last executing test programs: 1m1.209562437s ago: executing program 4 (id=2764): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r4, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) (async) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1m0.626515241s ago: executing program 2 (id=2770): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000000950ff5847c0edc1de025c3af779054f47f6199af23deb422ce1997121a11e17003a8b208c0a96bee0e1e15dcaadb7988fede65c3559b028576696aa4f21ead7f5dae27a8a310d85b8a46322f3c13407572d580e8d8be0fd499cb8dc208d88010a330b64a6564574f44294b3b552e134297e900125a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30}, 0x94) 1m0.448447845s ago: executing program 3 (id=2771): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111dc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, '\x00\a\x00', 0x0, 0x2b, 0x0, @private1, @mcast2}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close(0x3) 1m0.355900817s ago: executing program 1 (id=2772): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x7d657abba23478d3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x0, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000005}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000500)={{r4, &(0x7f0000000140)='\x00', 0x0, &(0x7f0000000200)={@_ha_fsid={[0x8, 0x1]}, {0xffff, 0x6, 0x3a2, 0x9}}, 0x5000, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7e8}, {[0x5, 0x4, 0x30, 0x9]}, 0x1, 0x93, &(0x7f0000000440)=""/147}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x30, r9, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x30}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x16, 0xc0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000080) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r12, 0x5452, &(0x7f0000000000)=0xbe3) close(r12) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8}, 0x94) 1m0.337650956s ago: executing program 2 (id=2773): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x8044) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [@call={0x85, 0x0, 0x0, 0xc8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x1a, &(0x7f00000001c0)=""/26, 0x40f00, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x6, 0xd75, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x3, 0x5, 0x6, 0x7}, {0x4, 0x5, 0xd, 0x7}], 0x10, 0x6}, 0x94) pipe(&(0x7f0000000400)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x42c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{}, [@dev, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @private}, @local, @mcast2, @empty, @mcast2, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast1, @local, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @empty, @mcast2, @mcast2, @private0, @private2, @mcast2, @dev, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @loopback, @local, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @empty, @local, @private1, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev]}}}]}, 0x42c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m0.192119704s ago: executing program 0 (id=2774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x7, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x7, &(0x7f0000000040)=0x2, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000003c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010900000000000000000500000a60000000060a0b0400000000000000000000000034000480300001800a0001006d61746368000000200002800c0001007261746565737400080002400000000208000100627066000900010073797a30000000000900020073797a320000000020000000000a010200000000000000000000000a0900010073797a3100000000140000001100010000000000000000000000000a"], 0xa8}}, 0x4048010) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010900000000000000000500000a60000000060a0b0400000000000000000000000034000480300001800a0001006d61746368000000200002800c0001007261746565737400080002400000000208000100627066000900010073797a30000000000900020073797a320000000020000000000a010200000000000000000000000a0900010073797a3100000000140000001100010000000000000000000000000a"], 0xa8}}, 0x4048010) 1m0.046615899s ago: executing program 4 (id=2775): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x4, 0x0, '\x00', 0x1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'veth0_to_bond\x00', {'pimreg0\x00'}, 0x7}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='\x00', 0x680, &(0x7f0000000180)={@align=0x8, {0x2, 0xb050, 0x1, 0xffffffffffffffff}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1}) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x20004005) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000380)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x50) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$nci(r5, &(0x7f00000005c0)=""/150, 0x96) connect$l2tp(r2, &(0x7f0000000680)={0x2, 0x0, @private=0xa010102, 0x1}, 0x10) bind$pptp(r2, &(0x7f00000006c0)={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x1e) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r3) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x4000005) r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f0000000980)) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000ac0)={@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, {&(0x7f00000009c0)=""/190, 0xbe}, &(0x7f0000000a80)}, 0xa0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000b80)=0xffff, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4850) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000d40)) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, &(0x7f0000000e00)={{@align=0xd, {0xc, 0xf0d, 0x8, 0xffffffffffffffd3}}, {{[0xfffffbff, 0x2, 0x8, 0xa7]}, 0x0, 0x0, 0x1d12, 0x0, &(0x7f0000000d80)=[{{@_ha_fsid={[0xf81, 0x7]}, {0x6, 0x7, 0x703, 0x822a}}, 0x8, 0x0, '#:^[\x00'}, {{@align=0xc0e7, {0x6, 0x4, 0xf, 0x2}}, 0x100, 0x0, 'nfc\x00'}, {{@_ha_fsid={[0x0, 0x4]}, {0x4, 0xfe}}, 0x8, 0x0, ':%\x00'}]}}) pipe(&(0x7f0000000e40)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x12, r11, 0x561bf000) 59.866419396s ago: executing program 2 (id=2776): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2], 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="a9", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0642ea070aeebc00c551f0367eb7dd87abb4bd1a36e41c02455f845ff", 0xe0}, {&(0x7f0000000740)="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", 0x71f}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001) splice(r5, 0x0, r3, 0x0, 0x800, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 59.706516795s ago: executing program 0 (id=2777): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="1c0300002e00010003000000fcdbdf250b03f3800c00e5800800da00", @ANYRES32=0x0, @ANYBLOB="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"], 0x31c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000900)={0x3c4, 0x3e, 0x800, 0x70bd28, 0x25dfdbfb, {0x1}, [@generic="219bb3b6c7523fbf52b365c7f2c30e3d39f6cf18008995e608891814ee3c43", @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x22f, 0xf7, 0x0, 0x1, [@nested={0x4, 0x12c}, @generic, @generic="9dff860184b1200bb61ee7669fffe402b2d583edf56307e1e69871231a625f5ded69835de0fefb129f05651b769a6bf0e25f1177d544624e4b918a31cc03b1f237b36ae1604fc04a04eb2f4d063c8abe0233ec", @generic="bc0c5c3eddab18407d1fcd49a5ab89736f0df4eb9971ebc9750c3a6182e097b3c53aecaa7a041dcd3570d2a92c77c0957012c774b9867cd6f440830271c31e1ac808b2b393a9a3f505a7ab4732ed1afec2efa483928cbb1eafcee19b451b420595db2741bcd473a36ea227c38b8463719db481cba9313a5e3a143a36968b600e33ad5b62b5ebc4791c585bbce2458a33124d65ac05d80a622a04293e4478da78a0a3f526217b0cb873fd6e6334734b31ce6d26fbcd72caeb08b4d7d3be2c1a1e37f6128d5e50728d852212c9157518d27e635b5addacef1ab20c7287c7e7ac5ca58bb1b7a5a7ff9c34", @nested={0x4, 0xea}, @typed={0x60, 0xac, 0x0, 0x0, @binary="2b983a24eefc29f34cc598cc3a015e526de93976558c3ab872321d7a1923cd74f162546201e86fd72efb67fa96b4379f68e1dd2e8376a0b020f23ffc2787f0987d7a7159e3cc602e14eda8032a4a62df44d35493d7bb1849aba5a964"}, @generic="b78192e84432012ccb011aeb4d2afb6089b44f524a5a1a214ea23433a6fbaeb78c4bb06b931bb395466e17a903bf2893ec7d52b1e0fb1848911e3132d86a647e12dc4de3e52a722a26d80a80c4861c7e8f0b4d7475578f10a7ad6a1d90fee82a12840d2d79af3239", @nested={0x4, 0xbb}, @generic="17766460cac90dab33d2c47c110f76d96140d50500f98ae7bf7e83"]}, @generic="49a1c5906a0c6a371800bdfc22c335b0289598672723b97ee1ddb845da0ce48f934caa9a7f10844b48d1f11a5deefe5ed3d4927b6782a62b55f05e6701064d8a4ec86657ddf6c6af74ad432b7a1500d17d24a43134dbf1d2f9cd3bbb5dcffbae34507867055d3658e82d8f60f01598c461eb23c83236571f", @generic="c5767e81b51ecba2d73b7b6e2ec2ae25c4a1f9cc4f78e756be74dd5f1ebc44279e12242419978a8a86f21a1bc7de435cf53006448a9e0e4d38c97965c68462400181d17671e591d9f4baa6c6dfc921136a328f304aca337f4ad42ea8156159c7c705d9d6abea9074d0ea4d889c2a9d78c9042e9206dcef81b82685eff1bd05d7c976bb7cb26ca3ff092a37cf5f99f6232193a96609850115c2ffcd41dd834acf2a221e90a77a149e4d3efae2e6980014af58686a340221d1ccad4825f9631a4f5576b8cbab4ded879eedef4a8dd7b296e919b9acf58aea", @typed={0x8, 0x143, 0x0, 0x0, @fd=r2}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r3, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r4, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f00000002c0), &(0x7f0000000340)=r7}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 59.584636403s ago: executing program 0 (id=2778): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0xfffffffa}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 59.444566197s ago: executing program 3 (id=2779): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x50, &(0x7f00000002c0)="591d14dd74bfe4dee5cd8101fba1b35da94c272350df0c23f15eb565364b238eefdf249e9acc0230cd714c9bbaff25cfc06a2c09ed6f6ebfd11f0b42", 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x5, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180100000000000029000000040000"], 0x118}}], 0x1, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="660a00000d040000008eafd89be3203e7b70eda71f9e6b86cbceb77f4768650da641ec163141144bc09cb2341a57f923cfc4b1ca6736a446c107b9ea3e00"/94], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x80, 0x1, 0x0, 0xfffffffe}, {0x6, 0x0, 0x10}]}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a001000010000100000000000000000000000000000000000000000000000001000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x8000000000000c, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r6, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r1, 0x13, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)}, 0x40) 59.092675001s ago: executing program 3 (id=2780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x8f7b80029b167919, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) 59.043646295s ago: executing program 2 (id=2781): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x8, 0x1, 0x7ff}, &(0x7f0000000240)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@deltfilter={0xafc, 0x2d, 0x30a, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x9, 0x4}, {0x5, 0x9}, {0x0, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xad0, 0x2, [@TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5e44}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0x5, 0x9, 0x6, 0xcb1, 0x73c7, 0x6c, 0x8b, 0xfffffff7, 0xfffffffa, 0x8, 0x8, 0xa23e, 0x1, 0x7, 0x40, 0x7fff, 0x4, 0x4, 0x3c2ba5f1, 0x401, 0x8000, 0x7ff, 0x5, 0xffffffff, 0x200, 0x6, 0x0, 0x2, 0xfffffffb, 0x1000, 0xe, 0xf7, 0xffffffff, 0x81, 0xffffffff, 0x7f, 0xffffc626, 0x6, 0x91, 0xfffffe00, 0x3, 0x5, 0x6, 0x7fff, 0x25ef, 0x1b9, 0x6, 0x7, 0x80000001, 0x6, 0x8, 0xfff, 0x8001, 0x3, 0xfff, 0x3, 0x8, 0x7, 0x83, 0x10001, 0x20fd6ac6, 0xe1, 0x3ff, 0xffffffff, 0x29, 0x9, 0x400, 0x694, 0x890f, 0x6, 0x8, 0x1, 0x81, 0x7, 0xf, 0x9, 0xfff, 0x6, 0x2, 0x1, 0xf, 0x1, 0x7, 0xd733, 0x3, 0x3, 0x8e, 0x3, 0x1, 0xa9, 0x23, 0xc0000000, 0x9, 0x56b, 0x1, 0xb2, 0x0, 0x7fff, 0xbf38, 0x6, 0x0, 0x8f, 0x5, 0x4, 0x8, 0xa, 0x4, 0x6, 0x7, 0xf7, 0x9, 0x0, 0x0, 0x8aa1, 0x1, 0x10, 0x7fff, 0x0, 0x7, 0xffffffff, 0x8, 0xfffffffe, 0x1, 0xff, 0xf77, 0x3, 0xfffffffe, 0x1, 0x7b51, 0x8, 0xaaa3, 0x3, 0x9, 0x2, 0x6, 0x7, 0x7ff, 0x2, 0x9fca, 0x4, 0x1, 0x6ce2d7ef, 0xa, 0x9, 0x81, 0xc3a, 0xfffffffc, 0xb70, 0x5, 0x0, 0x5, 0x1, 0x20000, 0x9, 0x80, 0x4, 0x3, 0x6, 0x8, 0x59, 0x4c, 0xfffffffb, 0x6, 0xff, 0x7, 0x7, 0x371, 0x5, 0xff, 0x9, 0x5, 0x4, 0x9, 0x69, 0x5, 0x3, 0x7ff, 0xff, 0xbf, 0x5, 0x10000000, 0x9, 0x7, 0xfb2, 0xffffffff, 0x9, 0x8, 0x401, 0xfffffff8, 0x7, 0x7, 0x401, 0x6, 0x9, 0x6, 0x6, 0x2, 0x1ff, 0x5, 0xbb, 0x3, 0x4, 0xffffff00, 0xc, 0x4e, 0xf, 0x0, 0x5, 0x54, 0x3eb, 0x2, 0x6, 0x74, 0x7, 0x30, 0x0, 0x9, 0x101, 0x400, 0xffffffff, 0x8, 0x0, 0x821, 0x8, 0x4, 0x6, 0x4, 0xdae, 0x80000001, 0x0, 0x8, 0x10f9049b, 0x2, 0x2, 0x4, 0x3c43, 0x7ff, 0x1000, 0xfffffffa, 0x9, 0x190, 0x7, 0x9, 0xa, 0x8, 0x0, 0x150, 0xffff, 0x8, 0x7f, 0x2, 0x7f, 0xbb, 0x8]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0x4}}, @TCA_BPF_ACT={0x69c, 0x1, [@m_mirred={0x1e0, 0x17, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0x10000000, 0x6}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x9, 0xffffffffffffffff, 0x10001, 0x2}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5a, 0x4, 0x4, 0x4, 0x400}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200000, 0x7, 0x3, 0x1, 0x10001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0xffffffffffffffff, 0x0, 0x40}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x6, 0x3, 0x5a7b394d}, 0xd76c142d8ea64a27, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xd90, 0x7, 0x200}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x10000000, 0x3, 0xf5b}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x25a280, 0xb, 0x0, 0xf}, 0x2, r4}}]}, {0x91, 0x6, "36cae0436bd21cdf1b0006a75cee9c201d582a36c35195871c49a8f1a10916fb2edb145837f8072910f3664e069b30c670c68cb317ecc53e064b4a421307c08be951b5805ffb3306260f2736cb4055fee77eeb02103fc153ff5fca33b7bf96b73b1e79331e26e829580e9456a8b2844b51f5b4cf7fe4709b364aee47840faa7d6ad7b5c0e1d255dcff31d72380"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x120, 0x7, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x85, 0x81, 0x5, 0x3ff, 0x3}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe9159}, @TCA_MPLS_TTL={0x5, 0x7, 0xf}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0xa7, 0x6, "06aeb05926770ea9672fbb41701f31ee8769ee3aa5468a9c217d2012f24716d4aac6d3c38cecc32884a66eb2c15bff0bf68e66f28db9951a51862d7a0ddf3fcf87916b69934de0bcd6e6d8e9518eefa4ef27c5b92409f7521da1564b8dda63783f0a4533f8d374dafdb6a8e45e5e8cdd1d47dc728c13094b543ef59cd5e967ee76e1aff9441dba08b1b69527993c1d5f8d653ed2f75789213f4c09ced4b43cf23de549"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x144, 0x7, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa, 0x3, 0x6, 0xffff6b30}, {0x2, 0x6, 0x5, 0x2}, {0x7, 0xc0, 0x8, 0xe5b8}, {0x5, 0xdb, 0x4, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xc, 0x7, 0x9ebe, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xab, 0x6, "e123c5cf1a299fe2dc05c6c7749c52ca9f549dc0cf8da9fea5b2ff292c6343a3310ac5297e42efa2aadf5bf2a2773bf9bd7597f81658c4e76fa8bcfe75a146af665c6c4433386ecf9790df36b202a220f1f36adc1f35c6f391df56176351435e5b87388f984566ab37ccc6cc333a85c2090e9d768d056e1510c25a1c6062aff55b583e5260ab5bf22a96f9ac8397f1d8d7490f61453a7075c6cdb08fd9763e509b1c2dff69ad2e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x168, 0xc, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x4, 0x8, 0x5, 0x80}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8001, 0x20000000, 0x2, 0x5}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x0, 0x3, 0x80}, 0x2, r4}}]}, {0xdc, 0x6, "9b351e59f514f1aed2ccb6a4f410759fbd24bd5cc40f12dc722acaf7acfa59771a90bbec0c30c768f653c502149e22876aee2f5ff35bf8bcb447c83925db0e02d4f53b5d153a6a51c28af2345eb847ccea4978c37476ecc164ff891fd3792d2734a5f2227e6236ed18600ccd6e9add4cc92e60a378947f929677e6bbdc7d87dfe9e43f0f36036dfc8bca40fb8f73dc5ec5b1405adbb05fbe29ea04817e36db56a960ce0719c45332ee8b7f7bd66e7c8af4e1a65888f3f4c42fa573b561a957d41fa48b34581121a33a5a896428e7fd91dd5cbef405016348"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0xec, 0xa, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x5, 0x3, 0x3, 0x343d}, @dev={0xac, 0x14, 0x14, 0x1c}, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x2, 0x20000000, 0x1, 0x3}, @multicast2, @broadcast, 0xffffff00}}]}, {0x72, 0x6, "9f2f96d34a889655e77ed7a1884dc3bcfff705948acf6020387ac1a4e0d7d0e85b81a92d17b85f2390ab53306c6539f8293148c60ebdf30c381f27c9e05d20869668e0d78e2bec85c3eafb88dab29329e0df4363b770725989a7aa69b0faa87edf56f1f0122829b48eae64e750eb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS={0x8}]}}]}, 0xafc}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff2}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xcb, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040094}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x2b}], 0x1}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f00000000c0)={r13, 0xff, 0x30}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 59.01954152s ago: executing program 1 (id=2782): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110aa00000000009500002000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006180)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@typed={0x4, 0x1c, 0x0, 0x0, @binary}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0xf1, 0xe, &(0x7f0000000380)=""/14, 0x40f00, 0x2, '\x00', r2, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0xa, 0x5, 0xffff0000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 58.828409473s ago: executing program 0 (id=2783): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) 58.521489433s ago: executing program 4 (id=2784): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x4000000}, 0x4048000) 58.433400847s ago: executing program 1 (id=2785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0], 0x30}}, 0xc000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@get={0x1, &(0x7f0000000280)=""/11, 0x1}) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg$alg(r4, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0xfffe, 0x2}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 58.365700536s ago: executing program 3 (id=2786): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a0b040000000000000000020000001c0004801800018007000100637400000c000280080001400000000c140000001100010000000000000000000000000aa13c61550c981e9dcd6cc38dff4f1e19be4041368f8064cfabcd07acab32226dd03060f8049c10d9a67581002db78e061acba3c4319efa33a2aebf9633ec75c69462c7dbcd00a5074a29dee96a721f1628076d5ffb99f147568b30e45eb9b6021265523bed2b6866d4192a640ce9ec39a1921668582bd5864161a340f688fc72dfb372341cd21384028cd1229d4f90dea04db3fb141e34e69519"], 0x58}}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b080003"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd70c8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce971e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb6365742402", 0x80}, {&(0x7f0000000200)="49ca212b4ee03b192d1048f96cc5eae838645dd5da7cc767a7fa4a8b", 0x1c}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000440)}, 0x20) ioctl$XFS_IOC_GETBMAPA(r6, 0xc020582c, &(0x7f00000004c0)={0x3, 0x400, 0xffff, 0x6, 0x2}) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(r4, &(0x7f0000000180)='ns/ipc\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b9f", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYRES8=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) close(r9) sendmsg$nl_generic(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r7], 0x14}}, 0x8000) 58.150978339s ago: executing program 4 (id=2787): syz_emit_ethernet(0x14a, &(0x7f0000000240)={@multicast, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "2794a5", 0x110, 0x1, 0x0, @mcast1, @rand_addr=' \x01\x00', {[@hopopts={0x3a, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x2b, 0x2, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}], "a8bb79ec496862150bed1939072dd88ad7beccabf5d3da70494cd063bafdd56a0df9086e37afdee0b2e05eb99e9f9808cbf7657f88122473359c52a04ece4c76d228c5279b2762aa02c6839ef8632a33073c85eb83c362d9b2516210b8201d64c9d93b333c7392d4e8e9b3544b46b0a5a85e6e2e70573479b95166b5014ce3d7e0f2f4ca1448d248f17ac0b3a634111e7f8868e919df19422d8214ea63a41ee6a684081323a31bfbdf62d48bc1ca5601dce5f5d6237457cb4ed39670275fed6c8968d8dd328792d8de9f051e6d5d14c5b36ce25623bea4b6"}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ppoll(&(0x7f00000001c0)=[{r0, 0x5107}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)=r4) 57.962471997s ago: executing program 1 (id=2788): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000000000)={0x0, 0x989680}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) 57.853347417s ago: executing program 2 (id=2789): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006002000800a000008002000", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x84, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0xfffffffd, 0x79b}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r4, 0x6, 0x7}, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000141401"], 0x38}}, 0x0) 57.519575104s ago: executing program 1 (id=2790): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbf9, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x12}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400cc05}, 0x48010) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c030180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa1400040044f900000000000000000000000000aa0c00028005000100000000000800074000000000380006800c000380060001000000000014000400fe80000000000000000000000000000014e80400200100"/204], 0xcc}}, 0x0) 57.453001627s ago: executing program 4 (id=2791): getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xff, 0xfffd, 0x2ae7, 0x1, 0xd3, 0x80, 0x6}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180)=r0, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6d, 0x0, &(0x7f0000001040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180a0000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000004000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xffe, &(0x7f0000002e00)=""/4094}, 0x94) 57.306317485s ago: executing program 0 (id=2792): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@deltaction={0x80, 0x31, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x84f}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3fff, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 57.269353511s ago: executing program 3 (id=2793): socket$inet(0x2, 0x3, 0x2) (async) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x11e, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x10b, &(0x7f00000006c0)={@empty, @random="b49950ba4a1b", @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@generic={0x1a, "e1472a5292fd49db95782f48c236860b13145240843ea731fb4ae8d4ebac3517ac59b3412fee0b0bc0636fd1985c91cc1fbed3f1ecfa6121695d8adceaadef9b477d25e9a3a170330fdf9c948cb36b3588ae0a4f42db3077b3157be296fe75798d0a06d789f83d572612314697f34260844275ec8873f4aef413ac27db06514b6d503a5c023c2b58b01901cbb826a96bb3d0f71ef093b7f922be6a88e1d9db13e312a1cff902da5fd17b7f3ec6314dcb1045f122f12eedc2d98659eea413e9e7b61414f15872fcce5181641a0b28740631ed1721835dab69b63a5ce53d931fe072af75e322fb6c0b9833429a5da342866efa2a761f3da32df0"}}}, &(0x7f0000000800)={0x1, 0x3, [0x42, 0x574, 0xd3c, 0x9c]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaa8baaaaaa080045000028006400000282907800000000e000200211009078f4c649903005aacef1f884f1e0000002"], 0x0) 57.090984565s ago: executing program 1 (id=2794): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan1\x00', 0x1000}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r2}, 0x18) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) (async) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x3517, @mcast2, 0x1}}, 0xe, 0x13b}, 0x90) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="b3af85a294ed040000000000000000040000000a00007900020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300"/28], 0x50) r8 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0d2fa5", @ANYRES16=r10, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000040), 0x2, 0x0) 57.01859541s ago: executing program 4 (id=2795): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x240040c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x24000811) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1d3, &(0x7f0000000800)={@broadcast, @link_local, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}, {0x2868, 0x0, 0x1}, {0x8}, {0x80}, {}, {0x101}, {0x7, 0x0, 0x1}, {0x800, 0x0, 0x1}], @ipv6=@tcp={0x1, 0x6, "52c377", 0x179, 0x6, 0xff, @local, @private1, {[@routing={0x31, 0xc, 0x2, 0x0, 0x0, [@private0, @rand_addr=' \x01\x00', @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @loopback]}, @fragment={0x0, 0x0, 0x6, 0x1, 0x0, 0x1, 0x68}], {{0x4e20, 0x4e21, r6, 0x41424344, 0x1, 0x0, 0x7, 0xc2, 0x9, 0x0, 0x200, {[@window={0x3, 0x3, 0x9e}, @window={0x3, 0x3, 0x9}]}}, {"c930468bc2a542353f24c9e42419744b1f8527c0c094c19d02f8f95672256006a2a5a5d0db04e0169a158e4d1aafb3b51da0b03b5a7f51d95897dbc6a817fd467a20d6a50eff3f5c58563aa65e96238ea8ff24057e72e115d9c0fd7008a0de302c3c995e46b2d28916c6680fb56084c8db28fc2f39f1859b6ae1015eacb0dd526a8b1b4a5186db5652a49ba761ba884eeec1c13df0a7e40c64ce27a67be94509bc2f2159162424035bc753d1169b14f626d0ca90ecb8ff7d17908d3eb3251b4e3aaaea741aace809d6b02aac19b1e068541b1748680437d384a700d2a88b58b997e93986ee33e444cef6f91d9f"}}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="0100160000000000000009bbb572f26176d1e28f00000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r5, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x9}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) 56.800336684s ago: executing program 0 (id=2796): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) (async) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f00000005c0)=""/72, 0x48}, {&(0x7f0000000640)=""/25, 0x19}], 0x6, &(0x7f0000000700)=""/13, 0xd}, 0x2}], 0x1, 0x2000, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 56.799471443s ago: executing program 2 (id=2797): socket$pppl2tp(0x18, 0x1, 0x1) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) recvmmsg(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x8057}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/103, 0x67}, {&(0x7f00000028c0)=""/49, 0x31}], 0x6}, 0x9}], 0x2, 0x10020, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="080000000b000000f0a36e"], 0xf) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1c, 0x325, 0x70bd27, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x8e, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$WPAN_WANTACK(r7, 0x0, 0x0, 0x0, 0x0) 52.639002527s ago: executing program 3 (id=2798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xb1dda239664a931d) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000440), r6) r7 = socket(0x1a, 0x800, 0x800) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000004c0)={@rand_addr, 0x0}, &(0x7f0000000500)=0x14) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x82}, 0x4001) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r9, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9aa}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x22}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "72affdedcd214445c0e4e6d68120f105"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000780)={0x3, "e724d4"}, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0), r10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000800)={'wlan0\x00', 0x800}) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), r0) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, r11, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x4}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x81) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r12, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x8, 0x4f}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}]}, 0x30}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r7) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r14, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x0, 0x108, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000c80), {[{{@arp={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0xffffff00, 0x7, 0xb, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x9, 0xff81, 0x9, 0xb, 0xd8, 0x3, 'gretap0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x122}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x55, 'syz1\x00', {0x3}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private=0xa010100, 0x1, 0x1}}}, {{@arp={@loopback, @multicast1, 0xffffff00, 0xffffffff, 0xe, 0xf, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x3, 0x7788, 0x1ff, 0xd, 0x4, 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x21}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast2, @loopback, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) setsockopt$inet_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000001140)=@gcm_128={{0x303}, "96c3a9bb2914c2d0", "3714cf75a2fb08c6e833d9e48802def4", "bf7cff52", "2e9a7da629681dd2"}, 0x28) 0s ago: executing program 32 (id=2794): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan1\x00', 0x1000}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r2}, 0x18) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) (async) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x3517, @mcast2, 0x1}}, 0xe, 0x13b}, 0x90) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="b3af85a294ed040000000000000000040000000a00007900020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300"/28], 0x50) r8 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0d2fa5", @ANYRES16=r10, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000040), 0x2, 0x0) kernel console output (not intermixed with test programs): tlink: 'syz.2.1111': attribute type 10 has an invalid length. [ 162.464153][T10326] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.497773][T10326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.505778][T10326] IPv6: NLM_F_CREATE should be set when creating new route [ 162.539977][T10328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.543962][T10315] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 162.547910][T10328] IPv6: NLM_F_CREATE should be set when creating new route [ 162.616037][T10325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1113'. [ 162.626614][T10320] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1112'. [ 162.886823][T10353] netlink: 54 bytes leftover after parsing attributes in process `syz.2.1117'. [ 162.930004][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 162.964372][T10354] syzkaller0: entered promiscuous mode [ 162.987126][T10354] syzkaller0: entered allmulticast mode [ 163.045043][T10354] netlink: 'syz.3.1119': attribute type 4 has an invalid length. [ 163.095506][T10360] netlink: 'syz.3.1119': attribute type 4 has an invalid length. [ 163.337655][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 163.357255][T10375] netlink: 'syz.4.1125': attribute type 3 has an invalid length. [ 163.382431][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 163.419845][T10375] netlink: 'syz.4.1125': attribute type 3 has an invalid length. [ 163.468749][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 164.114793][T10431] netlink: zone id is out of range [ 164.149154][T10431] netlink: zone id is out of range [ 164.177450][T10431] netlink: zone id is out of range [ 164.198959][T10431] netlink: zone id is out of range [ 164.216266][T10431] netlink: zone id is out of range [ 164.229866][T10431] netlink: set zone limit has 4 unknown bytes [ 164.256174][T10431] xt_socket: unknown flags 0x50 [ 164.564519][T10466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.710500][T10478] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 164.810445][T10485] syzkaller0: entered promiscuous mode [ 164.819386][T10485] syzkaller0: entered allmulticast mode [ 165.039329][T10500] netem: change failed [ 165.663304][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.542929][T10478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.834304][T10514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1157'. [ 167.863908][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 167.975427][T10524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1161'. [ 168.013911][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1161'. [ 168.037377][T10514] bond7: Invalid ad_actor_system MAC address. [ 168.045943][T10528] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 168.055927][T10514] bond7: option ad_actor_system: invalid value (1) [ 168.076103][T10514] bond7 (unregistering): Released all slaves [ 168.312651][T10547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1167'. [ 168.347528][T10547] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 168.380683][T10541] netlink: 'syz.2.1167': attribute type 5 has an invalid length. [ 168.523807][T10561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.955845][T10580] syzkaller0: entered promiscuous mode [ 168.977012][T10580] syzkaller0: entered allmulticast mode [ 169.007117][T10584] netlink: 'syz.1.1180': attribute type 1 has an invalid length. [ 169.463419][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 169.575997][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 169.619223][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 169.807549][T10616] syzkaller0: entered promiscuous mode [ 169.835856][T10616] syzkaller0: entered allmulticast mode [ 170.012611][T10631] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 170.181065][T10638] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 170.686188][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 170.744281][T10681] veth0: entered promiscuous mode [ 170.788427][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'. [ 170.822802][T10685] veth0: left promiscuous mode [ 171.063048][T10692] netlink: 'syz.2.1204': attribute type 4 has an invalid length. [ 171.107601][T10692] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1204'. [ 171.172932][T10700] netlink: 'syz.3.1206': attribute type 21 has an invalid length. [ 171.192999][T10700] Cannot find map_set index 135 as target [ 171.298046][ T1172] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 171.319665][T10714] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1210'. [ 171.510996][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'. [ 171.561706][T10727] Cannot find del_set index 4 as target [ 171.570158][T10720] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.581838][T10729] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 171.599709][T10729] nbd: error processing sock list [ 171.616026][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 171.748155][T10721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.761164][T10721] bond5: (slave bond6): Enslaving as an active interface with an up link [ 171.815397][T10744] sctp: [Deprecated]: syz.4.1218 (pid 10744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.815397][T10744] Use struct sctp_sack_info instead [ 171.820113][T10730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 171.843881][T10730] bond5: (slave bond7): Enslaving as an active interface with an up link [ 171.869866][T10720] bond5 (unregistering): (slave bond6): Releasing backup interface [ 171.900698][T10720] bond5 (unregistering): (slave bond7): Releasing backup interface [ 171.909211][T10747] netlink: 'syz.4.1218': attribute type 26 has an invalid length. [ 171.926418][T10720] bond5 (unregistering): Released all slaves [ 171.986116][T10750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1219'. [ 172.129539][T10757] rdma_op ffff888056cd09f0 conn xmit_rdma 0000000000000000 [ 172.157207][T10754] syzkaller0: entered promiscuous mode [ 172.178687][T10754] syzkaller0: entered allmulticast mode [ 172.397311][T10775] policy can only be matched on NF_INET_PRE_ROUTING [ 172.397356][T10775] unable to load match [ 172.484854][T10775] syzkaller0: entered promiscuous mode [ 172.499382][T10775] syzkaller0: entered allmulticast mode [ 173.172467][T10810] erspan0: entered promiscuous mode [ 173.182833][T10808] netlink: 'syz.2.1234': attribute type 6 has an invalid length. [ 173.220504][T10812] x_tables: duplicate underflow at hook 1 [ 173.290922][T10818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.391531][T10827] netlink: 'syz.2.1241': attribute type 11 has an invalid length. [ 173.665159][T10839] tipc: Started in network mode [ 173.676999][T10839] tipc: Node identity ac14140f, cluster identity 4711 [ 173.685081][T10839] tipc: New replicast peer: 255.255.255.255 [ 173.696871][T10839] tipc: Enabled bearer , priority 10 [ 173.842200][T10841] syzkaller0: entered promiscuous mode [ 173.864151][T10841] syzkaller0: entered allmulticast mode [ 175.603042][T10866] pim6reg: entered allmulticast mode [ 175.701929][ T5747] tipc: Node number set to 2886997007 [ 175.736436][T10880] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20003 [ 175.877465][T10894] __nla_validate_parse: 12 callbacks suppressed [ 175.877484][T10894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1257'. [ 175.895507][T10896] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 176.151208][T10896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.263466][T10921] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 176.309807][T10910] syzkaller0: entered promiscuous mode [ 176.315801][T10910] syzkaller0: entered allmulticast mode [ 176.346385][T10903] bond6: (slave geneve2): making interface the new active one [ 176.367178][T10903] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 176.617715][T10937] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 178.725130][T10966] xt_hashlimit: size too large, truncated to 1048576 [ 179.170588][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 179.382917][T10976] hsr0 speed is unknown, defaulting to 1000 [ 179.391304][ T5725] hsr0 speed is unknown, defaulting to 1000 [ 179.398989][ T5822] hsr0 speed is unknown, defaulting to 1000 [ 179.436935][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 179.635118][T10989] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1275'. [ 179.651183][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 179.686930][T10995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1278'. [ 179.778153][T10995] xt_hashlimit: size too large, truncated to 1048576 [ 179.868715][T11000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1278'. [ 179.912477][T11005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1280'. [ 180.274574][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.282087][T11019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.311656][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.340070][T11019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.680150][T11038] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1294'. [ 180.751255][T11039] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1293'. [ 180.970663][T11049] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 180.993000][T11053] netlink: 'syz.0.1296': attribute type 4 has an invalid length. [ 181.073011][T11057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.109094][T11058] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 181.150911][T11058] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 181.232584][T11058] bond7: (slave ip6gre1): making interface the new active one [ 181.263338][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 181.309296][T11058] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 181.558304][T11079] openvswitch: netlink: Geneve option length err (len 317, max 255). [ 181.586320][T11082] bond0: entered allmulticast mode [ 181.597187][T11082] lo: entered allmulticast mode [ 181.735354][T11087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1308'. [ 181.978504][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 182.115796][T11107] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.217413][T11113] openvswitch: netlink: IPv4 tun info is not correct [ 182.282555][T11110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.293036][T11117] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 182.832716][T11151] pim6reg: entered allmulticast mode [ 182.978983][T11151] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 183.032745][T11162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1326'. [ 183.148751][T11167] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1330'. [ 183.184301][T11170] netlink: 'syz.0.1329': attribute type 28 has an invalid length. [ 183.223804][T11170] netlink: 'syz.0.1329': attribute type 3 has an invalid length. [ 183.233300][T11170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1329'. [ 183.649113][T11195] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1335'. [ 183.859688][T11207] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.1338'. [ 183.878191][T11207] openvswitch: netlink: Message has 6 unknown bytes. [ 183.909378][ T5822] IPVS: starting estimator thread 0... [ 183.909631][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'. [ 183.952709][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 183.992406][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 184.033383][T11213] IPVS: using max 31 ests per chain, 74400 per kthread [ 184.489851][T11248] netlink: 'syz.1.1346': attribute type 2 has an invalid length. [ 184.534321][T11248] netlink: 'syz.1.1346': attribute type 8 has an invalid length. [ 184.959607][T11226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.986581][T11226] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 185.105133][T11226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.116961][T11226] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 185.139612][T11226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.159420][T11271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.180653][T11226] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 185.193597][T11276] ip6tnl2: entered promiscuous mode [ 185.255086][T11226] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.271945][T11226] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 185.416611][T11275] syzkaller0: entered promiscuous mode [ 185.441667][T11275] syzkaller0: entered allmulticast mode [ 186.858103][T11349] __nla_validate_parse: 3 callbacks suppressed [ 186.858120][T11349] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1367'. [ 186.895668][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1367'. [ 186.944698][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1367'. [ 189.085676][T11393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.286264][T11414] ip6tnl2: entered allmulticast mode [ 189.348149][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 189.380061][T11422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1375'. [ 189.508673][T11426] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.516518][T11426] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.852683][T11444] TCP: TCP_TX_DELAY enabled [ 189.867209][T11446] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 189.971109][T11452] netlink: 'syz.2.1382': attribute type 24 has an invalid length. [ 190.082475][T11450] bond5: (slave gretap2): making interface the new active one [ 190.118664][T11450] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 190.125308][T11460] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1382'. [ 190.142365][T11454] netlink: 'syz.2.1382': attribute type 29 has an invalid length. [ 190.189302][T11452] netlink: 'syz.2.1382': attribute type 29 has an invalid length. [ 190.243522][T11460] netlink: 'syz.2.1382': attribute type 24 has an invalid length. [ 190.332762][T11467] bond0: option ad_select: unable to set because the bond device is up [ 190.376550][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 190.430272][T11471] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 190.601446][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1390'. [ 190.658130][T11493] netlink: 'syz.4.1391': attribute type 21 has an invalid length. [ 190.690456][T11493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1391'. [ 190.928080][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'. [ 190.971305][T11503] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 191.315690][T11525] xt_TCPMSS: Only works on TCP SYN packets [ 192.167622][T11575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1408'. [ 192.326498][T11581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1410'. [ 192.395377][T11585] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1410'. [ 192.400128][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.411637][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.761689][T11605] netlink: 'syz.1.1416': attribute type 58 has an invalid length. [ 192.789837][T11605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1416'. [ 192.849625][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 192.928616][T11616] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1418'. [ 193.090243][T11625] netlink: 'syz.0.1419': attribute type 4 has an invalid length. [ 193.130160][T11616] bond6: option resend_igmp: invalid value (32767) [ 193.161258][T11616] bond6: option resend_igmp: allowed values 0 - 255 [ 193.194467][T11616] bond6 (unregistering): Released all slaves [ 193.266321][T11632] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1423'. [ 193.310692][T11632] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1423'. [ 193.599234][T11654] sctp: [Deprecated]: syz.4.1427 (pid 11654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.599234][T11654] Use struct sctp_sack_info instead [ 193.919519][T11667] netlink: 'syz.0.1432': attribute type 11 has an invalid length. [ 193.952786][T11667] netlink: 180760 bytes leftover after parsing attributes in process `syz.0.1432'. [ 194.062874][T11676] syzkaller1: entered promiscuous mode [ 194.079234][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.085316][T11683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.090778][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.105843][T11676] syzkaller1: entered allmulticast mode [ 194.201733][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 194.773019][T11718] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 194.782908][T11705] syzkaller0: entered promiscuous mode [ 194.812479][T11705] syzkaller0: entered allmulticast mode [ 197.396186][T11768] xfrm0 speed is unknown, defaulting to 1000 [ 197.415792][T11768] xfrm0 speed is unknown, defaulting to 1000 [ 197.427859][T11768] xfrm0 speed is unknown, defaulting to 1000 [ 197.441576][T11768] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 197.496166][T11768] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 197.501539][T11772] netlink: 'syz.2.1454': attribute type 1 has an invalid length. [ 197.524433][T11768] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 197.592762][T11768] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 197.637602][T11772] 8021q: adding VLAN 0 to HW filter on device bond6 [ 197.654614][T11778] __nla_validate_parse: 2 callbacks suppressed [ 197.654629][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 197.687598][T11777] vlan0: entered promiscuous mode [ 197.692812][T11777] bond6: entered promiscuous mode [ 197.698491][T11777] vlan0: entered allmulticast mode [ 197.704125][T11777] bond6: entered allmulticast mode [ 197.710447][T11768] xfrm0 speed is unknown, defaulting to 1000 [ 197.730842][T11768] xfrm0 speed is unknown, defaulting to 1000 [ 197.742419][T11778] bond0: Master is either lo or non-ether device [ 197.768795][T11782] netlink: 'syz.3.1457': attribute type 11 has an invalid length. [ 197.802962][T11768] xfrm0 speed is unknown, defaulting to 1000 [ 197.849712][T11768] xfrm0 speed is unknown, defaulting to 1000 [ 197.881319][T11787] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.888573][T11787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.896165][T11787] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.903382][T11787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.971299][T11787] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 198.045576][T11768] xfrm0 speed is unknown, defaulting to 1000 [ 198.499197][T11822] netlink: 'syz.1.1470': attribute type 6 has an invalid length. [ 198.518322][T11805] netlink: 'syz.0.1467': attribute type 3 has an invalid length. [ 198.521504][T11822] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1470'. [ 198.534827][T11805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1467'. [ 198.569952][T11822] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1470'. [ 198.819075][T11837] can: request_module (can-proto-0) failed. [ 200.571466][T11849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.852247][T11862] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 200.886203][T11862] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 200.904066][T11862] gretap3: entered promiscuous mode [ 200.906378][T11872] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1484'. [ 200.909407][T11862] gretap3: entered allmulticast mode [ 200.918584][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1484'. [ 200.932868][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1484'. [ 201.372087][T11901] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1492'. [ 201.412325][T11900] netlink: 'syz.1.1491': attribute type 13 has an invalid length. [ 202.098905][T11941] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 202.117411][T11941] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1503'. [ 202.647645][T11965] bond5: (slave gre0): Device is not bonding slave [ 202.656794][T11965] bond5: option active_slave: invalid value (gre0) [ 202.691148][T11965] bond5 (unregistering): Released all slaves [ 202.760862][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1509'. [ 202.805681][T11971] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1509'. [ 202.817524][T11983] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 202.831975][T11984] bond4: (slave veth0_to_bond): Releasing backup interface [ 202.975652][T11983] 8021q: adding VLAN 0 to HW filter on device bond8 [ 203.169510][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 203.390906][T12017] tunl0: Caught tx_queue_len zero misconfig [ 223.091145][T12036] rdma_rxe: rxe_newlink: failed to add lo [ 223.242815][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 223.853652][T12072] x_tables: duplicate underflow at hook 1 [ 223.862080][T12076] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 223.874167][T12078] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1539'. [ 223.883563][T12076] netlink: 476 bytes leftover after parsing attributes in process `syz.0.1538'. [ 223.912971][T12076] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1538'. [ 224.158689][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 224.180225][T12091] bridge_slave_1: left allmulticast mode [ 224.201781][T12091] bridge_slave_1: left promiscuous mode [ 224.245332][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.330009][T12091] bridge_slave_0: left allmulticast mode [ 224.352283][T12091] bridge_slave_0: left promiscuous mode [ 224.363830][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.433311][T12107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.434783][T12099] netlink: 'syz.4.1545': attribute type 3 has an invalid length. [ 224.856813][T12127] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1554'. [ 224.980099][T12132] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 225.005798][T12132] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.383934][T12154] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1563'. [ 225.401569][T12156] netlink: 'syz.4.1562': attribute type 4 has an invalid length. [ 225.424911][T12156] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1562'. [ 225.461093][T12156] .`: renamed from bond0 [ 225.562299][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 225.590623][T12166] netlink: 'syz.2.1566': attribute type 3 has an invalid length. [ 225.677486][T12169] netlink: 'syz.3.1567': attribute type 17 has an invalid length. [ 225.706944][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 225.723427][T12169] erspan0: entered promiscuous mode [ 225.778742][T12169] erspan0: left promiscuous mode [ 225.834115][T12181] hsr0: entered promiscuous mode [ 225.865131][T12184] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 226.075080][T12197] xt_TCPMSS: Only works on TCP SYN packets [ 226.274397][T12207] netlink: 'syz.4.1577': attribute type 4 has an invalid length. [ 226.502533][T12217] netlink: 'syz.4.1580': attribute type 8 has an invalid length. [ 226.698573][T12223] netlink: 'syz.4.1583': attribute type 9 has an invalid length. [ 226.727341][T12225] batadv_slave_0: Caught tx_queue_len zero misconfig [ 227.207729][T12253] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 227.463930][T12267] xt_hashlimit: size too large, truncated to 1048576 [ 228.083457][T12307] tunl0: entered promiscuous mode [ 228.102939][T12307] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 228.104743][T12302] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 228.119646][T12306] bond_slave_1: mtu less than device minimum [ 228.306158][T12316] __nla_validate_parse: 10 callbacks suppressed [ 228.306176][T12316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1608'. [ 228.330311][T12318] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 228.393148][T12318] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.416947][T12320] bond7: (slave dummy0): making interface the new active one [ 228.425537][T12320] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 228.442802][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1609'. [ 228.462054][T12318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1607'. [ 228.472276][T12318] dummy0: entered promiscuous mode [ 228.486044][T12318] bond7: (slave dummy0): Releasing active interface [ 228.608964][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 228.676404][ T6875] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.697494][T12335] openvswitch: netlink: IP tunnel dst address not specified [ 228.710208][ T6875] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.757529][ T6875] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.801274][ T6875] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.826989][T12339] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 228.855405][T12339] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 228.907620][T12343] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 228.984585][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 229.018383][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 229.444207][T12373] syzkaller1: entered promiscuous mode [ 229.462925][T12373] syzkaller1: entered allmulticast mode [ 229.623019][T12375] xt_CT: No such helper "snmp_trap" [ 229.631700][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 229.672740][T12378] syzkaller1: left promiscuous mode [ 229.700670][T12378] syzkaller1: left allmulticast mode [ 229.733276][T12378] netlink: 'syz.0.1624': attribute type 11 has an invalid length. [ 229.836570][T12394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1631'. [ 230.069718][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 230.083605][T12402] validate_nla: 1 callbacks suppressed [ 230.083621][T12402] netlink: 'syz.1.1633': attribute type 30 has an invalid length. [ 230.135702][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 230.145622][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.168817][T12406] netlink: 'syz.1.1633': attribute type 30 has an invalid length. [ 230.194165][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.236589][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.265268][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.315503][T12402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.457100][T12419] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 230.459724][T12427] netlink: 'syz.2.1641': attribute type 33 has an invalid length. [ 230.669962][T12422] bond8: (slave bridge4): Enslaving as a backup interface with an up link [ 230.701682][T12425] macvlan2: entered promiscuous mode [ 230.719159][T12425] macvlan2: entered allmulticast mode [ 230.732154][T12425] bond8: entered promiscuous mode [ 230.745513][T12425] bridge4: entered promiscuous mode [ 230.757194][T12425] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.767824][T12425] bond8: left promiscuous mode [ 230.778080][T12425] bridge4: left promiscuous mode [ 230.816960][T12449] 0·: renamed from hsr0 (while UP) [ 230.862544][T12449] 0·: entered allmulticast mode [ 230.880318][T12449] hsr_slave_0: entered allmulticast mode [ 230.897854][T12449] hsr_slave_1: entered allmulticast mode [ 230.905323][T12449] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 231.027667][T12457] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 231.036128][T12457] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 231.045279][T12457] netlink: 'syz.2.1650': attribute type 8 has an invalid length. [ 231.060362][T12458] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 231.072440][T12458] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 231.084630][T12458] netlink: 'syz.2.1650': attribute type 8 has an invalid length. [ 231.535427][T12485] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.543051][T12485] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.561092][T12487] xt_hashlimit: size too large, truncated to 1048576 [ 231.615338][T12490] xt_hashlimit: size too large, truncated to 1048576 [ 232.115221][T12507] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 232.163824][T12507] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 232.236033][T12507] bond9: (slave ip6gre1): making interface the new active one [ 232.299308][T12507] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 232.873160][T12553] 8021q: VLANs not supported on bond0 [ 233.450445][T12587] __nla_validate_parse: 21 callbacks suppressed [ 233.450461][T12587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1681'. [ 233.475071][T12584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1684'. [ 233.498539][T12584] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.559574][T12594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 233.957609][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 233.995934][T12619] 8021q: adding VLAN 0 to HW filter on device bond9 [ 234.040565][T12619] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 234.349954][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 234.391747][T12639] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 234.462837][T12639] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1698'. [ 234.609065][T12653] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 234.648763][T12644] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1701'. [ 234.651868][T12653] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 234.839788][T12653] bond8: option arp_missed_max: invalid value (0) [ 234.884684][T12653] bond8: option arp_missed_max: allowed values 1 - 255 [ 234.929395][T12653] bond8 (unregistering): Released all slaves [ 235.084113][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1705'. [ 235.173033][T12673] syzkaller1: entered promiscuous mode [ 235.191279][T12673] syzkaller1: entered allmulticast mode [ 235.387371][T12698] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1710'. [ 235.522204][T12704] netlink: 'syz.2.1711': attribute type 11 has an invalid length. [ 235.547161][T12704] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1711'. [ 235.876281][T12710] syzkaller0: entered promiscuous mode [ 235.889525][T12710] syzkaller0: entered allmulticast mode [ 235.932488][T12710] tunl0: entered allmulticast mode [ 235.959990][T12710] gre0: entered allmulticast mode [ 235.976012][T12710] gretap0: entered allmulticast mode [ 236.005030][T12710] erspan0: entered allmulticast mode [ 236.025207][T12710] ip_vti0: entered allmulticast mode [ 236.034470][T12710] ip6_vti0: entered allmulticast mode [ 236.040165][T12710] sit0: entered allmulticast mode [ 236.055617][T12710] ip6tnl0: entered allmulticast mode [ 236.071426][T12710] ip6gre0: entered allmulticast mode [ 236.081527][T12710] syz_tun: entered allmulticast mode [ 236.099128][T12710] ip6gretap0: entered allmulticast mode [ 236.122951][T12710] team0: entered allmulticast mode [ 236.139869][T12710] team_slave_0: entered allmulticast mode [ 236.151211][T12710] team_slave_1: entered allmulticast mode [ 236.157682][T12710] geneve1: entered allmulticast mode [ 236.164501][T12710] dummy0: entered allmulticast mode [ 236.171824][T12710] nlmon0: entered allmulticast mode [ 236.179100][T12710] batadv0: entered allmulticast mode [ 236.185496][T12710] vxcan0: entered allmulticast mode [ 236.191072][T12710] vxcan1: entered allmulticast mode [ 236.198812][T12710] veth0: entered allmulticast mode [ 236.205389][T12710] veth1: entered allmulticast mode [ 236.210867][T12710] wg0: entered allmulticast mode [ 236.218269][T12710] wg1: entered allmulticast mode [ 236.224388][T12710] wg2: entered allmulticast mode [ 236.229696][T12710] veth0_to_bridge: entered allmulticast mode [ 236.237182][T12710] bridge_slave_0: entered allmulticast mode [ 236.243396][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'. [ 236.254346][T12710] veth1_to_bridge: entered allmulticast mode [ 236.276405][T12710] bridge_slave_1: entered allmulticast mode [ 236.298311][T12710] veth0_to_bond: entered allmulticast mode [ 236.316957][T12710] bond_slave_0: entered allmulticast mode [ 236.331609][T12710] veth1_to_bond: entered allmulticast mode [ 236.346434][T12710] bond_slave_1: entered allmulticast mode [ 236.352672][T12710] veth0_to_team: entered allmulticast mode [ 236.359287][T12710] veth1_to_team: entered allmulticast mode [ 236.366135][T12710] veth0_to_batadv: entered allmulticast mode [ 236.372469][T12710] batadv_slave_0: entered allmulticast mode [ 236.379122][T12710] veth1_to_batadv: entered allmulticast mode [ 236.388192][T12710] batadv_slave_1: entered allmulticast mode [ 236.395891][T12710] xfrm0: entered allmulticast mode [ 236.401457][T12710] veth0_to_hsr: entered allmulticast mode [ 236.407825][T12710] hsr_slave_0: entered allmulticast mode [ 236.414201][T12710] veth1_to_hsr: entered allmulticast mode [ 236.420411][T12710] hsr_slave_1: entered allmulticast mode [ 236.426875][T12710] hsr0: entered allmulticast mode [ 236.432351][T12710] veth1_virt_wifi: entered allmulticast mode [ 236.441112][T12710] veth0_virt_wifi: entered allmulticast mode [ 236.450994][T12710] virt_wifi0: entered allmulticast mode [ 236.457100][T12710] veth1_vlan: entered allmulticast mode [ 236.463036][T12710] veth0_vlan: entered allmulticast mode [ 236.469122][T12710] vlan0: entered allmulticast mode [ 236.500452][T12710] vlan1: entered allmulticast mode [ 236.508529][T12710] macvlan0: entered allmulticast mode [ 236.514514][T12710] macvlan1: entered allmulticast mode [ 236.520321][T12710] ipvlan0: entered allmulticast mode [ 236.526286][T12710] ipvlan1: entered allmulticast mode [ 236.531996][T12710] veth1_macvtap: entered allmulticast mode [ 236.538628][T12710] veth0_macvtap: entered allmulticast mode [ 236.546080][T12710] macvtap0: entered allmulticast mode [ 236.551765][T12710] macsec0: entered allmulticast mode [ 236.558038][T12710] geneve0: entered allmulticast mode [ 236.565128][T12710] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 236.572899][T12710] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 236.581027][T12710] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 236.589173][T12710] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 236.597351][T12710] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 236.605060][T12710] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 236.612368][T12710] gretap1: entered allmulticast mode [ 236.618811][T12710] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 236.627774][T12710] ip6tnl1: entered allmulticast mode [ 236.634471][T12710] veth2: entered allmulticast mode [ 236.639905][T12710] veth3: entered allmulticast mode [ 236.646069][T12710] macvlan2: entered allmulticast mode [ 236.651735][T12710] macvlan3: entered allmulticast mode [ 236.661301][T12710] pimreg0: entered allmulticast mode [ 236.667222][T12710] bridge1: entered allmulticast mode [ 236.672748][T12710] bond1: entered allmulticast mode [ 236.681292][T12710] xfrm1: entered allmulticast mode [ 236.686825][T12710] gtp0: entered allmulticast mode [ 236.692133][T12710] ipip0: entered allmulticast mode [ 236.698218][T12710] mac80211_hwsim hwsim16 wlan3: entered allmulticast mode [ 236.711123][T12710] gre1: entered allmulticast mode [ 236.716760][T12710] bond2: entered allmulticast mode [ 236.722068][T12710] vti0: entered allmulticast mode [ 236.727992][T12710] bond3: entered allmulticast mode [ 236.734261][T12710] bridge2: entered allmulticast mode [ 236.739788][T12710] vlan2: entered allmulticast mode [ 236.746870][T12710] bridge3: entered allmulticast mode [ 236.756734][T12710] bond4: entered allmulticast mode [ 236.765600][T12710] sit1: entered allmulticast mode [ 236.774451][T12710] sit2: entered allmulticast mode [ 236.781847][T12710] syztnl2: entered allmulticast mode [ 236.803605][T12710] mac80211_hwsim hwsim2 rose0: entered allmulticast mode [ 236.811151][T12710] vxlan0: entered allmulticast mode [ 236.820363][T12710] vxlan1: entered allmulticast mode [ 236.831763][T12710] nr0: entered allmulticast mode [ 236.847672][T12710] syzkaller0: left promiscuous mode [ 236.972087][ T6873] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.991400][ T6873] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.038384][ T6873] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.086579][ T6873] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.497525][T12770] bond10 (unregistering): Released all slaves [ 238.414695][T12822] sctp: [Deprecated]: syz.2.1740 (pid 12822) Use of int in maxseg socket option. [ 238.414695][T12822] Use struct sctp_assoc_value instead [ 238.564274][T12826] __nla_validate_parse: 2 callbacks suppressed [ 238.564294][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 238.878402][T12829] .`: left promiscuous mode [ 238.886915][T12829] bond_slave_0: left promiscuous mode [ 238.892484][T12829] bond_slave_1: left promiscuous mode [ 239.263011][T12829] 0·: left allmulticast mode [ 239.277659][T12829] hsr_slave_0: left allmulticast mode [ 239.283432][T12829] hsr_slave_1: left allmulticast mode [ 239.475763][T12829] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 239.540901][T12829] vlan2: left allmulticast mode [ 239.551101][T12829] .`: left allmulticast mode [ 239.557584][T12829] bond_slave_0: left allmulticast mode [ 239.563857][T12829] bond_slave_1: left allmulticast mode [ 239.675847][T12829] ip6tnl2: left promiscuous mode [ 239.779638][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 239.782108][ T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.816080][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.831097][ T10] syz2: Port: 1 Link DOWN [ 239.858108][ T36] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.920777][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.977443][ T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.023174][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.065661][ T36] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.098604][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.183347][T12865] tipc: Started in network mode [ 240.206749][T12865] tipc: Node identity 166bc658e14b, cluster identity 4711 [ 240.224447][T12865] tipc: Enabled bearer , priority 0 [ 240.248060][T12875] netlink: 1024 bytes leftover after parsing attributes in process `syz.3.1754'. [ 240.294786][T12868] netlink: set zone limit has 4 unknown bytes [ 240.318592][T12868] xt_hl: Unknown Hop Limit match mode: 206 [ 240.517653][T12865] tipc: Disabling bearer [ 240.570131][T12875] gre1: entered promiscuous mode [ 240.699106][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.740787][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.764418][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.796756][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.830266][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.848912][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.880433][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 240.944482][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 241.048073][T12906] validate_nla: 2 callbacks suppressed [ 241.048090][T12906] netlink: 'syz.0.1764': attribute type 1 has an invalid length. [ 241.116726][T12912] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 241.247893][T12906] 8021q: adding VLAN 0 to HW filter on device bond10 [ 241.441296][T12923] geneve2: entered promiscuous mode [ 241.471284][T12923] geneve2: entered allmulticast mode [ 241.566218][ T6873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 241.586890][ T6873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 241.619836][ T6873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 241.662921][ T6873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 241.781793][T12952] netlink: 'syz.2.1778': attribute type 39 has an invalid length. [ 242.012678][T12960] ip6tnl0: Caught tx_queue_len zero misconfig [ 242.262013][T12977] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 242.300936][T12977] : renamed from vlan0 [ 242.907192][T13011] netlink: 'syz.4.1797': attribute type 29 has an invalid length. [ 242.995324][T13014] sctp: [Deprecated]: syz.2.1798 (pid 13014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.995324][T13014] Use struct sctp_sack_info instead [ 243.046604][T13014] sctp: [Deprecated]: syz.2.1798 (pid 13014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.046604][T13014] Use struct sctp_sack_info instead [ 243.338076][T13030] tipc: Enabled bearer , priority 10 [ 243.359219][T13030] tipc: Enabling of bearer rejected, failed to enable media [ 243.545157][T13031] team0 (unregistering): Port device team_slave_0 removed [ 243.585481][T13031] team0 (unregistering): Port device team_slave_1 removed [ 243.805610][T13026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.868474][T13062] openvswitch: netlink: IP tunnel TTL not specified. [ 244.090708][T13074] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 244.222284][T13085] __nla_validate_parse: 61 callbacks suppressed [ 244.222304][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1816'. [ 244.534317][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1823'. [ 244.610929][T13107] batadv0: Caught tx_queue_len zero misconfig [ 244.627336][T13107] netlink: 'syz.1.1824': attribute type 4 has an invalid length. [ 244.827308][T13113] netlink: 'syz.3.1826': attribute type 4 has an invalid length. [ 245.034853][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 245.092044][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 245.754128][T13157] netlink: 'syz.0.1840': attribute type 26 has an invalid length. [ 245.850837][T13164] syzkaller0: entered promiscuous mode [ 245.867401][T13164] syzkaller0: entered allmulticast mode [ 246.139538][T13176] openvswitch: netlink: IP tunnel dst address not specified [ 246.176751][T13178] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 246.180583][T13176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.676157][T13202] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 246.695395][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1856'. [ 246.827913][T13213] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1857'. [ 247.059565][T13224] netlink: 752 bytes leftover after parsing attributes in process `syz.4.1862'. [ 247.230151][T13232] ip6_vti0: entered promiscuous mode [ 247.273359][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 247.328303][T13232] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 247.371177][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1865'. [ 247.404295][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1865'. [ 247.561431][T13240] 8021q: adding VLAN 0 to HW filter on device bond12 [ 247.673166][T13256] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.697448][T13256] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 247.942091][T13271] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 248.275630][T13278] ve: renamed from macvlan0 [ 248.443496][T13281] netlink: 'syz.3.1877': attribute type 4 has an invalid length. [ 248.688540][T13289] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 248.739500][T13289] netlink: 'syz.1.1878': attribute type 2 has an invalid length. [ 248.856222][T13307] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 248.928038][T13307] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 248.990840][T13307] gretap3: entered promiscuous mode [ 249.046229][T13307] gretap3: entered allmulticast mode [ 249.290991][T13324] hsr0: entered promiscuous mode [ 249.390656][T13328] __nla_validate_parse: 5 callbacks suppressed [ 249.390675][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 249.412949][T13331] netlink: 'syz.1.1892': attribute type 32 has an invalid length. [ 249.451757][T13328] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1890'. [ 249.477377][T13328] ieee802154 phy0 wpan0: encryption failed: -90 [ 249.676976][T13339] xt_hashlimit: size too large, truncated to 1048576 [ 249.736826][T13347] x_tables: duplicate underflow at hook 2 [ 249.744885][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'. [ 250.002889][T13352] vlan3: entered allmulticast mode [ 250.110744][T13339] xt_hashlimit: size too large, truncated to 1048576 [ 250.115728][T13356] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 250.233603][T13363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1902'. [ 250.384739][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 250.921099][T13390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.999403][T13389] netlink: 'syz.3.1908': attribute type 11 has an invalid length. [ 251.045949][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 251.347242][T13408] : entered promiscuous mode [ 251.660030][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 251.724265][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 251.765298][T13430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1922'. [ 251.940035][T13438] netem: change failed [ 252.253838][T13452] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1928'. [ 252.273451][T13452] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1928'. [ 252.454579][T13462] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 252.486908][T13463] syzkaller0: entered promiscuous mode [ 252.502706][T13463] syzkaller0: entered allmulticast mode [ 252.548714][T13463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.840872][T13488] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 253.001148][T13488] 8021q: adding VLAN 0 to HW filter on device bond8 [ 253.118355][T13490] bond8: (slave veth5): Enslaving as an active interface with a down link [ 253.151791][T13499] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 253.168504][T13499] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 253.615335][T13525] vxcan1: entered promiscuous mode [ 253.638161][T13525] vxcan1: entered allmulticast mode [ 253.800830][T13537] netlink: 'syz.2.1954': attribute type 10 has an invalid length. [ 253.980727][T13545] netlink: 'syz.4.1958': attribute type 16 has an invalid length. [ 254.556381][T13574] __nla_validate_parse: 42 callbacks suppressed [ 254.556401][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 254.808057][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 254.923646][T13559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1959'. [ 254.925689][T13585] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1971'. [ 255.022853][T13592] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.079853][T13592] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.152779][T13592] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.204501][T13595] veth0: entered promiscuous mode [ 255.219334][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 255.245926][T13592] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.392358][T13597] syzkaller0: entered promiscuous mode [ 255.401774][T13597] syzkaller0: entered allmulticast mode [ 255.440263][T13592] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.506862][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.513500][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.651752][T13592] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.676618][T13592] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.748092][T13592] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.827736][T13592] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.976983][T13634] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1984'. [ 256.613601][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 256.640767][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 256.661598][T13677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1995'. [ 256.662587][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 257.034454][T13700] veth1_to_bond: entered allmulticast mode [ 257.075145][T13701] veth1_to_bond (unregistering): left allmulticast mode [ 257.129503][T13701] .`: (slave bond_slave_1): Releasing backup interface [ 257.158711][T13708] netlink: 'syz.2.2005': attribute type 20 has an invalid length. [ 257.241033][T13712] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 257.287659][T13708] netlink: 'syz.2.2005': attribute type 20 has an invalid length. [ 257.317918][T13715] netlink: 'syz.4.2007': attribute type 1 has an invalid length. [ 257.324645][T13712] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.410104][T13716] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 257.439743][T13724] netlink: 'syz.4.2007': attribute type 10 has an invalid length. [ 257.527622][T13715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.568754][T13719] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 257.732532][ T5636] block nbd2: Receive control failed (result -32) [ 257.781150][T13743] netlink: 'syz.3.2015': attribute type 1 has an invalid length. [ 257.883438][T13749] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 257.914895][T13749] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 257.966032][T13756] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 258.793630][T13808] team_slave_1: entered promiscuous mode [ 258.827385][T13811] xt_addrtype: ipv6 does not support BROADCAST matching [ 259.040862][T13820] openvswitch: netlink: Flow key attribute not present in set flow. [ 259.065834][T13823] netlink: 'syz.3.2035': attribute type 4 has an invalid length. [ 259.216571][T13830] netlink: 'syz.2.2037': attribute type 3 has an invalid length. [ 259.262647][T13836] openvswitch: netlink: Message has 6 unknown bytes. [ 259.661346][T13863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.671677][T13860] syzkaller0: entered promiscuous mode [ 259.704833][T13860] syzkaller0: entered allmulticast mode [ 259.830740][T13860] tipc: Started in network mode [ 259.869069][T13860] tipc: Node identity 827b8779d8be, cluster identity 4711 [ 259.898191][T13860] tipc: Enabled bearer , priority 0 [ 259.929553][T13874] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 259.948228][T13854] tipc: Resetting bearer [ 260.011388][T13874] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 260.028603][T13854] tipc: Disabling bearer [ 260.167260][ T30] audit: type=1804 audit(1781165881.522:2): pid=13888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2050" name="/newroot/380/cgroup.controllers" dev="tmpfs" ino=1945 res=1 errno=0 [ 260.252329][ T30] audit: type=1800 audit(1781165881.522:3): pid=13888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2050" name="cgroup.controllers" dev="tmpfs" ino=1945 res=0 errno=0 [ 260.446589][T13901] __nla_validate_parse: 18 callbacks suppressed [ 260.446607][T13901] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2053'. [ 260.797277][T13921] netlink: 'syz.3.2060': attribute type 10 has an invalid length. [ 260.865256][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 261.088869][T13934] bond10: entered promiscuous mode [ 261.130432][T13934] bond10: entered allmulticast mode [ 261.139504][T13934] 8021q: adding VLAN 0 to HW filter on device bond10 [ 261.564627][T13964] netlink: 185920 bytes leftover after parsing attributes in process `syz.2.2074'. [ 261.662860][T13974] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 261.676209][T13974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.913951][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 261.937346][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 261.974021][T13985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2082'. [ 261.995396][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'. [ 262.086661][T13993] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2084'. [ 262.100584][T13993] nbd: illegal input index -8454144 [ 262.309937][T14007] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2088'. [ 262.498825][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 262.845379][T14034] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 262.967147][T14040] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 263.859439][T14097] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 264.109701][T14118] xt_hashlimit: overflow, try lower: 3/0 [ 264.191748][T14128] netlink: 'syz.3.2123': attribute type 29 has an invalid length. [ 264.291906][T14128] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 264.476208][T14147] netlink: 'syz.4.2127': attribute type 11 has an invalid length. [ 264.736336][T14158] openvswitch: netlink: IP tunnel dst address not specified [ 264.768810][T14162] netlink: 'syz.3.2131': attribute type 5 has an invalid length. [ 265.651663][T14200] netlink: 'syz.1.2143': attribute type 2 has an invalid length. [ 265.684103][T14205] SET target dimension over the limit! [ 265.696708][T14208] team0: entered promiscuous mode [ 265.702721][T14208] team_slave_0: entered promiscuous mode [ 265.722739][T14208] team_slave_1: entered promiscuous mode [ 265.988169][T14219] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 266.147969][T14231] blkio.reset_stats is deprecated [ 266.456503][T14248] __nla_validate_parse: 9 callbacks suppressed [ 266.456522][T14248] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2154'. [ 266.552364][T14258] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2157'. [ 266.641922][T14262] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 268.648096][T14280] netlink: 'syz.2.2164': attribute type 1 has an invalid length. [ 268.807710][T14280] bond9: entered promiscuous mode [ 268.834473][T14280] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.875336][T14289] bond9: (slave bridge4): making interface the new active one [ 268.883948][T14289] bridge4: entered promiscuous mode [ 268.910247][T14289] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 268.920231][T14283] netlink: 'syz.3.2166': attribute type 29 has an invalid length. [ 269.009257][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 269.058981][T14302] xt_hashlimit: size too large, truncated to 1048576 [ 269.075447][T14303] : entered promiscuous mode [ 269.309618][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 269.336981][T14317] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 269.385607][T14317] netlink: 'syz.1.2171': attribute type 2 has an invalid length. [ 269.476740][T14317] netlink: 'syz.1.2171': attribute type 83 has an invalid length. [ 269.549706][T14329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.557063][T14329] IPv6: NLM_F_CREATE should be set when creating new route [ 269.564344][T14329] IPv6: NLM_F_CREATE should be set when creating new route [ 269.584843][T14331] tipc: Enabled bearer , priority 0 [ 269.621473][T14338] lo: Caught tx_queue_len zero misconfig [ 269.627929][T14329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.876220][T14330] tipc: Disabling bearer [ 269.941416][T14354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2177'. [ 270.162739][T14365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2182'. [ 270.512641][T14381] syzkaller0: entered promiscuous mode [ 270.526557][T14381] syzkaller0: entered allmulticast mode [ 270.554089][T14384] netlink: 'syz.1.2190': attribute type 3 has an invalid length. [ 270.562014][T14384] netlink: 'syz.1.2190': attribute type 3 has an invalid length. [ 271.057224][T14406] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2197'. [ 271.320661][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 271.426548][T14427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2201'. [ 271.438942][T14427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2201'. [ 271.473807][T14427] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 271.594794][T14438] netlink: 'syz.0.2201': attribute type 4 has an invalid length. [ 272.012668][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2212'. [ 272.414114][T14477] tipc: Started in network mode [ 272.436900][T14477] tipc: Node identity ac14140f, cluster identity 4711 [ 272.482543][T14477] tipc: Enabled bearer , priority 10 [ 272.612330][T14491] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2221'. [ 272.649674][T14490] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2221'. [ 272.716667][T14497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.950508][T14509] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2227'. [ 272.982368][ T30] audit: type=1800 audit(1781165894.332:4): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2224" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2423 res=0 errno=0 [ 273.044519][T14509] netlink: 'syz.4.2227': attribute type 2 has an invalid length. [ 273.274194][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2231'. [ 273.485538][ T10] tipc: Node number set to 2886997007 [ 273.579174][T14538] netlink: 'syz.2.2236': attribute type 4 has an invalid length. [ 273.622775][T14541] netlink: 'syz.1.2238': attribute type 1 has an invalid length. [ 273.650000][T14538] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2236'. [ 273.691421][T14546] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2236'. [ 273.981975][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2246'. [ 274.037781][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2247'. [ 274.050371][T14564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2247'. [ 274.066434][T14564] x_tables: unsorted underflow at hook 3 [ 274.439175][T14583] syzkaller0: entered promiscuous mode [ 274.456933][T14583] syzkaller0: entered allmulticast mode [ 274.656520][T14590] sctp: [Deprecated]: syz.0.2257 (pid 14590) Use of int in max_burst socket option deprecated. [ 274.656520][T14590] Use struct sctp_assoc_value instead [ 274.793234][T14598] ipvlan1: left allmulticast mode [ 274.941174][T14603] bond10: entered promiscuous mode [ 275.143805][T14616] validate_nla: 1 callbacks suppressed [ 275.143823][T14616] netlink: 'syz.2.2268': attribute type 83 has an invalid length. [ 275.320280][T14621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.387600][T14621] bond0 (unregistering): Released all slaves [ 275.709713][T14643] openvswitch: netlink: IP tunnel dst address not specified [ 275.780608][T14646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.791154][T14645] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 275.803794][T14646] openvswitch: netlink: IP tunnel dst address not specified [ 276.420904][T14679] team0: Device xfrm0 is of different type [ 276.461464][ T5761] xfrm0 speed is unknown, defaulting to 1000 [ 276.467926][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 276.726049][T14693] bond16: Unable to set peer notification delay as MII monitoring is disabled [ 276.769365][T14693] bond16 (unregistering): Released all slaves [ 276.945220][T14704] xt_l2tp: wrong L2TP version: 0 [ 277.143864][T14715] tipc: Enabling of bearer rejected, failed to enable media [ 277.187854][T14714] __nla_validate_parse: 14 callbacks suppressed [ 277.187872][T14714] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2301'. [ 277.272955][T14720] vlan0: entered allmulticast mode [ 277.287909][T14720] bond0: entered allmulticast mode [ 277.314523][T14720] veth3: entered allmulticast mode [ 277.465502][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2304'. [ 277.695154][T14736] bridge0: port 1(veth1_to_bridge) entered blocking state [ 277.724548][T14736] bridge0: port 1(veth1_to_bridge) entered disabled state [ 277.751525][T14736] veth1_to_bridge: entered allmulticast mode [ 277.803041][T14736] veth1_to_bridge: entered promiscuous mode [ 277.822169][T14736] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.859434][T14736] bridge0: port 1(veth1_to_bridge) entered blocking state [ 277.866715][T14736] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 277.975691][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 278.068490][T14753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2311'. [ 278.399214][T14765] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2316'. [ 278.539500][T14764] 8021q: adding VLAN 0 to HW filter on device .` [ 278.567752][T14764] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.617929][T14772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2318'. [ 278.640470][T14772] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2318'. [ 278.859234][T14778] geneve4: entered allmulticast mode [ 278.980151][ T30] audit: type=1804 audit(1781165900.332:5): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2322" name="/newroot/461/cgroup.controllers" dev="tmpfs" ino=2366 res=1 errno=0 [ 279.055054][ T30] audit: type=1800 audit(1781165900.362:6): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2322" name="cgroup.controllers" dev="tmpfs" ino=2366 res=0 errno=0 [ 279.182180][T14793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 279.357380][T14815] netlink: 'syz.1.2329': attribute type 1 has an invalid length. [ 279.417535][T14816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2328'. [ 279.456010][T14815] bond0: Caught tx_queue_len zero misconfig [ 279.463961][T14816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2328'. [ 279.553796][T14816] gretap3: entered promiscuous mode [ 279.569700][T14816] gretap3: entered allmulticast mode [ 279.854649][T14836] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 279.881188][T14836] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 279.892878][T14836] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 279.946833][T14845] openvswitch: netlink: Actions may not be safe on all matching packets [ 279.965432][T14841] xt_hashlimit: size too large, truncated to 1048576 [ 280.021503][T14847] netlink: 'syz.0.2337': attribute type 1 has an invalid length. [ 280.854596][T14872] pim6reg1: entered promiscuous mode [ 280.872831][T14872] pim6reg1: entered allmulticast mode [ 281.240974][T14901] netlink: 'syz.2.2350': attribute type 29 has an invalid length. [ 281.307250][T14906] netlink: 'syz.4.2349': attribute type 1 has an invalid length. [ 281.321385][T14907] netlink: 'syz.2.2350': attribute type 29 has an invalid length. [ 281.589841][T14914] netlink: 'syz.2.2354': attribute type 1 has an invalid length. [ 281.752312][T14914] 8021q: adding VLAN 0 to HW filter on device bond11 [ 281.832131][T14917] syzkaller0: entered promiscuous mode [ 281.861470][T14917] syzkaller0: entered allmulticast mode [ 281.904230][T14921] tipc: Enabled bearer , priority 0 [ 281.985277][T14917] tipc: Resetting bearer [ 282.141715][T14916] tipc: Resetting bearer [ 282.170676][T14916] tipc: Disabling bearer [ 282.231263][T14946] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 282.293930][T14945] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 282.758895][T14979] syzkaller1: entered promiscuous mode [ 282.789510][T14985] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 282.805582][T14979] syzkaller1: entered allmulticast mode [ 282.930182][T14985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.975562][T15001] __nla_validate_parse: 6 callbacks suppressed [ 282.975581][T15001] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2376'. [ 283.539276][T15031] netlink: 'syz.1.2385': attribute type 21 has an invalid length. [ 283.676940][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 283.693446][T15034] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 283.710048][T15040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2389'. [ 283.721995][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 283.732394][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2390'. [ 283.752944][T15034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2386'. [ 283.828451][T15046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2389'. [ 284.287156][T15051] hsr0 speed is unknown, defaulting to 1000 [ 284.298919][T15058] netlink: 211072 bytes leftover after parsing attributes in process `syz.0.2392'. [ 284.356917][T15051] xfrm0 speed is unknown, defaulting to 1000 [ 284.709634][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 284.718720][T15084] netlink: 'syz.1.2398': attribute type 18 has an invalid length. [ 284.733940][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2398'. [ 285.101210][ T144] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.129647][ T144] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.142480][ T144] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.219149][T15099] vxcan1: left promiscuous mode [ 285.237886][T15099] vxcan1: left allmulticast mode [ 285.262263][T15099] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 285.301852][T15099] vlan0: left allmulticast mode [ 285.308214][T15099] bond0: left allmulticast mode [ 285.313531][T15099] veth3: left allmulticast mode [ 285.318828][T15099] geneve4: left allmulticast mode [ 285.341219][ T144] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.141953][T15208] openvswitch: netlink: IP tunnel TTL not specified. [ 287.969688][T15242] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 288.020380][T15242] pim6reg: entered allmulticast mode [ 288.091351][T15251] ksmbd: Unknown IPC event: 3, ignore. [ 288.100972][T15253] __nla_validate_parse: 7 callbacks suppressed [ 288.100989][T15253] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2447'. [ 288.657240][T15270] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.2453'. [ 289.194184][T15296] syzkaller0: entered promiscuous mode [ 289.212877][T15296] syzkaller0: entered allmulticast mode [ 289.270918][T15296] tipc: Enabled bearer , priority 0 [ 289.320287][T15295] tipc: Resetting bearer [ 289.409502][T15295] tipc: Disabling bearer [ 289.551627][T15319] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 289.714575][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2471'. [ 289.759440][T15331] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2471'. [ 289.938203][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2474'. [ 290.090409][T15345] openvswitch: netlink: Multiple metadata blocks provided [ 290.197356][T15347] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2478'. [ 290.215378][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 290.494691][T15357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2482'. [ 290.527965][T15357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2482'. [ 290.567972][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 290.673874][T15371] netlink: 'syz.0.2487': attribute type 4 has an invalid length. [ 290.867786][T15391] netlink: 'syz.4.2492': attribute type 2 has an invalid length. [ 290.951774][T15383] veth1_to_batadv: left allmulticast mode [ 291.175504][T15403] SET target dimension over the limit! [ 294.010829][T15461] tipc: Enabled bearer , priority 0 [ 294.055669][T15454] tipc: Disabling bearer [ 294.299119][T15472] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 294.372373][T15479] __nla_validate_parse: 4 callbacks suppressed [ 294.372391][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'. [ 294.417786][T15479] nbd: must specify a size in bytes for the device [ 294.439523][T15481] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 294.489190][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 294.535102][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 294.565207][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 294.775578][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 294.797487][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 295.060379][T15518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2523'. [ 295.160904][T15516] bond12: Unable to set down delay as MII monitoring is disabled [ 295.280166][T15516] bond12 (unregistering): Released all slaves [ 295.435753][T15538] syzkaller1: left promiscuous mode [ 295.445625][T15536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.445813][T15538] syzkaller1: left allmulticast mode [ 295.596407][T15544] bond16: option fail_over_mac: invalid value (16) [ 295.626182][T15544] bond16 (unregistering): Released all slaves [ 295.718527][T15556] Cannot find map_set index 135 as target [ 296.209449][T15584] sctp: [Deprecated]: syz.4.2543 (pid 15584) Use of int in maxseg socket option. [ 296.209449][T15584] Use struct sctp_assoc_value instead [ 296.226317][T15583] sctp: [Deprecated]: syz.4.2543 (pid 15583) Use of int in maxseg socket option. [ 296.226317][T15583] Use struct sctp_assoc_value instead [ 296.425610][T15592] netlink: 'syz.4.2545': attribute type 1 has an invalid length. [ 296.546430][T15598] bond10: (slave gretap1): making interface the new active one [ 296.554455][T15592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2545'. [ 296.564537][T15598] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 296.583399][T15592] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.721448][T15606] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 296.734778][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 296.987216][T15624] sctp: [Deprecated]: syz.0.2552 (pid 15624) Use of int in maxseg socket option. [ 296.987216][T15624] Use struct sctp_assoc_value instead [ 297.167561][T15629] netlink: 'syz.4.2556': attribute type 4 has an invalid length. [ 297.186187][T15629] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2556'. [ 297.317029][T15638] x_tables: duplicate underflow at hook 2 [ 297.374651][T15633] bond12 (unregistering): Released all slaves [ 297.521284][T15647] macvlan0: entered promiscuous mode [ 297.547638][T15647] macvlan0: entered allmulticast mode [ 297.565020][T15647] team0: Device macvlan0 is already an upper device of the team interface [ 297.635915][T15659] netlink: 'syz.3.2563': attribute type 3 has an invalid length. [ 297.655809][T15662] tun0: tun_chr_ioctl cmd 1074025675 [ 297.689531][T15662] tun0: persist enabled [ 298.142154][T15696] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 298.213329][T15696] xt_hashlimit: size too large, truncated to 1048576 [ 299.049670][T15698] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 299.465099][T15751] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.619202][T15756] netlink: 'syz.2.2591': attribute type 3 has an invalid length. [ 299.659509][T15756] __nla_validate_parse: 4 callbacks suppressed [ 299.659525][T15756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2591'. [ 299.946935][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2597'. [ 300.087135][ T6875] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.114128][ T6875] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.164088][ T6875] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.188154][T15789] netlink: 'syz.2.2602': attribute type 1 has an invalid length. [ 300.199026][ T6875] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.213470][T15783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2599'. [ 300.285154][T15793] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.480868][T15804] syzkaller0: entered promiscuous mode [ 300.485973][T15806] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 300.491912][T15804] syzkaller0: entered allmulticast mode [ 300.573788][T15811] syzkaller0: entered promiscuous mode [ 300.580221][T15811] syzkaller0: entered allmulticast mode [ 300.590754][T15811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2610'. [ 300.602004][T15813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2608'. [ 300.884328][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2612'. [ 300.988871][T15826] pim6reg1: entered promiscuous mode [ 301.001899][T15826] pim6reg1: entered allmulticast mode [ 301.361955][T15850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2623'. [ 301.372436][T15851] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2622'. [ 301.604907][T15868] netlink: 'syz.2.2624': attribute type 10 has an invalid length. [ 301.634689][T15868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2624'. [ 301.668571][T15868] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 301.935977][T15882] netlink: 'syz.4.2631': attribute type 3 has an invalid length. [ 302.019462][T15888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.039194][T15889] netlink: 'syz.1.2633': attribute type 2 has an invalid length. [ 302.225516][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2637'. [ 302.697824][T15920] syzkaller0: entered promiscuous mode [ 302.705453][T15920] syzkaller0: entered allmulticast mode [ 302.720079][T15926] ipt_rpfilter: unknown options [ 302.722470][T15925] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 302.746618][T15918] netlink: 'syz.4.2644': attribute type 1 has an invalid length. [ 302.760996][T15926] ipt_rpfilter: unknown options [ 305.074397][T15933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.402932][T15985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.699793][T16004] netlink: 'syz.3.2671': attribute type 2 has an invalid length. [ 305.708814][T16004] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 305.727785][T16005] __nla_validate_parse: 3 callbacks suppressed [ 305.727802][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2669'. [ 306.040669][T16024] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2674'. [ 306.205102][T16034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2677'. [ 306.327486][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 306.498643][T16045] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 306.551034][T16054] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2684'. [ 306.560866][T16054] xfrm0: left allmulticast mode [ 306.708420][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.720780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.733127][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.745414][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.757733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.770008][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.782329][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.795092][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.835073][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 307.192387][T16072] netlink: 'syz.0.2690': attribute type 4 has an invalid length. [ 307.218228][T16072] netlink: 'syz.0.2690': attribute type 4 has an invalid length. [ 307.290151][T16076] netlink: 'syz.4.2692': attribute type 1 has an invalid length. [ 307.320289][T16076] netlink: 'syz.4.2692': attribute type 1 has an invalid length. [ 307.336604][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2690'. [ 307.336639][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2690'. [ 307.433143][T16076] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.2692'. [ 308.254115][T16104] veth0: entered promiscuous mode [ 308.300279][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2700'. [ 308.522635][T16108] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 309.278772][T16116] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 309.328339][T16130] netlink: 'syz.0.2706': attribute type 9 has an invalid length. [ 309.579053][T16132] syzkaller0: entered promiscuous mode [ 309.600389][T16132] syzkaller0: entered allmulticast mode [ 309.622484][T16135] x_tables: duplicate entry at hook 3 [ 309.728805][T16138] x_tables: duplicate underflow at hook 2 [ 310.083615][ C1] net_ratelimit: 11259 callbacks suppressed [ 310.083634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.101873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.114158][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.126472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.138742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.151018][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.163343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.175613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.187902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.200204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.459074][T16162] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 310.542222][T16164] netlink: 'syz.3.2715': attribute type 1 has an invalid length. [ 310.996302][T16181] __nla_validate_parse: 2 callbacks suppressed [ 310.996319][T16181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2715'. [ 311.228604][T16185] netlink: 'syz.2.2719': attribute type 22 has an invalid length. [ 311.263958][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2719'. [ 311.346689][T16169] 8021q: adding VLAN 0 to HW filter on device bond13 [ 311.392886][T16169] bond12: (slave bond13): making interface the new active one [ 311.438546][T16169] bond12: (slave bond13): Enslaving as an active interface with an up link [ 311.491121][T16168] bond12: (slave gretap4): Enslaving as a backup interface with an up link [ 311.519359][T16171] hsr0: entered promiscuous mode [ 311.580180][T16181] 8021q: adding VLAN 0 to HW filter on device bond12 [ 311.666711][T16190] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 311.719887][T16190] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 312.333620][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 312.891692][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2727'. [ 312.971158][T16221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2727'. [ 313.742866][T16233] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2734'. [ 313.905289][T16235] Bluetooth: MGMT ver 1.23 [ 314.378242][T16255] netlink: 'syz.3.2739': attribute type 2 has an invalid length. [ 314.397856][T16256] SET target dimension over the limit! [ 314.475899][T16255] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2739'. [ 314.539291][T16259] tc_dump_action: action bad kind [ 314.590940][T16252] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2738'. [ 315.061276][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 315.093267][ C1] net_ratelimit: 16626 callbacks suppressed [ 315.093285][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.111467][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.123737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.136013][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.148257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.160526][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.172793][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.185068][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.197304][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.209590][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.808376][T16304] tipc: Resetting bearer [ 316.129590][T16318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2754'. [ 316.149001][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.158891][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.167287][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.175658][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.184021][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.192351][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.200851][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.209213][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.217567][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.225923][T16314] tc action pedit unable to extract header offset for header type (0x4) [ 316.361814][T16319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2754'. [ 316.676784][T16328] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2758'. [ 316.968602][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.978471][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.262920][T16341] netlink: 'syz.3.2761': attribute type 2 has an invalid length. [ 317.327310][T16341] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2761'. [ 317.521199][T16345] netlink: 'syz.3.2761': attribute type 1 has an invalid length. [ 317.760527][T16345] 8021q: adding VLAN 0 to HW filter on device bond14 [ 318.770012][T16371] syzkaller0: entered promiscuous mode [ 318.828022][T16371] syzkaller0: entered allmulticast mode [ 319.155064][T16390] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2776'. [ 319.347290][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'. [ 319.377044][T16397] netlink: 'syz.0.2778': attribute type 29 has an invalid length. [ 319.440793][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'. [ 319.468700][T16399] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2779'. [ 320.041477][T16406] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 320.103088][ C1] net_ratelimit: 17453 callbacks suppressed [ 320.103105][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.121820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.134125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.146355][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.158584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.161396][T16406] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 320.170822][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.190420][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.202657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.214941][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.227211][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.571348][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2786'. [ 320.733346][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2786'. [ 321.132869][T16441] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 321.437362][T16443] __nla_validate_parse: 2 callbacks suppressed [ 321.437380][T16443] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2790'. [ 321.570114][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'. [ 325.113301][ C1] net_ratelimit: 27209 callbacks suppressed [ 325.113321][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.113731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 325.119539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.131429][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 325.143422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.155809][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 325.167338][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.179251][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 325.191183][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.203544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 327.023086][ C0] sched: DL replenish lagged too much [ 330.123133][ C0] net_ratelimit: 33639 callbacks suppressed [ 330.123143][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.123152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 330.123412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.129329][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.142455][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 330.153273][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.165251][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.177087][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.190037][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 330.200966][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.133201][ C1] net_ratelimit: 33772 callbacks suppressed [ 335.133220][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.133526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 335.139408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.151326][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.163309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.175553][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 335.187179][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.199054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.211029][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.223290][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 340.143115][ C0] net_ratelimit: 34049 callbacks suppressed [ 340.143136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.143135][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.143388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.149377][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 340.161329][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.173238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.185204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.197625][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 340.209076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.221086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.153166][ C1] net_ratelimit: 33942 callbacks suppressed [ 345.153188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.153555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 345.159437][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.171333][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.183324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.195818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 345.207198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.219082][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.231061][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.243363][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 350.163161][ C0] net_ratelimit: 33389 callbacks suppressed [ 350.163182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.163256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.169684][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 350.181358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.193268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.205216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.217472][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 350.229074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.240964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.252921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.173147][ C1] net_ratelimit: 33627 callbacks suppressed [ 355.173169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.173172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.173458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 355.179391][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.191304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.203328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.215706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 355.227170][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.239159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.251026][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.183172][ C1] net_ratelimit: 33513 callbacks suppressed [ 360.183192][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.183224][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 360.189367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.201291][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.213263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.225549][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 360.237132][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.249029][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.261005][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.273253][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 365.193163][ C0] net_ratelimit: 34834 callbacks suppressed [ 365.193183][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 365.194716][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.199406][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.211423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.223603][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 365.235285][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.247114][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.259124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.271332][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 365.282990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.203118][ C0] net_ratelimit: 34955 callbacks suppressed [ 370.203139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.203140][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.203374][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.209328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 370.221293][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.233255][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.245068][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.257439][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 370.268992][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.280920][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.213247][ C0] net_ratelimit: 35082 callbacks suppressed [ 375.213268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.213459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.219445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 375.231484][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.243323][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.255289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.267912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 375.279188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.291120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.303053][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.223079][ C1] net_ratelimit: 34147 callbacks suppressed [ 380.223079][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 380.223098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.229310][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.241268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.253567][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 380.265154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.277063][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.289019][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.301234][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 380.312933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 383.343262][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.363218][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.233125][ C1] net_ratelimit: 34568 callbacks suppressed [ 385.233145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 385.233215][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 385.239319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.251231][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.263249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 385.275510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 385.287106][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.298980][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.310972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 385.323229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 388.634071][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 390.243115][ C1] net_ratelimit: 34925 callbacks suppressed [ 390.243136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.243387][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 390.249309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.261255][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.273197][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.285708][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 390.297102][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.309008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.320935][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.333321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 395.253149][ C0] net_ratelimit: 33769 callbacks suppressed [ 395.253170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.253170][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.253416][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.259697][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 395.271350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.283289][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.295753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.307607][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 395.319141][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.331058][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.263090][ C1] net_ratelimit: 34819 callbacks suppressed [ 400.263095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 400.263112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.263346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.269263][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.281265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.293488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 400.305042][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.317007][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.328917][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.341360][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 405.273093][ C0] net_ratelimit: 34958 callbacks suppressed [ 405.273113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 405.273237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.279291][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.291294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 405.303531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 405.315176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.327041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.339630][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 405.351289][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 405.362964][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.283250][ C0] net_ratelimit: 34907 callbacks suppressed [ 410.283271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.283537][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.289479][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 410.301482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 410.313353][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.325324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.337797][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 410.349205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 410.361093][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.373102][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.293122][ C1] net_ratelimit: 34799 callbacks suppressed [ 415.293143][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.293245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 415.299335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.311257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.323250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.335462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 415.347112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.358985][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.370966][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.383397][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 420.303103][ C1] net_ratelimit: 34274 callbacks suppressed [ 420.303123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.303158][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.309305][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.321283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 420.333306][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.345150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.357126][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.369319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 420.380974][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.392840][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.313177][ C1] net_ratelimit: 33978 callbacks suppressed [ 425.313200][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.313207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 425.313462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.319374][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 425.331401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 425.343313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.355286][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.367212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 425.379575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 425.391137][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.323164][ C1] net_ratelimit: 34312 callbacks suppressed [ 430.323185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.323186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 430.323445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.329346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 430.341371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 430.353266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.365258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.377135][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 430.389485][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 430.401021][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.333099][ C0] net_ratelimit: 35578 callbacks suppressed [ 435.333119][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 435.333120][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.333365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.339294][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.351272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.363661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 435.375126][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.387114][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.398994][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.411316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 436.163026][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 436.170004][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5640/1:b..l [ 436.178372][ C0] rcu: (detected by 0, t=10503 jiffies, g=67689, q=1108 ncpus=2) [ 436.186198][ C0] task:syz-executor state:R running task stack:21928 pid:5640 tgid:5640 ppid:5623 task_flags:0x400140 flags:0x00080000 [ 436.200814][ C0] Call Trace: [ 436.204112][ C0] [ 436.207073][ C0] __schedule+0x1821/0x5740 [ 436.211594][ C0] ? arch_stack_walk+0xfb/0x150 [ 436.216465][ C0] ? stack_trace_save+0xa9/0x100 [ 436.221425][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 436.226814][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 436.231767][ C0] ? __pfx___schedule+0x10/0x10 [ 436.236629][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 436.241585][ C0] preempt_schedule_irq+0x4d/0xa0 [ 436.246613][ C0] irqentry_exit+0x14f/0x8b0 [ 436.251208][ C0] ? trace_irq_disable+0x3b/0x140 [ 436.256251][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.262237][ C0] RIP: 0010:unwind_next_frame+0x141a/0x2550 [ 436.268138][ C0] Code: 24 41 0f b6 44 2d 00 84 c0 0f 85 fd 0e 00 00 c6 03 00 48 8b 5c 24 28 4c 8b 64 24 18 4c 8b 7c 24 38 48 8b 44 24 48 0f b6 04 28 <84> c0 0f 85 41 0c 00 00 41 0f b6 04 2f 84 c0 0f 85 5c 0c 00 00 48 [ 436.287752][ C0] RSP: 0018:ffffc9000471f178 EFLAGS: 00000246 [ 436.293830][ C0] RAX: 0000000000000000 RBX: ffffc9000471f298 RCX: 0000000000000000 [ 436.301805][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90d26530 [ 436.309778][ C0] RBP: dffffc0000000000 R08: ffffc9000471f2a7 R09: 0000000000000000 [ 436.317758][ C0] R10: ffffc9000471f298 R11: fffff520008e3e55 R12: ffffc9000471f680 [ 436.325740][ C0] R13: 1ffff920008e3e4b R14: ffffc9000471f248 R15: 1ffffffff21a4ca6 [ 436.333735][ C0] ? unwind_next_frame+0xf33/0x2550 [ 436.338953][ C0] ? unwind_next_frame+0xa6/0x2550 [ 436.344075][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 436.349725][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 436.355890][ C0] arch_stack_walk+0x11b/0x150 [ 436.360673][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 436.365717][ C0] stack_trace_save+0xa9/0x100 [ 436.370492][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 436.375882][ C0] save_stack+0x122/0x230 [ 436.380224][ C0] ? __pfx_save_stack+0x10/0x10 [ 436.385084][ C0] ? __free_frozen_pages+0xc1c/0xd30 [ 436.390375][ C0] ? __slab_free+0x274/0x2c0 [ 436.394976][ C0] ? qlist_free_all+0x99/0x100 [ 436.399754][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 436.405414][ C0] ? page_ext_put+0x97/0xc0 [ 436.409938][ C0] __reset_page_owner+0x71/0x1f0 [ 436.414888][ C0] __free_frozen_pages+0xc1c/0xd30 [ 436.420019][ C0] __slab_free+0x274/0x2c0 [ 436.424469][ C0] qlist_free_all+0x99/0x100 [ 436.429074][ C0] ? vm_area_dup+0x2b/0x680 [ 436.433588][ C0] kasan_quarantine_reduce+0x148/0x160 [ 436.439064][ C0] __kasan_slab_alloc+0x22/0x80 [ 436.443929][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 436.449397][ C0] ? vm_area_dup+0x2b/0x680 [ 436.453910][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 436.459555][ C0] vm_area_dup+0x2b/0x680 [ 436.463894][ C0] ? __vm_enough_memory+0x11b/0x380 [ 436.469102][ C0] dup_mmap+0x8b4/0x1da0 [ 436.473374][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 436.478080][ C0] ? copy_mm+0x130/0x4a0 [ 436.482338][ C0] ? copy_mm+0x130/0x4a0 [ 436.486602][ C0] copy_mm+0x13b/0x4a0 [ 436.490681][ C0] copy_process+0x1f1c/0x4440 [ 436.495383][ C0] ? copy_process+0xd87/0x4440 [ 436.500163][ C0] ? __pfx_copy_process+0x10/0x10 [ 436.505207][ C0] kernel_clone+0x2d7/0x940 [ 436.509724][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 436.514772][ C0] __x64_sys_clone+0x1b6/0x230 [ 436.519545][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 436.524853][ C0] ? rcu_is_watching+0x15/0xb0 [ 436.529632][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.535704][ C0] do_syscall_64+0x174/0x580 [ 436.540297][ C0] ? trace_irq_disable+0x3b/0x140 [ 436.545348][ C0] ? clear_bhb_loop+0x40/0x90 [ 436.550041][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.555937][ C0] RIP: 0033:0x7f7e39dc58d2 [ 436.560369][ C0] RSP: 002b:00007ffcd77edcf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 436.568787][ C0] RAX: ffffffffffffffda RBX: 00007ffcd77edcf0 RCX: 00007f7e39dc58d2 [ 436.576761][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 436.584734][ C0] RBP: 00007ffcd77ede7c R08: 0000000000000000 R09: 0000000000000001 [ 436.592712][ C0] R10: 000055556dbd27d0 R11: 0000000000000246 R12: 0000000000000001 [ 436.600688][ C0] R13: 00000000000927c0 R14: 000000000004e8ee R15: 00007ffcd77eded0 [ 436.608683][ C0] [ 436.611706][ C0] rcu: rcu_preempt kthread starved for 248 jiffies! g67689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 436.622729][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 436.632699][ C0] rcu: RCU grace-period kthread stack dump: [ 436.638587][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 436.652093][ C0] Call Trace: [ 436.655378][ C0] [ 436.658315][ C0] __schedule+0x1821/0x5740 [ 436.662830][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 436.667806][ C0] ? __pfx___schedule+0x10/0x10 [ 436.672677][ C0] ? schedule+0x90/0x360 [ 436.676935][ C0] schedule+0x164/0x360 [ 436.681101][ C0] schedule_timeout+0x158/0x2c0 [ 436.685967][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 436.691353][ C0] ? __pfx_process_timeout+0x10/0x10 [ 436.696651][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 436.702466][ C0] ? prepare_to_swait_event+0x340/0x370 [ 436.708033][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 436.712903][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 436.719062][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 436.724350][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 436.729566][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 436.735389][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 436.739986][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 436.745191][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 436.751015][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 436.755957][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 436.760994][ C0] kthread+0x389/0x470 [ 436.765077][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 436.770275][ C0] ? __pfx_kthread+0x10/0x10 [ 436.774874][ C0] ret_from_fork+0x514/0xb70 [ 436.779472][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 436.784589][ C0] ? __switch_to+0xc79/0x1410 [ 436.789285][ C0] ? __pfx_kthread+0x10/0x10 [ 436.793892][ C0] ret_from_fork_asm+0x1a/0x30 [ 436.798677][ C0] [ 436.801692][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 436.808031][ C0] Sending NMI from CPU 0 to CPUs 1: [ 436.813243][ C1] NMI backtrace for cpu 1 [ 436.813268][ C1] CPU: 1 UID: 0 PID: 3233 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 436.813286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.813296][ C1] Workqueue: bat_events batadv_tt_purge [ 436.813319][ C1] RIP: 0010:lock_acquire+0xea/0x350 [ 436.813337][ C1] Code: fa 48 c7 c7 09 eb fb 8d e8 23 de 05 0a 65 ff 05 dc a0 96 11 45 31 c9 4c 89 7c 24 08 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef <89> de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 [ 436.813351][ C1] RSP: 0018:ffffc90000a07950 EFLAGS: 00000046 [ 436.813363][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000102 [ 436.813373][ C1] RDX: 0000000000000000 RSI: ffffffff8dfbeb09 RDI: ffffffff9a729a60 [ 436.813384][ C1] RBP: ffffffff84bca105 R08: 0000000000000001 R09: 0000000000000001 [ 436.813394][ C1] R10: dffffc0000000000 R11: fffffbfff206069f R12: 0000000000000000 [ 436.813404][ C1] R13: ffffffff9a729a60 R14: 0000000000000001 R15: 0000000000000046 [ 436.813414][ C1] FS: 0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 436.813426][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.813436][ C1] CR2: 00007f64e559f048 CR3: 000000002ae06000 CR4: 00000000003526f0 [ 436.813450][ C1] Call Trace: [ 436.813456][ C1] [ 436.813466][ C1] ? rcu_is_watching+0x15/0xb0 [ 436.813486][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 436.813513][ C1] ? debug_check_no_obj_freed+0x145/0x550 [ 436.813530][ C1] debug_check_no_obj_freed+0x145/0x550 [ 436.813548][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 436.813570][ C1] ? br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 436.813586][ C1] kmem_cache_free+0xfd/0x650 [ 436.813605][ C1] ? __skb_ext_put+0x221/0x2f0 [ 436.813625][ C1] ? __skb_ext_del+0x271/0x390 [ 436.813647][ C1] br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 436.813666][ C1] ? NF_HOOK+0xa2/0x6e0 [ 436.813681][ C1] ? NF_HOOK+0xa2/0x6e0 [ 436.813695][ C1] NF_HOOK+0x64e/0x6e0 [ 436.813711][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 436.813727][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 436.813744][ C1] ? net_generic+0x1e/0x240 [ 436.813758][ C1] ? net_generic+0x1e/0x240 [ 436.813771][ C1] ? net_generic+0x1e/0x240 [ 436.813784][ C1] ? skb_pull+0xc1/0x1d0 [ 436.813800][ C1] br_nf_post_routing+0xb66/0xfe0 [ 436.813816][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 436.813834][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 436.813851][ C1] nf_hook_slow+0xc5/0x220 [ 436.813866][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 436.813882][ C1] NF_HOOK+0x23e/0x3f0 [ 436.813897][ C1] ? NF_HOOK+0xa2/0x3f0 [ 436.813909][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 436.813921][ C1] ? net_generic+0x1e/0x240 [ 436.813936][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 436.813953][ C1] ? net_generic+0x1e/0x240 [ 436.813968][ C1] br_forward_finish+0xd3/0x130 [ 436.813982][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 436.813998][ C1] br_nf_forward_finish+0xa5e/0xe90 [ 436.814018][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 436.814035][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 436.814051][ C1] ? NF_HOOK+0xa2/0x6e0 [ 436.814066][ C1] ? NF_HOOK+0xa2/0x6e0 [ 436.814079][ C1] NF_HOOK+0x64e/0x6e0 [ 436.814096][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 436.814111][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 436.814127][ C1] ? net_generic+0x1e/0x240 [ 436.814145][ C1] br_nf_forward_ip+0x7ef/0xa30 [ 436.814159][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 436.814177][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 436.814193][ C1] nf_hook_slow+0xc5/0x220 [ 436.814208][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 436.814222][ C1] NF_HOOK+0x23e/0x3f0 [ 436.814237][ C1] ? NF_HOOK+0xa2/0x3f0 [ 436.814250][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 436.814264][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 436.814278][ C1] ? br_flood+0x8e0/0xb80 [ 436.814292][ C1] ? br_handle_vlan+0x61/0x530 [ 436.814313][ C1] __br_forward+0x397/0x540 [ 436.814326][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 436.814342][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 436.814358][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 436.814378][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 436.814398][ C1] ? ip6t_do_table+0x123/0x1560 [ 436.814418][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 436.814436][ C1] ? nf_hook_slow+0x176/0x220 [ 436.814451][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 436.814467][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 436.814486][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 436.814502][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 436.814523][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 436.814543][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 436.814565][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 436.814581][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 436.814602][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 436.814619][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 436.814635][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 436.814653][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 436.814670][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 436.814688][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 436.814703][ C1] br_handle_frame+0x1277/0x1510 [ 436.814723][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 436.814740][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 436.814755][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 436.814774][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 436.814789][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 436.814813][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 436.814832][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 436.814850][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 436.814876][ C1] ? process_backlog+0x3eb/0x1950 [ 436.814898][ C1] ? process_backlog+0x3eb/0x1950 [ 436.814915][ C1] ? process_backlog+0x3eb/0x1950 [ 436.814933][ C1] ? process_backlog+0x3eb/0x1950 [ 436.814951][ C1] process_backlog+0x76d/0x1950 [ 436.814978][ C1] __napi_poll+0xae/0x340 [ 436.814994][ C1] ? skb_defer_free_flush+0x233/0x260 [ 436.815013][ C1] net_rx_action+0x627/0xf70 [ 436.815031][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 436.815057][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 436.815083][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 436.815107][ C1] handle_softirqs+0x22a/0x840 [ 436.815123][ C1] ? do_softirq+0x76/0xd0 [ 436.815139][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 436.815157][ C1] do_softirq+0x76/0xd0 [ 436.815170][ C1] [ 436.815175][ C1] [ 436.815181][ C1] __local_bh_enable_ip+0xf8/0x130 [ 436.815196][ C1] batadv_tt_local_purge+0x2a7/0x340 [ 436.815219][ C1] batadv_tt_purge+0x35/0x9e0 [ 436.815239][ C1] ? process_scheduled_works+0xa70/0x1860 [ 436.815254][ C1] ? process_scheduled_works+0xa70/0x1860 [ 436.815270][ C1] process_scheduled_works+0xb5d/0x1860 [ 436.815298][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 436.815312][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 436.815338][ C1] rescuer_thread+0x827/0x1130 [ 436.815359][ C1] ? rescuer_thread+0xbb/0x1130 [ 436.815383][ C1] kthread+0x389/0x470 [ 436.815400][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 436.815415][ C1] ? __pfx_kthread+0x10/0x10 [ 436.815433][ C1] ret_from_fork+0x514/0xb70 [ 436.815449][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 436.815464][ C1] ? __switch_to+0xc79/0x1410 [ 436.815484][ C1] ? __pfx_kthread+0x10/0x10 [ 436.815502][ C1] ret_from_fork_asm+0x1a/0x30 [ 436.815532][ C1] [ 440.343249][ C0] net_ratelimit: 29169 callbacks suppressed [ 440.343269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.343342][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.349468][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 440.362097][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 440.373352][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.385401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.397651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 440.409259][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 440.421145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.433117][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.648628][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.074532][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.353118][ C0] net_ratelimit: 34511 callbacks suppressed [ 445.353138][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.353176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.359324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 445.371318][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.383207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.395149][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.407438][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:59:9c:10:aa:89, vlan:0) [ 445.419032][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.430934][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.442881][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)