last executing test programs: 3m31.814462526s ago: executing program 3 (id=4927): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 3m31.663631407s ago: executing program 3 (id=4930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10001}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000340)={0x1, {{0xa, 0x4e23, 0x0, @mcast2, 0x1b59fe36}}, {{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x108) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r6 = socket(0xa, 0x3, 0x1) getsockopt(r6, 0xff, 0x0, 0x0, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="0d83f30799f1", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf254b000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48081}, 0x80) 3m31.389558184s ago: executing program 3 (id=4936): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@rand_addr=0x64010102, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0]}}, @proto={0x5}, @mark={0xc}]}, 0x27c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000460a0010000000000000000000000042b219", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70600002e5d39b438c3d6da5200003d300c61689c6f9aa3aea84af57300bf0900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000000000000b700"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) connect$packet(r5, &(0x7f00000000c0)={0x11, 0xf4, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) 3m30.257015867s ago: executing program 3 (id=4958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) bind$can_raw(r2, &(0x7f0000000000), 0x10) (async, rerun: 64) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}], 0x10) (async, rerun: 64) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000000780006"], 0x10c}}, 0x0) (async, rerun: 32) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f0000000440)=0xe, 0x80000) (rerun: 32) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0xffff}, {}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0xac}}, 0x0) 3m30.105904878s ago: executing program 3 (id=4961): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f0000000780)={0x3, "4cff3f"}, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 3m30.086152322s ago: executing program 3 (id=4962): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xf, 0x4, 0x1, 0x27, 0x3c, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0x18, 0x2, [{0x1, 0x12, "bafbae155ec3ffffffffffffffff0000"}]}, @generic={0x7, 0x4, "9077"}]}}}}}) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) shutdown(r2, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x4000000, 0x5, 0xb, 0x6, 0x969b, [0xd3, 0x6]}}) accept4$tipc(r3, &(0x7f0000000240)=@name, &(0x7f0000000300)=0x10, 0x800) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) sendto$inet6(r5, &(0x7f0000000800)="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"/1450, 0x5aa, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @mcast2}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r7, 0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/151, 0x97}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_type(r8, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) openat$cgroup_ro(r8, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) 3m15.02794246s ago: executing program 32 (id=4962): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xf, 0x4, 0x1, 0x27, 0x3c, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0x18, 0x2, [{0x1, 0x12, "bafbae155ec3ffffffffffffffff0000"}]}, @generic={0x7, 0x4, "9077"}]}}}}}) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) shutdown(r2, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x4000000, 0x5, 0xb, 0x6, 0x969b, [0xd3, 0x6]}}) accept4$tipc(r3, &(0x7f0000000240)=@name, &(0x7f0000000300)=0x10, 0x800) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) sendto$inet6(r5, &(0x7f0000000800)="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"/1450, 0x5aa, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @mcast2}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r7, 0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/151, 0x97}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_type(r8, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) openat$cgroup_ro(r8, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) 37.235731921s ago: executing program 2 (id=7410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r3 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x8c, r2, 0x1, 0x0, 0xfff7fffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x8c}}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x6}], 0x62) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x9, 0x80, 0x1e, 0x0, {{0x28, 0x4, 0x1, 0x22, 0xa0, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xa7, 0x3, 0x0, [{@private=0xa010102, 0x6}, {@private=0xa010102, 0x5}, {@broadcast, 0xf}, {@multicast1}, {@empty, 0x3}]}, @end, @rr={0x7, 0x1f, 0xaa, [@remote, @remote, @remote, @local, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x5, 0xf, "3cca20f9809f9d9cd19769de32"}, {0x7, 0x6, "c3ebb596"}, {0x7, 0x12, "9a0fd4870d6f0b691ca8de7cb8a96b19"}, {0x6, 0xa, "70b958e0c75f39ab"}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r5, 0x25, 0xc, @val=@kprobe_multi=@syms={0x1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00'], 0x0, 0xfffffffffffffff2}}, 0x30) 37.082890613s ago: executing program 2 (id=7415): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 36.966562832s ago: executing program 5 (id=7418): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000002c0)=0x5f53, 0x4) bind$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000010003c3bfa300000000000007030000f0ffffff7a0af0fff8ffffff71a4f0ff00000000650a0200000000ff2d400500000000004400000001ede4ff6b03000000000000cc440000000000007a0a00fe00ffffffdb03000001000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f504e7c87fae1d56aa9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8cde6aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75cafd2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeeaaed7b35e3460bd571e09196ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb0613684e128cb06ded90b9a341304c2890cda1f96b95add69279063eaa76c336adad0b80b4be2511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999a556b3df4dd146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa83a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d0f9dd53478dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d78d6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ba0d48fceb72b30bbee0ab3e6b12ce379b4cda2500108052aeb9bd03a9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e1942992048df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c3c4e853800f56124eec7505744b29c91f4a974242aabfc8adbadc9ca279b9301ff6ac927e55b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc24f30daca3c9b184e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800000000000000000000000000000064563875944a308cfd7bccc4bdc6ca5107b7affa9962afe1b3c64ad26ebfde3bb82020147e20db88bd0358769e9b407f74795e153e59d16b1675ae8cde3ca8ee3eea9eb93cea89d52275f8e9bf4e00316c80353bd348938c446fa3d59c62db01c6d30bc9f6b3862c949c7fce4db56e58349c9fa363c662c34d461a58bfebd2a3cdb17906b0f9dafd31a80533e4aa064e4b8e891fcc82fbffe0f55220862750edd1a317338d6b1fad87bc6bcd0cd22c3172bb64c6f893c99e445fa387097e5359b644477c23a72eeb00e34c84d7a8bb462a10fb2d981f90b9c74a06d8470fff093e699a7c3b09d81118dafc74e7603d8c8e5a6d14c444663499eff6bd25f3c356dc31fa93f7053d09fa45eaebfaa7da6ba8ac5bc4b6600a91e51927679f255500e2cfd2f0c592e13713271d74105aa1202d7acbbd10cc2b9d31c23f0cdf710e277ab78aab43da554167f56362187667e61e0f6a4a00a0d247f241146c64bc266f91fe0ed2358e03a415a52304aea86c3527c87e94a15578ea5230222c5c20220b4fd2e5506699820e3cc8de3faeb163f2a65009bfee4d53fe5e4723377cba9b52ab000000000062e78c14369337b4265a1989a73bd48e92322aeeb873074015f2f8aed93d6567878d6f82b97eba5fa5b9faed3c32487a216a9feb0edf3ff95875862290d34525696ce22a8be2d7ab29c2a2fe4f62f1ff70e28d44c5306c84596285689bca61934a1b89daf6fc2226cf8b004a014eca27d386343b698d9ad5d83b1c274c693875a5c707c2fbc81d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 36.953092212s ago: executing program 2 (id=7419): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x9) listen(r1, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000f287a0060f0608004514ff310000000000019078ac1e0301ac1414aa0384908a1200183f250000000001000000010000e0000001ac14143f"], 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r2) 36.789376256s ago: executing program 5 (id=7421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 64) connect$inet6(r2, &(0x7f0000000000)={0xa, 0xce23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x0, 0x440, 0xffffffff, 0x0, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x29}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 36.662128854s ago: executing program 5 (id=7424): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd55, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r0, 0x18d}], 0x1, 0x8001) (async) close(r0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfffffc3f) 36.521520881s ago: executing program 5 (id=7427): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r2, 0xfffffffffffffffd, {0x0, 0xf0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) connect$can_j1939(r1, &(0x7f00000002c0)={0x1d, r2, 0x800003, {0x2, 0xf0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 36.264530613s ago: executing program 5 (id=7430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0x0, 0x33}}, 0x28}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x4e22, @multicast2}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x14, 0x8980}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x40000) 36.258257808s ago: executing program 1 (id=7431): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000180)=0x8) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) 36.181115818s ago: executing program 2 (id=7432): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_TIOCINQ(r0, 0x8905, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4a25, 0x200000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffd}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 36.107018053s ago: executing program 2 (id=7434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a010100ddff0000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000808000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000040900010073797a30"], 0x108}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="720ac4ff0100000071062300000016c7c3062ebf73800000914c9d299a6b1188f199266193087eb4f451c9ce932927675287586ea206001492897be8ae7423e820daaec89efab04f054c7bdd4f0a2144fcb4845616153ca78498af574274529ed838ee2435416d4c352eead22b89124ff41d1d4309a6f59c18eed3c8de4b8daa3ccda73c172e3ea34e4a1aa748390a4dbc80fc861cd781356c6f0890748326f2e8ca3a74fb8925ec7dd6460df5cd2d72c5856efe558e5f7e888d42064adb43e96c6bb0095a2bca4167595f7e6e94cd5c791b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='N\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140008000000000000000000000000000000000005001400ff000000"], 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000", @ANYRES32=r5], &(0x7f0000000340)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = socket$inet(0x2, 0x2, 0x5c91) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000400)={0x0, @multicast2, 0x4e23, 0x0, 'lc\x00', 0x30, 0x40, 0x56}, 0x2c) 35.995113631s ago: executing program 2 (id=7437): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000540)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0xc) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)=0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) r9 = socket$inet(0x2, 0x800, 0x1ff) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f00), 0x2140, 0x0) r11 = socket$key(0xf, 0x3, 0x2) r12 = socket$inet(0x2, 0x1, 0x4) r13 = socket$can_raw(0x1d, 0x3, 0x1) r14 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) r16 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)=0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r19}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) sendmsg$netlink(r0, &(0x7f00000010c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)=[{&(0x7f0000000340)={0x1d8, 0x17, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@generic="1c08c313a18bdbfd6da5077263d90e3a768a2d156ee286404661693936cd2e785c6c31778363174ec0ee057e34661e0d99bf19ed91b35b09bc2cf2387670344f0dcb62a727ad3440076c2104c84dfd1d98c183bb061684a4d78d3b46525bb5f4681485f8817b006b35354e8c13dfadb4e687f9c3619b7f2984348fba74824289298a5f5ac4d788337676c7cb1a7840e35acf1e26d8fdf049936d8bdb59e84622e4e2dd9b5483f1c9a5243e84eb04f2b746d4f50db0d276faa937f281b31d0bfef756434fa773726649a0a0c2cf60bde35d506e27ecccc9cba1acd96e62b93c5ad688f1876c830c49", @generic="4f79a38c75f1a871075c7bbacd540f6ab01abe31407d941904e10051b44ae0834aae9a7640b3f85c89a7ef20c53b0a000c8deeb6bf026914240f71859bbce49e244e832198c4b14102f9e8471704f0995902f73943c2609c8cef7b73d90a7d889b0057c3d572da5e69e5aaf89912786f7baab71fa04fb28355312ab0c917b7bdf9d8fdf0cee01a5e80a7c3afe0ab6206b625db0aa6a185c19eaeceae0dd237658e9904cfbe568cd61ccafd78d4396581685541e7a68336284e6ee8cfb6e6f7debe7d2375879781b386011fdd51be733cf10251cf6e9421af962a2690d5"]}, 0x1d8}, {&(0x7f0000000600)={0x7a4, 0x37, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x20f, 0xa7, 0x0, 0x1, [@generic="7a27371f471ab6e18e5b0284193875a991c114db8fe7b0c907c6249f3412090ef05e4e9db523f1c670af856b7a3e573c04bc676469a516a2e57aa40212ed7f1941ea324b44c378d3bcc5911565d685560934c24f772a0f870d8f6811114fa1db9140a09c24e4b83fe0dd35eefff4c1a7653e19ead355b8f1962b7cc8f238b86af72b80f0f4c607764d3b1291e1e3be1170cfb0e03a1c44e8a365ba7353510ad76b3ac570dbfece53dc89b933fdcafe3e80415b6a49b6525f806706f12f65f38da644223d301a3218de9c1d7a3401028a12870c004fd1", @typed={0x8, 0x112, 0x0, 0x0, @ipv4=@remote}, @generic="761c35262c2b517fd2876d84eccad1d4ff6e427b6dd1c1c92fbcda68f3faebcaf7342c5a9e115ac3255c7c9f65bb0a4b0c6d2763500f35ecaf6f52c8b3968eadf3afc15e0a7347a884705791ff106d15e0d524c11dad57470723deb096d5c722e170796d6c2c6f96fac9dd7ec881c4e74feec565369871e19052ab189e7369365b5004a1a96cf311a1552672c3eb4abe5bf8f2d83abf96ef1587e36f3f2677c10b78f40040a0d763bd5327dbcaa53e78e89f3afe7c148aca2ad615606809e3315587aa03014763cec4e3e2e9c2607032c1a3c6b7e72219a7c29850f8b0d61401d6f3ae32eb5c225a15bca45d011b162e0b00f9f8", @typed={0x8, 0x20, 0x0, 0x0, @uid=r1}, @generic="4c6f1dbc43c33473c1fc49f64ff7a7c1d306551f13bca6f178a4bb3fa998e5a3d1", @typed={0xc, 0x83, 0x0, 0x0, @u64=0x2e}, @nested={0x4, 0x6e}]}, @generic="25ca21b98f7c91ebb2bd9b9f939557495acff7fd8d24ceaae9ecca8e028bfd427786d96a5931ef74ac61016c74f0149e0f9c7bc9de49c8ea50d1e78a2214c0f32e5a1a0063162841de7ffd2092b37510780e3c84cca87843b4fded2c19444ad4a8cb8d64f1f39903528d577cff3d59270e69b74ba465cc14e2eb1020340ad8afe034f2b962171215139704aa56248385e64529", @nested={0x2c2, 0x33, 0x0, 0x1, [@generic="842ccdf36c1f2afbdd94dac50ce7254ef6e21da4583b0b8adc81e10921b2e656c8df6a137fbb62af0a7d9db84cf2e6bc4a1c8a96a0be2cf5f913f58d78e81d3d500b72723c0ef76ad42033373e29c50e77ccaa261e1bea2843261505b3ff27f02a286e63d1718f2d2519e3ab918f00dfd219403eefb5a9bd3d3190220d1881221a2fcf66400991a06bb21b87686b7ef82e417d0e97b4d000cf6f875de81456d0a85ba8e8f0429ad71f3c8057ddeac75682db4ec9c1c2219b8887036d7824b2867d8eef11a98dc6259bfc05100acada209ccbacfedd5e5fc672e88820597e06dbebf6", @generic="0a9b6485c47b63cc4ca94b19179043be04", @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x94}, @generic="e8b1ca8d6ecabcdf57b82014a6acb81f811af039f934f2be83bdaa12d942819a35b4472d7dde2e5d58a54f0ea1d68dde7099f45251e166206ff9548d2e36efdb9c2be024a6d7aa201716874b3bd7f83b298dea165504c40b0d29bac005fa9bcddefe1e9c15dc75b1b1b2f2b48c2937e4e01ed6412eeb7557b9ae4de0154a002a39b231703c82fddb45c3f5134910fe78d8efae8f057723ea395581117ab905c7997eec20a394dd4553add35923269702cf6d0d56758c7c357738af11668a079b080d51a67536062fccd30b277455fc116e1c167767bf97efd9f4ec366d4f9d778c40d7a63317f35ae6469ffe", @typed={0x8, 0xe0, 0x0, 0x0, @pid=r2}, @generic="5ce7a929398170b25829bd516c450fc03344ba6f22ab6b9b0c24c7e0c2f730fb252cb39709d098d041168399a51dbb9b8d56ef80b059fe8c67e9f1fe6548531d2020454e854a6ad7e868f342d701eb21c3414a30e62ba1f2082c45f9aa227f55c98069847f6ebd34375dbe468db39b493a26ac7d33dda7ac06a91aa220011d6ee2b4a027844f24826e134c892af0472afd1a63a018c56e061c294ec4fe9fc91ad6fd68499579677b9bf5264a95c878500561e28492ef10ea05e94634af84f1"]}, @nested={0x22b, 0xb2, 0x0, 0x1, [@typed={0x4, 0xd5, 0x0, 0x0, @binary}, @typed={0x53, 0x83, 0x0, 0x0, @binary="b0da8ab11328b7c42c883fe3c3b2f4fcd8b57b82ce260273bdefbfcd56ef6c1ed3fc9102596dbd3a0d107f9e088b08e587889948e29be04a17cf7221fbb6ecebcb7abd10f15f8788932c6c434912b5"}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x5}, @generic="3b63944b24967cd9ad6358662dbbe4153c183a96", @generic="cb78908efe2a889e4cb698b5e4657ac513b84ffe7227073d18cf0d7adf587c41fbc8c6185509d5d92db64edc37f812baf570c0c41ac1967da3b1b0a402282556d16cd0d5c583b82e4dba42f4218aed8b8adf70dbc17356be3427819590f32993e61465e2d7933545e2c4772f212b14ce5b33b6279b33873415f7b9ac2d182c254b717815215f137ef6", @generic="ad4a170016cecae8433aea300cc38ee2bc8cc5062c036647d2422c634edcf24d99768c5ccc23cb7ce9544b344013bff7c5d6161dd1457ec10f15535ba56f56f1dd5c86ec8898627584dba56eaa465eae25ff206d43ea7d29a8c958e26a4fa83a447c9b3bee09996b9d4331b8ddcc6466daf0a3033c35940d81a0af2b976e66d68c02253a4affbd4afd20d5f3", @nested={0x4, 0x161}, @generic="7cf8a00d59e69013847637dd891fb5980562d465949f3fdb9c4165d8159005139f0c01558c19a4e7da29117894ae1a05abaf592155e788edcbac6ce05460d95f41e213f26c853fdb1da7c4dc213b11600a71dcf1e86e92d1412c323d3de7564f2082abb6840a06355809744f498bdcb63a25828512093a51abeae01aedcb3231d8b451aba7b8b42d52543e56326548cc64323d4e53c5"]}]}, 0x7a4}], 0x2, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, r6}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x24, 0x1, 0x1, [r10, r11, r12, r13, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r14, 0xffffffffffffffff, r15, 0xffffffffffffffff, r16]}}, @cred={{0x1c, 0x1, 0x2, {r17, r19, r20}}}], 0xc0, 0x4040801}, 0x40805) r21 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r22 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r21, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r22, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.941030915s ago: executing program 1 (id=7438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xcf}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000002500010127bd7000fcdbdf251a000089d100670071d9504bc3444d9a0164d200e3ca1cccfa6ab8b0e1bb0839c1013a3390e8339df124d798588c4ed2b102ab00ae23b159d44164bec6576466a3402351c7ccca1d216a6b1891e9ccf108b92bc2a0493f4d17269943a3512b5373e73eeec33f40a89f4c2d8b216358827fdc7415b170825998c3be92450ce9620d5b69a3f5226f52d808aedc8775819c9343867af4"], 0x18}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000500050002000000050001000600000011000300686173683a6e65742c6e657400"/96], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a9819caa886831c015b83b3e967ad5847caace1ece83011ba87f3d27a8aa36f109000000c4177c4fd4a2ced8bef0bf3587984c1b5ad69c40c3ea7073e202681918009690ffea21a7df5b6fc5287c1e86f6a61b44e15169c9704165847a7e3228dc2351359b9cb70004c618c3d9139a18bf95a9d3d7a0c4c7be9cfc228ab1695f34fdd99a7d3034ee2a00ca0efee3e917d1e8450b5d6f46c8b4f7920c049bbdb7c351d1f20000000000000000d1", @ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x44044) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9e8}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaa}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x44804) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r5) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b80)={0x380, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf28}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x0, 0x1, 0x1ecc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x14dd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb9c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa727}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "09b69edbea925f0e3e3390c4c13fad8d17ad0d8ecf972470a9013b42a4ba"}}, @TIPC_NLA_NODE_ID={0xaa, 0x3, "b5d9ce057b9144897996dc4c972eb846a43577d00d7509eaeb163037bb62af79da777492e2d7c603bd676c09f2063efe8e4d5f56ac5abf025e590495614e0d35280614cf2cbb5d251034022b061f91cff9173fa9d53c78c9c943e8ce5e2d1607d708bfe98a052599b917359608bce49338cefe2e858369010e36d1db378a8faad860bed909430b4cdea79dfa345f0dc9e9dc9e1a6882b57f2d6275b93e67bee5939a956d66b1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xffffffffffffff03, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x380}}, 0x40) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r12, @ANYBLOB="200008000a000100aaaaaaaaaabb000005000c000400000008000f0001"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000100000079104000000000009500000000000000ce83298b79f1e8e8934df6c576cc1fb606c17cf9a2a0a220fa704fa8881c032774055e6500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a6bf5}, 0x440a4) 35.872807774s ago: executing program 0 (id=7440): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x26, 0xc, "73ff16cbc5a361ee84a2a0a26f8a41171801f4fb5b31b0d72a75478446824026eba7"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x67, 0xc, "00ba5a7910d139952156998283e877794a9d3094827a87ca4264577dfd4bc58374992cd353b02258e0252e0478c676baa90486dfb467caa146dc5dd0fc6c56e12434606b53a8391e812602e1dea9f9e594ef19aa7316c40a71191d85471c43628a05e1"}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10}}, 0x1b8}}, 0x0) (rerun: 32) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000180)={0x1d, r7}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) (async, rerun: 32) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 32) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) 35.841875919s ago: executing program 0 (id=7441): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xf}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 35.746951614s ago: executing program 0 (id=7442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x4013) 35.689120041s ago: executing program 4 (id=7443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x80}}, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) 35.688214974s ago: executing program 0 (id=7444): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000001480), 0x1) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) (async) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000014c0), 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x3c}}, 0x4000080) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x3c}}, 0x4000080) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 35.634767472s ago: executing program 1 (id=7445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048800}, 0x20004040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff7f, 0x911, 0x5d7, 0x81, 0x5, 0x3bd1, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe6, 0x81, 0x2, 0x7, 0x40, 0x1, 0x5, 0xff]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x18, 0x18]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x2}, {0x7}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0x6}, {0x5, 0x8}, {0x5}, {0x4, 0x8}, {0x3}, {0x4, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x5}, {0x2, 0x5}, {0x4, 0x7}, {0x0, 0x2}, {0x5, 0x3}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x5, 0x1555, 0x2, 0x16cf, 0x7, 0x7, 0x2]}}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) sendmsg$nl_route(r0, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048800}, 0x20004040) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff7f, 0x911, 0x5d7, 0x81, 0x5, 0x3bd1, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe6, 0x81, 0x2, 0x7, 0x40, 0x1, 0x5, 0xff]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x18, 0x18]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x2}, {0x7}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0x6}, {0x5, 0x8}, {0x5}, {0x4, 0x8}, {0x3}, {0x4, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x5}, {0x2, 0x5}, {0x4, 0x7}, {0x0, 0x2}, {0x5, 0x3}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x5, 0x1555, 0x2, 0x16cf, 0x7, 0x7, 0x2]}}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) (async) 35.627213245s ago: executing program 4 (id=7446): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001300)={'syztnl0\x00', &(0x7f0000001280)={'syztnl0\x00', 0x0, 0x4, 0x40, 0xfd, 0x250, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x8000, 0x10, 0x1ff}}) sendto$packet(r0, &(0x7f0000000280)="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", 0x1000, 0x40000, &(0x7f0000001340)={0x11, 0x1a, r1, 0x1, 0x76, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 35.521037598s ago: executing program 0 (id=7447): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = socket(0x10, 0x2, 0xf) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000500)="39c394f705916c4516999da286dd", 0xe, 0x4044855, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) 35.520577009s ago: executing program 4 (id=7448): socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='GPL\x00'}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 35.490867514s ago: executing program 1 (id=7449): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000003280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000007"], 0x18}}], 0x1, 0xf00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 35.363387123s ago: executing program 1 (id=7450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=0x0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="0a000100ff"], 0x88}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) 35.292786016s ago: executing program 5 (id=7451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x2a, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x2, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r4, 0x101, 0xfff, 0xf, 0x2, 0x3d4}, 0x14) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x3f, 0x400, 0x0, 0x10000000, {0x8}}, 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) getsockname$packet(r2, 0x0, 0x0) unshare(0x28000400) r7 = socket$kcm(0x21, 0x2, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r11, 0x107, 0xa, 0x0, &(0x7f0000000140)) connect$l2tp6(r9, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x68, {0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @remote}, 0x200}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="00000000000000000000000024e60040000008c9a492eebd265b45014908663b73a925efeeeb37bf69b48d38f57d5607f3ef9e08c3cd6a3a7491088a5318dd641b1e20a580ad6562a31490415d5c3eb7fab10914598c1ec869cdd225fa74cd37222ac3b6c6be30b70d628c9fd82353b2206d97d5ef0771c154347a35808936", 0x7f}, {0x0}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRES64=r7], 0x10b8}, 0x0) 34.948601768s ago: executing program 4 (id=7452): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 34.853535539s ago: executing program 4 (id=7453): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r3) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000080)="5ef952ee05f6303df43c13758d84d7f131ab9d9cd289f68183be7ed59f96de78a403f2e4", 0x24}, {&(0x7f0000000100)="12c3cf13ad6b8016c24a6cd25a9dc1380007e55248fede93f861693a681abf69fd05925f5505ae7eca3efb930bff7ca56863d1773345c4cd536c805bec17494fa587285e532ba295d7507ab477179606b9b672f3e3fc046ec0bd5b26ea947d4a2a9ebbd398295fd107bb2eabc2e8b0926292468d1f1aab3ebfba32930cba7009ac2b2b3df7b2df0f642484140b030ceb11731152ce8dcdfad7fcb789a2b5ae8081b1bf16152920e74fab38d8c56a6416b810d3efcc1ca13ee5", 0xb9}, {&(0x7f0000000280)="5cdfca463865698b15c573a741f182a18ea4af09a6a58fcafa15cc22ad3d49aff1a6ea0a4733129d4acd4e13af0e0473e99c9fab193116602e8ecf1b410b69d3320175a99eb621cd3813ce1eb65f5471c30da1d6cea522e8be64307d510c28cf132507680fa0c9509c2f0d259f1b68f9c6c24c0f178acbf132fd70908bcc", 0x7e}, {&(0x7f0000000300)="21ac56112c775ddaa9f8cfe34b567dba4e0ecd8c9097e0fefb3a1e98e4c375bae35debca9dfc492c7655c779e337ef1f9f6c9c62dbc365b7c51f7d27228a8e46460f2c048132fd323e9dff2917677bef64458e5bd844917778c47f23bffb118a463096e1106f9f13a87593dddbd16942127d1ff4c567e368f02ed221bb3785aa7edc0f77d5f32b7c89f43693e70ae4cdf93c32cdc74a6c6e376023827bbd45529983d18cabb1609f4dfe07a9dc02ac871d5a008b4f93af05ae30f08ae3", 0xbd}], 0x4) (async) sendmmsg(r4, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)="1f", 0x1}], 0x1}}], 0x1, 0x4000045) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x40004) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006800), 0x0, 0x4048800) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000b000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 34.720793652s ago: executing program 4 (id=7454): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000020000d2a62a0de8a28eb3"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000ce23ffffffffffffff61107b00000000009500090000000a1e8a94d1d53edd1f00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) bind$qrtr(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e97e264882dd2f0500000819fedbdf250a14a007fd00fd0b0021000000ff0a08000400", @ANYRES16=r0, @ANYBLOB="0500140002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x400c0c1) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x10, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0x5, 0x9, 0x1, 0x2ce5, 0x124, 0x1}}, {0x6, 0x2, [0x44]}}]}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x4, 0x500, 0x6, 0x180107}) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)=ANY=[@ANYBLOB="000000002a00010000000000fcdbdf250100002c080001002926ac00"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x1, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 34.33360511s ago: executing program 0 (id=7455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r1, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x958}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x60400, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20) read(r8, &(0x7f00000000c0)=""/23, 0x17) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000080)) 32.786066066s ago: executing program 1 (id=7456): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=""/7, &(0x7f0000000080)=0x7) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0xffffffff, 0x7ffe}, 0xc) getpeername$qrtr(r1, 0x0, &(0x7f0000000700)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000400008510000006"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000040)=0x84) 0s ago: executing program 33 (id=7437): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000540)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0xc) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)=0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) r9 = socket$inet(0x2, 0x800, 0x1ff) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f00), 0x2140, 0x0) r11 = socket$key(0xf, 0x3, 0x2) r12 = socket$inet(0x2, 0x1, 0x4) r13 = socket$can_raw(0x1d, 0x3, 0x1) r14 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) r16 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)=0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r19}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) sendmsg$netlink(r0, &(0x7f00000010c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)=[{&(0x7f0000000340)={0x1d8, 0x17, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@generic="1c08c313a18bdbfd6da5077263d90e3a768a2d156ee286404661693936cd2e785c6c31778363174ec0ee057e34661e0d99bf19ed91b35b09bc2cf2387670344f0dcb62a727ad3440076c2104c84dfd1d98c183bb061684a4d78d3b46525bb5f4681485f8817b006b35354e8c13dfadb4e687f9c3619b7f2984348fba74824289298a5f5ac4d788337676c7cb1a7840e35acf1e26d8fdf049936d8bdb59e84622e4e2dd9b5483f1c9a5243e84eb04f2b746d4f50db0d276faa937f281b31d0bfef756434fa773726649a0a0c2cf60bde35d506e27ecccc9cba1acd96e62b93c5ad688f1876c830c49", @generic="4f79a38c75f1a871075c7bbacd540f6ab01abe31407d941904e10051b44ae0834aae9a7640b3f85c89a7ef20c53b0a000c8deeb6bf026914240f71859bbce49e244e832198c4b14102f9e8471704f0995902f73943c2609c8cef7b73d90a7d889b0057c3d572da5e69e5aaf89912786f7baab71fa04fb28355312ab0c917b7bdf9d8fdf0cee01a5e80a7c3afe0ab6206b625db0aa6a185c19eaeceae0dd237658e9904cfbe568cd61ccafd78d4396581685541e7a68336284e6ee8cfb6e6f7debe7d2375879781b386011fdd51be733cf10251cf6e9421af962a2690d5"]}, 0x1d8}, {&(0x7f0000000600)={0x7a4, 0x37, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x20f, 0xa7, 0x0, 0x1, [@generic="7a27371f471ab6e18e5b0284193875a991c114db8fe7b0c907c6249f3412090ef05e4e9db523f1c670af856b7a3e573c04bc676469a516a2e57aa40212ed7f1941ea324b44c378d3bcc5911565d685560934c24f772a0f870d8f6811114fa1db9140a09c24e4b83fe0dd35eefff4c1a7653e19ead355b8f1962b7cc8f238b86af72b80f0f4c607764d3b1291e1e3be1170cfb0e03a1c44e8a365ba7353510ad76b3ac570dbfece53dc89b933fdcafe3e80415b6a49b6525f806706f12f65f38da644223d301a3218de9c1d7a3401028a12870c004fd1", @typed={0x8, 0x112, 0x0, 0x0, @ipv4=@remote}, @generic="761c35262c2b517fd2876d84eccad1d4ff6e427b6dd1c1c92fbcda68f3faebcaf7342c5a9e115ac3255c7c9f65bb0a4b0c6d2763500f35ecaf6f52c8b3968eadf3afc15e0a7347a884705791ff106d15e0d524c11dad57470723deb096d5c722e170796d6c2c6f96fac9dd7ec881c4e74feec565369871e19052ab189e7369365b5004a1a96cf311a1552672c3eb4abe5bf8f2d83abf96ef1587e36f3f2677c10b78f40040a0d763bd5327dbcaa53e78e89f3afe7c148aca2ad615606809e3315587aa03014763cec4e3e2e9c2607032c1a3c6b7e72219a7c29850f8b0d61401d6f3ae32eb5c225a15bca45d011b162e0b00f9f8", @typed={0x8, 0x20, 0x0, 0x0, @uid=r1}, @generic="4c6f1dbc43c33473c1fc49f64ff7a7c1d306551f13bca6f178a4bb3fa998e5a3d1", @typed={0xc, 0x83, 0x0, 0x0, @u64=0x2e}, @nested={0x4, 0x6e}]}, @generic="25ca21b98f7c91ebb2bd9b9f939557495acff7fd8d24ceaae9ecca8e028bfd427786d96a5931ef74ac61016c74f0149e0f9c7bc9de49c8ea50d1e78a2214c0f32e5a1a0063162841de7ffd2092b37510780e3c84cca87843b4fded2c19444ad4a8cb8d64f1f39903528d577cff3d59270e69b74ba465cc14e2eb1020340ad8afe034f2b962171215139704aa56248385e64529", @nested={0x2c2, 0x33, 0x0, 0x1, [@generic="842ccdf36c1f2afbdd94dac50ce7254ef6e21da4583b0b8adc81e10921b2e656c8df6a137fbb62af0a7d9db84cf2e6bc4a1c8a96a0be2cf5f913f58d78e81d3d500b72723c0ef76ad42033373e29c50e77ccaa261e1bea2843261505b3ff27f02a286e63d1718f2d2519e3ab918f00dfd219403eefb5a9bd3d3190220d1881221a2fcf66400991a06bb21b87686b7ef82e417d0e97b4d000cf6f875de81456d0a85ba8e8f0429ad71f3c8057ddeac75682db4ec9c1c2219b8887036d7824b2867d8eef11a98dc6259bfc05100acada209ccbacfedd5e5fc672e88820597e06dbebf6", @generic="0a9b6485c47b63cc4ca94b19179043be04", @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x94}, @generic="e8b1ca8d6ecabcdf57b82014a6acb81f811af039f934f2be83bdaa12d942819a35b4472d7dde2e5d58a54f0ea1d68dde7099f45251e166206ff9548d2e36efdb9c2be024a6d7aa201716874b3bd7f83b298dea165504c40b0d29bac005fa9bcddefe1e9c15dc75b1b1b2f2b48c2937e4e01ed6412eeb7557b9ae4de0154a002a39b231703c82fddb45c3f5134910fe78d8efae8f057723ea395581117ab905c7997eec20a394dd4553add35923269702cf6d0d56758c7c357738af11668a079b080d51a67536062fccd30b277455fc116e1c167767bf97efd9f4ec366d4f9d778c40d7a63317f35ae6469ffe", @typed={0x8, 0xe0, 0x0, 0x0, @pid=r2}, @generic="5ce7a929398170b25829bd516c450fc03344ba6f22ab6b9b0c24c7e0c2f730fb252cb39709d098d041168399a51dbb9b8d56ef80b059fe8c67e9f1fe6548531d2020454e854a6ad7e868f342d701eb21c3414a30e62ba1f2082c45f9aa227f55c98069847f6ebd34375dbe468db39b493a26ac7d33dda7ac06a91aa220011d6ee2b4a027844f24826e134c892af0472afd1a63a018c56e061c294ec4fe9fc91ad6fd68499579677b9bf5264a95c878500561e28492ef10ea05e94634af84f1"]}, @nested={0x22b, 0xb2, 0x0, 0x1, [@typed={0x4, 0xd5, 0x0, 0x0, @binary}, @typed={0x53, 0x83, 0x0, 0x0, @binary="b0da8ab11328b7c42c883fe3c3b2f4fcd8b57b82ce260273bdefbfcd56ef6c1ed3fc9102596dbd3a0d107f9e088b08e587889948e29be04a17cf7221fbb6ecebcb7abd10f15f8788932c6c434912b5"}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x5}, @generic="3b63944b24967cd9ad6358662dbbe4153c183a96", @generic="cb78908efe2a889e4cb698b5e4657ac513b84ffe7227073d18cf0d7adf587c41fbc8c6185509d5d92db64edc37f812baf570c0c41ac1967da3b1b0a402282556d16cd0d5c583b82e4dba42f4218aed8b8adf70dbc17356be3427819590f32993e61465e2d7933545e2c4772f212b14ce5b33b6279b33873415f7b9ac2d182c254b717815215f137ef6", @generic="ad4a170016cecae8433aea300cc38ee2bc8cc5062c036647d2422c634edcf24d99768c5ccc23cb7ce9544b344013bff7c5d6161dd1457ec10f15535ba56f56f1dd5c86ec8898627584dba56eaa465eae25ff206d43ea7d29a8c958e26a4fa83a447c9b3bee09996b9d4331b8ddcc6466daf0a3033c35940d81a0af2b976e66d68c02253a4affbd4afd20d5f3", @nested={0x4, 0x161}, @generic="7cf8a00d59e69013847637dd891fb5980562d465949f3fdb9c4165d8159005139f0c01558c19a4e7da29117894ae1a05abaf592155e788edcbac6ce05460d95f41e213f26c853fdb1da7c4dc213b11600a71dcf1e86e92d1412c323d3de7564f2082abb6840a06355809744f498bdcb63a25828512093a51abeae01aedcb3231d8b451aba7b8b42d52543e56326548cc64323d4e53c5"]}]}, 0x7a4}], 0x2, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, r6}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x24, 0x1, 0x1, [r10, r11, r12, r13, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r14, 0xffffffffffffffff, r15, 0xffffffffffffffff, r16]}}, @cred={{0x1c, 0x1, 0x2, {r17, r19, r20}}}], 0xc0, 0x4040801}, 0x40805) r21 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r22 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r21, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r22, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): :50 [ 490.636435][T27069] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 490.648482][T14094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.673652][T14094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.398683][T27123] netlink: 'syz.1.5937': attribute type 1 has an invalid length. [ 491.455312][T27123] __nla_validate_parse: 12 callbacks suppressed [ 491.455331][T27123] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5937'. [ 491.471060][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5942'. [ 491.478587][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5942'. [ 491.503948][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5942'. [ 491.516325][T27123] netlink: 'syz.1.5937': attribute type 1 has an invalid length. [ 491.546706][T27123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5937'. [ 491.854626][T27159] netlink: 'syz.2.5949': attribute type 12 has an invalid length. [ 491.960248][T27150] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5947'. [ 492.000817][T27163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5950'. [ 492.052575][T27163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5950'. [ 492.104925][T27168] syzkaller1: entered promiscuous mode [ 492.119455][T27168] syzkaller1: entered allmulticast mode [ 492.189479][T27174] batadv_slave_1: entered promiscuous mode [ 492.215919][T27173] batadv_slave_1: left promiscuous mode [ 492.311803][T26801] Bluetooth: hci0: command tx timeout [ 492.428567][T27189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5960'. [ 492.456912][T27192] netlink: 'syz.0.5961': attribute type 1 has an invalid length. [ 492.480300][T27192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5961'. [ 492.522934][T27192] bridge0: port 3(veth0_to_bond) entered blocking state [ 492.543660][T27192] bridge0: port 3(veth0_to_bond) entered disabled state [ 492.578417][T27199] netlink: 'syz.0.5961': attribute type 1 has an invalid length. [ 492.615129][T27192] veth0_to_bond: entered allmulticast mode [ 492.633001][T27192] veth0_to_bond: entered promiscuous mode [ 492.640573][T27199] netlink: 'syz.0.5961': attribute type 2 has an invalid length. [ 492.804312][T27210] netlink: 'syz.1.5965': attribute type 21 has an invalid length. [ 493.170432][T27221] syzkaller0: entered promiscuous mode [ 493.186529][T27221] syzkaller0: entered allmulticast mode [ 493.224706][T27231] netlink: 'syz.4.5972': attribute type 2 has an invalid length. [ 493.543237][T27250] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 494.076770][T27286] netlink: 'syz.2.5988': attribute type 14 has an invalid length. [ 494.101689][T27286] netlink: 'syz.2.5988': attribute type 13 has an invalid length. [ 494.374308][T27310] bond1 (unregistering): Released all slaves [ 494.391597][T26801] Bluetooth: hci0: command tx timeout [ 494.886052][T27346] bond1: entered promiscuous mode [ 494.891489][T27346] bond1: entered allmulticast mode [ 494.896890][T27346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.024260][T27349] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.211096][T27378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.729880][T27419] SET target dimension over the limit! [ 495.847712][T27432] atomic_op ffff8880844b4198 conn xmit_atomic 0000000000000000 [ 495.914383][T27436] bond13: Unable to set down delay as MII monitoring is disabled [ 495.930547][T27436] bond13 (unregistering): Released all slaves [ 496.219387][T27465] openvswitch: netlink: IP tunnel TTL not specified. [ 496.234061][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 496.665154][T27499] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 496.675578][T27504] validate_nla: 3 callbacks suppressed [ 496.675595][T27504] netlink: 'syz.5.6047': attribute type 29 has an invalid length. [ 496.727699][T27503] netlink: 'syz.0.6048': attribute type 2 has an invalid length. [ 496.819263][T27517] __nla_validate_parse: 19 callbacks suppressed [ 496.819281][T27517] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6049'. [ 496.974720][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6050'. [ 497.132943][T27535] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 497.139414][T27535] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 497.189494][T27541] netlink: 200 bytes leftover after parsing attributes in process `syz.5.6059'. [ 497.208170][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6059'. [ 497.258596][T27539] syzkaller0: entered promiscuous mode [ 497.274656][T27548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6059'. [ 497.286484][T27539] syzkaller0: entered allmulticast mode [ 497.302387][T27548] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 497.611742][T27570] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 497.906529][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.916510][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.924223][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.933667][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.941371][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.220190][T27601] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6075'. [ 498.358160][T27611] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 498.625566][T27583] lo speed is unknown, defaulting to 1000 [ 498.668264][T27583] lo speed is unknown, defaulting to 1000 [ 499.044324][T27658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6088'. [ 499.253107][T27670] tipc: Started in network mode [ 499.259179][T27670] tipc: Node identity ac14142f, cluster identity 4711 [ 499.267352][T27670] tipc: New replicast peer: 172.20.20.15 [ 499.279367][T27670] tipc: Enabled bearer , priority 10 [ 499.315260][T27679] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6095'. [ 499.347106][T27679] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6095'. [ 499.634952][T27700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6099'. [ 499.699099][T27583] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.706474][T27583] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.714120][T27583] bridge_slave_0: entered allmulticast mode [ 499.724289][T27583] bridge_slave_0: entered promiscuous mode [ 499.758772][T27583] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.771068][T27583] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.779593][T27583] bridge_slave_1: entered allmulticast mode [ 499.791008][T27583] bridge_slave_1: entered promiscuous mode [ 499.903563][T27583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.920175][T27583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.967777][T27583] team0: Port device team_slave_0 added [ 499.979851][T27583] team0: Port device team_slave_1 added [ 499.991726][ T5623] Bluetooth: hci1: command tx timeout [ 500.018418][T27583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.036776][T27583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.068401][T27583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.088751][T27583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.096464][T27583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.123579][T27583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.134645][T27723] netlink: 'syz.2.6106': attribute type 3 has an invalid length. [ 500.229269][T27583] hsr_slave_0: entered promiscuous mode [ 500.239357][T27583] hsr_slave_1: entered promiscuous mode [ 500.247526][T27583] debugfs: 'hsr0' already exists in 'hsr' [ 500.256457][T27583] Cannot create hsr debugfs directory [ 500.293649][T27727] openvswitch: netlink: EtherType 50a is less than min 600 [ 500.403523][T26575] tipc: Node number set to 2886997039 [ 500.423548][T27721] x_tables: duplicate underflow at hook 2 [ 500.577891][T27583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.602800][T27583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.625410][T27583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.718964][T27583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.737709][T27583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.762189][T27583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.850116][T27583] .`: (slave netdevsim1): Releasing backup interface [ 500.883620][T27583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.928270][T27583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.964531][T27583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.969106][T27768] netlink: 'syz.0.6118': attribute type 1 has an invalid length. [ 500.996561][T27768] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 501.089043][T27583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.110885][ T29] audit: type=1804 audit(1781758002.722:29): pid=27779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6122" name="/newroot/44/cgroup.controllers" dev="tmpfs" ino=243 res=1 errno=0 [ 501.136520][T27583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.151054][ T29] audit: type=1800 audit(1781758002.722:30): pid=27779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6122" name="cgroup.controllers" dev="tmpfs" ino=243 res=0 errno=0 [ 501.179917][T27583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 501.328582][T27789] netlink: 'syz.0.6126': attribute type 1 has an invalid length. [ 501.436261][T27795] macvtap1: entered allmulticast mode [ 501.456193][T27798] netlink: 'syz.4.6128': attribute type 4 has an invalid length. [ 501.499189][T27789] macvtap2: entered allmulticast mode [ 501.569806][T27795] bond2: (slave bridge1): making interface the new active one [ 501.581004][T27795] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 501.594712][T27583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 501.649370][T27583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.684291][T27583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.720117][T27583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.750652][T27583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.762250][T27812] openvswitch: netlink: Message has 6 unknown bytes. [ 501.777956][T27583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.790399][T27583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.813428][T27583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.073193][ T5623] Bluetooth: hci1: command tx timeout [ 502.105702][T27841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.378549][T27855] __nla_validate_parse: 70 callbacks suppressed [ 502.378578][T27855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6143'. [ 502.408767][T27583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.435968][T27855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6143'. [ 502.493057][T27583] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.537370][T10908] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.544557][T10908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.585802][T27859] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.597694][T27859] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.679175][T10908] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.686376][T10908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.735033][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.236713][T27583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.283499][T27583] veth0_vlan: entered promiscuous mode [ 503.295509][T27583] veth1_vlan: entered promiscuous mode [ 503.323249][T27583] veth0_macvtap: entered promiscuous mode [ 503.335234][T27583] veth1_macvtap: entered promiscuous mode [ 503.363008][T27583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.376810][T27583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.389957][T14060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.401116][T14060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.411782][T14060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.421973][T14060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.152007][ T5623] Bluetooth: hci1: command tx timeout [ 505.523222][T27864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.541655][T27907] netlink: 'syz.2.6155': attribute type 1 has an invalid length. [ 505.563485][T27907] netlink: 'syz.2.6155': attribute type 3 has an invalid length. [ 505.612933][T27907] netlink: 'syz.2.6155': attribute type 7 has an invalid length. [ 505.636535][T27907] netlink: 'syz.2.6155': attribute type 8 has an invalid length. [ 505.668795][T27907] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6155'. [ 505.679480][T27907] NCSI netlink: No device for ifindex 131092 [ 505.769019][T27918] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6157'. [ 505.799006][T10908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.847418][T10908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.894951][T27918] netlink: 'syz.5.6157': attribute type 1 has an invalid length. [ 505.906225][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.943245][T27918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6157'. [ 505.956230][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.047035][T27937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6162'. [ 506.232014][ T5623] Bluetooth: hci1: command tx timeout [ 506.370983][T26801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.387765][T26801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.398369][T26801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.409748][T26801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.420387][T26801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.729303][T27975] lo: entered promiscuous mode [ 506.757129][T27975] netlink: 'syz.4.6171': attribute type 2 has an invalid length. [ 506.804830][T27975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.886714][T27977] netlink: 'syz.4.6171': attribute type 10 has an invalid length. [ 506.898866][T27977] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6171'. [ 507.124218][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.176480][T28006] Cannot find del_set index 0 as target [ 507.238199][T28012] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6179'. [ 507.364451][T27950] lo speed is unknown, defaulting to 1000 [ 507.376288][T27950] lo speed is unknown, defaulting to 1000 [ 507.414930][T28022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6180'. [ 507.452782][T28022] netlink: 'syz.0.6180': attribute type 5 has an invalid length. [ 507.477039][T28022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6180'. [ 507.508225][T28022] geneve2: entered promiscuous mode [ 507.515742][T28022] geneve2: entered allmulticast mode [ 507.530551][T14100] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 507.558961][T14100] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 507.572977][T14100] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 507.598598][T14100] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 508.036973][T28056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6191'. [ 508.070808][T28058] macsec0: entered promiscuous mode [ 508.110645][T28058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6192'. [ 508.130608][T28058] veth1_macvtap: left promiscuous mode [ 508.157343][T28058] macsec0 (unregistering): left promiscuous mode [ 508.244198][T28065] bond6: invalid ARP target 0.0.0.0 specified for addition [ 508.252061][T28065] bond6: option arp_ip_target: invalid value (0) [ 508.263462][T28065] bond6 (unregistering): Released all slaves [ 508.301927][T28075] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 508.309383][T28075] x_tables: duplicate underflow at hook 2 [ 508.352817][T27950] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.369736][T27950] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.389349][T27950] bridge_slave_0: entered allmulticast mode [ 508.415788][T27950] bridge_slave_0: entered promiscuous mode [ 508.468919][T27950] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.480251][ T5623] Bluetooth: hci4: command tx timeout [ 508.493128][T27950] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.500559][T27950] bridge_slave_1: entered allmulticast mode [ 508.507936][T27950] bridge_slave_1: entered promiscuous mode [ 508.533053][T28087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6200'. [ 508.549644][T27950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.564340][T28087] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 508.578072][T28087] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 508.595590][T28087] gretap0: entered promiscuous mode [ 508.607862][T28087] gretap0: entered allmulticast mode [ 508.633488][T27950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.738360][T27950] team0: Port device team_slave_0 added [ 508.769601][T27950] team0: Port device team_slave_1 added [ 508.788248][T28094] netlink: 'syz.5.6203': attribute type 17 has an invalid length. [ 508.810310][T28094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6203'. [ 508.842989][T28094] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6203'. [ 508.904722][T27950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.928253][T27950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.029312][T27950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.103023][T27950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.118275][T27950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.161529][T27950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.368970][T27950] hsr_slave_0: entered promiscuous mode [ 509.389855][T27950] hsr_slave_1: entered promiscuous mode [ 509.416113][T27950] debugfs: 'hsr0' already exists in 'hsr' [ 509.429685][T27950] Cannot create hsr debugfs directory [ 509.700303][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.730064][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.757952][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.769493][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.800623][T27950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.826824][T27950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.916222][T27950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.948217][T27950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.045637][T27950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.083773][T27950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.101075][T28154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6221'. [ 510.123991][T28156] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6222'. [ 510.135850][T28156] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 510.224201][T27950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.239502][T28169] xt_hashlimit: size too large, truncated to 1048576 [ 510.248989][T27950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.289185][T28170] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.325889][T28170] bridge_slave_0 (unregistering): left allmulticast mode [ 510.348436][T28170] bridge_slave_0 (unregistering): left promiscuous mode [ 510.364023][T28170] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.543636][T28183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6227'. [ 510.553587][ T5623] Bluetooth: hci4: command tx timeout [ 510.560724][T27950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 510.610603][T27950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.655767][T27950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 510.672909][T27950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.689237][T27950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 510.709225][T27950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.739058][T27950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 510.763595][T27950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.873284][T28208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.948692][T28189] syzkaller0: entered promiscuous mode [ 510.971060][T28189] syzkaller0: entered allmulticast mode [ 511.008311][T28213] netlink: 'syz.5.6235': attribute type 1 has an invalid length. [ 511.100945][T28213] bond6: entered promiscuous mode [ 511.111735][T28213] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.177155][T27950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.202195][T28213] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.228486][T28213] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 511.260982][T28213] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 511.284073][T28213] bond6: (slave vti0): making interface the new active one [ 511.303872][T28213] vti0: entered promiscuous mode [ 511.312065][T28213] vti0: left promiscuous mode [ 511.397958][T28231] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 511.499515][T27950] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.535436][T14090] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.542591][T14090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.566759][T28237] netlink: 'syz.5.6242': attribute type 83 has an invalid length. [ 511.628846][ T12] gretap0: left promiscuous mode [ 511.642329][ T12] bridge0: port 1(gretap0) entered disabled state [ 511.666226][ T12] bridge_slave_1: left allmulticast mode [ 511.677321][ T12] bridge_slave_1: left promiscuous mode [ 511.696085][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.788961][ T12] dvmrp0: left allmulticast mode [ 511.873262][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 511.884194][ T12] bond2 (unregistering): (slave gretap2): Releasing active interface [ 511.950156][ T12] bond3 (unregistering): (slave bridge6): Releasing active interface [ 511.970392][ T12] bond1 (unregistering): Released all slaves [ 511.983477][ T12] bond2 (unregistering): Released all slaves [ 511.997327][ T12] bond3 (unregistering): Released all slaves [ 512.019993][ T12] bond4 (unregistering): Released all slaves [ 512.031565][ T12] bond5 (unregistering): Released all slaves [ 512.048699][ T12] bond0 (unregistering): Released all slaves [ 512.064885][ T12] bond6 (unregistering): Released all slaves [ 512.078296][ T12] bond7 (unregistering): Released all slaves [ 512.093249][ T12] bond8 (unregistering): Released all slaves [ 512.104545][ T12] bond9 (unregistering): Released all slaves [ 512.116039][ T12] bond10 (unregistering): Released all slaves [ 512.135689][T14060] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.142835][T14060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.187258][T10908] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.218776][T10908] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.328216][ T3367] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.364162][ T3367] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.410998][T28269] nbd: must specify at least one socket [ 512.445153][T28272] __nla_validate_parse: 7 callbacks suppressed [ 512.445179][T28272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6253'. [ 512.510275][T28277] netlink: 'syz.0.6254': attribute type 1 has an invalid length. [ 512.518878][T27950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.632466][ T5623] Bluetooth: hci4: command tx timeout [ 512.663356][T28277] ip6gretap1: entered promiscuous mode [ 512.678418][T28277] ip6gretap1: entered allmulticast mode [ 512.688814][T28277] bond3: (slave ip6gretap1): making interface the new active one [ 512.697804][T28277] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 512.705916][T28277] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 512.710629][T28289] x_tables: duplicate underflow at hook 2 [ 512.724259][T28277] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 512.779452][T28291] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6258'. [ 512.854159][T28291] vlan2: entered allmulticast mode [ 512.863908][T28291] bridge0: entered allmulticast mode [ 512.997587][ T12] hsr_slave_0: left promiscuous mode [ 513.023808][ T12] hsr_slave_1: left promiscuous mode [ 513.035901][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.043782][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.054857][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.067008][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.087932][ T12] veth1_vlan: left promiscuous mode [ 513.097640][ T12] veth0_vlan: left promiscuous mode [ 513.177030][T28306] netlink: 'syz.0.6260': attribute type 10 has an invalid length. [ 513.243073][ T12] team0 (unregistering): Port device team_slave_1 removed [ 513.256225][ T12] team0 (unregistering): Port device team_slave_0 removed [ 513.320039][T28291] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6258'. [ 513.348905][T28306] team0: Port device dummy0 added [ 513.385043][T28308] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6262'. [ 513.660190][T28323] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 513.786619][ T12] IPVS: stop unused estimator thread 0... [ 513.822917][T27950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.969192][T27950] veth0_vlan: entered promiscuous mode [ 514.009983][T27950] veth1_vlan: entered promiscuous mode [ 514.097621][T27950] veth0_macvtap: entered promiscuous mode [ 514.139221][T27950] veth1_macvtap: entered promiscuous mode [ 514.176950][T28343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6271'. [ 514.179563][T27950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.204270][T27950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.221130][T28346] pim6reg: entered allmulticast mode [ 514.235353][T28343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6271'. [ 514.247163][T28343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6271'. [ 514.258447][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.286190][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.329410][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.368152][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.409726][T28355] netlink: 'syz.1.6276': attribute type 1 has an invalid length. [ 514.420878][T28355] netlink: 280 bytes leftover after parsing attributes in process `syz.1.6276'. [ 514.456013][T14060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.496129][T14060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.595900][T14065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.638344][T14065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.711686][ T5623] Bluetooth: hci4: command tx timeout [ 514.751100][T28373] netlink: 'syz.2.6165': attribute type 1 has an invalid length. [ 514.760554][T28373] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6165'. [ 514.803057][T28376] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.879143][T28378] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 514.956192][T28382] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.986596][T28382] bridge_slave_0 (unregistering): left allmulticast mode [ 515.003182][T28382] bridge_slave_0 (unregistering): left promiscuous mode [ 515.026779][T28382] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.140845][T28400] xt_hashlimit: invalid interval [ 515.468778][T28421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.476505][T28421] IPv6: NLM_F_CREATE should be set when creating new route [ 515.484165][T28421] IPv6: NLM_F_CREATE should be set when creating new route [ 515.518845][T28421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.680094][T28421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.747330][T28421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6293'. [ 515.849049][T28421] geneve2: entered promiscuous mode [ 516.452353][T28483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.758329][T28496] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.826093][T28503] netlink: 'syz.5.6313': attribute type 39 has an invalid length. [ 516.857064][T28500] : renamed from gretap0 (while UP) [ 516.990360][T28512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.140194][T28529] netlink: 'syz.0.6319': attribute type 1 has an invalid length. [ 517.248131][T28539] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 517.257915][T28540] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 517.352294][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 517.387102][T28546] IPVS: set_ctl: invalid protocol: 11 172.20.20.170:20003 [ 517.610893][T28567] __nla_validate_parse: 6 callbacks suppressed [ 517.610911][T28567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6333'. [ 517.806023][T28577] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.6334'. [ 517.818863][T28581] netlink: 'syz.0.6338': attribute type 64 has an invalid length. [ 517.818894][T28581] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6338'. [ 517.857423][T28577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6334'. [ 517.899279][T28581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6338'. [ 517.983164][T28588] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6340'. [ 518.076693][T28581] syzkaller0: entered promiscuous mode [ 518.103913][T28581] syzkaller0: entered allmulticast mode [ 518.208659][T28607] tipc: Started in network mode [ 518.214906][T28607] tipc: Node identity ac14140f, cluster identity 4711 [ 518.224612][T28607] tipc: New replicast peer: 255.255.255.255 [ 518.235159][T28607] tipc: Enabled bearer , priority 10 [ 518.274642][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6346'. [ 518.289607][T28609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6346'. [ 518.299935][T28609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6346'. [ 518.323171][T28609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6346'. [ 518.406444][T26554] IPVS: starting estimator thread 0... [ 518.467490][T28623] tipc: Invalid UDP bearer configuration [ 518.467527][T28623] tipc: Enabling of bearer rejected, failed to enable media [ 518.514480][T28620] IPVS: using max 49 ests per chain, 117600 per kthread [ 518.522933][T28626] veth1_to_bond: entered allmulticast mode [ 518.572351][T28626] veth1_to_bond: left allmulticast mode [ 518.577630][T28623] netlink: 'syz.1.6350': attribute type 1 has an invalid length. [ 518.643627][T28623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.686424][T28638] team0: Port device team_slave_0 removed [ 518.699296][T28638] bond1: (slave team_slave_0): Enslaving as a backup interface with an up link [ 519.217562][T28678] netlink: 'syz.4.6363': attribute type 11 has an invalid length. [ 519.355637][T26575] tipc: Node number set to 2886997007 [ 520.049312][T28743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.068523][T28743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.079996][T28743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.098652][T28743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.109311][T28748] x_tables: duplicate underflow at hook 4 [ 520.252801][T28751] bond7: entered promiscuous mode [ 520.258601][T28751] bond7: entered allmulticast mode [ 520.265171][T28751] 8021q: adding VLAN 0 to HW filter on device bond7 [ 520.400013][T28763] tc action pedit 'at' offset 6 out of bounds [ 520.514056][T28773] netlink: 'syz.5.6397': attribute type 1 has an invalid length. [ 520.596333][T28773] ip6gretap1: entered promiscuous mode [ 520.605574][T28773] ip6gretap1: entered allmulticast mode [ 520.617472][T28773] bond8: (slave ip6gretap1): making interface the new active one [ 520.629127][T28773] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 520.642707][T28773] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 520.656290][T28773] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 520.665835][T28780] netlink: 'syz.2.6399': attribute type 61 has an invalid length. [ 520.686213][T28781] ip6erspan0: entered allmulticast mode [ 520.715093][T28780] netlink: 'syz.2.6399': attribute type 16 has an invalid length. [ 520.900580][T28795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.931020][T28795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.964325][T28795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.985511][T28795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.259665][T28823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.461965][T28839] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 521.496036][T28834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.649159][T28853] netlink: 'syz.5.6418': attribute type 3 has an invalid length. [ 521.719483][T28857] netlink: 'syz.1.6420': attribute type 1 has an invalid length. [ 522.059538][T28883] netlink: 'syz.0.6429': attribute type 7 has an invalid length. [ 522.086674][T28883] netlink: 'syz.0.6429': attribute type 8 has an invalid length. [ 522.118131][T28887] syzkaller0: entered promiscuous mode [ 522.140828][T28887] syzkaller0: entered allmulticast mode [ 522.188921][T28892] nbd: device at index 64 is going down [ 522.283601][T21645] udevd[21645]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 522.329841][T20905] udevd[20905]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 522.465718][T28911] sit0: entered promiscuous mode [ 522.471898][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 522.483624][T28911] netlink: 'syz.0.6437': attribute type 1 has an invalid length. [ 522.537539][T28911] netlink: 'syz.0.6437': attribute type 1 has an invalid length. [ 522.594747][T28915] netlink: 'syz.5.6436': attribute type 1 has an invalid length. [ 522.636588][T28915] __nla_validate_parse: 19 callbacks suppressed [ 522.636621][T28915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6436'. [ 522.779204][T28925] xt_TCPMSS: Only works on TCP SYN packets [ 522.853622][T28930] netlink: 'syz.5.6442': attribute type 21 has an invalid length. [ 522.880328][T28930] netlink: 'syz.5.6442': attribute type 1 has an invalid length. [ 522.936883][T28934] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6444'. [ 522.966676][T28934] netlink: 'syz.4.6444': attribute type 1 has an invalid length. [ 522.991673][T28934] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6444'. [ 523.102855][T28935] bridge2: entered promiscuous mode [ 523.125829][T28935] bridge2: entered allmulticast mode [ 523.199680][T28942] bond9: Removing last arp target with arp_interval on [ 523.212178][T28959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6453'. [ 523.611272][T28985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6463'. [ 523.679267][T28985] bond2: entered promiscuous mode [ 523.701534][T28985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.734398][T28993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.755096][T28993] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 523.769501][T28993] bond2: (slave sit1): Error -95 calling set_mac_address [ 523.889823][T29008] netlink: 'syz.1.6469': attribute type 10 has an invalid length. [ 523.909533][T29008] team0: Port device dummy0 added [ 526.583264][T28984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.749002][T29029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6478'. [ 526.997552][T29046] syzkaller0: entered promiscuous mode [ 527.006152][T29046] syzkaller0: entered allmulticast mode [ 527.125743][T29049] veth0_macvtap: entered allmulticast mode [ 527.133868][T29049] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 527.261094][T29055] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6483'. [ 527.469429][T29062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.538786][T29072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6488'. [ 527.643965][T29078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6490'. [ 527.834296][T26551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.898736][T29081] : entered promiscuous mode [ 528.219158][T29112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6501'. [ 528.296158][T29114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6502'. [ 528.321064][T29114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6502'. [ 528.473737][T29125] Can't find ip_set type Vash:ip¬mark [ 528.652593][T29138] netlink: 484 bytes leftover after parsing attributes in process `syz.0.6510'. [ 528.837589][T29149] openvswitch: netlink: Flow actions attr not present in new flow. [ 528.872353][T26554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.026423][T29158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6515'. [ 529.128427][T29158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.136974][T29171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6519'. [ 529.171965][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6515'. [ 529.250063][T29167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.268096][T29167] bond1: (slave bond2): Enslaving as an active interface with an up link [ 529.348229][T29166] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 529.358269][T26577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.385883][T29171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6519'. [ 529.400666][T29171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6519'. [ 529.420111][T29166] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 529.444228][T29166] gretap1: entered promiscuous mode [ 529.461954][T29166] gretap1: entered allmulticast mode [ 529.508132][T29173] bond1 (unregistering): (slave bond2): Releasing backup interface [ 529.529398][T29173] bond1 (unregistering): Released all slaves [ 529.893586][T29223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.911699][T26550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.108794][T29240] netlink: 'syz.5.6535': attribute type 16 has an invalid length. [ 530.128679][T29240] netlink: 'syz.5.6535': attribute type 3 has an invalid length. [ 530.135457][T29237] syzkaller0: entered promiscuous mode [ 530.155102][T26575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.178680][T29237] syzkaller0: entered allmulticast mode [ 530.198994][T29245] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 530.229873][T29237] syzkaller1: entered promiscuous mode [ 530.237793][T29237] syzkaller1: entered allmulticast mode [ 530.829014][T29297] netlink: 'syz.0.6548': attribute type 2 has an invalid length. [ 530.846393][T29297] netlink: 'syz.0.6548': attribute type 2 has an invalid length. [ 530.899695][T29304] veth0: entered promiscuous mode [ 530.907311][T29303] veth0: left promiscuous mode [ 530.964175][T26550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.392606][T26577] net_ratelimit: 1 callbacks suppressed [ 532.392634][T26577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.031427][T26550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.334391][T29252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.347482][T29279] netlink: 'syz.1.6541': attribute type 23 has an invalid length. [ 533.527897][T29315] __nla_validate_parse: 10 callbacks suppressed [ 533.527917][T29315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6553'. [ 533.572651][T29317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6554'. [ 533.739122][T29329] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 533.781728][T29329] netlink: 'syz.5.6559': attribute type 49 has an invalid length. [ 533.907881][T29340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6562'. [ 533.946399][T29344] netlink: 'syz.1.6563': attribute type 3 has an invalid length. [ 534.072878][T26550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.089932][T29350] sctp: [Deprecated]: syz.4.6564 (pid 29350) Use of int in maxseg socket option. [ 534.089932][T29350] Use struct sctp_assoc_value instead [ 534.109117][T29336] syzkaller0: entered promiscuous mode [ 534.125298][T29353] netlink: 'syz.0.6565': attribute type 2 has an invalid length. [ 534.138319][T29336] syzkaller0: entered allmulticast mode [ 534.209309][T29359] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6566'. [ 534.315493][T29364] netlink: 'syz.0.6567': attribute type 1 has an invalid length. [ 534.382870][T29369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6567'. [ 534.409879][T29365] veth0: entered promiscuous mode [ 534.458205][T29364] 8021q: adding VLAN 0 to HW filter on device bond7 [ 534.484024][T29371] veth0: left promiscuous mode [ 534.686234][T29397] netlink: 'syz.4.6575': attribute type 5 has an invalid length. [ 534.719568][T29394] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 534.810056][T29387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.049201][T29418] syzkaller0: entered promiscuous mode [ 535.068621][T29418] syzkaller0: entered allmulticast mode [ 535.079300][T29418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6583'. [ 535.111402][T26554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.362577][T29432] can: request_module (can-proto-0) failed. [ 535.436395][T26577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.582306][T29451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6594'. [ 535.644703][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6594'. [ 535.720860][T29460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6598'. [ 535.872179][T29468] macvtap0: entered allmulticast mode [ 535.888689][T29468] veth0_macvtap: entered allmulticast mode [ 535.926160][T29475] tipc: Enabled bearer , priority 0 [ 536.005200][T29480] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6610'. [ 536.034007][T29475] syzkaller0: entered promiscuous mode [ 536.050561][T29475] syzkaller0: entered allmulticast mode [ 536.064366][T29475] tipc: Resetting bearer [ 536.089980][T29485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.109824][T29474] tipc: Resetting bearer [ 536.128008][T29485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.151802][T26554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.176909][T29485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.242111][T29474] tipc: Disabling bearer [ 536.396944][T29494] dvmrp6: entered allmulticast mode [ 536.904617][T29511] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 537.056923][T29517] netlink: 'syz.0.6609': attribute type 1 has an invalid length. [ 537.196660][T26550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.558229][T29555] xt_socket: unknown flags 0xe4 [ 537.708079][T29569] ip6t_srh: unknown srh match flags 4000 [ 538.012357][T29579] IPVS: Scheduler module ip_vs_sip not found [ 538.020280][T29596] netlink: zone id is out of range [ 538.038373][T29596] netlink: del zone limit has 4 unknown bytes [ 538.233595][T26554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.356790][T29612] : entered promiscuous mode [ 538.465609][T29622] netlink: 'syz.2.6640': attribute type 9 has an invalid length. [ 538.473032][T26575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.736072][T29628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.783326][T29628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.079735][T29657] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 539.099499][T29657] __nla_validate_parse: 13 callbacks suppressed [ 539.099516][T29657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6649'. [ 539.123921][T29654] netlink: 'syz.4.6648': attribute type 1 has an invalid length. [ 539.128933][T29657] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 539.217158][T29654] bond1: entered promiscuous mode [ 539.235098][T29654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.271370][T26550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.287811][T29667] tipc: MTU too low for tipc bearer [ 539.316376][T29667] tunl0: entered promiscuous mode [ 539.332896][T29667] netlink: 'syz.2.6651': attribute type 4 has an invalid length. [ 539.353467][T29667] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6651'. [ 539.397465][T29670] netlink: 'syz.0.6652': attribute type 11 has an invalid length. [ 539.440214][T29670] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.6652'. [ 539.530878][T29688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6657'. [ 539.546711][T29688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6657'. [ 539.570433][T29679] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6656'. [ 539.596232][T29688] gretap0: entered promiscuous mode [ 539.627515][T29688] gretap0: left promiscuous mode [ 539.709600][T29678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.757148][T26579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.290938][T29715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 541.458058][T29728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6670'. [ 541.509299][T29728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6670'. [ 541.680478][T29745] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6673'. [ 541.745228][T29752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6676'. [ 541.870037][T29757] xt_ecn: cannot match TCP bits for non-tcp packets [ 541.917705][T29756] xt_ecn: cannot match TCP bits for non-tcp packets [ 542.016703][T29764] nbd: socks must be embedded in a SOCK_ITEM attr [ 542.092415][T29767] netlink: 'syz.0.6681': attribute type 21 has an invalid length. [ 542.370881][T29787] syzkaller0: entered promiscuous mode [ 542.379163][T29787] syzkaller0: entered allmulticast mode [ 542.558868][T29801] : entered promiscuous mode [ 542.570768][T29801] vlan3: entered promiscuous mode [ 542.695624][T29811] netlink: 'syz.2.6695': attribute type 1 has an invalid length. [ 542.774102][T29811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.846048][T29817] xt_nat: multiple ranges no longer supported [ 542.934435][T29821] netlink: 'syz.5.6698': attribute type 1 has an invalid length. [ 543.040149][T29834] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 543.093856][T29834] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 543.108694][T29834] bond10: (slave ip6gre2): making interface the new active one [ 543.119026][T29834] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 543.231881][T29836] macvlan2: entered promiscuous mode [ 543.252718][T29836] macvlan2: entered allmulticast mode [ 543.261048][T29836] veth1_to_batadv: entered promiscuous mode [ 543.298634][T29836] veth1_to_batadv: entered allmulticast mode [ 543.374898][T29836] team0: Port device macvlan2 added [ 543.440495][T26551] net_ratelimit: 10 callbacks suppressed [ 543.440513][T26551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.480897][T29866] netlink: 'syz.5.6708': attribute type 16 has an invalid length. [ 543.607643][T29875] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 544.130052][T29911] netlink: 'syz.0.6718': attribute type 1 has an invalid length. [ 544.183020][T29911] __nla_validate_parse: 11 callbacks suppressed [ 544.183048][T29911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6718'. [ 544.236867][T26575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.257132][T29911] 8021q: adding VLAN 0 to HW filter on device bond8 [ 544.473373][T26550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.513047][T29935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6724'. [ 544.832921][T29965] netlink: 'syz.2.6734': attribute type 1 has an invalid length. [ 544.846783][T29967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6733'. [ 544.871113][T29965] netlink: 'syz.2.6734': attribute type 4 has an invalid length. [ 544.893787][T29965] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6734'. [ 544.938636][T29971] syzkaller0: entered promiscuous mode [ 544.945631][T29971] syzkaller0: entered allmulticast mode [ 545.375874][T29996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6745'. [ 545.512550][T26550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.647013][T30017] netlink: 'syz.4.6752': attribute type 23 has an invalid length. [ 545.855555][T30032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6756'. [ 546.404641][T30066] netlink: 'syz.4.6767': attribute type 1 has an invalid length. [ 546.415570][T30066] x_tables: duplicate underflow at hook 4 [ 546.480821][T30070] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6768'. [ 546.555079][T26551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.792269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.800617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.808909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.817192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.825453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.943493][T30074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6769'. [ 547.046913][T30050] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 547.181658][T30084] netlink: 404 bytes leftover after parsing attributes in process `syz.1.6772'. [ 547.228088][T30084] netlink: 'syz.1.6772': attribute type 1 has an invalid length. [ 547.246678][T30084] netlink: 'syz.1.6772': attribute type 11 has an invalid length. [ 547.273634][T30084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6772'. [ 547.344646][T30095] bond3: option fail_over_mac: invalid value (16) [ 547.355437][T30095] bond3 (unregistering): Released all slaves [ 547.675652][T30113] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 547.694427][T30113] bond11 (unregistering): Released all slaves [ 547.765281][T30116] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 548.156656][T30160] netlink: 'syz.2.6794': attribute type 3 has an invalid length. [ 548.231761][ T5623] Bluetooth: hci0: command 0x0401 tx timeout [ 548.520853][T30188] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 548.539398][T30190] erspan0: entered promiscuous mode [ 548.634571][T26551] net_ratelimit: 43 callbacks suppressed [ 548.634587][T26551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.893503][T30208] syzkaller0: entered promiscuous mode [ 548.913684][T30208] syzkaller0: entered allmulticast mode [ 549.481465][T30246] __nla_validate_parse: 4 callbacks suppressed [ 549.481482][T30246] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6812'. [ 549.547435][T30251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.609411][T30259] veth0: entered promiscuous mode [ 549.616994][T30255] veth0: left promiscuous mode [ 549.619247][T30246] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6812'. [ 549.653286][T30246] 0·: renamed from hsr0 (while UP) [ 549.666650][T30251] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6813'. [ 549.709244][T30246] 0·: entered allmulticast mode [ 549.785241][T30246] hsr_slave_0: entered allmulticast mode [ 549.815306][T30246] hsr_slave_1: entered allmulticast mode [ 549.860301][T30246] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 550.366846][T30301] netlink: 'syz.0.6826': attribute type 1 has an invalid length. [ 550.380644][T30307] syzkaller0: entered promiscuous mode [ 550.394047][T30307] syzkaller0: entered allmulticast mode [ 550.668732][T30327] netlink: 'syz.2.6835': attribute type 26 has an invalid length. [ 550.697127][T30327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6835'. [ 550.723022][T30327] netlink: 'syz.2.6835': attribute type 26 has an invalid length. [ 550.740956][T30327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6835'. [ 550.761023][T30329] netlink: 'syz.4.6836': attribute type 1 has an invalid length. [ 550.774743][T30340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6838'. [ 550.786777][T30329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.030576][T26575] IPVS: starting estimator thread 0... [ 551.050067][T30361] sctp: [Deprecated]: syz.1.6842 (pid 30361) Use of int in max_burst socket option. [ 551.050067][T30361] Use struct sctp_assoc_value instead [ 551.132589][T30360] IPVS: using max 48 ests per chain, 115200 per kthread [ 551.356988][T30383] siw: device registration error -23 [ 551.392830][T30386] tipc: Started in network mode [ 551.397878][T30386] tipc: Node identity ffffffffffffff7f0a, cluster identity 4711 [ 551.470400][T30388] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6851'. [ 551.499792][T30388] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.534780][T30396] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6851'. [ 551.588543][T30396] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.595815][T30396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.610437][T30396] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6851'. [ 551.627020][T30402] netlink: 'syz.2.6855': attribute type 2 has an invalid length. [ 551.627793][T30395] netlink: 'syz.0.6853': attribute type 1 has an invalid length. [ 551.655325][T30396] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.924150][T30411] netlink: 'syz.4.6860': attribute type 5 has an invalid length. [ 552.069025][T30425] bridge5: entered promiscuous mode [ 552.090614][T30425] bridge5: entered allmulticast mode [ 552.199165][T30439] 8021q: adding VLAN 0 to HW filter on device bond9 [ 552.327619][T30432] infiniband syz0: set down [ 552.332442][T30432] infiniband syz0: added bridge_slave_1 [ 552.356592][T30432] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 552.376266][T30432] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 552.385900][T30448] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20000 [ 552.408477][T30432] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 552.426478][T30445] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6868'. [ 552.444263][T30432] RDS/IB: syz0: added [ 552.453245][T30432] smc: adding ib device syz0 with port count 1 [ 552.467544][T30432] smc: ib device syz0 port 1 has no pnetid [ 552.623261][T30455] bridge2: entered promiscuous mode [ 552.637148][T30455] bridge2: entered allmulticast mode [ 552.666098][T30457] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 553.004405][T30473] pimreg: entered allmulticast mode [ 553.676989][T30511] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 553.686935][T30513] validate_nla: 1 callbacks suppressed [ 553.686973][T30513] netlink: 'syz.1.6891': attribute type 39 has an invalid length. [ 553.708241][T30514] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 553.729569][T30513] hsr_slave_0: left promiscuous mode [ 553.736956][T30510] netlink: 'syz.0.6890': attribute type 21 has an invalid length. [ 553.756204][T30510] IPv6: NLM_F_CREATE should be specified when creating new route [ 553.770935][T30513] hsr_slave_1: left promiscuous mode [ 554.479907][T30536] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 554.492557][T30536] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 554.538836][T30538] netlink: 'syz.0.6901': attribute type 1 has an invalid length. [ 554.580570][T30538] 8021q: adding VLAN 0 to HW filter on device bond10 [ 554.612894][T30538] __nla_validate_parse: 4 callbacks suppressed [ 554.612934][T30538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6901'. [ 554.710985][T30543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6902'. [ 554.727119][T30543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6902'. [ 554.738214][T30543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6902'. [ 554.868741][T30547] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6904'. [ 554.954786][T30549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6905'. [ 555.016301][T30553] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 555.036394][T30553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.217248][T30516] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 555.262824][T30516] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 555.324619][T30516] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 555.359926][T30516] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 555.538969][T30575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6911'. [ 555.542807][ T29] audit: type=1800 audit(1781758057.152:31): pid=30575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6911" name="memory.events" dev="tmpfs" ino=1073 res=0 errno=0 [ 555.599354][T14059] smbdirect: ib_dev[syz2] removed [ 555.694320][T30579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.775008][T30591] bridge0: port 1(veth1_to_bridge) entered blocking state [ 555.802240][T30591] bridge0: port 1(veth1_to_bridge) entered disabled state [ 555.814381][T30591] veth1_to_bridge: entered allmulticast mode [ 555.835476][T30591] veth1_to_bridge: entered promiscuous mode [ 555.846659][T30596] vxcan1: entered promiscuous mode [ 555.854065][T30596] vxcan1: entered allmulticast mode [ 555.935903][T30515] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 555.972982][T30515] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 556.035572][T30610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6923'. [ 556.110205][T30614] netlink: 'syz.1.6924': attribute type 10 has an invalid length. [ 556.176958][T30614] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.187111][T30619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6925'. [ 556.216291][T30614] bond0: (slave team0): Enslaving as an active interface with an up link [ 556.295999][T30623] bond11: entered promiscuous mode [ 556.335623][T30632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6929'. [ 556.359485][T30623] macvlan0: entered promiscuous mode [ 556.366128][T30623] macvlan0: entered allmulticast mode [ 556.374539][T30623] bond11: (slave macvlan0): Opening slave failed [ 556.636140][T30646] team0: Port device dummy0 removed [ 556.816901][T30670] netlink: 'syz.2.6939': attribute type 1 has an invalid length. [ 556.873159][T30673] netlink: 'syz.2.6939': attribute type 10 has an invalid length. [ 556.918621][T30670] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.930460][T30673] dummy0: entered promiscuous mode [ 556.998726][T30678] x_tables: unsorted underflow at hook 2 [ 557.105196][T30685] netlink: 'syz.1.6941': attribute type 1 has an invalid length. [ 557.528634][T30716] team0 (unregistering): Port device team_slave_0 removed [ 557.618681][T30716] team0 (unregistering): Port device team_slave_1 removed [ 557.777668][T30738] Cannot find set identified by id 65534 to match [ 557.924315][T30747] bridge2: entered promiscuous mode [ 557.963734][T30747] bridge2: entered allmulticast mode [ 558.143577][T30766] netlink: 'syz.0.6960': attribute type 1 has an invalid length. [ 558.400459][T30777] netlink: 'syz.5.6965': attribute type 27 has an invalid length. [ 558.455589][T30780] netlink: 'syz.1.6966': attribute type 3 has an invalid length. [ 558.510617][T30780] bond0: (slave team0): Releasing backup interface [ 558.555456][T30792] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001 [ 558.559428][T30780] team0 (unregistering): Port device team_slave_1 removed [ 558.616889][T30798] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 558.625409][T30789] bond11: entered promiscuous mode [ 558.774046][T30809] bond12: option all_slaves_active: invalid value (222) [ 558.784495][T30809] bond12 (unregistering): Released all slaves [ 558.850468][T30811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.186119][T30779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.633779][T30863] __nla_validate_parse: 21 callbacks suppressed [ 559.633798][T30863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6990'. [ 559.683775][T30856] macsec0: entered promiscuous mode [ 559.696792][T30856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6990'. [ 559.708294][T30865] syzkaller0: entered promiscuous mode [ 559.716661][T30865] syzkaller0: entered allmulticast mode [ 559.728163][T30856] veth1_macvtap: left promiscuous mode [ 559.736481][T30865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6992'. [ 559.774814][T30856] macsec0 (unregistering): left promiscuous mode [ 559.817867][T30872] validate_nla: 4 callbacks suppressed [ 559.817884][T30872] netlink: 'syz.1.6993': attribute type 16 has an invalid length. [ 559.840842][T30872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6993'. [ 559.855711][T30873] bond12: Unable to set down delay as MII monitoring is disabled [ 559.877310][T30873] bond12 (unregistering): Released all slaves [ 559.937350][T30872] veth0_macvtap: entered allmulticast mode [ 559.954723][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6997'. [ 559.969058][T30872] netlink: 'syz.1.6993': attribute type 1 has an invalid length. [ 559.986744][T30882] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6997'. [ 560.020263][T30882] 1·: renamed from c0· (while UP) [ 560.039089][T30889] netlink: 'syz.0.6998': attribute type 21 has an invalid length. [ 560.055160][T30882] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 560.081014][T30895] netlink: 'syz.1.6999': attribute type 39 has an invalid length. [ 560.110538][T30882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6997'. [ 560.115446][T30892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6996'. [ 560.138115][T30889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6998'. [ 560.217818][T30908] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7001'. [ 560.863627][T30925] netlink: 'syz.4.7007': attribute type 32 has an invalid length. [ 560.874846][T30925] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 562.928008][T30880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.676307][T30986] gtp0: entered allmulticast mode [ 563.709349][T30986] team0: Device gtp0 is of different type [ 563.804769][T30992] netlink: 'syz.0.7026': attribute type 1 has an invalid length. [ 564.454745][T31032] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 564.679085][T31044] netlink: 'syz.1.7042': attribute type 4 has an invalid length. [ 564.715646][T31049] __nla_validate_parse: 7 callbacks suppressed [ 564.715662][T31049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7044'. [ 565.152244][T31066] netlink: set zone limit has 4 unknown bytes [ 565.233398][T31076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7051'. [ 565.249719][T31078] syzkaller1: entered promiscuous mode [ 565.273692][T31078] syzkaller1: entered allmulticast mode [ 565.295769][T31076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7051'. [ 565.364558][T31076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7051'. [ 565.392224][T31088] syzkaller0: entered promiscuous mode [ 565.397895][T31088] syzkaller0: entered allmulticast mode [ 565.417070][T31086] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.459819][T31076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7051'. [ 565.477889][T31076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7051'. [ 565.487967][T31076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7051'. [ 565.506170][T31076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7051'. [ 565.509857][T31094] netlink: 'syz.2.7057': attribute type 2 has an invalid length. [ 565.520542][T31076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7051'. [ 565.549502][T31086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.598913][T31076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7051'. [ 565.646687][T31086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.740491][T31102] netlink: 'syz.1.7060': attribute type 15 has an invalid length. [ 565.757139][T31086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.850157][T31109] nbd: illegal input index 2958377 [ 565.897414][T31111] xt_time: unknown flags 0xf4 [ 565.934629][T26576] IPVS: starting estimator thread 0... [ 565.965425][T31111] bond4 (unregistering): Released all slaves [ 565.990895][T14059] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.033757][T31117] IPVS: using max 53 ests per chain, 127200 per kthread [ 566.046568][T14094] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.087204][T14064] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.157476][T14059] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.235669][T31129] syzkaller0: entered promiscuous mode [ 566.249611][T31129] syzkaller0: entered allmulticast mode [ 566.385804][T31144] netlink: 'syz.1.7071': attribute type 1 has an invalid length. [ 566.396272][T31144] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.406913][T31144] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.414502][T31144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.510705][T31151] GUP no longer grows the stack in syz.1.7073 (31151): 200000003000-20000000a000 (200000001000) [ 566.540423][T31151] CPU: 1 UID: 0 PID: 31151 Comm: syz.1.7073 Not tainted syzkaller #0 PREEMPT(full) [ 566.540452][T31151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 566.540463][T31151] Call Trace: [ 566.540469][T31151] [ 566.540476][T31151] dump_stack_lvl+0xe8/0x150 [ 566.540503][T31151] __get_user_pages+0x238c/0x2720 [ 566.540525][T31151] ? __gup_longterm_locked+0xc3b/0x15c0 [ 566.540551][T31151] __gup_longterm_locked+0xd52/0x15c0 [ 566.540569][T31151] ? gup_fast_fallback+0xbc4/0x20d0 [ 566.540587][T31151] ? rcu_is_watching+0x15/0xb0 [ 566.540605][T31151] ? rcu_is_watching+0x15/0xb0 [ 566.540623][T31151] gup_fast_fallback+0x1d82/0x20d0 [ 566.540653][T31151] ? __pfx_gup_fast_fallback+0x10/0x10 [ 566.540669][T31151] ? lock_release+0x4b/0x3c0 [ 566.540693][T31151] ? __fget_files+0x2a/0x420 [ 566.540760][T31151] ? is_valid_gup_args+0x11f/0x200 [ 566.540779][T31151] ? get_user_pages_fast+0x4d/0xb0 [ 566.540799][T31151] __iov_iter_get_pages_alloc+0x378/0xa40 [ 566.540952][T31151] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 566.540988][T31151] iov_iter_get_pages2+0x5e/0xa0 [ 566.541008][T31151] __se_sys_vmsplice+0x7b5/0x1660 [ 566.541035][T31151] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 566.541054][T31151] ? __pfx_futex_wait+0x10/0x10 [ 566.541115][T31151] ? rcu_is_watching+0x15/0xb0 [ 566.541131][T31151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.541147][T31151] do_syscall_64+0x174/0x580 [ 566.541170][T31151] ? trace_irq_disable+0x3b/0x140 [ 566.541191][T31151] ? clear_bhb_loop+0x40/0x90 [ 566.541210][T31151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.541226][T31151] RIP: 0033:0x7fa23a39ce59 [ 566.541243][T31151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.541258][T31151] RSP: 002b:00007fa2385f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 566.541277][T31151] RAX: ffffffffffffffda RBX: 00007fa23a615fa0 RCX: 00007fa23a39ce59 [ 566.541290][T31151] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 566.541301][T31151] RBP: 00007fa23a432d6f R08: 0000000000000000 R09: 0000000000000000 [ 566.541311][T31151] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 566.541322][T31151] R13: 00007fa23a616038 R14: 00007fa23a615fa0 R15: 00007fff5d68c758 [ 566.541343][T31151] [ 566.829853][T31151] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 [ 566.895495][T31165] netlink: 'syz.5.7077': attribute type 10 has an invalid length. [ 567.062318][T31185] netlink: 'syz.0.7084': attribute type 10 has an invalid length. [ 567.280485][T31201] netlink: 'syz.4.7089': attribute type 10 has an invalid length. [ 567.310516][T31201] team0: Port device dummy0 added [ 567.434187][T31210] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 567.523114][T31219] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 567.641516][T31232] netlink: 'syz.4.7099': attribute type 2 has an invalid length. [ 568.329135][T31273] team0: Port device dummy0 removed [ 568.338544][T31286] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 568.363114][T31286] sctp: [Deprecated]: syz.5.7115 (pid 31286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.363114][T31286] Use struct sctp_sack_info instead [ 568.390111][T31287] syzkaller0: entered promiscuous mode [ 568.418844][T31287] syzkaller0: entered allmulticast mode [ 568.449883][T31282] lo speed is unknown, defaulting to 1000 [ 568.499517][T31282] lo speed is unknown, defaulting to 1000 [ 568.554321][T31293] nbd: must specify at least one socket [ 568.789447][T31309] syzkaller0: entered promiscuous mode [ 568.818869][T31309] syzkaller0: entered allmulticast mode [ 568.978149][T31323] syzkaller0: entered promiscuous mode [ 568.999789][T31323] syzkaller0: entered allmulticast mode [ 569.048728][T31321] tun0: tun_chr_ioctl cmd 1074025675 [ 569.066791][T31321] tun0: persist enabled [ 569.159235][T31326] IPv6: sit1: Disabled Multicast RS [ 569.193699][T31332] netlink: 'syz.5.7130': attribute type 7 has an invalid length. [ 569.205861][T31326] sit1: entered allmulticast mode [ 569.211009][T31332] netlink: 'syz.5.7130': attribute type 8 has an invalid length. [ 569.308768][T31334] syzkaller0: entered promiscuous mode [ 569.332607][T31334] syzkaller0: entered allmulticast mode [ 569.612244][T31347] netlink: 'syz.1.7135': attribute type 2 has an invalid length. [ 570.146866][T31372] bond12: (slave geneve4): making interface the new active one [ 570.156051][T31372] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 570.172852][T14064] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 570.189202][T31367] __nla_validate_parse: 77 callbacks suppressed [ 570.189235][T31367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7142'. [ 570.208493][T14064] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 570.229831][T14064] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 570.247002][T14064] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 570.260408][T31367] 8021q: adding VLAN 0 to HW filter on device bond12 [ 570.384566][T31379] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 570.656910][T31392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7148'. [ 570.675842][T31393] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7148'. [ 570.687379][T31393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7148'. [ 570.704455][T31392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7148'. [ 570.953463][T31401] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.989315][T31409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.220213][T31423] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 571.296262][T31423] xt_hashlimit: size too large, truncated to 1048576 [ 571.398533][T31430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7155'. [ 571.650488][T31437] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 571.809560][T31442] tc action pedit 'at' offset 6 out of bounds [ 571.836248][T31442] set match dimension is over the limit! [ 572.236084][T31452] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7161'. [ 572.285510][T31458] validate_nla: 1 callbacks suppressed [ 572.285529][T31458] netlink: 'syz.1.7163': attribute type 18 has an invalid length. [ 572.558536][T31466] netlink: 'syz.1.7167': attribute type 3 has an invalid length. [ 573.396023][T31510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7176'. [ 573.659484][T31519] netlink: 'syz.5.7179': attribute type 13 has an invalid length. [ 573.708249][T31519] 0ªX¹¦Dö»: refused to change device tx_queue_len [ 573.778456][T31519] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 573.825070][T31527] tc_dump_action: action bad kind [ 573.851376][T31529] netlink: 'syz.1.7180': attribute type 1 has an invalid length. [ 573.986509][T31529] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.058458][T31544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7184'. [ 574.094406][T31534] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7185'. [ 574.169590][T31536] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20001 [ 574.333585][T31562] netlink: 'syz.4.7188': attribute type 4 has an invalid length. [ 574.377608][T31559] syzkaller1: entered promiscuous mode [ 574.415784][T31565] openvswitch: netlink: Key 26 has unexpected len 2699 expected 16 [ 574.430423][T31559] syzkaller1: entered allmulticast mode [ 574.486327][T31567] netlink: 'syz.2.7191': attribute type 5 has an invalid length. [ 574.614807][T31574] hsr0: entered promiscuous mode [ 575.151041][T31612] netlink: 'syz.4.7204': attribute type 13 has an invalid length. [ 575.193882][T14060] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.204887][T31612] netlink: 'syz.4.7204': attribute type 13 has an invalid length. [ 575.223513][T14060] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.224578][T31612] __nla_validate_parse: 3 callbacks suppressed [ 575.224617][T31612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7204'. [ 575.257324][T31616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7204'. [ 575.268053][T14060] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.296766][T14060] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.349790][T31620] netlink: 'syz.5.7206': attribute type 1 has an invalid length. [ 575.400137][T31620] 8021q: adding VLAN 0 to HW filter on device bond12 [ 575.426568][T31620] vlan1: entered allmulticast mode [ 575.440150][T31620] veth0_to_bond: entered allmulticast mode [ 575.543993][T31633] veth0: entered promiscuous mode [ 575.598846][T31633] netlink: 'syz.4.7209': attribute type 11 has an invalid length. [ 575.625263][T31632] veth0: left promiscuous mode [ 575.825703][T31648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7215'. [ 576.018406][T31660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7218'. [ 576.339943][T31679] tunl0: left promiscuous mode [ 576.389341][T31679] dummy0: left promiscuous mode [ 576.401548][T31679] vxcan1: left promiscuous mode [ 576.435915][T31679] hsr0: left promiscuous mode [ 576.557876][T31679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.568989][T31679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.590678][T31679] bridge2: left promiscuous mode [ 576.604409][T31679] 8021q: adding VLAN 0 to HW filter on device bond4 [ 576.776802][T31689] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7227'. [ 576.884750][T31696] tipc: Enabled bearer , priority 0 [ 576.978578][T31696] syzkaller0: entered promiscuous mode [ 576.989071][T31696] syzkaller0: entered allmulticast mode [ 577.001995][T31696] tipc: Resetting bearer [ 577.049460][T31695] tipc: Resetting bearer [ 577.236961][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7238'. [ 577.246693][T31722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7238'. [ 577.264042][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7238'. [ 577.276040][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7238'. [ 577.355498][T31695] tipc: Disabling bearer [ 577.363316][T31728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7236'. [ 577.387761][T31727] tipc: Enabling of bearer rejected, failed to enable media [ 577.688548][T31752] netlink: 'syz.5.7248': attribute type 12 has an invalid length. [ 577.692210][T31741] 8021q: adding VLAN 0 to HW filter on device bond5 [ 577.930273][T31769] netlink: 'syz.5.7252': attribute type 32 has an invalid length. [ 578.074496][T31777] veth1_macvtap: entered promiscuous mode [ 578.080490][T31777] veth1_macvtap: entered allmulticast mode [ 578.113106][T31775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.116855][T31780] netlink: 'syz.0.7257': attribute type 1 has an invalid length. [ 578.129596][T31781] netlink: 'syz.0.7257': attribute type 1 has an invalid length. [ 578.140287][T31775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.182842][T31781] 8021q: adding VLAN 0 to HW filter on device bond13 [ 578.203901][T31780] bond13: (slave geneve5): making interface the new active one [ 578.214241][T31780] bond13: (slave geneve5): Enslaving as an active interface with an up link [ 578.310517][T31789] netlink: 'syz.0.7259': attribute type 24 has an invalid length. [ 578.663640][T31801] xt_TCPMSS: Only works on TCP SYN packets [ 578.717797][T31803] C: renamed from lo (while UP) [ 578.834577][T31803] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 579.748656][T31840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.818032][T31844] sctp: [Deprecated]: syz.0.7274 (pid 31844) Use of int in max_burst socket option deprecated. [ 579.818032][T31844] Use struct sctp_assoc_value instead [ 579.889534][T31848] netlink: 'syz.1.7277': attribute type 1 has an invalid length. [ 580.285225][T31871] netlink: 'syz.4.7283': attribute type 1 has an invalid length. [ 580.327909][T31872] netlink: 'syz.4.7283': attribute type 1 has an invalid length. [ 580.405174][T31884] netlink: 'syz.5.7288': attribute type 3 has an invalid length. [ 580.428722][T31884] netlink: 'syz.5.7288': attribute type 3 has an invalid length. [ 580.438088][T31884] __nla_validate_parse: 12 callbacks suppressed [ 580.438103][T31884] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7288'. [ 580.499768][T31886] veth3: entered allmulticast mode [ 580.711127][T31901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.788541][T31901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7294'. [ 580.871127][T31913] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.7296'. [ 580.898107][T31917] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7294'. [ 580.933657][T31911] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 581.084110][T31927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7301'. [ 581.179477][T31934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7303'. [ 581.237935][T31934] nbd: must specify at least one socket [ 581.732715][T31962] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 581.764028][T31963] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.816597][T31963] bridge_slave_0 (unregistering): left allmulticast mode [ 581.852937][T31963] bridge_slave_0 (unregistering): left promiscuous mode [ 581.858324][T31970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7316'. [ 581.873115][T31963] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.069658][T31987] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7321'. [ 582.332155][T32004] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7327'. [ 582.364908][T32004] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7327'. [ 582.403310][T32006] syzkaller0: entered promiscuous mode [ 582.421653][T32006] syzkaller0: entered allmulticast mode [ 582.470980][T32016] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 582.755369][T32040] validate_nla: 5 callbacks suppressed [ 582.755386][T32040] netlink: 'syz.1.7339': attribute type 27 has an invalid length. [ 582.783968][T32040] netlink: 'syz.1.7339': attribute type 1 has an invalid length. [ 582.869902][T32040] tipc: Enabling of bearer rejected, failed to enable media [ 582.913378][T32040] gretap0: entered promiscuous mode [ 582.928052][T32040] gretap0: entered allmulticast mode [ 583.158415][T32067] netlink: 'syz.0.7347': attribute type 28 has an invalid length. [ 583.174634][T32067] netlink: 'syz.0.7347': attribute type 3 has an invalid length. [ 583.271521][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 583.717194][T32107] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004 [ 584.010601][T32137] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 586.866329][T32126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.048108][T32171] __nla_validate_parse: 16 callbacks suppressed [ 587.048124][T32171] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.7378'. [ 587.314507][T32195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7385'. [ 587.723044][T32225] x_tables: duplicate entry at hook 2 [ 587.888666][T32239] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7392'. [ 588.054520][T32248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7396'. [ 588.202740][T32248] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 588.225599][T32248] bond4 (unregistering): Released all slaves [ 588.320773][T32275] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7401'. [ 588.370360][T32253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7398'. [ 588.412261][T32278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7401'. [ 588.479448][T32257] bond14: entered promiscuous mode [ 588.488324][T32257] bond14: entered allmulticast mode [ 588.586493][T32291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7404'. [ 588.618406][T32290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7404'. [ 588.669635][T32295] IPVS: set_ctl: invalid protocol: 60 172.20.20.27:20000 [ 589.129484][T32329] tipc: Started in network mode [ 589.146667][T32329] tipc: Node identity f2991625215c, cluster identity 4711 [ 589.157800][T32329] tipc: Enabled bearer , priority 0 [ 589.242230][T32335] xt_nat: multiple ranges no longer supported [ 589.327045][T32329] syzkaller0: entered promiscuous mode [ 589.352598][T32329] syzkaller0: entered allmulticast mode [ 589.366796][T32329] tipc: Resetting bearer [ 589.395975][T14094] tipc: Resetting bearer [ 589.444875][T32328] tipc: Resetting bearer [ 589.643705][T32361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7427'. [ 589.664236][T32328] tipc: Disabling bearer [ 589.846481][T32369] netlink: 'syz.1.7431': attribute type 12 has an invalid length. [ 589.927538][T32369] bond6: option primary_reselect: invalid value (255) [ 589.945691][T32369] bond6 (unregistering): Released all slaves [ 590.473600][ T5623] Bluetooth: hci3: command 0x0405 tx timeout [ 590.588945][T32428] 8021q: adding VLAN 0 to HW filter on device eth0 [ 590.599902][T32428] 8021q: adding VLAN 0 to HW filter on device eth1 [ 590.612791][T32428] 8021q: adding VLAN 0 to HW filter on device eth2 [ 590.621775][T32428] 8021q: adding VLAN 0 to HW filter on device eth3 [ 590.660286][T32428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.707202][T26553] syz0: Port: 1 Link ACTIVE [ 590.724929][T14094] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.732549][T14094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.745511][T14094] bridge0: port 1(veth1_to_bridge) entered blocking state [ 590.753181][T14094] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 590.762908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.776249][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.789401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.802572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.815636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.828740][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.841751][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.854908][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.867907][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.881056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.513653][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 595.771253][ C1] net_ratelimit: 61415 callbacks suppressed [ 595.771274][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.773141][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 595.777383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 595.777487][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.790268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.801424][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.801530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.801667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.801795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 595.801904][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.636947][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 600.781235][ C1] net_ratelimit: 70507 callbacks suppressed [ 600.781257][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 600.781315][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.787316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.787422][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.787508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.800552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.811657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.811791][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 600.811900][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.812029][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.994955][ C1] sched: DL replenish lagged too much [ 603.744671][ T5623] Bluetooth: hci6: command 0x0406 tx timeout [ 605.791189][ C1] net_ratelimit: 72684 callbacks suppressed [ 605.791212][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.791306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.797285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 605.797429][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.797501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.810517][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 605.821457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.821601][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.821765][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 605.821875][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.801175][ C1] net_ratelimit: 72958 callbacks suppressed [ 610.801195][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.801416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.807625][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 610.820268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.831477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 610.831613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.831691][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.831780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.831909][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.844719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.414846][T32464] Bluetooth: hci0: command 0x0401 tx timeout [ 615.811286][ C1] net_ratelimit: 70531 callbacks suppressed [ 615.811307][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 615.811309][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.811468][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.817365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.817444][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.817531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.817652][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.830339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.841591][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 615.841720][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 620.821213][ C1] net_ratelimit: 72474 callbacks suppressed [ 620.821233][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.821233][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.827289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 620.827445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 620.827565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.840404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.851636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.851753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.851904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.852038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 625.831228][ C0] net_ratelimit: 72164 callbacks suppressed [ 625.831259][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 625.831259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.831437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.837318][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 625.837438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.837516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.850315][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.861570][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.861779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.861919][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 630.841201][ C1] net_ratelimit: 73972 callbacks suppressed [ 630.841220][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 630.841265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.847283][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 630.847405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.847478][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.860267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.871459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.871600][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.871728][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 630.871882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 635.851209][ C1] net_ratelimit: 73292 callbacks suppressed [ 635.851230][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 635.851253][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.857280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 635.857409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.857483][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.870470][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.881555][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.881767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.881896][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 635.882012][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 640.861227][ C1] net_ratelimit: 75861 callbacks suppressed [ 640.861241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.861246][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 640.861571][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.867297][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.867374][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.867456][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.880307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.891595][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.891726][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 640.891845][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 644.713344][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 645.871171][ C1] net_ratelimit: 74768 callbacks suppressed [ 645.871191][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.871235][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.877200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.877286][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.877421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.890181][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.901454][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 645.901576][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 645.901703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.901779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.881210][ C1] net_ratelimit: 77792 callbacks suppressed [ 650.881230][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.881242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.881389][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.887252][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.887352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.887480][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.900183][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.911858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 650.924541][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.935844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 655.891214][ C1] net_ratelimit: 79373 callbacks suppressed [ 655.891235][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.893270][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.897324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 655.897442][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 655.910179][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.921408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.921501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.921590][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.921719][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.921842][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 660.901193][ C1] net_ratelimit: 79071 callbacks suppressed [ 660.901214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.901301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.907285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.907412][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 660.907522][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 660.920222][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.931402][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.931521][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.931606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.931759][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.911229][ C1] net_ratelimit: 80211 callbacks suppressed [ 665.911250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.912763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.917393][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.930130][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.941346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 665.941469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 665.941583][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.941657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.941739][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.954560][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.921202][ C1] net_ratelimit: 80510 callbacks suppressed [ 670.921203][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.921220][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 670.921328][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 670.927808][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.939284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.939404][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.939490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.939618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.939739][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 670.952523][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.931179][ C1] net_ratelimit: 80024 callbacks suppressed [ 675.931185][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.931200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 675.931305][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.937608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.949122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.949215][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.949386][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.949523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 675.949642][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 675.962412][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.941202][ C1] net_ratelimit: 79830 callbacks suppressed [ 680.941224][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.941243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.947238][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.947329][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.947460][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.960211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.971506][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 680.971633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 680.971751][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.971830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.951239][ C0] net_ratelimit: 80914 callbacks suppressed [ 685.951265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 685.951279][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.951442][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.957323][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 685.957443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.957516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.970304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.981496][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.981644][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.981769][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 690.961195][ C1] net_ratelimit: 81062 callbacks suppressed [ 690.961217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.961216][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.961376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.967254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.967386][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.967793][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 690.980184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.991491][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 690.991616][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.991693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.971209][ C1] net_ratelimit: 80494 callbacks suppressed [ 695.971230][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.971256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.977305][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.977437][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 695.977551][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 695.990184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.001407][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.001490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.001577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.002053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.981180][ C0] net_ratelimit: 79878 callbacks suppressed [ 700.981184][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.981210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.987246][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.987376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 700.987495][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 701.000179][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.011422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.011514][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.011602][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.011731][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.043462][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 705.991253][ C0] net_ratelimit: 80451 callbacks suppressed [ 705.991255][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 705.991291][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.997322][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.997403][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.997487][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.010286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.021617][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.021759][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 706.021926][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 706.022040][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.001203][ C1] net_ratelimit: 80749 callbacks suppressed [ 711.001217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 711.001223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.001393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.007224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.007309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.007436][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.007550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 711.020166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.031407][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 711.031535][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.761170][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 715.768168][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P32450/1:b..l [ 715.776179][ C1] rcu: (detected by 1, t=10503 jiffies, g=132165, q=65299 ncpus=2) [ 715.784181][ C1] task:syz.4.7454 state:R running task stack:24792 pid:32450 tgid:32450 ppid:26221 task_flags:0x400040 flags:0x00080000 [ 715.797683][ C1] Call Trace: [ 715.800974][ C1] [ 715.803919][ C1] __schedule+0x17d9/0x56c0 [ 715.808554][ C1] ? __pfx___schedule+0x10/0x10 [ 715.813426][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 715.818482][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 715.823880][ C1] preempt_schedule_common+0x82/0xd0 [ 715.829188][ C1] ? nl80211_netlink_notify+0x6f4/0x840 [ 715.834853][ C1] preempt_schedule_thunk+0x16/0x40 [ 715.840077][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 715.845431][ C1] __local_bh_enable_ip+0xe1/0x130 [ 715.850571][ C1] nl80211_netlink_notify+0x6f4/0x840 [ 715.855965][ C1] ? nl80211_netlink_notify+0x74/0x840 [ 715.861453][ C1] notifier_call_chain+0x1a5/0x3d0 [ 715.866641][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 715.872393][ C1] netlink_release+0x11f8/0x1aa0 [ 715.877509][ C1] ? netlink_release+0x106/0x1aa0 [ 715.882570][ C1] ? __pfx_netlink_release+0x10/0x10 [ 715.887880][ C1] ? down_write+0x16d/0x200 [ 715.892490][ C1] ? __pfx_down_write+0x10/0x10 [ 715.897366][ C1] sock_close+0xad/0x220 [ 715.901633][ C1] ? __pfx_sock_close+0x10/0x10 [ 715.906499][ C1] __fput+0x418/0xa50 [ 715.910537][ C1] task_work_run+0x1d9/0x270 [ 715.915146][ C1] ? __pfx_task_work_run+0x10/0x10 [ 715.920275][ C1] ? rcu_is_watching+0x15/0xb0 [ 715.925060][ C1] exit_to_user_mode_loop+0x1fa/0x730 [ 715.930453][ C1] ? rcu_is_watching+0x15/0xb0 [ 715.935236][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.941325][ C1] do_syscall_64+0x353/0x580 [ 715.945937][ C1] ? trace_irq_disable+0x3b/0x140 [ 715.950988][ C1] ? clear_bhb_loop+0x40/0x90 [ 715.955682][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.961588][ C1] RIP: 0033:0x7f280c39ce59 [ 715.966020][ C1] RSP: 002b:00007ffc0a46e678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 715.974449][ C1] RAX: 0000000000000000 RBX: 00007f280c617da0 RCX: 00007f280c39ce59 [ 715.982442][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 715.990433][ C1] RBP: 00007f280c617da0 R08: 0000000000000006 R09: 0000000000000000 [ 715.998415][ C1] R10: 00007f280c617cb0 R11: 0000000000000246 R12: 00000000000908b8 [ 716.006404][ C1] R13: 00007f280c615fac R14: 00000000000906c7 R15: 00007ffc0a46e780 [ 716.011212][ C0] net_ratelimit: 78208 callbacks suppressed [ 716.011241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.014397][ C1] [ 716.014409][ C1] rcu: rcu_preempt kthread starved for 7278 jiffies! g132165 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 716.014431][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 716.014441][ C1] rcu: RCU grace-period kthread stack dump: [ 716.014449][ C1] task:rcu_preempt state:R running task stack:28152 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 716.014507][ C1] Call Trace: [ 716.014514][ C1] [ 716.014524][ C1] __schedule+0x17d9/0x56c0 [ 716.014553][ C1] ? rcu_is_watching+0x15/0xb0 [ 716.014580][ C1] ? rcu_is_watching+0x15/0xb0 [ 716.020945][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.032400][ C1] ? __pfx___schedule+0x10/0x10 [ 716.032421][ C1] ? schedule+0x90/0x360 [ 716.032440][ C1] ? rcu_is_watching+0x15/0xb0 [ 716.032459][ C1] ? lock_release+0x4b/0x3c0 [ 716.032490][ C1] schedule+0x164/0x360 [ 716.032511][ C1] schedule_timeout+0x152/0x2c0 [ 716.032532][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 716.032551][ C1] ? __pfx_process_timeout+0x10/0x10 [ 716.032577][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 716.032598][ C1] ? prepare_to_swait_event+0x322/0x350 [ 716.032623][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 716.032656][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 716.032674][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 716.032700][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 716.032725][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 716.032753][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 716.032779][ C1] ? __kthread_parkme+0x71/0x1f0 [ 716.032804][ C1] ? __kthread_parkme+0x196/0x1f0 [ 716.032830][ C1] kthread+0x388/0x470 [ 716.032847][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 716.032872][ C1] ? __pfx_kthread+0x10/0x10 [ 716.032889][ C1] ret_from_fork+0x514/0xb70 [ 716.032947][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 716.032965][ C1] ? __switch_to+0xc89/0x1420 [ 716.032991][ C1] ? __pfx_kthread+0x10/0x10 [ 716.033008][ C1] ret_from_fork_asm+0x1a/0x30 [ 716.033036][ C1] [ 716.033045][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 716.033060][ C1] Sending NMI from CPU 1 to CPUs 0: [ 716.038503][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.047269][ C0] NMI backtrace for cpu 0 [ 716.047285][ C0] CPU: 0 UID: 0 PID: 13357 Comm: kworker/R-bond1 Not tainted syzkaller #0 PREEMPT(full) [ 716.047304][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 716.047316][ C0] Workqueue: bond10 bond_alb_monitor [ 716.047463][ C0] RIP: 0010:sched_clock_noinstr+0x0/0x20 [ 716.047485][ C0] Code: 02 80 96 98 00 48 bb 00 b8 64 d9 c5 69 67 ff 48 01 c3 eb 8b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 e9 87 27 00 00 cc cc cc cc cc cc cc 90 90 90 90 90 90 [ 716.047499][ C0] RSP: 0018:ffffc90000006b40 EFLAGS: 00000082 [ 716.047512][ C0] RAX: ffffffff816b2c6b RBX: 0000000000000000 RCX: ffff88804edf1f00 [ 716.047524][ C0] RDX: 0000000000010100 RSI: ffffffff8c291100 RDI: 0000000000000000 [ 716.047535][ C0] RBP: ffffc90000006c38 R08: 0000000000000001 R09: 0000000000000000 [ 716.047546][ C0] R10: dffffc0000000000 R11: fffff52000000d7c R12: ffff88804edf1f00 [ 716.047558][ C0] R13: dffffc0000000000 R14: ffffc90000006bc0 R15: 1ffff92000000d74 [ 716.047571][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 716.047584][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.047595][ C0] CR2: 00007f1c113234bb CR3: 00000000555d2000 CR4: 00000000003526f0 [ 716.047610][ C0] Call Trace: [ 716.047617][ C0] [ 716.047624][ C0] sched_clock+0x17/0x60 [ 716.047649][ C0] sched_clock_cpu+0x74/0x440 [ 716.047672][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.047689][ C0] ? lock_acquire+0x5f/0x350 [ 716.047712][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 716.047731][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 716.047753][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 716.047775][ C0] psi_account_irqtime+0x1e1/0x6d0 [ 716.047802][ C0] sched_tick+0x145/0x850 [ 716.047824][ C0] update_process_times+0x26f/0x2f0 [ 716.047849][ C0] tick_nohz_handler+0x38f/0x6b0 [ 716.047867][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.047883][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 716.047897][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 716.047912][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 716.047931][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 716.047946][ C0] __hrtimer_run_queues+0x371/0xa10 [ 716.047971][ C0] hrtimer_interrupt+0x448/0x910 [ 716.048000][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 716.048032][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 716.048052][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.048069][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 716.048087][ C0] Code: 0f 84 44 ff ff ff e8 d2 52 21 00 fb eb 44 e8 ca 52 21 00 e8 b5 21 03 0a 4d 85 f6 74 94 e8 bb 52 21 00 fb 48 c7 c7 80 bd 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 ab 1c [ 716.048100][ C0] RSP: 0018:ffffc900000070e0 EFLAGS: 00000246 [ 716.048113][ C0] RAX: ffffffff81a4a365 RBX: ffffffff81a4a1df RCX: ffff88804edf1f00 [ 716.048125][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff8e94bd80 [ 716.048136][ C0] RBP: ffffc90000007190 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 716.048148][ C0] R10: dffffc0000000000 R11: fffffbfff20622df R12: 0000000000000000 [ 716.048159][ C0] R13: 000000000000006f R14: 0000000000000200 R15: 1ffff92000000e20 [ 716.048172][ C0] ? vprintk_emit+0x2cf/0x560 [ 716.048188][ C0] ? vprintk_emit+0x455/0x560 [ 716.048210][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 716.048230][ C0] _printk+0xdd/0x130 [ 716.048258][ C0] ? __pfx__printk+0x10/0x10 [ 716.048279][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 716.048297][ C0] ? ___ratelimit+0x584/0x8e0 [ 716.048348][ C0] br_fdb_update+0x657/0x6c0 [ 716.048419][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 716.048435][ C0] ? lapic_next_event+0x11/0x20 [ 716.048454][ C0] br_handle_frame_finish+0x618/0x1990 [ 716.048475][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.048493][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.048508][ C0] ? trace_irq_enable+0x3b/0x140 [ 716.048529][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 716.048549][ C0] ? irqentry_exit+0x218/0x8f0 [ 716.048574][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 716.048626][ C0] ? nf_hook_slow+0x176/0x220 [ 716.048693][ C0] br_nf_pre_routing_finish+0x138a/0x1a10 [ 716.048721][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 716.048741][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.048757][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 716.048777][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.048793][ C0] ? lock_release+0x4b/0x3c0 [ 716.048820][ C0] ? nf_hook_slow+0x182/0x220 [ 716.048837][ C0] ? NF_HOOK+0xa2/0x6e0 [ 716.048856][ C0] NF_HOOK+0x64e/0x6e0 [ 716.048875][ C0] ? net_generic+0x1e/0x240 [ 716.048895][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 716.048915][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 716.048937][ C0] ? net_generic+0x1f4/0x240 [ 716.048956][ C0] ? setup_pre_routing+0x4d2/0x6e0 [ 716.048977][ C0] br_nf_pre_routing+0xec2/0x14b0 [ 716.048997][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 716.049021][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 716.049041][ C0] br_handle_frame+0x127f/0x1510 [ 716.049086][ C0] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 716.049104][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 716.049125][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 716.049146][ C0] ? lapic_next_event+0x11/0x20 [ 716.049162][ C0] ? clockevents_program_event+0x491/0x630 [ 716.049182][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 716.049201][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 716.049260][ C0] ? get_random_u32+0x13a/0x8b0 [ 716.049314][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.049334][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 716.049353][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.049374][ C0] ? lock_acquire+0x5f/0x350 [ 716.049396][ C0] ? process_backlog+0x3c3/0x1860 [ 716.049416][ C0] ? process_backlog+0x3c3/0x1860 [ 716.049435][ C0] process_backlog+0x706/0x1860 [ 716.049456][ C0] ? process_backlog+0x3c3/0x1860 [ 716.049480][ C0] __napi_poll+0xaa/0x330 [ 716.049498][ C0] net_rx_action+0x61d/0xf50 [ 716.049522][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 716.049540][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 716.049601][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.049621][ C0] ? net_tx_action+0xbff/0xc30 [ 716.049642][ C0] handle_softirqs+0x225/0x840 [ 716.049664][ C0] ? __irq_exit_rcu+0xca/0x220 [ 716.049686][ C0] __irq_exit_rcu+0xca/0x220 [ 716.049705][ C0] irq_exit_rcu+0x9/0x30 [ 716.049723][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 716.049743][ C0] [ 716.049748][ C0] [ 716.049755][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.049771][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 716.049789][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ba 74 f7 f5 48 89 df e8 12 ea f7 f5 e8 8d a6 23 f6 fb bf 01 00 00 00 72 01 e9 f5 65 8b 05 bb c3 8f 07 85 c0 74 07 5b c3 cc cc cc cc [ 716.049808][ C0] RSP: 0018:ffffc9001c737ad0 EFLAGS: 00000246 [ 716.049822][ C0] RAX: 0000000000000001 RBX: ffff88801aea3000 RCX: 0000000080000002 [ 716.049833][ C0] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: 0000000000000001 [ 716.049843][ C0] RBP: ffffc9001c737ce0 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 716.049854][ C0] R10: dffffc0000000000 R11: fffffbfff20622df R12: 0000000002000000 [ 716.049866][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888036345378 [ 716.049884][ C0] process_scheduled_works+0x90f/0x14e0 [ 716.049916][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 716.049934][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 716.049954][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 716.049974][ C0] ? assign_work+0x3af/0x5d0 [ 716.049994][ C0] rescuer_thread+0x7b6/0x10b0 [ 716.050018][ C0] ? rescuer_thread+0xb8/0x10b0 [ 716.050047][ C0] kthread+0x388/0x470 [ 716.050061][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 716.050082][ C0] ? __pfx_kthread+0x10/0x10 [ 716.050096][ C0] ret_from_fork+0x514/0xb70 [ 716.050112][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 716.050127][ C0] ? __switch_to+0xc89/0x1420 [ 716.050149][ C0] ? __pfx_kthread+0x10/0x10 [ 716.050163][ C0] ret_from_fork_asm+0x1a/0x30 [ 716.050188][ C0] [ 716.050503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.050673][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.050799][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 716.061503][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 716.066813][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 716.068356][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.081362][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.209151][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 721.021234][ C0] net_ratelimit: 73015 callbacks suppressed [ 721.021259][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.021267][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.027322][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 721.027445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0) [ 721.027552][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.040465][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.051583][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.051678][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.051812][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.051938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:b1:40:59:36:34, vlan:0)