last executing test programs: 1m10.028978279s ago: executing program 2 (id=1269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0xc000) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0xc000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000017000000400006803c00040067636d2861657329000000000000000000b0000000000000000000000000004014000000e3de3d7b4cd07ec3ee77070000007987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$kcm(0x11, 0x3, 0x0) (async) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r9, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r12, 0x0) (async) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r12, 0x84, 0x77, &(0x7f00000000c0)={r13, 0x6}, 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @loopback, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x7fc, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, [], "af34000000000000"}}}}}}}, 0x0) recvmmsg(r11, &(0x7f0000001740), 0x4000000000001f5, 0x2000, 0x0) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r14, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) 1m8.9636436s ago: executing program 1 (id=1274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(0x0, r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (rerun: 64) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c004) (async) r5 = socket$alg(0x26, 0x5, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x0) (async) bind$alg(r5, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99bfa", 0x3) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000001108000440000000000900020073797a3200000000140000001100010000000000000000000200000a"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m7.829688635s ago: executing program 1 (id=1278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0x91}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) syz_80211_join_ibss(&(0x7f0000000600)='wlan0\x00', 0x0, 0x0, 0x2) 1m7.539972607s ago: executing program 0 (id=1281): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x400, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0x2, 0x6, 0x400, r2, 0x6, '\x00', 0x0, r0, 0x3, 0x2, 0x0, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r6 = socket$inet6(0x10, 0x2, 0x0) write(r6, &(0x7f00000007c0)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000b80000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e2731c83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfde89d334b2b6af2a8d03f2329622943283f4b9e611183b102b2b8f5566791802e07f050cae2015180a94a27b1d7b02d3f4e84f2013cd1890058a10000c880ac801fe4af00004995c7a596dae744f0d4794eedfca92c09d776e7a90ab79a6f00a1960000", 0xfc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x900}, 0x38) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x588, 0x101, 0x7d86c93}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xd6a}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0xe8, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x8b, 0x91, "4cc49bfcfb3130b3e7a7f90ffe8efa88371ee8be95de628deca6709d3688a94c5c069e0994aaeeba67e903bfcd19b9d4b3c1eaa12070f3e1b021807f5358aabe8a9ad047aaf51a3a940bd3f7ee4344b4c046b5161c6f5f4b22885d4ee7f098da932342f003e0a7c42aeeaa98adad13c9ce06bb2b1a30e4f1db5b96e379214bdd5393f695e5c936"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xe8}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r13, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 57.791773591s ago: executing program 1 (id=1282): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'pim6reg0\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f005c0000000000000800003c"], 0x6a) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x20, 0x4, 0x20, 0x3}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x52}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2b65}}]}, &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, r3, 0x1, 0x0, 0x3}, 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000140)) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3, 0x1}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xf6c, 0x1c, 0x1, 0x200, 0x1, 0x7ad9, '\x00', 0x0, r4, 0x5, 0x3, 0x4, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x8, &(0x7f00000002c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000300)='GPL\x00', 0x7, 0x0, &(0x7f0000000340), 0x40f00, 0x1, '\x00', 0x0, @lirc_mode2=0x10, r4, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x6, 0x3, 0x200}, 0x10, 0x0, r5, 0x5, &(0x7f0000000600)=[r7, r8, r5, r9, r11, r12], &(0x7f0000000640)=[{0x2, 0x1, 0xd, 0x8}, {0x3, 0x2, 0xf, 0x9}, {0x1, 0x2, 0x9, 0xc}, {0x4, 0x3, 0x1, 0xa}, {0x1, 0x5, 0xc, 0x2}], 0x10, 0xe}, 0x94) syz_emit_ethernet(0x74, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c200000000000073907800000300e000000100000000fe9a90780300000000000000ce346295669fa6e84fcbb5269dde0132f808400a5da4adae831663468eafb5f29c8d7f9b20f0f0cfd0e14bab675f0c4ed6c9895b5a0a3ab58a829f8e138ca07819ede7873243f8c0f08bf6dfde707cc830b554c4e5f0d17ebc107f02e9bc63cb43a60448dfc453d7c700eafaae3a2ef1e625e5f2b617b413e2a8df6ab3a39167bfcce33e045d7fb8f4af193288b732bd699e88a098a3b562a32fe3bc42826d91026d2f517a2d99441300071d3e8ee389611bf4c05656109c3cca"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 57.745305025s ago: executing program 3 (id=1283): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0xe, 0x7, 0x1e65, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x0, 0x8}}) r1 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r2, 0x0, 0x0, 0x0}, 0x14) 57.744443814s ago: executing program 4 (id=1284): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e27, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/227, 0xe3}, {0x0, 0x13}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000881}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4, @multicast2}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdea, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 57.718843028s ago: executing program 0 (id=1285): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x844}, 0x400c000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r3, 0x100000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, 0x0, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r6 = openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000340), 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) 57.54175275s ago: executing program 2 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc000000, {0x5, 0x6, 0x9, 0x7ff}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x24008804) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8081) ioctl$FIOCLEX(r0, 0x5451) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000680)={{r3, &(0x7f0000000400)='^}*&#\']\'\x00', 0x200080, &(0x7f0000000440)={@align, {0x4, 0x81, 0x3, 0x2}}, 0x9e, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x5}, 0x1, &(0x7f0000000640)=[{0x1, 0xc, &(0x7f0000000500)='wlan1\x00', &(0x7f0000000540)="481a50d614c2469e991df0ba0f07627a8c10aab87d0e527dcf2e0a219f8a4711ee0f670a951ee44c9862d73ff955b9c9d0b3af01dbef4d81a54b8448f3a1ebf981d626e59ed15273036fe69fb22fb2783cfc23c7d327b0ce5c533f112a29ad06da5d4a421054427cb29305374c9c38fcfd124d5ecafa0d702395b6ab2581c7d21fd96d548f816d069f52d731acd6bde13475d4a1c3c799b07100cf989d1e599f346e225740518cb17f162d907987e1aa6ada9cc1752ef17cb3f195fffb3203b3accb4984b9b09d60696a7bbf8f5f80c8f6dc2598fa1b63818fd15c4f17cf9dbfcf141d0403ea39be3c7f61d4c4d4bbb22961f80346", 0xf5, 0x20}]}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x17c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}, @NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x8}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0xa}, {0x4, 0x5}, {0x3, 0x6}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x3, 0x6}, {0x6}, {0x4, 0x9}, {0x5, 0x7}, {0x7, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x8}, {0x7}, {0x2, 0x1}, {0x2, 0xa}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x3}, {0x7}, {0x6, 0x3}, {0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x4}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x2, 0x2, 0x3, 0x3, 0x36, 0x24, 0x72, 0x24, 0x18, 0x36, 0x5, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x1}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x5, 0x9}, {0x2, 0x2}, {0x5, 0x6}, {0x7, 0x7}, {0x7, 0x7}, {0x3, 0x9}, {0x6, 0x5}, {0x6, 0x5}, {0x7, 0x3}, {0x7, 0x7}, {0x5, 0x6}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x1}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x4}, {0x5, 0x2}, {0x0, 0x4}, {0x5, 0x4}, {0x1, 0x3}, {0x4}, {0x3}, {0x7, 0x1}, {0x4, 0xa}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x9}, {0x5}, {0x4, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x7, 0x5, 0x1, 0x401, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf7, 0x1, 0x101, 0x3, 0x8, 0x7ff, 0xfc01, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x67c0, 0x7ff, 0x6, 0x253, 0x4e0, 0x8b, 0x101]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x2}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x1}, {0x5, 0x9}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x5}, {0x5, 0x6}, {0x4}, {0x1, 0x2}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0xa}, {0x4, 0x7}, {0x5, 0x9}, {0x5, 0x3}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x8}, {0x7, 0x9}, {0x5, 0x5}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x7, 0xa}, {0x6}, {0x6, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x2, 0x2}, {0x4}, {0x6, 0x8}, {0x1}, {0x1, 0x5}, {0x3, 0x7}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0xa}, {0x2, 0x4}, {0x3, 0x8}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x4}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20}, 0x44014) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000980)=0x1, 0x4) syz_emit_ethernet(0x42, &(0x7f00000009c0)={@local, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @empty, @local, @local, @private2}}}}, &(0x7f0000000a40)={0x0, 0x2, [0xdaa, 0x97e, 0x4eb, 0xbd5]}) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x14}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x76}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x6c}}, 0x4000000) recvmmsg$unix(r3, &(0x7f00000010c0)=[{{&(0x7f0000000cc0), 0x6e, &(0x7f0000001040)=[{&(0x7f0000000d40)=""/145, 0x91}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/91, 0x5b}, {&(0x7f0000000f80)=""/141, 0x8d}], 0x4, &(0x7f0000001080)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x1, 0x40, 0x0) openat$cgroup(r9, &(0x7f0000001100)='syz1\x00', 0x200002, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001140)={r11}, 0x8) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000001240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x44, r13, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc0000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000001380)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x65, "edff7be3ab5681"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000002380)={{r16, 0x3, 0x6, 0x9, 0x4a7, 0x4, 0x3, 0x6e48, 0xfffffc01, 0x2, 0xd79, 0xffffffff, 0x0, 0x4, 0x100000001}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000024c0)={'syztnl0\x00', &(0x7f0000002440)={'erspan0\x00', r14, 0x7800, 0x1, 0x4, 0x9, {{0xc, 0x4, 0x0, 0xa, 0x30, 0x64, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x4, [{@remote, 0xaa8f}, {@broadcast, 0x9}, {@local, 0x3}]}]}}}}}) r17 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind(r17, &(0x7f0000002500)=@pppoe={0x18, 0x0, {0x3, @local, 'pim6reg\x00'}}, 0x80) syz_genetlink_get_family_id$wireguard(&(0x7f0000002580), 0xffffffffffffffff) 57.3246002s ago: executing program 3 (id=1287): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x8, 0x800}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000440)={r0, @in6={{0xa, 0x4e23, 0x200, @empty, 0x5a1}}, 0x1, 0x80, 0x4, 0xfff, 0x4}, &(0x7f0000000500)=0x98) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xc8, &(0x7f0000000080)=""/200, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = epoll_create1(0x0) sendfile(r4, r2, &(0x7f0000000140)=0x6, 0x276f) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a65d918e4e8aacc47992860a7344db0e88", @ANYRES16=r5, @ANYBLOB="000225bd7000ffdbdf250300000014000c00000000000000000000000000000000000c000300040000000000000008000700", @ANYRES32=r6, @ANYBLOB="08000500ac1414bb05000d0002000000080005006401010208000200010000000800020001000000"], 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x24044804) 57.304512858s ago: executing program 4 (id=1288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000000)="343eff698fa3ff7a5a28b6") sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}}, 0x0) 57.034771422s ago: executing program 2 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r2, &(0x7f0000000cc0)={0x0, 0x48, &(0x7f0000000040)={&(0x7f00000002c0)="05000000b92ba9e375f3d5a1fc0751577daff448fb417eb76377c3075661e57f6a1ad88443faf85a902e03e4c4e68c258b10a733e428ae2cd65cf9e52e6a23541f4bc6970df209050bf052c6624effea5f1e99ad3d96ed78ff3f524af2c90d5643d563b4f469a937cccad6efa449da086721a42a6616eb56afdf6e1e977964a59a007754d9a22bf26ddb67fb3cd24af531bb3a42a0532ff51473993bd4fb62b7fae1a02f982796fe3df1f080196ff1db13e62950561bf6330ce41dde70f59450a43a0e5678b45689b989d46e9e242cc89f34cd04c4e22e5cc1f1035c5010fd47be95ca79f9a85bf56011d8397d00"/253, 0x1}}, 0x20000855) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000280)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r4 = socket$kcm(0x2, 0xa, 0x2) socket(0xa, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0xb}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x8}}}, 0x2a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0) close(r10) 56.900672839s ago: executing program 0 (id=1290): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.464778601s ago: executing program 3 (id=1291): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bind$tipc(r1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000000)={r5, 0x7f, 0x9}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000040)={0x23fa, 0x5, 0x4, 0x40, 0x1, 0xfd, 0x9}, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x58}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 56.464298412s ago: executing program 0 (id=1292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r7, 0x4000, 0x0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 56.381619751s ago: executing program 1 (id=1293): socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e51fc050000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x4c815}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010000000000000000000000000000000000000000000c0003006272696467653000140012800b000200627269646765000000000000"], 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000034001a800600000002000000280005802400018008000100010000000800020001000000080003000100000008000400", @ANYRES32=r3], 0x54}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000003c001a8006000000020000002c0005802800038008000100010000000a000200001122334455000008000300000000000800040001000000"], 0x58}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffa, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x87}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0xfe, 0x1000000000000195, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x844) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080)=0x1) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 56.084078863s ago: executing program 3 (id=1294): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="02000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42aa5}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48000) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) listen(r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000015c0)=ANY=[@ANYBLOB="640000007000000026bd7000ffdbdf25070000008f9d67c8c5722985d2b12eaebeb656b436c93a77c682fa7e6db28ff2769c3a036b7eb4401ec6f7b3a2a6ddcc8414832282c35581cbdfd5bdbf96997225e39f376346a88a5f5dceaa9526f89f0ada1516a569fc4b375c5de2731bfd4e6d7282749a7a59ebb01edc69667ec904accdd4c1f677048ee222dce2860ab9c75b658236815d76171e7d2fdc1550d64d3e3621d00401b1aae3963cfb", @ANYRES32=r10, @ANYBLOB="0c00018005000300040000000c000180060002000f0000000c0001800500030001000000100001800c00048008000200110000000c00018005000300030000000c0001800500030000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40480}, 0x8000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r11, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00', r11}, 0x18) 55.612470798s ago: executing program 4 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x8) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2a0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x274, 0x4, 0x0, 0x1, [{0x260, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DATA={0x230, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x54, 0x1, "c59b7a26c85d3a4a5b55798c518cbcc5fbb2fd1ef7d7310bfb66520200088eb5ae883f32685d9ec7f22f6cd9f4f4fd4fa8ddb1b32eab93acb59fc3e76f7777d18c8a9073ece97cae80796238b5a6893e"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x62, 0x1, "b0cddc2094ac4916d4fd71d996b982a3a8de1624bd9afacc1c9f4fc8ff3f9fb643d6389888fc3496541735b1372729fe6587bb346aa5048cbf28d1a23ed940e7f8c50af9c7145346c87206ee4073ebdb54bf03a67bc6f601b79b2578230b"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb07a8d6dcc76c89a}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "bb5765015cebaf0cbb8646eb183c4814dbd41fb46164841c7f2b450c6eb66ffadd1280c6e4042c415562e0b7f309ca1b624f70f49c728f2a0811ee1dec16e0769fe2626e8eacf17b42a2dec4bb611d5a392011f8e279cf6f233ba17c56b8e72f327dc1a142c2e16c173984b3e3361824afa0eb53c2ea55394ea517a0bf65e3c821c9e5e9153d871663"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x5, 0x3, 0x1, 0x0, 0x1}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x2c8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x884) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf257b00000008000300", @ANYRES32=r5, @ANYBLOB="76954f931407313e49d284302dc1fa70af0c1d00ff0698ad36bb63dd3621b3b13e7fbbc7157efa736a71a6d577a4abea4de8207d331c0e73b31000c8f566ef678993b84705166d7506e13fff"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000a64fa13bbdb5c78de0d38557ee706eecfe0298dbf8f1235826f416c3e377b5df7f2163b634631620f71b0a900ed182e1bbf83e6f130bd847ac5fea0e9512593943df19cec39eca19eba8137fc158c726111c779b0417ef007697c043bda8be9029fe206aac469406b75c725b090ba72d946106d15c9578255c733510bef3ab932898c4a586c553824e53eb7ba5d515e4189254a7e88000c31cb92a3a2e014df114155e4ab217c63aef32bb8382339343481350e493e313f21945476f553b2517ee096951cbbb350a87bac66caaf59977d214d6b022204d3b949b8a81f4cadcf0c0b164fc06854878abfb62e6f3", @ANYRES16=r4, @ANYBLOB="000129bd7000fddbdf253b0000000c009900020000008000000004006c00"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 55.232366975s ago: executing program 4 (id=1296): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (rerun: 64) write(r0, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b040000080001000200"/32], 0x20}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x10, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002", 0x3d, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x0, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) (async, rerun: 64) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x600) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0xa8, 0x260, 0xfeffffff, 0x140, 0x0, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz1\x00', 0x1ff) r7 = openat$cgroup(r6, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) (async) r9 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000340), 0x9) (async) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000) (async) socket(0x8, 0x0, 0x81) 54.867061363s ago: executing program 3 (id=1297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, &(0x7f0000000400)) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, &(0x7f0000000400)) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffe4}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x81}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x4}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) (async) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) r6 = socket(0x400000000010, 0x2, 0x3) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xd}, {}, {0x8, 0xffed}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0xffffffffffffffff, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7a, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) 54.811904384s ago: executing program 2 (id=1298): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/463], 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/463], 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) 54.652522047s ago: executing program 4 (id=1299): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0xa, 0x4) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3f, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x9, 0x7, 0xff, 0xf9, 0x86, 0x8, 0x0, 0x0, 0x2f, 0x7, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}}) 54.651386967s ago: executing program 0 (id=1300): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0xc, 0x0, 0x8, 0x4, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x738, 0x80, 0x6, 0x101}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="0700000000000000000000000000000000000000787a417091", @ANYRES32=r0, @ANYRES32, @ANYBLOB="03000000010000000100"/28], 0x50) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000041800001000000012"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00090025bd7000000002000400000008000c00", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x42006}, 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) socket$inet(0x2, 0x5, 0x6f) getpid() getuid() getgid() r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e24, @remote}}}, 0x84) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf252700000008000300", @ANYRES32=r5, @ANYBLOB="0a000600"], 0x30}, 0x1, 0x0, 0x0, 0x20048005}, 0x200008c0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000e80)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', r0, @fallback=0x33}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0x10ff, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ec0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in=@dev, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) 54.213072759s ago: executing program 2 (id=1301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000a14010026bd7000fedbdf250800010000000000080015"], 0x20}}, 0x20000010) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392b, 0x11, r1, 0x100000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'net_prio'}, {0x2d, 'net'}, {0x2b, 'perf_event'}, {0x2d, 'rdma'}, {0x2d, 'net'}, {0x2d, 'cpuset'}]}, 0x2e) unshare(0x22020600) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x8000000) 53.893847512s ago: executing program 1 (id=1302): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000080)=0x2) 53.648590964s ago: executing program 3 (id=1303): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9eb1d91a92dc7c8fff658bb539e2ffb332c9d223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 32) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) (rerun: 32) r6 = socket(0x10, 0x3, 0x0) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f00000000c0)={0x4}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 64) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000240), 0x10) (async) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008008713f6590e5173ef3040e82d4f3a2a1b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 53.648164754s ago: executing program 4 (id=1304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @random="ece65fbcee55", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @random="519f2c11bd89", @multicast2, @multicast, @multicast1}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r3, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x4}, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f00000013c0)=ANY=[@ANYBLOB="f0020063a2e22c2707713d6500", @ANYRES16=r6, @ANYBLOB="200025bd7000fbdbdf25100000003c0009800800010016660000080002002f0000000800010000000080080001000600000008000100080000000800020004000000080001000100000028000280040004000400040008000100060000000400040008000200ffffff7f08000100d500000044000180080003000700000038000400200001000a004e2100010000ff0200000000000000000000000000018ce200001400020002004e22ac1414310000000000000000040105800c00028008000400241300004c00028008000300030000000800010005000000080004000200000008000400100000000800030006000000080004007f0000000800030000100000080001001a00000008000400000200001c000280080003007d00000008000200b40000000800030000fcffff08000100756470000c000280080002000900000007000100696200002c00028008000300ad140000080003000400000008000100070000000800020002000000080002000500000008000100756470003c00028008000400050000000800040003000000080001000000000008000200010000000800040012e10000080001001f000000080001001b000000b40002800800010001010000080001000400000008000100070000003c00038008000100410000000800020002000000080001000200000008000100320000000800010006000000080002000300000008000100ff07000008000200060000005400038008000200090000000800010008000000080001000900000008000200f9ffffff08000100050000000800010000000080080001000800000008000100ff00000008000200ff7f000008000100090000000c00078008000200490b0000700001800c000280080004000100000044000280080003000600000008000300d71b0000080004001c3a00000800010020000000080003000600000008000400faffffff080002000100000008000400fbffffff080003000900000008000300000000000c0002800800010000000000"], 0x2f0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r11, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendfile(r11, r10, 0x0, 0xf03a0005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000090000000000000003000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000000000000018120000000000000000006a7400000000000000", @ANYRES32=r9, @ANYBLOB="000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000", @ANYRESOCT], &(0x7f0000000a40)='GPL\x00', 0xb6f, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000ac0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r2], &(0x7f0000000bc0)=[{0x1, 0x5, 0x7, 0x1}, {0x2, 0x5, 0x3}, {0x0, 0x5, 0xa, 0x8}], 0x10, 0x593c}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r5, 0x4, r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r14, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="380000000314010028bd7000fbdbdf250900020073797a300000030008004100736977001400330077673000"/56], 0x38}, 0x1, 0x0, 0x0, 0x3db5ef462cb09b24}, 0x4c840) 53.467887568s ago: executing program 2 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x1ff, 0x3, 0xfffffff8, 0x4, 0x60, 0x9, 0xff}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x4}, &(0x7f0000000200)=0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x50}}, 0x0) 53.428912899s ago: executing program 0 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010a2cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b0000000000"], 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 53.176711306s ago: executing program 1 (id=1307): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010000000000000000003900008008000200", @ANYRES32=r1, @ANYBLOB="14000100fe8080000000000000000000000000aa"], 0x30}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030300000e00000000001100000708000300", @ANYRES32=r4, @ANYBLOB="0a0006"], 0x28}}, 0x14014) 0s ago: executing program 32 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010a2cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b0000000000"], 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.727094][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.727109][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.727130][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.729034][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.729046][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.729065][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.914201][ T5613] hsr_slave_0: entered promiscuous mode [ 71.915257][ T5613] hsr_slave_1: entered promiscuous mode [ 71.915945][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 71.915962][ T5613] Cannot create hsr debugfs directory [ 71.929205][ T5614] hsr_slave_0: entered promiscuous mode [ 71.933244][ T5614] hsr_slave_1: entered promiscuous mode [ 71.937109][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 71.937130][ T5614] Cannot create hsr debugfs directory [ 72.043297][ T5615] hsr_slave_0: entered promiscuous mode [ 72.044790][ T5615] hsr_slave_1: entered promiscuous mode [ 72.046100][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 72.046118][ T5615] Cannot create hsr debugfs directory [ 72.486997][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.496276][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.497183][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.506303][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.507144][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.517083][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.517873][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.534389][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.617452][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.622671][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.642238][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.646691][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.647469][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.658766][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.663442][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.673022][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.753473][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.763135][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.777824][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.782435][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.797048][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.805078][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.806958][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.809804][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.900278][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.908215][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.915124][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.919391][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.931914][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.960216][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.963175][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.978381][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.982202][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.021874][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.063231][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.063324][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.090363][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.090452][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.091292][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.099232][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.100015][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.106084][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.141925][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.148610][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.158955][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.161996][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.167303][ T5623] Bluetooth: hci2: command tx timeout [ 73.217199][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.245595][ T5619] Bluetooth: hci4: command tx timeout [ 73.245622][ T52] Bluetooth: hci0: command tx timeout [ 73.245626][ T5619] Bluetooth: hci1: command tx timeout [ 73.245737][ T5623] Bluetooth: hci3: command tx timeout [ 73.303083][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.336680][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.336739][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.338294][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.338349][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.367430][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.391366][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.450325][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.462230][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.489358][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.489468][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.523137][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.523253][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.528206][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.528301][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.531996][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.532086][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.544631][ T5616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.544652][ T5616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.710337][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.812898][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.876857][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.876958][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.903124][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.903211][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.402641][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.610496][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.652350][ T5617] veth0_vlan: entered promiscuous mode [ 74.720885][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.724879][ T5617] veth1_vlan: entered promiscuous mode [ 74.897493][ T5616] veth0_vlan: entered promiscuous mode [ 74.907014][ T5617] veth0_macvtap: entered promiscuous mode [ 74.930100][ T5616] veth1_vlan: entered promiscuous mode [ 74.948366][ T5617] veth1_macvtap: entered promiscuous mode [ 75.016053][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.020638][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.050174][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.116089][ T5616] veth0_macvtap: entered promiscuous mode [ 75.160280][ T5616] veth1_macvtap: entered promiscuous mode [ 75.204535][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.246155][ T5623] Bluetooth: hci2: command tx timeout [ 75.275993][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.276161][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.276196][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.276227][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.317557][ T5615] veth0_vlan: entered promiscuous mode [ 75.324074][ T4933] Bluetooth: hci1: command tx timeout [ 75.324103][ T4933] Bluetooth: hci0: command tx timeout [ 75.324215][ T5623] Bluetooth: hci3: command tx timeout [ 75.327097][ T5623] Bluetooth: hci4: command tx timeout [ 75.367758][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.371121][ T5615] veth1_vlan: entered promiscuous mode [ 75.400568][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.402734][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.402752][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.422376][ T5614] veth0_vlan: entered promiscuous mode [ 75.479591][ T5614] veth1_vlan: entered promiscuous mode [ 75.479703][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.479717][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.484996][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.507699][ T5613] veth0_vlan: entered promiscuous mode [ 75.509924][ T169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.511696][ T1051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.511740][ T1051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.549020][ T5615] veth0_macvtap: entered promiscuous mode [ 75.581086][ T5613] veth1_vlan: entered promiscuous mode [ 75.606798][ T5615] veth1_macvtap: entered promiscuous mode [ 75.668966][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.684792][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.689315][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.717223][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.717242][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.818766][ T5613] veth0_macvtap: entered promiscuous mode [ 75.830648][ T5614] veth0_macvtap: entered promiscuous mode [ 75.843960][ T169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.844781][ T169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.844818][ T169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.844847][ T169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.863608][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.863639][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.869754][ T5613] veth1_macvtap: entered promiscuous mode [ 75.873154][ T5614] veth1_macvtap: entered promiscuous mode [ 75.973087][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.030991][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.031009][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.065408][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.073225][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.137013][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.226980][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.227000][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.255527][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.257219][ T1051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.258797][ T1051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.339588][ T5813] can: request_module (can-proto-0) failed. [ 76.346489][ T169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.346536][ T169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.346569][ T169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.346601][ T169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.346632][ T169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.560081][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.560101][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.717174][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.717196][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.779774][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.779795][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.905478][ T5832] xt_LOG: prefix is not null-terminated [ 76.967287][ T5836] Zero length message leads to an empty skb [ 77.059504][ T5839] netlink: 'syz.2.9': attribute type 11 has an invalid length. [ 77.140273][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.140293][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.213449][ T5841] tipc: Enabling of bearer rejected, media not registered [ 77.326375][ T5623] Bluetooth: hci2: command tx timeout [ 77.329573][ T5845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9'. [ 77.404807][ T5619] Bluetooth: hci3: command tx timeout [ 77.404838][ T5619] Bluetooth: hci0: command tx timeout [ 77.404859][ T5619] Bluetooth: hci1: command tx timeout [ 77.404914][ T5623] Bluetooth: hci4: command tx timeout [ 78.027786][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15'. [ 78.211338][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 78.320915][ T5890] IPv6: sit1: Disabled Multicast RS [ 78.521591][ T5899] bridge1: entered allmulticast mode [ 78.537833][ T5905] netlink: 10 bytes leftover after parsing attributes in process `syz.1.25'. [ 78.565085][ T5905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.25'. [ 78.720635][ T5909] warning: `syz.2.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.760308][ T5915] netlink: 64 bytes leftover after parsing attributes in process `syz.1.28'. [ 78.789521][ T5907] syzkaller0: entered promiscuous mode [ 78.789543][ T5907] syzkaller0: entered allmulticast mode [ 78.974059][ T5923] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20003 [ 78.979072][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'. [ 80.006677][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 80.024172][ T5936] netlink: 'syz.1.35': attribute type 2 has an invalid length. [ 80.041260][ T5940] netlink: 'syz.0.36': attribute type 10 has an invalid length. [ 80.070841][ T5932] bond1 (unregistering): Released all slaves [ 80.073022][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37'. [ 80.100529][ T5946] netlink: 'syz.0.36': attribute type 10 has an invalid length. [ 80.134358][ T5940] veth0_vlan: entered allmulticast mode [ 80.198669][ T5940] team0: Device veth0_vlan failed to register rx_handler [ 80.235863][ T5946] team0: Device veth0_vlan failed to register rx_handler [ 80.245138][ T5948] syzkaller0: entered promiscuous mode [ 80.245158][ T5948] syzkaller0: entered allmulticast mode [ 80.372314][ T31] audit: type=1800 audit(1789925307.130:2): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=62 res=0 errno=0 [ 80.508684][ T5966] netlink: 52 bytes leftover after parsing attributes in process `syz.1.43'. [ 80.571176][ T5969] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 81.022193][ T5983] can: request_module (can-proto-0) failed. [ 81.061986][ T5986] can: request_module (can-proto-0) failed. [ 81.216950][ T6006] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 81.461449][ T6007] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 81.489911][ T6007] bond1 (unregistering): Released all slaves [ 81.890869][ T6007] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 81.909048][ T6007] bond1 (unregistering): Released all slaves [ 82.273348][ T6027] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 82.687707][ T6047] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 82.726887][ T6047] __nla_validate_parse: 5 callbacks suppressed [ 82.726908][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 82.770660][ T6047] hsr_slave_1 (unregistering): left promiscuous mode [ 82.795767][ T6048] netlink: 'syz.3.65': attribute type 11 has an invalid length. [ 83.204319][ T6061] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 84.484885][ T6106] sctp: [Deprecated]: syz.4.79 (pid 6106) Use of int in maxseg socket option. [ 84.484885][ T6106] Use struct sctp_assoc_value instead [ 84.505140][ T6112] netlink: 'syz.0.80': attribute type 3 has an invalid length. [ 84.505161][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 84.505176][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 84.664643][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 84.797765][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.799460][ T6110] ip6_vti0: entered promiscuous mode [ 86.137387][ T6171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.94'. [ 86.137473][ T6171] nbd: couldn't find a device at index 458764 [ 86.211590][ T6173] netlink: 2 bytes leftover after parsing attributes in process `syz.0.95'. [ 86.705627][ T30] cfg80211: failed to load regulatory.db [ 86.720497][ T6194] ip_tables: iptables: counters copy to user failed while replacing table [ 86.732716][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 86.734244][ T6196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.103'. [ 86.761443][ T6194] x_tables: duplicate underflow at hook 2 [ 86.979204][ T6199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.056546][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.106'. [ 87.057477][ T6205] netlink: 64 bytes leftover after parsing attributes in process `syz.0.106'. [ 87.286724][ T6212] tipc: Started in network mode [ 87.286757][ T6212] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.291917][ T6212] tipc: New replicast peer: 172.20.20.187 [ 87.305918][ T6212] tipc: Enabled bearer , priority 10 [ 87.924083][ T6249] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 87.944229][ T987] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 88.242929][ T6264] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 88.243035][ T6264] syzkaller1: linktype set to 823 [ 88.255455][ T6261] __nla_validate_parse: 2 callbacks suppressed [ 88.255480][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 88.472754][ T5733] tipc: Node number set to 2886997162 [ 88.605783][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 88.685192][ T987] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 88.945421][ T6302] netlink: 100 bytes leftover after parsing attributes in process `syz.1.127'. [ 89.168885][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 89.364997][ T6320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.186624][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 90.186645][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 91.351797][ T6354] netlink: 'syz.0.137': attribute type 2 has an invalid length. [ 91.351838][ T6354] netlink: 'syz.0.137': attribute type 2 has an invalid length. [ 91.370658][ T6360] sit1: entered promiscuous mode [ 91.370679][ T6360] sit1: entered allmulticast mode [ 91.743948][ T6397] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 91.759133][ T6395] syzkaller0: entered promiscuous mode [ 91.759155][ T6395] syzkaller0: entered allmulticast mode [ 91.920209][ T6409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.144'. [ 92.003324][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 92.096101][ T6417] netlink: 292 bytes leftover after parsing attributes in process `syz.2.147'. [ 92.096124][ T6417] netlink: 292 bytes leftover after parsing attributes in process `syz.2.147'. [ 92.182809][ T6422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.148'. [ 94.028992][ T6437] netlink: 'syz.4.152': attribute type 142 has an invalid length. [ 94.112944][ T6447] netlink: 'syz.0.154': attribute type 5 has an invalid length. [ 94.182588][ T6452] sctp: [Deprecated]: syz.4.156 (pid 6452) Use of int in maxseg socket option. [ 94.182588][ T6452] Use struct sctp_assoc_value instead [ 94.469611][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.555964][ T6472] __nla_validate_parse: 2 callbacks suppressed [ 94.555983][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.161'. [ 94.678108][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 94.682330][ T6477] x_tables: unsorted entry at hook 2 [ 94.850441][ T6498] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.167'. [ 94.899328][ T6490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 94.899354][ T6490] nbd: device at index 64 is going down [ 94.924849][ T6504] netlink: 60 bytes leftover after parsing attributes in process `syz.0.167'. [ 94.945181][ T6504] netlink: 60 bytes leftover after parsing attributes in process `syz.0.167'. [ 94.951946][ T6504] netlink: 'syz.0.167': attribute type 32 has an invalid length. [ 94.951972][ T6504] netlink: 500 bytes leftover after parsing attributes in process `syz.0.167'. [ 95.040818][ T6506] netlink: 196 bytes leftover after parsing attributes in process `syz.2.169'. [ 95.062186][ T6514] netlink: 196 bytes leftover after parsing attributes in process `syz.2.169'. [ 95.292028][ T5633] udevd[5633]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 95.340713][ T5633] udevd[5633]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 95.819700][ T6547] netlink: 'syz.1.179': attribute type 21 has an invalid length. [ 95.831392][ T6547] openvswitch: netlink: IPv4 tunnel dst address is zero [ 95.861786][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 95.948768][ T6550] dvmrp1: entered allmulticast mode [ 96.232690][ T6573] netlink: 'syz.2.190': attribute type 7 has an invalid length. [ 96.646178][ T6587] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.663251][ T6592] netlink: 'syz.2.197': attribute type 2 has an invalid length. [ 96.667008][ T6592] block nbd0: not configured, cannot reconfigure [ 96.986363][ T6604] netlink: 'syz.2.201': attribute type 1 has an invalid length. [ 96.986400][ T6604] netlink: 'syz.2.201': attribute type 1 has an invalid length. [ 97.040719][ T6604] dvmrp8: entered allmulticast mode [ 97.223099][ T6609] vlan2: entered allmulticast mode [ 97.223122][ T6609] bridge2: entered allmulticast mode [ 97.323239][ T6619] macvlan0: entered promiscuous mode [ 98.779068][ T6666] Cannot find add_set index 0 as target [ 98.799199][ T6669] Cannot find add_set index 0 as target [ 98.982720][ T6676] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 99.081954][ T6688] netlink: 'syz.0.221': attribute type 13 has an invalid length. [ 99.142374][ T6676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.283929][ T6676] bond1: (slave bridge3): making interface the new active one [ 99.291673][ T6676] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 99.316937][ T6698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.620609][ T6710] bridge2: entered promiscuous mode [ 99.620649][ T6710] bridge2: entered allmulticast mode [ 99.717437][ T6718] __nla_validate_parse: 16 callbacks suppressed [ 99.717458][ T6718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.230'. [ 99.718835][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 99.718866][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 99.856847][ T6724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 99.983307][ T6725] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 99.988070][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 100.006821][ T6725] bond1 (unregistering): Released all slaves [ 100.095185][ T6739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.188424][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 100.369133][ T6738] syzkaller1: entered promiscuous mode [ 100.369155][ T6738] syzkaller1: entered allmulticast mode [ 100.396292][ T6752] ip_tables: iptables: counters copy to user failed while replacing table [ 100.448667][ T6755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.237'. [ 100.472935][ T6757] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 100.485736][ T6757] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 100.501548][ T6761] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 3, id = 0 [ 100.661815][ T6775] x_tables: duplicate underflow at hook 1 [ 101.769816][ T6817] Bluetooth: MGMT ver 1.23 [ 101.769852][ T6817] Bluetooth: hci0: unsupported parameter 5135 [ 101.769863][ T6817] Bluetooth: hci0: unsupported parameter 8192 [ 101.769875][ T6817] Bluetooth: hci0: unsupported parameter 5135 [ 101.769884][ T6817] Bluetooth: hci0: unsupported parameter 8192 [ 101.813094][ T6817] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 101.856441][ T6827] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 102.101083][ T6822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.142312][ T6832] syzkaller0: entered promiscuous mode [ 102.142335][ T6832] syzkaller0: entered allmulticast mode [ 102.392909][ T6862] netlink: 88 bytes leftover after parsing attributes in process `syz.0.257'. [ 102.393142][ T6859] netlink: 88 bytes leftover after parsing attributes in process `syz.0.257'. [ 102.512315][ T6864] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 102.553505][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.259'. [ 103.078083][ T6887] syz.0.265 (6887) used greatest stack depth: 17856 bytes left [ 103.403988][ T6928] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 103.646222][ T6927] bond1: (slave veth0_to_bond): making interface the new active one [ 103.671735][ T6927] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 103.788821][ T6950] netlink: 'syz.0.278': attribute type 16 has an invalid length. [ 103.842081][ T6947] ip_tables: iptables: counters copy to user failed while replacing table [ 104.753911][ T7012] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 104.806741][ T7012] bond2: entered promiscuous mode [ 104.807184][ T7012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.812459][ T7011] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 104.813316][ T7011] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 104.841200][ T7018] netlink: 'syz.0.296': attribute type 30 has an invalid length. [ 104.863301][ T7018] netlink: 'syz.0.296': attribute type 30 has an invalid length. [ 104.880450][ T7018] netlink: 'syz.0.296': attribute type 30 has an invalid length. [ 104.889377][ T7012] macvtap1: entered allmulticast mode [ 104.908219][ T7012] bond2: (slave bridge1): making interface the new active one [ 104.908239][ T7012] bridge1: entered promiscuous mode [ 104.911177][ T7012] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 105.152370][ T7032] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 105.222518][ T7032] bond3 (unregistering): Released all slaves [ 105.248234][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 105.490808][ T7047] __nla_validate_parse: 8 callbacks suppressed [ 105.490826][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 105.557042][ T7047] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.557226][ T7047] xt_SECMARK: invalid mode: 9 [ 105.571117][ T7049] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 105.809189][ T7057] openvswitch: netlink: Duplicate key (type 0). [ 105.912981][ T7065] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 106.311318][ T7078] netlink: 6 bytes leftover after parsing attributes in process `syz.4.312'. [ 106.326379][ T7078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.350666][ T7087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.998698][ T7129] netlink: 216 bytes leftover after parsing attributes in process `syz.3.325'. [ 107.080029][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 107.080065][ T7136] validate_nla: 1 callbacks suppressed [ 107.080075][ T7136] netlink: 'syz.2.326': attribute type 7 has an invalid length. [ 107.080087][ T7136] netlink: 'syz.2.326': attribute type 8 has an invalid length. [ 107.080097][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 107.159683][ T7136] erspan0: entered promiscuous mode [ 107.178586][ T7136] gretap0: entered promiscuous mode [ 107.220422][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.326'. [ 107.240577][ T7136] erspan0: left promiscuous mode [ 107.251285][ T7136] gretap0: left promiscuous mode [ 107.261511][ T7141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.326'. [ 107.261555][ T7141] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 107.269358][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 107.359234][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 107.406802][ T7145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.649476][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.333'. [ 107.809043][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.885159][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.624129][ T7206] syzkaller0: entered promiscuous mode [ 108.624151][ T7206] syzkaller0: entered allmulticast mode [ 108.765910][ T7219] openvswitch: netlink: IP tunnel dst address not specified [ 108.765942][ T7219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.917864][ T7225] lo: entered promiscuous mode [ 108.918248][ T7225] lo: left promiscuous mode [ 108.927468][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.100724][ T7198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.100749][ T7198] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 109.270960][ T7198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.270984][ T7198] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 109.312869][ T7233] vlan2: entered promiscuous mode [ 109.312889][ T7233] bridge0: entered promiscuous mode [ 109.328334][ T7198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.328355][ T7198] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 109.358024][ T7198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.358046][ T7198] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 109.404313][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.829766][ T7258] netlink: 'syz.1.355': attribute type 32 has an invalid length. [ 109.865435][ T7258] bond4: Setting coupled_control to off (0) [ 109.964822][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.488413][ T7293] netlink: 'syz.4.366': attribute type 3 has an invalid length. [ 110.512885][ T7293] __nla_validate_parse: 43 callbacks suppressed [ 110.512903][ T7293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.366'. [ 110.806916][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.368'. [ 110.811853][ T7311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.812328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.870346][ T7312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.369'. [ 110.957132][ T7312] vlan2: entered allmulticast mode [ 110.957154][ T7312] bond0: entered allmulticast mode [ 110.957166][ T7312] bond_slave_0: entered allmulticast mode [ 110.957181][ T7312] bond_slave_1: entered allmulticast mode [ 111.014173][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.261155][ T7326] netlink: 'syz.3.372': attribute type 11 has an invalid length. [ 111.271953][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 111.331844][ T7328] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 111.332161][ T987] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 111.664664][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 111.738446][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'. [ 112.270716][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 112.303064][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'. [ 112.472324][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 112.700197][ T7412] netlink: 44 bytes leftover after parsing attributes in process `syz.4.392'. [ 112.919092][ T7418] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 113.082072][ T7426] sctp: [Deprecated]: syz.1.395 (pid 7426) Use of int in max_burst socket option. [ 113.082072][ T7426] Use struct sctp_assoc_value instead [ 113.164481][ T7418] block nbd296: server does not support multiple connections per device. [ 113.165075][ T7418] block nbd296: shutting down sockets [ 113.168244][ T7427] macsec2: entered promiscuous mode [ 113.168261][ T7427] bridge0: entered promiscuous mode [ 113.174567][ T7427] macsec2: entered allmulticast mode [ 113.174585][ T7427] bridge0: entered allmulticast mode [ 113.206311][ T7427] bridge0: port 3(macsec2) entered blocking state [ 113.206491][ T7427] bridge0: port 3(macsec2) entered disabled state [ 113.250045][ T7427] bridge0: left allmulticast mode [ 113.331723][ T30] bridge0: left promiscuous mode [ 113.485847][ T30] net_ratelimit: 4 callbacks suppressed [ 113.485867][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.724314][ T7459] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 114.254660][ T7478] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 114.256159][ T7478] bond2 (unregistering): Released all slaves [ 114.524059][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.617228][ T7503] Driver unsupported XDP return value 0 on prog (id 122) dev N/A, expect packet loss! [ 114.702663][ T7515] Cannot find add_set index 2 as target [ 114.980386][ T7529] netlink: 'syz.0.413': attribute type 33 has an invalid length. [ 115.004041][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.564916][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.668355][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.691840][ T7567] sock: sock_set_timeout: `syz.4.426' (pid 7567) tries to set negative timeout [ 115.883514][ T7574] __nla_validate_parse: 4 callbacks suppressed [ 115.889850][ T7574] netlink: 96 bytes leftover after parsing attributes in process `syz.0.429'. [ 116.124076][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.250790][ T7595] netlink: Failed to add helper -22 [ 116.250846][ T7595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.264196][ T7586] syzkaller0: entered promiscuous mode [ 116.264225][ T7586] syzkaller0: entered allmulticast mode [ 116.310028][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 116.431361][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 116.431382][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'. [ 116.431405][ T7607] netlink: 'syz.0.439': attribute type 15 has an invalid length. [ 116.533093][ T7609] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002 [ 116.604796][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.606478][ T38] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 116.608159][ T1051] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 116.608199][ T1051] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 116.608229][ T1051] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 116.808392][ T7623] netlink: 44 bytes leftover after parsing attributes in process `syz.1.443'. [ 116.808416][ T7623] netlink: 43 bytes leftover after parsing attributes in process `syz.1.443'. [ 116.808430][ T7623] netlink: 'syz.1.443': attribute type 6 has an invalid length. [ 116.808442][ T7623] netlink: 'syz.1.443': attribute type 5 has an invalid length. [ 116.808452][ T7623] netlink: 43 bytes leftover after parsing attributes in process `syz.1.443'. [ 116.882811][ T7629] netlink: 'syz.0.445': attribute type 29 has an invalid length. [ 116.899946][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.447'. [ 116.959966][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.447'. [ 116.986144][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.447'. [ 118.029550][ T7679] netlink: 'syz.0.461': attribute type 178 has an invalid length. [ 118.043240][ T7684] netlink: 'syz.2.462': attribute type 4 has an invalid length. [ 118.089939][ T7684] vlan3: entered allmulticast mode [ 118.089960][ T7684] bond0: entered allmulticast mode [ 118.089971][ T7684] bond_slave_0: entered allmulticast mode [ 118.089986][ T7684] bond_slave_1: entered allmulticast mode [ 118.379613][ T7705] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 118.379635][ T7705] syzkaller1: group set to 0 [ 118.380737][ T12] IPVS: starting estimator thread 0... [ 118.484877][ T7709] IPVS: using max 37 ests per chain, 88800 per kthread [ 118.749476][ T30] net_ratelimit: 2 callbacks suppressed [ 118.749495][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.775127][ T7728] team0: Device xfrm0 is of different type [ 119.164337][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.483979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.484175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.484344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.776501][ T7794] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 119.823509][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.089796][ T7816] netlink: 'syz.1.486': attribute type 3 has an invalid length. [ 120.110259][ T7811] lo: entered promiscuous mode [ 120.142619][ T7811] netlink: 'syz.1.486': attribute type 2 has an invalid length. [ 120.184555][ T7811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.211256][ T7821] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 120.480289][ T7840] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 120.480504][ T7840] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 120.480718][ T7840] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 120.545116][ T7737] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.545319][ T7737] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.545351][ T7737] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.576298][ T1051] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.894028][ T7856] __nla_validate_parse: 19 callbacks suppressed [ 120.894046][ T7856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.502'. [ 120.897299][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.056927][ T7864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.202784][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 121.202806][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 121.394188][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 121.577320][ T7890] ip_vti0: entered promiscuous mode [ 121.593862][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 121.599837][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 121.611169][ T7893] netlink: 56 bytes leftover after parsing attributes in process `syz.4.510'. [ 121.722241][ T7902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.512'. [ 122.306201][ T7946] netlink: 666 bytes leftover after parsing attributes in process `syz.4.522'. [ 122.431756][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.525'. [ 122.904366][ T7980] Cannot find add_set index 4 as target [ 122.998733][ T7977] syzkaller1: entered promiscuous mode [ 122.998754][ T7977] syzkaller1: entered allmulticast mode [ 123.173282][ T7995] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 123.870356][ T8022] netlink: 'syz.4.543': attribute type 10 has an invalid length. [ 124.458696][ T8059] net_ratelimit: 30 callbacks suppressed [ 124.458717][ T8059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.670550][ T8069] ip_tables: iptables: counters copy to user failed while replacing table [ 124.672149][ T8069] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 124.672166][ T8069] netlink: 'syz.3.553': attribute type 11 has an invalid length. [ 125.767841][ T8116] netlink: 'syz.2.564': attribute type 15 has an invalid length. [ 125.806382][ T8116] netlink: 'syz.2.564': attribute type 15 has an invalid length. [ 125.954966][ T38] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2048 - 0 [ 125.963957][ T38] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2048 - 0 [ 125.966613][ T1051] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2048 - 0 [ 125.966694][ T1051] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2048 - 0 [ 126.173041][ T8138] __nla_validate_parse: 16 callbacks suppressed [ 126.173060][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'. [ 126.491454][ T8151] netlink: 80 bytes leftover after parsing attributes in process `syz.2.577'. [ 126.491480][ T8151] netlink: 80 bytes leftover after parsing attributes in process `syz.2.577'. [ 126.541661][ T8153] tipc: Started in network mode [ 126.541678][ T8153] tipc: Node identity , cluster identity 4711 [ 126.541691][ T8153] tipc: Failed to set node id, please configure manually [ 126.541725][ T8153] tipc: Enabling of bearer rejected, failed to enable media [ 126.542014][ T8154] tipc: Started in network mode [ 126.542024][ T8154] tipc: Node identity , cluster identity 4711 [ 126.542034][ T8154] tipc: Failed to set node id, please configure manually [ 126.542068][ T8154] tipc: Enabling of bearer rejected, failed to enable media [ 126.616999][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.578'. [ 126.750923][ T8165] tipc: New replicast peer: 255.255.255.255 [ 126.759702][ T8165] tipc: Enabled bearer , priority 10 [ 126.889608][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.580'. [ 126.997315][ T8178] netlink: NAT attribute has 8 unknown bytes [ 126.997348][ T8178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.061046][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'. [ 127.124395][ T8174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.580'. [ 127.124421][ T8174] nbd: nbd64 already in use [ 127.157819][ T8187] Bluetooth: MGMT ver 1.23 [ 127.176048][ T8187] sock: sock_timestamping_bind_phc: sock not bind to device [ 127.317715][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.593'. [ 127.333800][ T8191] netlink: 9 bytes leftover after parsing attributes in process `syz.3.590'. [ 127.335776][ T8192] netlink: 9 bytes leftover after parsing attributes in process `syz.3.590'. [ 127.398957][ T8191] gretap0: entered promiscuous mode [ 127.425043][ T8196] 0ªî{X¹¦: renamed from gretap0 [ 127.442663][ T8196] 0ªî{X¹¦: left promiscuous mode [ 127.442684][ T8196] 0ªî{X¹¦: entered allmulticast mode [ 127.468303][ T8196] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.548422][ T8209] SET target dimension over the limit! [ 127.549070][ T7641] udevd[7641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 127.618831][ T8192] syzkaller1: entered promiscuous mode [ 127.618852][ T8192] syzkaller1: entered allmulticast mode [ 127.639368][ T8203] xt_CT: No such helper "pptp" [ 127.662708][ T8203] x_tables: duplicate underflow at hook 1 [ 127.662969][ T8202] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 128.092125][ T8235] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 128.092150][ T8235] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 128.176863][ T8242] x_tables: ip_tables: osf match: only valid for protocol 6 [ 128.195864][ T8241] tipc: Started in network mode [ 128.195892][ T8241] tipc: Node identity 2e7fe8ab6e82, cluster identity 4711 [ 128.197646][ T8241] tipc: Enabled bearer , priority 0 [ 128.201476][ T8241] syzkaller0: MTU too low for tipc bearer [ 128.201493][ T8241] tipc: Disabling bearer [ 129.149573][ T8295] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.456956][ T8314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.907146][ T8342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.258824][ T8362] bridge1: entered promiscuous mode [ 130.258847][ T8362] bridge1: entered allmulticast mode [ 130.330581][ T8372] netlink: 'syz.2.638': attribute type 10 has an invalid length. [ 130.348357][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.352349][ T8372] batadv0: entered allmulticast mode [ 130.357931][ T8372] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 130.820005][ T8402] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 130.984962][ T8411] sctp: [Deprecated]: syz.0.650 (pid 8411) Use of int in maxseg socket option. [ 130.984962][ T8411] Use struct sctp_assoc_value instead [ 131.182790][ T8418] __nla_validate_parse: 11 callbacks suppressed [ 131.182924][ T8418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.651'. [ 131.268230][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 131.268347][ T8436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.268356][ T8436] IPv6: NLM_F_CREATE should be set when creating new route [ 131.554482][ T8442] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.760404][ T8454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.657'. [ 131.969559][ T8459] veth1_to_bond: entered allmulticast mode [ 131.975228][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 132.025640][ T8459] veth1_to_bond (unregistering): left allmulticast mode [ 132.096267][ T8459] bond0: (slave bond_slave_1): Releasing backup interface [ 132.100396][ T8459] bond_slave_1 (unregistering): left allmulticast mode [ 132.251382][ T8480] netlink: 'syz.0.665': attribute type 6 has an invalid length. [ 132.251402][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 132.541042][ T8506] netlink: 188 bytes leftover after parsing attributes in process `syz.1.667'. [ 132.772956][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773010][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.851045][ T8520] netlink: 'syz.2.675': attribute type 12 has an invalid length. [ 132.862825][ T8523] sctp: [Deprecated]: syz.1.673 (pid 8523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.862825][ T8523] Use struct sctp_sack_info instead [ 132.883270][ T8530] sctp: [Deprecated]: syz.1.673 (pid 8530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.883270][ T8530] Use struct sctp_sack_info instead [ 132.928488][ T8535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.674'. [ 132.932561][ T8535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.674'. [ 132.932777][ T8535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.674'. [ 132.932974][ T8535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.674'. [ 133.067922][ T8541] syzkaller0: entered allmulticast mode [ 133.148103][ T8547] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 133.274688][ T8554] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 133.285779][ T8547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.117136][ T8592] netlink: 'syz.4.694': attribute type 11 has an invalid length. [ 134.538084][ T50] IPVS: starting estimator thread 0... [ 134.623724][ T8616] IPVS: using max 33 ests per chain, 79200 per kthread [ 135.071760][ T8643] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 135.118792][ T8643] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 135.156690][ T8649] dvmrp8: entered allmulticast mode [ 135.588120][ T8675] bond3: option resend_igmp: invalid value (32767) [ 135.588142][ T8675] bond3: option resend_igmp: allowed values 0 - 255 [ 135.592803][ T8675] bond3 (unregistering): Released all slaves [ 135.789683][ T7737] bond0: (slave bond_slave_0): interface is now down [ 135.789712][ T7737] bond0: (slave bond_slave_1): interface is now down [ 136.029285][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030265][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030278][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030287][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030297][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030306][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030315][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030323][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030332][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030341][ T8697] tc action pedit 'at' offset 5 out of bounds [ 136.030361][ T8697] 0: reclassify loop, rule prio 0, protocol 800 [ 136.130745][ T13] IPVS: starting estimator thread 0... [ 136.217105][ T8705] IPVS: using max 35 ests per chain, 84000 per kthread [ 136.221256][ T8708] netlink: 'syz.1.733': attribute type 2 has an invalid length. [ 136.247953][ T8710] __nla_validate_parse: 34 callbacks suppressed [ 136.247971][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 136.255320][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 136.280582][ T8710] ip6t_hbh: too many supported opts specified [ 136.303371][ T8714] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 136.485705][ T8714] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 136.485855][ T8714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.486799][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 137.093722][ T8749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.136392][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 137.170229][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 137.170916][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 137.244789][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 137.400229][ T8780] netlink: 'syz.1.746': attribute type 15 has an invalid length. [ 137.484353][ T7737] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 137.485333][ T8784] tipc: Started in network mode [ 137.485357][ T8784] tipc: Node identity ac14142f, cluster identity 4711 [ 137.485824][ T8784] tipc: Enabling of bearer rejected, failed to enable media [ 137.494973][ T169] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 137.495015][ T169] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 137.495046][ T169] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 137.800097][ T8802] netlink: zone id is out of range [ 137.800112][ T8802] netlink: set zone limit has 4 unknown bytes [ 137.846330][ T8804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.751'. [ 137.858555][ T8799] netlink: zone id is out of range [ 137.858591][ T8799] netlink: zone id is out of range [ 137.997961][ T8810] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.754'. [ 137.998112][ T8810] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 138.028518][ T8810] 0ªX¹¦Dö»: entered allmulticast mode [ 138.284922][ T1051] bond0: (slave bond_slave_0): interface is now down [ 138.284945][ T1051] bond0: (slave bond_slave_1): interface is now down [ 138.474955][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'. [ 138.679358][ T8834] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 138.685121][ T8834] bond4 (unregistering): Released all slaves [ 138.864113][ T8846] xt_policy: output policy not valid in PREROUTING and INPUT [ 139.246240][ T8871] nbd3: detected capacity change from 0 to 63 [ 139.252779][ T8871] block nbd3: NBD_DISCONNECT [ 139.259977][ T8871] block nbd3: Disconnected due to user request. [ 139.264578][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.264681][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 139.264949][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.264972][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 139.267314][ T8871] block nbd3: shutting down sockets [ 139.272576][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.272670][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 139.276307][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.276382][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 139.276695][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 139.276719][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 139.276733][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 139.276746][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 139.276758][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 139.278394][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 139.278421][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 139.278435][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 139.278644][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 139.278790][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 139.278931][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.279022][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.279952][ T7641] ldm_validate_partition_table(): Disk read failed. [ 139.281964][ T7641] Dev nbd3: unable to read RDB block 0 [ 139.286622][ T7641] nbd3: unable to read partition table [ 139.368790][ T7641] ldm_validate_partition_table(): Disk read failed. [ 139.369937][ T7641] Dev nbd3: unable to read RDB block 0 [ 139.370622][ T7641] nbd3: unable to read partition table [ 139.752238][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 139.777222][ T8891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.283471][ T8922] team0: No ports can be present during mode change [ 140.331628][ T8924] netlink: zone id is out of range [ 140.370979][ T8924] sctp: [Deprecated]: syz.1.785 (pid 8924) Use of int in max_burst socket option deprecated. [ 140.370979][ T8924] Use struct sctp_assoc_value instead [ 140.532575][ T8935] sctp: [Deprecated]: syz.1.789 (pid 8935) Use of int in maxseg socket option. [ 140.532575][ T8935] Use struct sctp_assoc_value instead [ 140.844792][ T50] bond0: (slave bond_slave_0): interface is now down [ 140.844814][ T50] bond0: (slave bond_slave_1): interface is now down [ 140.850095][ T8947] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 140.853989][ T8947] batman_adv: batadv0: Adding interface: gretap1 [ 140.854003][ T8947] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.854029][ T8947] batman_adv: batadv0: Interface activated: gretap1 [ 140.870140][ T8949] netlink: 'syz.1.793': attribute type 178 has an invalid length. [ 140.921042][ T8952] netlink: 'syz.1.793': attribute type 178 has an invalid length. [ 141.439336][ T8985] __nla_validate_parse: 4 callbacks suppressed [ 141.439355][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 141.603944][ T8990] netlink: 'syz.3.802': attribute type 13 has an invalid length. [ 141.773099][ T9000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.807'. [ 141.773126][ T9000] block nbd0: not configured, cannot reconfigure [ 141.778173][ T9005] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.808'. [ 141.789264][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 141.809557][ T9000] vlan5: entered promiscuous mode [ 141.809578][ T9000] erspan0: entered promiscuous mode [ 141.850128][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.809'. [ 141.929040][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 142.140611][ T9013] bond6: option lp_interval: invalid value (0) [ 142.140634][ T9013] bond6: option lp_interval: allowed values 1 - 2147483647 [ 142.142074][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.811'. [ 142.142101][ T9020] net_ratelimit: 175 callbacks suppressed [ 142.142112][ T9020] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 142.146372][ T9013] bond6 (unregistering): Released all slaves [ 142.307076][ T9022] netlink: 64 bytes leftover after parsing attributes in process `syz.4.815'. [ 142.307100][ T9022] netlink: 64 bytes leftover after parsing attributes in process `syz.4.815'. [ 142.542645][ T9038] tcf_pedit_act: 7 callbacks suppressed [ 142.543789][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543806][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543816][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543825][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543834][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543843][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543851][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543858][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543866][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543874][ T9038] tc action pedit 'at' offset 5 out of bounds [ 142.543890][ T9038] 0: reclassify loop, rule prio 0, protocol 800 [ 142.849952][ T9061] netlink: 'syz.2.827': attribute type 2 has an invalid length. [ 142.952119][ T9064] netlink: 'syz.0.826': attribute type 24 has an invalid length. [ 143.060925][ T9072] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 143.060948][ T9072] bond4: option packets_per_slave: allowed values 0 - 65535 [ 143.066678][ T9072] bond4 (unregistering): Released all slaves [ 143.403932][ T9050] bond0: (slave bond_slave_0): interface is now down [ 143.403954][ T9050] bond0: (slave bond_slave_1): interface is now down [ 143.408308][ T9050] bond0: now running without any active interface! [ 143.457318][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 143.469248][ T9084] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 145.208643][ T9132] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 145.217847][ T9132] bond1 (unregistering): Released all slaves [ 145.241912][ T9142] ip6t_REJECT: ECHOREPLY is not supported [ 145.252137][ T9143] netlink: 'syz.2.845': attribute type 5 has an invalid length. [ 145.301304][ T9137] veth3: entered promiscuous mode [ 145.301319][ T9137] veth3: entered allmulticast mode [ 145.348074][ T9149] netlink: 'syz.4.849': attribute type 14 has an invalid length. [ 145.348097][ T9149] netlink: 'syz.4.849': attribute type 13 has an invalid length. [ 145.407640][ T9149] netlink: Unknown nat attribute (0) [ 145.407673][ T9149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.463479][ T9153] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 145.464735][ T9153] team0: Device ipvlan2 is already an upper device of the team interface [ 145.992143][ T9191] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 146.009306][ T9191] netlink: 'syz.0.861': attribute type 21 has an invalid length. [ 146.009455][ T9191] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.009610][ T9191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.009619][ T9191] IPv6: NLM_F_CREATE should be set when creating new route [ 146.009732][ T9191] IPv6: NLM_F_CREATE should be set when creating new route [ 146.009754][ T9191] IPv6: NLM_F_CREATE should be set when creating new route [ 146.268590][ T9203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.290021][ T9206] netlink: 'syz.3.864': attribute type 11 has an invalid length. [ 146.482276][ T9216] ip6t_hbh: unknown flags 38 [ 146.771779][ T9234] __nla_validate_parse: 11 callbacks suppressed [ 146.771797][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 146.907380][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 146.907405][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 146.907466][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 146.945744][ T9236] netlink: 48 bytes leftover after parsing attributes in process `syz.1.875'. [ 146.967501][ T9236] netlink: 12927 bytes leftover after parsing attributes in process `syz.1.875'. [ 147.070342][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 148.014836][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.884'. [ 148.333293][ T9291] netlink: 666 bytes leftover after parsing attributes in process `syz.4.889'. [ 148.439084][ T9302] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 148.439103][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.894'. [ 148.591940][ T9303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.749726][ T9319] vcan0: entered allmulticast mode [ 149.134653][ T9340] netlink: 'syz.4.901': attribute type 4 has an invalid length. [ 149.313493][ T9349] geneve2: entered promiscuous mode [ 149.356664][ T9352] ip_tables: iptables: counters copy to user failed while replacing table [ 149.754002][ T9383] netlink: 'syz.4.909': attribute type 7 has an invalid length. [ 149.754024][ T9383] netlink: 'syz.4.909': attribute type 8 has an invalid length. [ 149.808298][ T9382] bond5: entered promiscuous mode [ 149.808340][ T9382] bond5: entered allmulticast mode [ 149.808984][ T9382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.096280][ T9393] netlink: 'syz.4.913': attribute type 4 has an invalid length. [ 150.098539][ T9393] netlink: 'syz.4.913': attribute type 4 has an invalid length. [ 150.785402][ T9473] netlink: 'syz.3.919': attribute type 1 has an invalid length. [ 151.232310][ T31] audit: type=1804 audit(1789925377.990:3): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.921" name="/newroot/196/cgroup.controllers" dev="tmpfs" ino=1019 res=1 errno=0 [ 151.232356][ T31] audit: type=1800 audit(1789925377.990:4): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.921" name="cgroup.controllers" dev="tmpfs" ino=1019 res=0 errno=0 [ 151.438724][ T9507] netlink: 'syz.3.922': attribute type 32 has an invalid length. [ 151.480707][ T7737] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.480777][ T7737] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.480824][ T7737] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.545942][ T9514] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 151.554706][ T9511] netlink: 'syz.3.922': attribute type 32 has an invalid length. [ 151.630587][ T9516] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 151.869619][ T9525] syzkaller0: entered promiscuous mode [ 151.869642][ T9525] syzkaller0: entered allmulticast mode [ 151.908714][ T9527] __nla_validate_parse: 15 callbacks suppressed [ 151.908731][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 151.908759][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'. [ 152.441466][ T9551] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 152.706651][ T9568] netlink: 232 bytes leftover after parsing attributes in process `syz.4.939'. [ 152.732709][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.939'. [ 152.732739][ T9568] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 153.227911][ T9593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.364883][ T9594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.435168][ T9604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.493239][ T9600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.532270][ T9600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.586894][ T9590] bond1: entered promiscuous mode [ 153.587240][ T9590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.601948][ T9609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.950'. [ 153.741066][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 153.757196][ T9617] validate_nla: 3 callbacks suppressed [ 153.757214][ T9617] netlink: 'syz.0.953': attribute type 29 has an invalid length. [ 153.793672][ T9614] x_tables: duplicate underflow at hook 3 [ 153.900504][ T9612] syzkaller1: entered promiscuous mode [ 153.900527][ T9612] syzkaller1: entered allmulticast mode [ 154.142961][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.957'. [ 154.142986][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.957'. [ 154.142999][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 154.183037][ T9630] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 154.399589][ T9637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.956'. [ 154.563918][ T9650] netlink: 'syz.2.960': attribute type 12 has an invalid length. [ 154.724169][ T9663] netlink: 'syz.4.965': attribute type 12 has an invalid length. [ 154.918840][ T9671] vlan2: entered allmulticast mode [ 154.918861][ T9671] veth1_virt_wifi: entered allmulticast mode [ 155.066557][ T9681] netlink: 'syz.0.970': attribute type 7 has an invalid length. [ 155.066575][ T9681] netlink: 'syz.0.970': attribute type 8 has an invalid length. [ 155.344818][ T9700] netlink: 'syz.4.975': attribute type 21 has an invalid length. [ 155.679661][ T9716] syzkaller0: entered promiscuous mode [ 155.679684][ T9716] syzkaller0: entered allmulticast mode [ 155.793362][ T9720] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 155.802073][ T9720] 0ªî{X¹¦: entered allmulticast mode [ 155.802544][ T9720] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 156.002917][ T9725] bridge0: port 3(veth1_to_bridge) entered blocking state [ 156.003015][ T9725] bridge0: port 3(veth1_to_bridge) entered disabled state [ 156.003256][ T9725] veth1_to_bridge: entered allmulticast mode [ 156.020729][ T9725] veth1_to_bridge: entered promiscuous mode [ 156.020862][ T9725] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.022492][ T9725] bridge0: port 3(veth1_to_bridge) entered blocking state [ 156.022588][ T9725] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 156.210040][ T9725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.441531][ T9749] tipc: Started in network mode [ 156.441560][ T9749] tipc: Node identity 7212d788a2b9, cluster identity 4711 [ 156.441767][ T9749] tipc: Enabled bearer , priority 0 [ 156.442627][ T9749] syzkaller0: entered promiscuous mode [ 156.442644][ T9749] syzkaller0: entered allmulticast mode [ 156.443215][ T9749] tipc: Resetting bearer [ 156.634436][ T7739] tipc: Resetting bearer [ 156.637429][ T9748] tipc: Resetting bearer [ 156.694533][ T9753] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.759635][ T9748] tipc: Disabling bearer [ 156.915590][ T9758] bond6: option xmit_hash_policy: invalid value (64) [ 156.921396][ T9758] bond6 (unregistering): Released all slaves [ 157.039452][ T9778] __nla_validate_parse: 19 callbacks suppressed [ 157.039477][ T9778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1000'. [ 158.275330][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1021'. [ 158.505650][ T9868] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1025'. [ 159.438433][ T9930] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1040'. [ 159.511867][ T9933] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 159.522459][ T9928] syzkaller0: entered promiscuous mode [ 159.522478][ T9928] syzkaller0: entered allmulticast mode [ 160.883888][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 161.283135][T10020] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1057'. [ 161.283413][T10021] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1057'. [ 161.301524][T10020] netlink: 10879 bytes leftover after parsing attributes in process `syz.3.1057'. [ 161.656995][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 161.671032][T10029] bond5 (unregistering): Released all slaves [ 161.681367][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 161.762761][T10036] bond5 (unregistering): Released all slaves [ 162.088912][T10064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1069'. [ 162.179241][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 162.291242][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1071'. [ 162.374105][T10072] netlink: 'syz.3.1071': attribute type 10 has an invalid length. [ 162.450391][T10072] bond1: (slave veth0_to_bond): Releasing active interface [ 162.467310][T10072] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 162.479111][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 162.501989][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 162.829225][ T9046] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.829464][ T9046] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.879839][ T5733] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.004041][ T5733] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.540907][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 163.554339][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1084'. [ 163.575554][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.865564][T10138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1089'. [ 164.028472][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 164.154489][T10156] netlink: zone id is out of range [ 164.154529][T10156] netlink: zone id is out of range [ 164.154538][T10156] netlink: zone id is out of range [ 164.154545][T10156] netlink: zone id is out of range [ 164.154552][T10156] netlink: zone id is out of range [ 164.154558][T10156] netlink: zone id is out of range [ 164.154569][T10156] netlink: zone id is out of range [ 164.154576][T10156] netlink: zone id is out of range [ 164.154583][T10156] netlink: zone id is out of range [ 164.154590][T10156] netlink: zone id is out of range [ 164.647626][T10173] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 164.760505][T10185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1098'. [ 165.157860][T10200] veth0: entered promiscuous mode [ 165.236380][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.239386][T10198] veth0: left promiscuous mode [ 165.896259][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.896259][T10240] Use struct sctp_assoc_value instead [ 165.896306][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.896306][T10240] Use struct sctp_assoc_value instead [ 165.896343][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.896343][T10240] Use struct sctp_assoc_value instead [ 165.896377][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.896377][T10240] Use struct sctp_assoc_value instead [ 165.896412][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.896412][T10240] Use struct sctp_assoc_value instead [ 165.896448][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.896448][T10240] Use struct sctp_assoc_value instead [ 165.897715][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.897715][T10240] Use struct sctp_assoc_value instead [ 165.897758][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.897758][T10240] Use struct sctp_assoc_value instead [ 165.897795][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.897795][T10240] Use struct sctp_assoc_value instead [ 165.897831][T10240] sctp: [Deprecated]: syz.2.1115 (pid 10240) Use of int in max_burst socket option deprecated. [ 165.897831][T10240] Use struct sctp_assoc_value instead [ 166.311128][T10264] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 166.336482][T10264] 0ªX¹¦Dö»: entered allmulticast mode [ 166.444166][ T9048] bond0: (slave veth0_to_bond): interface is now down [ 166.566700][T10235] netlink: 'syz.3.1113': attribute type 2 has an invalid length. [ 166.603761][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.718229][T10281] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 166.756653][T10283] netlink: 'syz.4.1126': attribute type 12 has an invalid length. [ 166.783037][T10285] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 1, id = 0 [ 166.932383][T10289] netlink: 'syz.3.1130': attribute type 83 has an invalid length. [ 166.932847][T10289] netlink: 'syz.3.1130': attribute type 32 has an invalid length. [ 167.050416][T10289] bond4: option coupled_control: invalid value (192) [ 167.065611][T10289] bond4 (unregistering): Released all slaves [ 167.124922][T10299] __nla_validate_parse: 9 callbacks suppressed [ 167.124941][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 167.124970][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 167.209990][T10293] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 167.214662][T10304] veth0: entered promiscuous mode [ 167.220135][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 167.284400][T10303] veth0: left promiscuous mode [ 167.641232][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 168.980067][T10387] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 169.004353][ T9050] bond0: (slave veth0_to_bond): interface is now down [ 169.076225][T10400] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1156'. [ 169.076249][T10400] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1156'. [ 169.081584][T10402] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1156'. [ 169.081607][T10402] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1156'. [ 169.340536][T10387] bond6: entered promiscuous mode [ 169.341456][T10387] 8021q: adding VLAN 0 to HW filter on device bond6 [ 170.107415][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1165'. [ 170.307884][T10442] x_tables: duplicate underflow at hook 1 [ 170.367671][T10447] x_tables: duplicate underflow at hook 1 [ 170.509536][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1170'. [ 170.542410][ T9050] IPVS: starting estimator thread 0... [ 170.590578][T10471] net_ratelimit: 499 callbacks suppressed [ 170.590607][T10471] ip_tables: iptables: counters copy to user failed while replacing table [ 170.625173][T10469] IPVS: using max 32 ests per chain, 76800 per kthread [ 170.679156][T10478] netlink: 'syz.3.1175': attribute type 11 has an invalid length. [ 170.813007][T10481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.290358][T10513] nftables ruleset with unbound set [ 171.430263][T10521] netlink: 'syz.3.1185': attribute type 12 has an invalid length. [ 171.453982][T10520] netlink: 'syz.1.1188': attribute type 30 has an invalid length. [ 171.564432][ T9046] bond0: (slave veth0_to_bond): interface is now down [ 171.564803][ T9046] bond0: now running without any active interface! [ 171.621852][T10531] raw_sendmsg: syz.2.1190 forgot to set AF_INET. Fix it! [ 171.742145][T10543] batadv_slave_0: entered promiscuous mode [ 171.751719][T10546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.826716][T10546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.062111][T10561] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 172.299699][T10574] netlink: 'syz.3.1198': attribute type 4 has an invalid length. [ 172.359788][T10574] netlink: 'syz.3.1198': attribute type 4 has an invalid length. [ 172.362245][T10578] __nla_validate_parse: 10 callbacks suppressed [ 172.362263][T10578] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1199'. [ 172.362276][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 172.421614][T10578] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1199'. [ 172.440226][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 172.573396][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 172.737212][T10594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'. [ 172.871429][T10594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1203'. [ 172.946211][T10611] x_tables: duplicate underflow at hook 2 [ 173.007960][T10613] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 173.072472][T10620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 173.072523][T10620] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 173.254536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.254989][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.255402][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.255862][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.256312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.256761][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.862352][T10640] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 174.828540][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1221'. [ 175.003773][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.023073][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.222906][T10672] bridge_slave_1 (unregistering): left allmulticast mode [ 175.222932][T10672] bridge_slave_1 (unregistering): left promiscuous mode [ 175.223178][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.323169][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 175.593621][ C1] net_ratelimit: 6192 callbacks suppressed [ 175.593640][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.594084][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.594522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.594944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.595376][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.595796][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.596209][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.596665][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.597091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.598448][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.868296][T10747] atomic_op ffff88802d2239e0 conn xmit_atomic 0000000000000000 [ 178.031550][T10749] __nla_validate_parse: 4 callbacks suppressed [ 178.031569][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.222671][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.245546][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.273961][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.407318][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.467689][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.483034][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.532656][T10756] xt_hashlimit: size too large, truncated to 1048576 [ 179.673117][T10780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.772564][T10778] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 179.945353][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 180.019843][T10786] team0 (unregistering): Port device team_slave_0 removed [ 180.049196][T10786] team0 (unregistering): Port device team_slave_1 removed [ 180.603668][ C1] net_ratelimit: 13381 callbacks suppressed [ 180.603686][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.604025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.604412][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.604805][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.605176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.605569][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.605898][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.606293][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.606637][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.606999][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.852009][T10799] macsec1: entered promiscuous mode [ 181.048478][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1259'. [ 181.933891][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1266'. [ 182.130466][T10848] netlink: 'syz.1.1268': attribute type 2 has an invalid length. [ 182.416167][T10852] bond6: option downdelay: invalid value (18446744073709551615) [ 182.416192][T10852] bond6: option downdelay: allowed values 0 - 2147483647 [ 182.455987][T10852] bond6 (unregistering): Released all slaves [ 182.503843][T10848] : entered promiscuous mode [ 182.508117][T10858] netlink: 'syz.4.1271': attribute type 3 has an invalid length. [ 182.851998][T10851] syzkaller0: entered promiscuous mode [ 182.852021][T10851] syzkaller0: entered allmulticast mode [ 183.604088][T10864] __nla_validate_parse: 2 callbacks suppressed [ 183.604106][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 183.967837][T10910] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 185.613755][ C1] net_ratelimit: 15855 callbacks suppressed [ 185.613770][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.613977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.614157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.614340][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.614550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.614758][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.614980][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.615160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.615338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.615546][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.623537][ C1] net_ratelimit: 25164 callbacks suppressed [ 190.623558][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.623901][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.624249][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.624606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.625025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.625453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.625855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.626208][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.626543][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.626892][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.643973][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.018410][T10926] netlink: 'syz.0.1281': attribute type 12 has an invalid length. [ 194.216095][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.633597][ C1] net_ratelimit: 16603 callbacks suppressed [ 195.633618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.633998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.634393][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.634784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.635194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.635606][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.635999][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.636386][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.636774][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.637126][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.820067][T10950] bond7: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 195.887182][T10950] bond7 (unregistering): Released all slaves [ 196.063238][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1293'. [ 196.250213][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1294'. [ 196.326717][T10991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1292'. [ 196.473403][T11000] sctp: [Deprecated]: syz.4.1295 (pid 11000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.473403][T11000] Use struct sctp_sack_info instead [ 196.687812][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1296'. [ 196.691165][T11007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1296'. [ 196.736082][T11008] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 196.973098][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 197.494107][T11030] veth1_macvtap: left promiscuous mode [ 197.746344][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 199.067481][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.067621][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.067723][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.067827][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.067933][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.068041][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.068161][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.068266][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.068370][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.068530][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.068635][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.068740][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.068846][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.232217][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.232384][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.232529][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.232638][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.232747][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.232856][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.233009][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.233151][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.233301][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.233408][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.643772][ C1] net_ratelimit: 16601 callbacks suppressed [ 200.643795][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.643830][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 200.644184][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.644260][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 200.644659][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.644712][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 200.645057][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.645146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 200.645453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.645605][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 201.501419][T11052] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 204.543527][ C0] sched: DL replenish lagged too much [ 205.653634][ C0] net_ratelimit: 25364 callbacks suppressed [ 205.653656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 205.653720][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.654040][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 205.654114][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.654468][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 205.654489][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.654862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 205.654869][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.655245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 205.655300][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.663693][ C1] net_ratelimit: 24357 callbacks suppressed [ 210.663716][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.663856][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 210.664276][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 210.664681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 210.664983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.665074][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 210.665391][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.665515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 210.665756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.665902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 215.673671][ C1] net_ratelimit: 20196 callbacks suppressed [ 215.673694][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.673949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 215.674045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.674411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.674412][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.674893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.675356][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 215.675657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.675840][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.676005][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.683751][ C1] net_ratelimit: 20218 callbacks suppressed [ 220.683756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 220.683772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.684148][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.684526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.684883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 220.685217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.685409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.685588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.685805][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.685943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 224.935543][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.693791][ C0] net_ratelimit: 19887 callbacks suppressed [ 225.693815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 225.694217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.694319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.694594][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.694703][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.694966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 225.695094][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.695328][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.695710][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.696087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 230.703629][ C0] net_ratelimit: 20003 callbacks suppressed [ 230.703651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 230.704036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.704433][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.704602][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.704837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 230.704998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.705251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.705399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.705664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.706087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 235.713589][ C0] net_ratelimit: 20486 callbacks suppressed [ 235.713610][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.713818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.713997][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 235.714223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.714395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.714797][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.715203][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 235.715566][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.715611][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.715982][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.723807][ C0] net_ratelimit: 19725 callbacks suppressed [ 240.723839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.724156][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.724232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.724575][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.724642][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 240.724973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.725089][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.725493][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.725891][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 240.726278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.733790][ C0] net_ratelimit: 19836 callbacks suppressed [ 245.733813][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.734090][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.734287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 245.734477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.734691][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.734836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.735083][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.735483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 245.735875][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.736056][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.743830][ C0] net_ratelimit: 20092 callbacks suppressed [ 250.743852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.744306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.744348][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.744727][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 250.744744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.745276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.745276][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.745712][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.746128][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 250.746620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.753791][ C0] net_ratelimit: 20063 callbacks suppressed [ 255.753814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.754194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.754210][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.754559][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.754609][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 255.754953][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.754990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.755377][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.755813][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 255.756211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.916344][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.763757][ C1] net_ratelimit: 19971 callbacks suppressed [ 260.763777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.763781][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.764139][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.764172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 260.764506][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.764572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.764953][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.765341][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 260.765738][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.765747][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.773561][ C0] net_ratelimit: 20027 callbacks suppressed [ 265.773585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.773878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.773933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 265.774239][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.774285][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.774627][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.774644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.775069][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 265.775420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.775782][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.783538][ C1] net_ratelimit: 20052 callbacks suppressed [ 270.783559][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.783774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.784211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.784613][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 270.784877][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.785004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.785266][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.785385][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.785626][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.785795][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 275.793760][ C0] net_ratelimit: 19590 callbacks suppressed [ 275.793783][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.794041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.794161][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.794406][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.794560][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 275.794763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.794979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.795358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.795763][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 275.796022][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.803609][ C0] net_ratelimit: 20939 callbacks suppressed [ 280.803633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.804000][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.804365][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 280.804748][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.804795][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.805103][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.805182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.805512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 280.805599][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.805882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.813536][ C1] net_ratelimit: 20799 callbacks suppressed [ 285.813558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.813824][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 285.814184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.814906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.815264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 285.815269][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.815646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.815722][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.816082][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.816096][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.823513][ C0] net_ratelimit: 19874 callbacks suppressed [ 290.823536][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.823742][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.823969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.824146][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.824419][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 290.824865][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.825337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.825522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.825788][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 290.825919][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.495911][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.833793][ C0] net_ratelimit: 19746 callbacks suppressed [ 295.833816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 295.834204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.834539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.834635][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.834934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.835020][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 295.835440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.835667][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.835835][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.836216][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 300.843614][ C0] net_ratelimit: 20059 callbacks suppressed [ 300.843622][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.843636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.844066][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.844094][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.844473][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 300.844852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.845398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.845610][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.845775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.845994][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:d7:a5:a9:e6:4d, vlan:0) [ 304.153468][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 304.184367][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11063/1:b..l [ 304.192396][ C1] rcu: (detected by 1, t=10505 jiffies, g=38717, q=2117 ncpus=2) [ 304.200234][ C1] task:syz.3.1303 state:R running task stack:26600 pid:11063 tgid:11047 ppid:5616 task_flags:0x400040 flags:0x00080000 [ 304.213774][ C1] Call Trace: [ 304.217073][ C1] [ 304.220025][ C1] __schedule+0x17db/0x58f0 [ 304.224548][ C1] ? ctrl_getfamily+0x4c8/0x5c0 [ 304.229410][ C1] ? genl_rcv_msg+0x614/0x7a0 [ 304.234122][ C1] ? __pfx___schedule+0x10/0x10 [ 304.239007][ C1] preempt_schedule_irq+0x4b/0x90 [ 304.244044][ C1] irqentry_exit+0x14f/0x910 [ 304.248643][ C1] ? trace_irq_disable+0x3b/0x140 [ 304.253692][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.259686][ C1] RIP: 0010:lock_release+0x25/0x3c0 [ 304.264896][ C1] Code: 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 c8 c0 f1 11 48 89 44 24 28 <0f> 1f 44 00 00 65 8b 05 c7 c0 f1 11 83 f8 08 0f 83 60 02 00 00 89 [ 304.284513][ C1] RSP: 0018:ffffc9000394f528 EFLAGS: 00000286 [ 304.290600][ C1] RAX: 06abe09447547600 RBX: ffffffff89f3d8de RCX: ffff8880694ebe80 [ 304.298681][ C1] RDX: 0000000000000000 RSI: ffffffff89f3d8de RDI: ffffffff8ed5c8e0 [ 304.306683][ C1] RBP: 0000000000000001 R08: ffffffff89f3d8de R09: 0000000000000000 [ 304.314664][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807905d800 [ 304.322653][ C1] R13: ffffffff89f3d8de R14: ffffffff8ed5c8e0 R15: dffffc0000000000 [ 304.330647][ C1] ? net_generic+0x1e/0x240 [ 304.335185][ C1] ? net_generic+0x1e/0x240 [ 304.339707][ C1] ? net_generic+0x1e/0x240 [ 304.344224][ C1] ? net_generic+0x1e/0x240 [ 304.348748][ C1] ? net_generic+0x1e/0x240 [ 304.353269][ C1] ? net_generic+0x1e/0x240 [ 304.357805][ C1] net_generic+0x1ef/0x240 [ 304.362281][ C1] netlink_deliver_tap+0x1f/0x1b0 [ 304.367331][ C1] netlink_sendskb+0x68/0x140 [ 304.372031][ C1] ctrl_getfamily+0x4c8/0x5c0 [ 304.376730][ C1] ? __pfx_ctrl_getfamily+0x10/0x10 [ 304.381949][ C1] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 304.388304][ C1] genl_family_rcv_msg_doit+0x233/0x340 [ 304.393878][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 304.399979][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 304.405124][ C1] genl_rcv_msg+0x614/0x7a0 [ 304.409650][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.414694][ C1] ? __pfx_ctrl_getfamily+0x10/0x10 [ 304.419920][ C1] netlink_rcv_skb+0x226/0x4a0 [ 304.424703][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.429741][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.435061][ C1] ? down_read+0x2be/0x330 [ 304.439497][ C1] genl_rcv+0x28/0x40 [ 304.443484][ C1] netlink_unicast+0x7bd/0x940 [ 304.448275][ C1] netlink_sendmsg+0x813/0xb40 [ 304.453072][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.458387][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 304.463951][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.469255][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 304.474294][ C1] __sys_sendto+0x408/0x5a0 [ 304.478817][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 304.483850][ C1] ? errseq_sample+0x40/0x70 [ 304.488481][ C1] ? fd_install+0x94/0x3d0 [ 304.492912][ C1] ? fd_install+0x309/0x3d0 [ 304.497432][ C1] __x64_sys_sendto+0xde/0x100 [ 304.502216][ C1] do_syscall_64+0x166/0x520 [ 304.506818][ C1] ? trace_irq_disable+0x3b/0x140 [ 304.511846][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.517919][ C1] ? clear_bhb_loop+0x70/0xc0 [ 304.522606][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.528510][ C1] RIP: 0033:0x7f3d60b5e98e [ 304.532944][ C1] RSP: 002b:00007f3d61aaee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 304.541367][ C1] RAX: ffffffffffffffda RBX: 00007f3d61ab06c0 RCX: 00007f3d60b5e98e [ 304.549347][ C1] RDX: 0000000000000020 RSI: 00007f3d61aaf000 RDI: 0000000000000027 [ 304.557325][ C1] RBP: 0000000000000000 R08: 00007f3d61aaef04 R09: 000000000000000c [ 304.565306][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 304.573283][ C1] R13: 00007f3d61aaef58 R14: 00007f3d61aaf000 R15: 0000000000000000 [ 304.581285][ C1] [ 304.584327][ C1] rcu: rcu_preempt kthread starved for 1084 jiffies! g38717 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 304.595262][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 304.605230][ C1] rcu: RCU grace-period kthread stack dump: [ 304.611118][ C1] task:rcu_preempt state:R running task stack:28112 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 304.624626][ C1] Call Trace: [ 304.627921][ C1] [ 304.630859][ C1] __schedule+0x17db/0x58f0 [ 304.635377][ C1] ? __lock_acquire+0x747/0x2de0 [ 304.640341][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 304.645477][ C1] ? __pfx___schedule+0x10/0x10 [ 304.650354][ C1] ? lock_acquire+0x115/0x350 [ 304.655049][ C1] ? schedule+0x90/0x2b0 [ 304.659306][ C1] schedule+0x164/0x2b0 [ 304.663471][ C1] schedule_timeout+0x152/0x2c0 [ 304.668340][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 304.673732][ C1] ? __pfx_process_timeout+0x10/0x10 [ 304.679041][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.684857][ C1] ? prepare_to_swait_event+0x322/0x350 [ 304.690425][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 304.695300][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 304.701466][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 304.706758][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 304.711974][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.717796][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 304.722399][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 304.727606][ C1] ? __kthread_parkme+0x71/0x1f0 [ 304.732570][ C1] ? __kthread_parkme+0x199/0x1f0 [ 304.737713][ C1] kthread+0x38b/0x480 [ 304.741792][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 304.746995][ C1] ? __pfx_kthread+0x10/0x10 [ 304.751593][ C1] ret_from_fork+0x514/0xb70 [ 304.756199][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 304.761321][ C1] ? __switch_to+0xc89/0x1420 [ 304.766015][ C1] ? __pfx_kthread+0x10/0x10 [ 304.770616][ C1] ret_from_fork_asm+0x1a/0x30 [ 304.775422][ C1] [ 304.778440][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 304.784772][ C1] Sending NMI from CPU 1 to CPUs 0: [ 304.790006][ C0] NMI backtrace for cpu 0 [ 304.790031][ C0] CPU: 0 UID: 0 PID: 7737 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 304.790052][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.790064][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 304.790098][ C0] RIP: 0010:__rcu_read_lock+0x5/0x60 [ 304.790134][ C0] Code: ff 4c 89 ff e8 7c c5 8a 00 e9 46 fd ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 <65> 48 8b 1d 9b 0a e8 11 48 81 c3 c4 04 00 00 48 89 d8 48 c1 e8 03 [ 304.790149][ C0] RSP: 0018:ffffc90000006e90 EFLAGS: 00000202 [ 304.790164][ C0] RAX: 0000000000000002 RBX: ffffffff81b28a49 RCX: ffffc90000006f00 [ 304.790178][ C0] RDX: dffffc0000000000 RSI: ffffffff81b28a49 RDI: ffffc90000006f80 [ 304.790191][ C0] RBP: 1ffff92000000df0 R08: ffffc90000007010 R09: 0000000000000000 [ 304.790204][ C0] R10: ffffc90000006f98 R11: ffffffff81b28ab0 R12: dffffc0000000000 [ 304.790218][ C0] R13: ffffc90000006fe0 R14: ffffc90000006f48 R15: 1ffff92000000de9 [ 304.790232][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 304.790247][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.790259][ C0] CR2: 0000560fdc0f56e0 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 304.790275][ C0] Call Trace: [ 304.790282][ C0] [ 304.790288][ C0] ? stack_trace_save+0xa9/0x100 [ 304.790305][ C0] unwind_next_frame+0x88/0x2550 [ 304.790331][ C0] ? __unwind_start+0x514/0x660 [ 304.790353][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 304.790379][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.790397][ C0] arch_stack_walk+0x11b/0x150 [ 304.790421][ C0] ? stack_trace_save+0xa9/0x100 [ 304.790439][ C0] ? skb_clone+0x212/0x3a0 [ 304.790465][ C0] stack_trace_save+0xa9/0x100 [ 304.790481][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 304.790496][ C0] ? __lock_acquire+0x747/0x2de0 [ 304.790518][ C0] ? __lock_acquire+0x747/0x2de0 [ 304.790536][ C0] kasan_save_track+0x3e/0x80 [ 304.790584][ C0] __kasan_slab_alloc+0x6c/0x80 [ 304.790604][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 304.790631][ C0] ? skb_clone+0x212/0x3a0 [ 304.790655][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 304.790681][ C0] ? skb_clone+0x212/0x3a0 [ 304.790709][ C0] skb_clone+0x212/0x3a0 [ 304.790735][ C0] br_flood+0x3c0/0x8d0 [ 304.790766][ C0] br_handle_frame_finish+0x1119/0x1950 [ 304.790799][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 304.790826][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 304.790847][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 304.790867][ C0] ? nf_hook_slow+0x176/0x220 [ 304.790888][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 304.790914][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 304.790940][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 304.790971][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 304.790998][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 304.791025][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 304.791052][ C0] ? lock_acquire+0x115/0x350 [ 304.791073][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 304.791101][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 304.791137][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 304.791166][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 304.791193][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 304.791223][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 304.791251][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 304.791281][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 304.791307][ C0] br_handle_frame+0x1329/0x1600 [ 304.791339][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 304.791366][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 304.791392][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 304.791409][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 304.791434][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 304.791459][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 304.791489][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 304.791507][ C0] ? ip6_rcv_finish+0x265/0x280 [ 304.791532][ C0] ? NF_HOOK+0x336/0x3c0 [ 304.791565][ C0] ? process_backlog+0x3de/0x18b0 [ 304.791584][ C0] ? process_backlog+0x3de/0x18b0 [ 304.791606][ C0] process_backlog+0x727/0x18b0 [ 304.791629][ C0] ? process_backlog+0x3de/0x18b0 [ 304.791656][ C0] __napi_poll+0xaa/0x330 [ 304.791676][ C0] net_rx_action+0x61d/0xf50 [ 304.791703][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 304.791722][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 304.791762][ C0] handle_softirqs+0x226/0x860 [ 304.791787][ C0] ? do_softirq+0x77/0xd0 [ 304.791812][ C0] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 304.791839][ C0] do_softirq+0x77/0xd0 [ 304.791860][ C0] [ 304.791866][ C0] [ 304.791873][ C0] __local_bh_enable_ip+0x100/0x140 [ 304.791896][ C0] nsim_dev_trap_report_work+0x7a4/0xb40 [ 304.791930][ C0] ? process_scheduled_works+0x97a/0x1630 [ 304.791954][ C0] process_scheduled_works+0xc3d/0x1630 [ 304.791994][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 304.792022][ C0] ? assign_work+0x3cf/0x5d0 [ 304.792047][ C0] worker_thread+0xa47/0xfb0 [ 304.792086][ C0] kthread+0x38b/0x480 [ 304.792103][ C0] ? __pfx_worker_thread+0x10/0x10 [ 304.792130][ C0] ? __pfx_kthread+0x10/0x10 [ 304.792148][ C0] ret_from_fork+0x514/0xb70 [ 304.792166][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 304.792183][ C0] ? __switch_to+0xc89/0x1420 [ 304.792209][ C0] ? __pfx_kthread+0x10/0x10 [ 304.792227][ C0] ret_from_fork_asm+0x1a/0x30 [ 304.792263][ C0] [ 305.853830][ C1] net_ratelimit: 18422 callbacks suppressed [ 305.853851][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)