893799][T19563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.893817][T19563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.893841][T19563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.970786][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 527.052061][T19563] hsr_slave_0: entered promiscuous mode [ 527.053192][T19563] hsr_slave_1: entered promiscuous mode [ 527.053962][T19563] debugfs: 'hsr0' already exists in 'hsr' [ 527.053982][T19563] Cannot create hsr debugfs directory [ 527.181093][T19667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.384902][T19563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.428954][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 527.443278][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 527.443306][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 527.445368][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 527.445393][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 527.489586][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 527.489647][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 527.522623][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 527.522656][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 527.693371][T19680] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.694080][T19680] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.724759][T19680] bond_slave_0: left promiscuous mode [ 527.724794][T19680] bond_slave_1: left promiscuous mode [ 528.006668][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 528.018623][T19680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.044936][T19680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.442161][T19718] openvswitch: netlink: Flow actions attr not present in new flow. [ 528.580033][T19563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.810950][T17222] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.811014][T17222] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.811048][T17222] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.811081][T17222] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.881053][ T5632] Bluetooth: hci4: command tx timeout [ 528.988856][T19563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.017438][T19733] Bluetooth: hci0: invalid len left 17, exp >= 93 [ 529.041056][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 529.138879][T19563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.837483][T19563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 529.860399][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.869749][T19563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 529.911024][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.914688][T19761] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.915678][T19563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 529.935930][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.943243][T19563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 530.000228][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.090759][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 530.254059][T19783] netlink: 'syz.0.3165': attribute type 1 has an invalid length. [ 530.313254][T19783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.384903][T19563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.423427][T19563] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.453843][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.453970][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.473094][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.473201][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.961141][ T5632] Bluetooth: hci4: command tx timeout [ 531.121007][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 531.186135][T19832] __nla_validate_parse: 140 callbacks suppressed [ 531.186159][T19832] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3178'. [ 531.509800][T19842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.520316][T19842] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.537251][T19842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.638667][T19842] bond_slave_0: entered promiscuous mode [ 531.652051][T19842] bond_slave_1: entered promiscuous mode [ 531.660068][T19842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.676499][T19842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.701960][T19842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.701989][T19842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.708746][T19842] veth1_vlan: left promiscuous mode [ 531.710155][T19842] veth0_vlan: left promiscuous mode [ 531.715472][T19842] veth0_vlan: entered promiscuous mode [ 531.723826][T19842] veth1_vlan: entered promiscuous mode [ 531.726333][T19854] x_tables: duplicate underflow at hook 1 [ 531.738977][T19842] veth1_macvtap: left promiscuous mode [ 531.742901][T19842] veth0_macvtap: left promiscuous mode [ 531.744580][T19842] veth0_macvtap: entered promiscuous mode [ 531.748954][T19842] veth1_macvtap: entered promiscuous mode [ 531.759038][T19842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.760395][T19842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.765942][T19842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.767175][T19842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.795699][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.795809][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.807113][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.807241][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.883479][T19855] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 531.883507][T19855] bridge1: entered allmulticast mode [ 531.913940][ T6770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.915379][T17219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.915424][T17219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.915457][T17219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.925554][T19855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3183'. [ 532.027950][T19563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.102714][T19861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 532.122686][T19563] veth0_vlan: entered promiscuous mode [ 532.144657][T19563] veth1_vlan: entered promiscuous mode [ 532.161076][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 532.188909][T19864] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3185'. [ 532.237754][T19563] veth0_macvtap: entered promiscuous mode [ 532.274890][T19563] veth1_macvtap: entered promiscuous mode [ 532.307347][T19563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.319174][T19563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.422044][T19872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3186'. [ 532.422078][T19872] netlink: 'syz.3.3186': attribute type 12 has an invalid length. [ 532.517196][T19874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3186'. [ 532.517234][T19874] netlink: 'syz.3.3186': attribute type 12 has an invalid length. [ 532.542457][T17222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.542508][T17222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.542544][T17222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.542578][T17222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.653550][ T6785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.653574][ T6785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.701071][T17222] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.702769][T17216] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.702810][T17216] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.702844][T17216] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.801588][T19886] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 532.832560][T17222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.832584][T17222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.043705][ T5632] Bluetooth: hci4: command tx timeout [ 533.174514][T19897] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.3119'. [ 533.201039][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 533.413439][T19903] netlink: 'syz.4.3193': attribute type 1 has an invalid length. [ 533.413465][T19903] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3193'. [ 533.553120][T19916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 533.587213][T19916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 533.658900][T19916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 533.704662][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 533.709347][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 533.710219][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 533.736736][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 533.746006][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 534.136200][T19928] hsr0: entered promiscuous mode [ 534.174490][T19928] hsr_slave_0: left promiscuous mode [ 534.188347][T19928] hsr_slave_1: left promiscuous mode [ 534.240791][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 534.318845][T19928] hsr0 (unregistering): left promiscuous mode [ 534.507052][ T5619] bond0: (slave syz_tun): Releasing backup interface [ 534.794111][T11935] IPVS: starting estimator thread 0... [ 534.891767][T19956] IPVS: using max 25 ests per chain, 60000 per kthread [ 535.113210][T19959] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.113980][T19959] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.257880][T19959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.270048][T19959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.280868][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 535.447773][T19958] bridge_slave_0: left allmulticast mode [ 535.447799][T19958] bridge_slave_0: left promiscuous mode [ 535.448027][T19958] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.478956][T19960] bridge_slave_1: left allmulticast mode [ 535.479015][T19960] bridge_slave_1: left promiscuous mode [ 535.479236][T19960] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.696009][T17219] bond0: (slave netdevsim1): Releasing backup interface [ 535.842019][ T5632] Bluetooth: hci1: command tx timeout [ 536.120990][T17216] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.121026][T17216] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.121078][T17216] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.121102][T17216] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.121138][T17216] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.121161][T17216] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.121196][T17216] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.121219][T17216] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.211250][ T6785] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.220242][T19990] __nla_validate_parse: 33 callbacks suppressed [ 536.220260][T19990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3213'. [ 536.270075][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'. [ 536.332967][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 536.362313][T17216] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.471180][T19998] netlink: 1392 bytes leftover after parsing attributes in process `syz.2.3214'. [ 536.536428][T19998] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.549034][T19998] bridge_slave_1 (unregistering): left allmulticast mode [ 536.549060][T19998] bridge_slave_1 (unregistering): left promiscuous mode [ 536.549161][T19998] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.597679][T20013] FAULT_INJECTION: forcing a failure. [ 536.597679][T20013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.597713][T20013] CPU: 1 UID: 0 PID: 20013 Comm: syz.4.3218 Not tainted syzkaller #0 PREEMPT(full) [ 536.597736][T20013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 536.597748][T20013] Call Trace: [ 536.597756][T20013] [ 536.597765][T20013] dump_stack_lvl+0xe8/0x150 [ 536.597806][T20013] should_fail_ex+0x410/0x560 [ 536.597841][T20013] _copy_to_user+0x31/0xb0 [ 536.597873][T20013] simple_read_from_buffer+0xe1/0x170 [ 536.597909][T20013] proc_fail_nth_read+0x1bb/0x230 [ 536.597972][T20013] ? common_file_perm+0x20e/0x2b0 [ 536.598002][T20013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.598025][T20013] ? rw_verify_area+0x24a/0x4c0 [ 536.598056][T20013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.598075][T20013] vfs_read+0x213/0xa80 [ 536.598109][T20013] ? __pfx___mutex_lock+0x10/0x10 [ 536.598143][T20013] ? __pfx_vfs_read+0x10/0x10 [ 536.598174][T20013] ? __fget_files+0x2a/0x420 [ 536.598207][T20013] ? __fget_files+0x3a2/0x420 [ 536.598233][T20013] ? __fget_files+0x2a/0x420 [ 536.598280][T20013] ksys_read+0x150/0x270 [ 536.598313][T20013] ? __pfx_ksys_read+0x10/0x10 [ 536.598356][T20013] do_syscall_64+0x166/0x520 [ 536.598381][T20013] ? trace_irq_disable+0x3b/0x140 [ 536.598402][T20013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.598425][T20013] ? clear_bhb_loop+0x70/0xc0 [ 536.598451][T20013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.598470][T20013] RIP: 0033:0x7f855b95e98e [ 536.598490][T20013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 536.598507][T20013] RSP: 002b:00007f855c886fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.598533][T20013] RAX: ffffffffffffffda RBX: 00007f855c8876c0 RCX: 00007f855b95e98e [ 536.598549][T20013] RDX: 000000000000000f RSI: 00007f855c8870a0 RDI: 0000000000000004 [ 536.598561][T20013] RBP: 00007f855c887090 R08: 0000000000000000 R09: 0000000000000000 [ 536.598574][T20013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.598586][T20013] R13: 00007f855bc26038 R14: 00007f855bc25fa0 R15: 00007ffe5874cc18 [ 536.598620][T20013] [ 536.632625][T17219] vlan2: left promiscuous mode [ 536.633074][T17219] bridge0: port 1(vlan2) entered disabled state [ 537.029316][T17219] xfrm0 (unregistering): left allmulticast mode [ 537.030229][T17219] team0: Port device xfrm0 removed [ 537.218559][T17219] bond10 (unregistering): (slave gretap1): Releasing active interface [ 537.360809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 537.493958][T17219] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 537.493992][T17219] bridge6 (unregistering): left allmulticast mode [ 537.544023][T17219] bond0 (unregistering): Released all slaves [ 537.557732][T17219] bond1 (unregistering): Released all slaves [ 537.576312][T17219] bond2 (unregistering): Released all slaves [ 537.616087][T17219] bond3 (unregistering): Released all slaves [ 537.617872][ T6785] smbdirect: ib_dev[syz1] removed [ 537.692826][T17219] bond4 (unregistering): Released all slaves [ 537.706877][T17219] bond5 (unregistering): Released all slaves [ 537.724310][T17219] bond6 (unregistering): (slave veth5): Releasing active interface [ 537.725028][T17219] bond6 (unregistering): Released all slaves [ 537.746174][T17219] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 537.746954][T17219] bond7 (unregistering): Released all slaves [ 537.770086][T17219] bond8 (unregistering): (slave veth9): Releasing active interface [ 537.779690][T17219] bond8 (unregistering): Released all slaves [ 537.793714][T17219] bond9 (unregistering): Released all slaves [ 537.808555][T17219] bond10 (unregistering): Released all slaves [ 537.826160][T17219] bond11 (unregistering): (slave veth11): Releasing active interface [ 537.828223][T17219] bond11 (unregistering): (slave veth13): Releasing active interface [ 537.829702][T17219] bond11 (unregistering): Released all slaves [ 537.930842][ T5632] Bluetooth: hci1: command tx timeout [ 538.153699][T17219] tipc: Disabling bearer [ 538.153974][T17219] tipc: Disabling bearer [ 538.194507][T17219] tipc: Left network mode [ 538.194752][T19921] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.194877][T19921] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.195042][T19921] bridge_slave_0: entered allmulticast mode [ 538.215941][T19921] bridge_slave_0: entered promiscuous mode [ 538.228627][ T6785] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.228676][ T6785] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.229413][T19921] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.229518][T19921] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.229700][T19921] bridge_slave_1: entered allmulticast mode [ 538.248376][T19921] bridge_slave_1: entered promiscuous mode [ 538.400794][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 538.410216][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3226'. [ 538.472989][T20058] netlink: 'syz.3.3225': attribute type 1 has an invalid length. [ 538.474300][T19921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.475080][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3226'. [ 538.637512][T20058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.709774][T19921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.757942][T20079] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3227'. [ 538.823705][T20067] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 539.440807][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 540.007047][ T5632] Bluetooth: hci1: command tx timeout [ 540.187193][T19921] team0: Port device team_slave_0 added [ 540.192729][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 540.249250][T20096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.266193][T19921] team0: Port device team_slave_1 added [ 540.320542][T20091] syzkaller1: entered promiscuous mode [ 540.320560][T20091] syzkaller1: entered allmulticast mode [ 540.347186][T19921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.347205][T19921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.347229][T19921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.355095][T19921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.355112][T19921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.355135][T19921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.490914][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 540.512654][T19921] hsr_slave_0: entered promiscuous mode [ 540.515518][T19921] hsr_slave_1: entered promiscuous mode [ 540.517823][T19921] debugfs: 'hsr0' already exists in 'hsr' [ 540.517839][T19921] Cannot create hsr debugfs directory [ 540.733664][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3235'. [ 540.767155][T20113] ipvlan1: entered promiscuous mode [ 540.772069][T20113] ipvlan1: left promiscuous mode [ 541.161983][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3236'. [ 541.520799][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 541.594465][T20145] xt_connbytes: Forcing CT accounting to be enabled [ 542.088942][ T5632] Bluetooth: hci1: command tx timeout [ 542.283540][T19921] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.439115][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 542.495492][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b3ecc00: rx timeout, send abort [ 542.560945][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 542.721174][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 542.784946][ T465] block nbd4: Possible stuck request ffff88802789e000: control (read@0,1024B). Runtime 90 seconds [ 542.784992][ T465] block nbd4: Possible stuck request ffff88802789e1c0: control (read@1024,1024B). Runtime 90 seconds [ 542.785019][ T465] block nbd4: Possible stuck request ffff88802789e380: control (read@2048,1024B). Runtime 90 seconds [ 542.785044][ T465] block nbd4: Possible stuck request ffff88802789e540: control (read@3072,1024B). Runtime 90 seconds [ 542.845832][T20176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3246'. [ 542.995560][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b3ecc00: abort rx timeout. Force session deactivation [ 543.128617][T20166] xt_LOG: prefix is not null-terminated [ 543.530979][T17219] wg1 (unregistering): left allmulticast mode [ 543.532131][T17219] team0 (unregistering): Port device wg1 removed [ 543.601216][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 543.620070][T19921] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.889467][T20195] netlink: 'syz.4.3248': attribute type 2 has an invalid length. [ 543.987214][T20195] lo: Caught tx_queue_len zero misconfig [ 543.990406][T20199] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3249'. [ 544.060656][T20199] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3944. macoff=96 [ 544.108393][T20200] netlink: 'syz.4.3248': attribute type 5 has an invalid length. [ 544.179253][T19921] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.226811][T20195] tipc: New replicast peer: 127.0.0.1 [ 544.239461][T20195] tipc: Enabled bearer , priority 10 [ 544.582499][T19921] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.598309][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3250'. [ 544.643075][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 544.679394][T17219] IPVS: stop unused estimator thread 0... [ 544.699445][T20209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3250'. [ 544.734044][T20209] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3250'. [ 544.977643][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3255'. [ 545.006941][ T5632] block nbd5: Receive control failed (result -32) [ 545.019117][ T5632] block nbd5: Receive control failed (result -32) [ 545.224460][T20227] IPv6: NLM_F_CREATE should be specified when creating new route [ 545.224561][T20227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.224573][T20227] IPv6: NLM_F_CREATE should be set when creating new route [ 545.224638][T20227] IPv6: NLM_F_CREATE should be set when creating new route [ 545.224664][T20227] IPv6: NLM_F_CREATE should be set when creating new route [ 545.229982][T20227] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3255'. [ 545.359302][T20238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 545.359347][T20238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3257'. [ 545.377741][T20239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 545.474030][T12719] tipc: Node number set to 880200788 [ 545.680918][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 545.885135][T19921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 545.913670][T19921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.916744][T19921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 545.976515][T19921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.977628][T19921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.021788][T19921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.029465][T19921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.033263][T20241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.058364][T19921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.130146][T20259] netlink: zone id is out of range [ 546.130161][T20259] netlink: del zone limit has 4 unknown bytes [ 546.176885][T20264] netlink: zone id is out of range [ 546.176902][T20264] netlink: del zone limit has 4 unknown bytes [ 546.352214][T20270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 546.467716][T19921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.501029][T19921] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.517595][T17219] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.517738][T17219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.554606][T17221] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.554741][T17221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.721002][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 546.977437][T20298] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 547.075642][T20302] team0: Port device team_slave_0 removed [ 547.691650][T20322] netlink: 'syz.3.3270': attribute type 1 has an invalid length. [ 547.969904][T19921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.128680][T19921] veth0_vlan: entered promiscuous mode [ 548.158707][T19921] veth1_vlan: entered promiscuous mode [ 548.290534][T19921] veth0_macvtap: entered promiscuous mode [ 548.309366][T19921] veth1_macvtap: entered promiscuous mode [ 548.366437][T19921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.386086][T20358] __nla_validate_parse: 8 callbacks suppressed [ 548.387076][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3278'. [ 548.387174][T20358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3278'. [ 548.387209][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3278'. [ 548.429225][T19921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.510938][T17216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.511343][T17219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.511381][T17219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.531564][T17216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.718425][T20364] Bluetooth: hci0: unsupported parameter 5135 [ 548.718451][T20364] Bluetooth: hci0: unsupported parameter 8192 [ 548.718464][T20364] Bluetooth: hci0: unsupported parameter 5135 [ 548.718476][T20364] Bluetooth: hci0: unsupported parameter 8192 [ 548.767326][ T6770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.767351][ T6770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.801227][ C0] net_ratelimit: 1 callbacks suppressed [ 548.801248][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 548.880866][ T5622] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 548.968296][ T6785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.968320][ T6785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.840992][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 549.954919][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3287'. [ 549.970441][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 550.153920][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3290'. [ 550.153956][T20433] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 550.708029][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 550.880795][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 550.896239][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'. [ 550.896260][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3299'. [ 550.996870][T20472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3299'. [ 551.825616][T20530] netlink: 'syz.2.3310': attribute type 2 has an invalid length. [ 551.844064][T20530] : entered promiscuous mode [ 551.888559][T20532] netlink: 'syz.1.3311': attribute type 1 has an invalid length. [ 551.896904][T20535] netlink: 'syz.2.3310': attribute type 2 has an invalid length. [ 551.920948][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 552.716841][T20568] batman_adv: batadv0: Adding interface: syzkaller0 [ 552.716863][T20568] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.716897][T20568] batman_adv: batadv0: Interface activated: syzkaller0 [ 552.956388][T20585] netlink: 'syz.4.3318': attribute type 3 has an invalid length. [ 552.964740][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 553.589545][T20598] __nla_validate_parse: 11 callbacks suppressed [ 553.589568][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'. [ 553.767079][T20590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'. [ 553.790573][T20568] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 553.986065][T20568] batman_adv: batadv0: Removing interface: syzkaller0 [ 554.000985][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 554.305291][T20624] TC_ACT_REPEAT abuse ? [ 554.699003][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'. [ 555.040953][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 555.645752][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 555.704040][T20703] netlink: 'syz.2.3341': attribute type 2 has an invalid length. [ 555.704065][T20703] netlink: 'syz.2.3341': attribute type 5 has an invalid length. [ 555.902855][T20710] bond0: Caught tx_queue_len zero misconfig [ 556.033577][T20714] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3343'. [ 556.033700][T20714] 0·: renamed from hsr0 (while UP) [ 556.060426][T20714] 0·: entered allmulticast mode [ 556.060452][T20714] hsr_slave_0: entered allmulticast mode [ 556.060470][T20714] hsr_slave_1: entered allmulticast mode [ 556.080787][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 556.081538][T20714] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 556.094444][T20714] netlink: 'syz.1.3343': attribute type 1 has an invalid length. [ 556.273895][T20738] ip6t_hbh: Not strict - not implemented [ 556.489037][T20746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3350'. [ 556.690366][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3350'. [ 556.893126][T20755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3351'. [ 556.947797][T20755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3351'. [ 557.120835][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 557.129407][T20724] ip_tables: iptables: counters copy to user failed while replacing table [ 557.612779][T20783] xt_connbytes: Forcing CT accounting to be enabled [ 557.663581][T20783] openvswitch: netlink: IPv4 tun info is not correct [ 557.703727][T20789] x_tables: duplicate underflow at hook 2 [ 558.080795][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.160810][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 558.215454][T20816] syzkaller0: entered promiscuous mode [ 558.215479][T20816] syzkaller0: entered allmulticast mode [ 558.508274][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 559.127113][T20842] nbd: couldn't find a device at index 0 [ 559.200767][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 559.202054][T20859] __nla_validate_parse: 1 callbacks suppressed [ 559.202083][T20859] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3372'. [ 559.800481][T20887] ip_tables: iptables: counters copy to user failed while replacing table [ 559.823914][T20891] openvswitch: netlink: IP tunnel dst address not specified [ 559.823951][T20891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.055282][T20889] netlink: 'syz.3.3377': attribute type 16 has an invalid length. [ 560.055305][T20889] netlink: 'syz.3.3377': attribute type 17 has an invalid length. [ 560.097075][T20901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 560.131403][T20895] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.223589][T20889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.241051][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 560.249018][T20889] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.249310][T20889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.261397][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 560.288309][T20889] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.288451][T20889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.318133][T20913] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3381'. [ 560.374582][T20889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 560.419468][T20918] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.3382'. [ 560.419498][T20918] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.3382'. [ 560.746738][T20938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3386'. [ 560.870436][T20901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.075848][T20901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.101897][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 561.101931][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 561.178791][T20952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3389'. [ 561.223925][T20901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.295423][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 561.358850][T20901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.744007][T20970] netlink: 'syz.3.3393': attribute type 6 has an invalid length. [ 561.772506][ T6785] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.842697][ T6785] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.855671][T20969] syzkaller0: entered promiscuous mode [ 561.855693][T20969] syzkaller0: entered allmulticast mode [ 562.111289][ T6785] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.211909][T11935] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.222638][T20910] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.318275][T20991] ip_tables: iptables: counters copy to user failed while replacing table [ 562.320813][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 562.451793][T20910] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.457669][T21000] openvswitch: netlink: Message has 8 unknown bytes. [ 562.457709][T21000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.657664][T20910] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.779178][T20910] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.042725][T21027] netlink: 'syz.3.3408': attribute type 1 has an invalid length. [ 563.425363][T21038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.470947][T21038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.645921][T21046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.855914][T21061] netlink: 'syz.3.3417': attribute type 1 has an invalid length. [ 563.884769][T21054] IPVS: Scheduler module ip_vs_sip not found [ 563.898460][T21061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 564.229251][T21077] syzkaller0: entered promiscuous mode [ 564.229275][T21077] syzkaller0: entered allmulticast mode [ 564.286552][T21080] __nla_validate_parse: 10 callbacks suppressed [ 564.286574][T21080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 564.318777][T21080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 564.324896][T21083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 564.355944][T21086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 564.410783][ C0] net_ratelimit: 2 callbacks suppressed [ 564.410806][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 564.473631][T21090] Bluetooth: MGMT ver 1.23 [ 564.498660][T21081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3423'. [ 564.628768][T21096] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20004 [ 564.706667][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'. [ 564.731168][T21098] netlink: 'syz.4.3431': attribute type 4 has an invalid length. [ 564.731191][T21098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3431'. [ 564.914966][T21108] openvswitch: netlink: Duplicate or invalid key (type 0). [ 564.984283][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'. [ 564.984310][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'. [ 565.062509][T21106] bond_slave_0: left promiscuous mode [ 565.062543][T21106] bond_slave_1: left promiscuous mode [ 565.294562][T21106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.440771][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 565.658625][T21126] xt_TCPMSS: Only works on TCP SYN packets [ 565.731373][T17222] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.731966][T17222] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.732002][T17222] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.732031][T17222] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.732063][T17222] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.732102][T17222] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.732134][T17222] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.844003][T17222] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.943146][T21125] bridge_slave_1: left allmulticast mode [ 565.943175][T21125] bridge_slave_1: left promiscuous mode [ 565.943409][T21125] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.967855][T21125] bridge_slave_0: left allmulticast mode [ 565.967881][T21125] bridge_slave_0: left promiscuous mode [ 565.968147][T21125] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.973046][T21130] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3438'. [ 566.139667][T21139] bridge0: port 3(veth1_to_bridge) entered blocking state [ 566.139841][T21139] bridge0: port 3(veth1_to_bridge) entered disabled state [ 566.139994][T21139] veth1_to_bridge: entered allmulticast mode [ 566.164526][T21139] veth1_to_bridge: entered promiscuous mode [ 566.164709][T21139] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 566.165250][T21139] bridge0: port 3(veth1_to_bridge) entered blocking state [ 566.165385][T21139] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 566.480762][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 566.759611][T21172] openvswitch: netlink: Duplicate or invalid key (type 0). [ 566.835167][T21165] ip6gretap1: entered promiscuous mode [ 567.027838][T21185] netlink: 'syz.0.3449': attribute type 3 has an invalid length. [ 567.035059][T21185] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 567.035079][T21185] netlink: 'syz.0.3449': attribute type 268 has an invalid length. [ 567.179118][T21191] bond0: (slave bond_slave_0): Releasing backup interface [ 567.215873][T21191] bond0: (slave bond_slave_1): Releasing backup interface [ 567.233900][T21191] team0: Port device team_slave_0 removed [ 567.234320][T21191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.237906][T21191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.245456][T21191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 567.466980][T21203] netlink: 'syz.2.3453': attribute type 361 has an invalid length. [ 567.467857][T21204] netlink: 'syz.2.3453': attribute type 361 has an invalid length. [ 567.513291][T21203] lo: entered promiscuous mode [ 567.513317][T21203] lo: entered allmulticast mode [ 567.518568][T21203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.520902][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 567.738369][T21218] netlink: 'syz.3.3457': attribute type 2 has an invalid length. [ 567.738394][T21218] netlink: 'syz.3.3457': attribute type 5 has an invalid length. [ 567.749413][T21218] xt_connbytes: Forcing CT accounting to be enabled [ 568.106110][T21239] ip_tables: iptables: counters copy to user failed while replacing table [ 568.370407][T21260] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.529552][T21263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 568.705268][T21276] netlink: 'syz.0.3472': attribute type 9 has an invalid length. [ 569.324634][T21290] netlink: 'syz.1.3477': attribute type 10 has an invalid length. [ 569.336981][T21290] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.345610][T21290] bond0: (slave team0): Enslaving as an active interface with an up link [ 569.388023][T21294] __nla_validate_parse: 15 callbacks suppressed [ 569.388056][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3479'. [ 569.600754][ C0] net_ratelimit: 1 callbacks suppressed [ 569.600777][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 569.602701][T21304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3484'. [ 569.604144][T21296] sctp: [Deprecated]: syz.2.3481 (pid 21296) Use of int in maxseg socket option. [ 569.604144][T21296] Use struct sctp_assoc_value instead [ 569.606964][T21304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3484'. [ 569.756828][T21312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3485'. [ 569.757354][T21312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3485'. [ 569.837696][T21310] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3480'. [ 569.935651][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'. [ 569.935680][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'. [ 570.013448][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'. [ 570.013481][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'. [ 570.197914][T21329] netlink: 'syz.1.3488': attribute type 5 has an invalid length. [ 570.640769][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 571.483135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.484417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.484914][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.485389][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.485868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.486343][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.486828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.487295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.734393][ T5622] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 573.162716][ T465] block nbd4: Possible stuck request ffff88802789e000: control (read@0,1024B). Runtime 120 seconds [ 573.162764][ T465] block nbd4: Possible stuck request ffff88802789e1c0: control (read@1024,1024B). Runtime 120 seconds [ 573.162792][ T465] block nbd4: Possible stuck request ffff88802789e380: control (read@2048,1024B). Runtime 120 seconds [ 573.162817][ T465] block nbd4: Possible stuck request ffff88802789e540: control (read@3072,1024B). Runtime 120 seconds [ 574.610884][ C1] net_ratelimit: 13072 callbacks suppressed [ 574.610910][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.611035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.611368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.611544][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.611856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.612011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.612307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.612483][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.612879][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.612944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 577.320613][ C1] sched: DL replenish lagged too much [ 579.620771][ C0] net_ratelimit: 21808 callbacks suppressed [ 579.620799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.620825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.621260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 579.621261][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 579.621697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.621725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.622149][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 579.622592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.622615][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.623044][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 584.630632][ C0] net_ratelimit: 19463 callbacks suppressed [ 584.630659][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.630940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 584.631375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.631563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.631875][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 584.632034][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 584.632306][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.632480][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.632799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 584.633233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.421644][ T30] rcu_tasks_wait_gp: rcu_tasks grace period number 29 (since boot) is 1386 jiffies old. [ 589.640655][ C0] net_ratelimit: 19552 callbacks suppressed [ 589.640669][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.640679][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 589.641103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 589.641136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.641555][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.642001][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 589.642045][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.642428][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.642526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 589.642880][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.650720][ C1] net_ratelimit: 18956 callbacks suppressed [ 594.650747][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.650952][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.651175][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.651376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.651673][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.652154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.652242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.652618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.652687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.653042][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 599.660783][ C1] net_ratelimit: 19128 callbacks suppressed [ 599.660810][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 599.661306][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.661410][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.661803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 599.661858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 599.662257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.662348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.662709][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 599.663147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.663193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.670882][ C1] net_ratelimit: 18913 callbacks suppressed [ 604.670909][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.671233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.671379][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.671676][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.671875][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.672322][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.672705][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.672795][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.673291][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.673572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.680752][ C1] net_ratelimit: 19357 callbacks suppressed [ 609.680780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.681234][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.681246][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.681700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.681769][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.682127][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.682283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.682578][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.682983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.683103][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.690845][ C1] net_ratelimit: 19747 callbacks suppressed [ 614.690874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.690961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.691309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.691759][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.691873][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.692185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.692415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.692623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.693044][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.693314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.387394][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 618.327555][ T30] rcu_tasks_wait_gp: rcu_tasks grace period number 29 (since boot) is 4676 jiffies old. [ 619.700801][ C0] net_ratelimit: 18938 callbacks suppressed [ 619.700828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.700973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.701260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 619.701400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.701840][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 619.702078][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.702272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.702560][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 619.702708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.703133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 624.710652][ C0] net_ratelimit: 18700 callbacks suppressed [ 624.710677][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.710868][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 624.711165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 624.711346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.711804][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.712078][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.712229][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 624.712592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 624.712696][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.713116][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.720648][ C0] net_ratelimit: 18297 callbacks suppressed [ 629.720673][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.720672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.721101][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.721143][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 629.721518][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 629.721984][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.721985][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.722400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.722436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 629.722924][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.730669][ C0] net_ratelimit: 18009 callbacks suppressed [ 634.730695][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.730926][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.731239][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.731382][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.731855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.732072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.732312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.732507][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.732794][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.733248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.740675][ C0] net_ratelimit: 18218 callbacks suppressed [ 639.740704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.740909][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.741343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.741669][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.741820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.742159][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.742245][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.742701][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.743065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.743176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.750984][ C1] net_ratelimit: 17935 callbacks suppressed [ 644.751011][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.751081][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.751497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.751589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.752115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.752460][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.752608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.752909][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.753073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.753537][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.018089][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 648.966582][ T465] block nbd4: Possible stuck request ffff88802789e000: control (read@0,1024B). Runtime 150 seconds [ 648.966633][ T465] block nbd4: Possible stuck request ffff88802789e1c0: control (read@1024,1024B). Runtime 150 seconds [ 648.966661][ T465] block nbd4: Possible stuck request ffff88802789e380: control (read@2048,1024B). Runtime 150 seconds [ 648.966688][ T465] block nbd4: Possible stuck request ffff88802789e540: control (read@3072,1024B). Runtime 150 seconds [ 649.760708][ C0] net_ratelimit: 16530 callbacks suppressed [ 649.760737][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.761313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.761652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.761761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.762134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.762193][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.763040][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.763052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.763508][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.763621][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.770905][ C1] net_ratelimit: 15448 callbacks suppressed [ 654.770933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.771183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.771631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.771888][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.772361][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.772817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.772831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.773275][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.773849][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.774110][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.780697][ C0] net_ratelimit: 15514 callbacks suppressed [ 659.780725][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.781203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 659.781426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.782018][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 659.782121][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.782603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.782614][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 659.783517][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.783725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.783992][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.790736][ C1] net_ratelimit: 15902 callbacks suppressed [ 664.790762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.791217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.791216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.791687][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.791699][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.792528][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.792594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.792979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.793074][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.793464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.800575][ C0] net_ratelimit: 16008 callbacks suppressed [ 669.800602][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.800817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.801076][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.801670][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.801942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.802086][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.802412][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.802513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.803299][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.803387][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.810719][ C0] net_ratelimit: 16326 callbacks suppressed [ 674.810744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.811093][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.811176][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.811577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.811983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.812054][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.812408][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.813035][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.813210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.813496][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.820948][ C1] net_ratelimit: 16199 callbacks suppressed [ 679.820976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.821276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.821702][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.821825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.822133][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.822256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.822708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.822990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.823415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.823556][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.831216][ C1] net_ratelimit: 15426 callbacks suppressed [ 684.831243][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.831600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.831736][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.832217][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.832809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.833155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.833225][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.833638][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.833663][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.834118][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.406372][T21402] block nbd4: Possible stuck request ffff88802789e000: control (read@0,1024B). Runtime 180 seconds [ 687.406418][T21402] block nbd4: Possible stuck request ffff88802789e1c0: control (read@1024,1024B). Runtime 180 seconds [ 687.406447][T21402] block nbd4: Possible stuck request ffff88802789e380: control (read@2048,1024B). Runtime 180 seconds [ 687.406475][T21402] block nbd4: Possible stuck request ffff88802789e540: control (read@3072,1024B). Runtime 180 seconds [ 689.840832][ C1] net_ratelimit: 15451 callbacks suppressed [ 689.840857][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.841710][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.842174][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.842666][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.842752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.843136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.843320][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.843883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.844061][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.844519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.835287][ T5622] Bluetooth: hci4: command tx timeout [ 693.743955][ T5632] Bluetooth: hci1: command tx timeout [ 694.850897][ C1] net_ratelimit: 15417 callbacks suppressed [ 694.850924][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.851345][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 694.851591][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 694.851795][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.852018][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.852466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 694.852640][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.853065][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.853292][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.853480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.861007][ C1] net_ratelimit: 15386 callbacks suppressed [ 699.861032][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.861405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.861491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.861966][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.861992][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.862462][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.862552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.863409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.863658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.863898][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.870582][ C1] net_ratelimit: 15926 callbacks suppressed [ 704.870609][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.871075][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.871139][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.871578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.871582][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.872503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.872822][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.872982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.873245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.873455][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.333187][ T30] rcu_tasks_wait_gp: rcu_tasks grace period number 29 (since boot) is 13677 jiffies old. [ 709.880869][ C1] net_ratelimit: 15430 callbacks suppressed [ 709.880896][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.881017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.881383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.881461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.882317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.882783][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.883114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.883254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.883533][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.883747][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.890750][ C1] net_ratelimit: 15705 callbacks suppressed [ 714.890777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.890795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.891271][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.891675][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.891748][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.892096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.892572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.892654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.893013][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.893139][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.900710][ C1] net_ratelimit: 15473 callbacks suppressed [ 719.900737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.900950][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.901198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.901436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.901689][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.902156][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.902339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.902872][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.903091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.903617][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.910619][ C0] net_ratelimit: 15434 callbacks suppressed [ 724.910644][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.911113][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.911555][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.911606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.912043][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.912071][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.912569][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.913392][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.913484][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.913870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.920658][ C1] net_ratelimit: 15524 callbacks suppressed [ 729.920687][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.920693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.921140][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.921259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.922034][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.922465][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.922803][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.922929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.923335][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.923372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.662250][ T33] INFO: task kworker/0:10:10800 blocked for more than 150 seconds. [ 733.662282][ T33] Not tainted syzkaller #0 [ 733.662294][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 733.662304][ T33] task:kworker/0:10 state:D stack:27240 pid:10800 tgid:10800 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 733.662370][ T33] Workqueue: events netdev_work_proc [ 733.662524][ T33] Call Trace: [ 733.662531][ T33] [ 733.662547][ T33] __schedule+0x17db/0x58f0 [ 733.662601][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 733.662642][ T33] ? __pfx___schedule+0x10/0x10 [ 733.662679][ T33] ? schedule+0x90/0x2b0 [ 733.662707][ T33] schedule+0x164/0x2b0 [ 733.662735][ T33] schedule_preempt_disabled+0x13/0x30 [ 733.662759][ T33] __mutex_lock+0x7c1/0x1550 [ 733.662792][ T33] ? __mutex_lock+0x5d4/0x1550 [ 733.662820][ T33] ? netdev_work_proc+0x209/0x780 [ 733.662851][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 733.662875][ T33] ? kthread+0x38b/0x480 [ 733.662905][ T33] ? netdev_work_proc+0x12b/0x780 [ 733.662938][ T33] ? __local_bh_enable_ip+0xd6/0x140 [ 733.662973][ T33] netdev_work_proc+0x209/0x780 [ 733.663008][ T33] ? __pfx_netdev_work_proc+0x10/0x10 [ 733.663043][ T33] ? rcu_is_watching+0x16/0xb0 [ 733.663073][ T33] ? process_scheduled_works+0x97a/0x1630 [ 733.663101][ T33] process_scheduled_works+0xc3d/0x1630 [ 733.663166][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 733.663201][ T33] ? assign_work+0x3cf/0x5d0 [ 733.663235][ T33] worker_thread+0xa47/0xfb0 [ 733.663295][ T33] kthread+0x38b/0x480 [ 733.663317][ T33] ? __pfx_worker_thread+0x10/0x10 [ 733.663343][ T33] ? __pfx_kthread+0x10/0x10 [ 733.663367][ T33] ret_from_fork+0x514/0xb70 [ 733.663404][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 733.663436][ T33] ? __switch_to+0xc89/0x1420 [ 733.663485][ T33] ? __pfx_kthread+0x10/0x10 [ 733.663507][ T33] ret_from_fork_asm+0x1a/0x30 [ 733.663558][ T33] [ 733.663573][ T33] INFO: task kworker/0:13:12718 blocked for more than 150 seconds. [ 733.663589][ T33] Not tainted syzkaller #0 [ 733.663600][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 733.663610][ T33] task:kworker/0:13 state:D stack:25352 pid:12718 tgid:12718 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 733.663670][ T33] Workqueue: events switchdev_deferred_process_work [ 733.663739][ T33] Call Trace: [ 733.663745][ T33] [ 733.663758][ T33] __schedule+0x17db/0x58f0 [ 733.663785][ T33] ? update_protect_slice+0x128/0x210 [ 733.663841][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 733.663876][ T33] ? __pfx___schedule+0x10/0x10 [ 733.663911][ T33] ? schedule+0x90/0x2b0 [ 733.663938][ T33] schedule+0x164/0x2b0 [ 733.663963][ T33] schedule_preempt_disabled+0x13/0x30 [ 733.663986][ T33] __mutex_lock+0x7c1/0x1550 [ 733.664018][ T33] ? __mutex_lock+0x5d4/0x1550 [ 733.664047][ T33] ? switchdev_deferred_process_work+0xe/0x20 [ 733.664076][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 733.664103][ T33] ? lock_acquire+0x115/0x350 [ 733.664135][ T33] ? rcu_is_watching+0x16/0xb0 [ 733.664160][ T33] ? process_scheduled_works+0x97a/0x1630 [ 733.664188][ T33] switchdev_deferred_process_work+0xe/0x20 [ 733.664213][ T33] process_scheduled_works+0xc3d/0x1630 [ 733.664277][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 733.664312][ T33] ? assign_work+0x3cf/0x5d0 [ 733.664345][ T33] worker_thread+0xa47/0xfb0 [ 733.664389][ T33] ? __kthread_parkme+0x71/0x1f0 [ 733.664440][ T33] kthread+0x38b/0x480 [ 733.664461][ T33] ? __pfx_worker_thread+0x10/0x10 [ 733.664486][ T33] ? __pfx_kthread+0x10/0x10 [ 733.664508][ T33] ret_from_fork+0x514/0xb70 [ 733.664531][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 733.664552][ T33] ? __switch_to+0xc89/0x1420 [ 733.664582][ T33] ? __pfx_kthread+0x10/0x10 [ 733.664605][ T33] ret_from_fork_asm+0x1a/0x30 [ 733.664654][ T33] [ 733.664675][ T33] INFO: task kworker/u8:42:17221 blocked for more than 150 seconds. [ 733.664690][ T33] Not tainted syzkaller #0 [ 733.664700][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 733.664709][ T33] task:kworker/u8:42 state:D stack:20296 pid:17221 tgid:17221 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 733.664763][ T33] Workqueue: events_unbound linkwatch_event [ 733.664846][ T33] Call Trace: [ 733.664852][ T33] [ 733.664866][ T33] __schedule+0x17db/0x58f0 [ 733.664910][ T33] ? ktime_get+0x45/0x220 [ 733.664939][ T33] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 733.664967][ T33] ? __pfx___schedule+0x10/0x10 [ 733.665001][ T33] ? schedule+0x90/0x2b0 [ 733.665028][ T33] schedule+0x164/0x2b0 [ 733.665054][ T33] schedule_preempt_disabled+0x13/0x30 [ 733.665077][ T33] __mutex_lock+0x7c1/0x1550 [ 733.665101][ T33] ? trace_irq_disable+0x3b/0x140 [ 733.665128][ T33] ? __mutex_lock+0x5d4/0x1550 [ 733.665159][ T33] ? linkwatch_event+0xe/0x60 [ 733.665190][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 733.665217][ T33] ? lock_acquire+0x115/0x350 [ 733.665249][ T33] ? rcu_is_watching+0x16/0xb0 [ 733.665275][ T33] ? process_scheduled_works+0x97a/0x1630 [ 733.665301][ T33] linkwatch_event+0xe/0x60 [ 733.665329][ T33] process_scheduled_works+0xc3d/0x1630 [ 733.665393][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 733.665438][ T33] ? assign_work+0x3cf/0x5d0 [ 733.665472][ T33] worker_thread+0xa47/0xfb0 [ 733.665530][ T33] kthread+0x38b/0x480 [ 733.665552][ T33] ? __pfx_worker_thread+0x10/0x10