last executing test programs: 1m13.052168185s ago: executing program 4 (id=3237): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x9f, 0xd, 0x5, 0x47, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x0, 0x7a33, 0x1d2}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', r6, 0x29, 0x3, 0x4, 0x200, 0xa, @loopback, @remote, 0x8, 0x7800, 0x8, 0x63c}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'sit0\x00', r8, 0x700, 0x10, 0xc, 0xf, {{0x5, 0x4, 0x1, 0x1e, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @loopback}}}}) listen(r7, 0x100) shutdown(r7, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000500)={0x80}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1m12.18872833s ago: executing program 4 (id=3241): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x2000000015, 0x80005, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r5, 0x0, 0x0, 0x40000022, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000640)={r8}, &(0x7f0000000740)=0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d285f2c2dde2cb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}}, 0x8000) 1m11.323628227s ago: executing program 0 (id=3246): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x10c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2227f, 0x1040}, [@IFLA_AF_SPEC={0xd8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x10}, {0x8, 0x18, 0x0, 0x0, 0x7}, {0x8, 0x1d, 0x0, 0x0, 0x7}, {0x8, 0x7, 0x0, 0x0, 0x4}, {0x8, 0x10, 0x0, 0x0, 0x5}, {0x8, 0x21, 0x0, 0x0, 0x80}, {0x8, 0x17, 0x0, 0x0, 0x74cb9e8b}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x4, 0x0, 0x0, 0x1cef}]}}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x10c}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1, 0x4f, 0x9) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m11.1259201s ago: executing program 4 (id=3247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x2000000015, 0x80005, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r5, 0x0, 0x0, 0x40000022, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000640)={r8}, &(0x7f0000000740)=0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d285f2c2dde2cb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x60}}, 0x8000) 1m10.869281096s ago: executing program 3 (id=3249): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e20, 0x3, 'nq\x00', 0x18, 0xfd1e, 0x40}, 0x2c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001900)={0xffffffffffffffff, 0x20, &(0x7f00000018c0)={&(0x7f0000001780)=""/144, 0x90, 0x0, &(0x7f0000001840)=""/65, 0x41}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r3}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a80)={0xffffffffffffffff, 0x8, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x10, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000080000000000020000000000182b0000", @ANYRES32=r6, @ANYBLOB="00000000090000000a1f0900000800001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1e, r1, 0x8, &(0x7f0000001700)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x1, 0x3, 0x1, 0xfffffffd}, 0x10, r7, r3, 0xa, &(0x7f0000001ac0)=[0x1, r8, 0xffffffffffffffff, r9], &(0x7f0000001b00)=[{0x0, 0x1, 0x8, 0xc}, {0x1, 0x4, 0xc}, {0x0, 0x5, 0x6, 0xb}, {0x3, 0x1, 0xd, 0x8}, {0x2, 0x1, 0x2, 0x6}, {0x3, 0x5, 0x7, 0x9}, {0x4, 0x4, 0x3, 0x5}, {0x2, 0x2, 0x6, 0xc}, {0x5, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x9, 0x3}]}, 0x94) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000004100090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r12}, 0x8) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000007110040000000000fc441fbeeac9348f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r15 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x3e, &(0x7f0000000140)=0x1ff, 0x4) 1m10.711453174s ago: executing program 1 (id=3250): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, &(0x7f0000000840)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x3, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x7ac37101b13318f3) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x8010) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50002011}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xd8}], 0x1}, 0x44004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="094a9e5203eb4a", 0x7, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="4c00000011000f14000500020000180001000000200000", 0x17) 1m10.140489266s ago: executing program 1 (id=3251): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000b340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f000000d440)={0x0, 0x0, &(0x7f000000d400)={&(0x7f000000d3c0)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008015}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x200040cc) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0xe}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000c000000140003800400040008000200fd7f01000400010018000180140002006e657464657673696d3000"], 0x40}}, 0x0) sendmmsg$sock(r9, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 1m10.131315861s ago: executing program 3 (id=3252): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8881}, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) unshare(0x8040480) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200"], 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 1m10.04508951s ago: executing program 4 (id=3253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x114, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@generic="462f0e9ef5ded1a9fb5dae0ff909bea1376b29c1e117586a30b507660f4a0e95e203348d86ac7c4f2172a0db54825a90fb3ed8d744f1ffff39186e215e4d20656453a86902020581cc6d4cb1b88fe65a3405c081abb32b735d6af93932a210a049a4b64dca7ffe3db028c791ba5e97ae338f8b2d908f84326e3a45e80033", @generic="4f3392f22dbc8b89e20a9f9737712351a662c47f3478c224b539904be2dbbd64856d1e85d2135160592cd17cfd4377827d1105ee70d470564498036324fd5787eace1f6e150d9163332b2584d35d6e24e7fe2ce6d44a22b4d931841175b7d3bcd6d5d31f768c588ab7dfaf8a8c43cd46fd70b50719ef56f4265a5e316ef2d62c"]}]}, 0x114}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01e6ffffffffffffff000a0000010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x92aa842669e14d00]}}, {@mac=@random="f135419f37d9", {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3e}, @empty, 0x0, 0x0, 0x0, 0xd, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003400000030008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000006000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newqdisc={0x88, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x9, [0x0, 0xd, 0x10, 0x10, 0x81, 0x1d, 0x0, 0x5, 0xa, 0xe, 0x7, 0x10, 0x7, 0x2f, 0xf, 0xf], 0x1, [0x1, 0x6, 0xa47, 0x5, 0x8, 0x9, 0x3, 0x4, 0x400, 0x7, 0xdb2, 0x1, 0x6, 0x6, 0x3, 0x4], [0x7, 0xfcdc, 0x9, 0x7, 0x8000, 0xfff, 0x6a, 0x6, 0xffff, 0x3, 0x9, 0x7f, 0x240, 0xfff7, 0x4, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x368, 0x2a8, 0x0, 0x0, 0x130, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 1m9.970380001s ago: executing program 2 (id=3254): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200000f00000004030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, &(0x7f0000000840)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x3, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x7ac37101b13318f3) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x8010) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50002011}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xd8}], 0x1}, 0x44004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="094a9e5203eb4a", 0x7, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="4c00000011000f14000500020000180001000000200000", 0x17) 1m9.627418922s ago: executing program 0 (id=3255): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8881}, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) unshare(0x8040480) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200"], 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) 1m9.503103528s ago: executing program 3 (id=3256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000000000000000000000000000000008000300687372302800128008000100687372001c00028008000100", @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB='\b\x00\b'], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m9.492641376s ago: executing program 1 (id=3257): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x10c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2227f, 0x1040}, [@IFLA_AF_SPEC={0xd8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x10}, {0x8, 0x18, 0x0, 0x0, 0x7}, {0x8, 0x1d, 0x0, 0x0, 0x7}, {0x8, 0x7, 0x0, 0x0, 0x4}, {0x8, 0x10, 0x0, 0x0, 0x5}, {0x8, 0x21, 0x0, 0x0, 0x80}, {0x8, 0x17, 0x0, 0x0, 0x74cb9e8b}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x4, 0x0, 0x0, 0x1cef}]}}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x10c}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1, 0x4f, 0x9) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m9.417387782s ago: executing program 0 (id=3258): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a00000409"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m9.361372245s ago: executing program 2 (id=3259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x114, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@generic="462f0e9ef5ded1a9fb5dae0ff909bea1376b29c1e117586a30b507660f4a0e95e203348d86ac7c4f2172a0db54825a90fb3ed8d744f1ffff39186e215e4d20656453a86902020581cc6d4cb1b88fe65a3405c081abb32b735d6af93932a210a049a4b64dca7ffe3db028c791ba5e97ae338f8b2d908f84326e3a45e80033", @generic="4f3392f22dbc8b89e20a9f9737712351a662c47f3478c224b539904be2dbbd64856d1e85d2135160592cd17cfd4377827d1105ee70d470564498036324fd5787eace1f6e150d9163332b2584d35d6e24e7fe2ce6d44a22b4d931841175b7d3bcd6d5d31f768c588ab7dfaf8a8c43cd46fd70b50719ef56f4265a5e316ef2d62c"]}]}, 0x114}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x92aa842669e14d00]}}, {@mac=@random="f135419f37d9", {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3e}, @empty, 0x0, 0x0, 0x0, 0xd, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003400000030008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000006000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) socket(0x10, 0x3, 0x4) 1m9.299147273s ago: executing program 4 (id=3260): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x40, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x40}}, 0x84) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000000000000000000000000000000008000300687372302800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r7, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r9, 0x0, 0xa002a0}, 0x38) read(r9, 0x0, 0x0) getsockopt$bt_hci(r8, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000001c0)={'bond0\x00', 0x41}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'dummy0\x00', 0x41}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'hsr0\x00', 0x41}) sendto$packet(r4, &(0x7f0000000280)="01154e0001000011221e4455892fca01000188fb", 0x14, 0x0, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m9.208004782s ago: executing program 3 (id=3261): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket(0x2, 0x80805, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) syz_emit_ethernet(0xf4, &(0x7f00000009c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\b', @ANYRESOCT=r3, @ANYBLOB="7829eca9de9891203eea18280016be21fb1777a31659615d286ff72b61ee23d917c0a562eb690e0edae8640d240035af4f5c", @ANYRES64=r4, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa30000380240003800600010002000000060003"], 0x64}}, 0x24000050) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00174000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0xffd8) 1m8.734321429s ago: executing program 3 (id=3262): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e20, 0x3, 'nq\x00', 0x18, 0xfd1e, 0x40}, 0x2c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001900)={0xffffffffffffffff, 0x20, &(0x7f00000018c0)={&(0x7f0000001780)=""/144, 0x90, 0x0, &(0x7f0000001840)=""/65, 0x41}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r3}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a80)={0xffffffffffffffff, 0x8, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x10, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000080000000000020000000000182b0000", @ANYRES32=r6, @ANYBLOB="00000000090000000a1f0900000800001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1e, r1, 0x8, &(0x7f0000001700)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x1, 0x3, 0x1, 0xfffffffd}, 0x10, r7, r3, 0xa, &(0x7f0000001ac0)=[0x1, r8, 0xffffffffffffffff, r9], &(0x7f0000001b00)=[{0x0, 0x1, 0x8, 0xc}, {0x1, 0x4, 0xc}, {0x0, 0x5, 0x6, 0xb}, {0x3, 0x1, 0xd, 0x8}, {0x2, 0x1, 0x2, 0x6}, {0x3, 0x5, 0x7, 0x9}, {0x4, 0x4, 0x3, 0x5}, {0x2, 0x2, 0x6, 0xc}, {0x5, 0x5, 0xd, 0x9}, {0x0, 0x4, 0x9, 0x3}]}, 0x94) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000004100090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r12}, 0x8) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000007110040000000000fc441fbeeac9348f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r15 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x3e, &(0x7f0000000140)=0x1ff, 0x4) 1m8.546119635s ago: executing program 2 (id=3263): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200000f00000004030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, &(0x7f0000000840)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x3, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x7ac37101b13318f3) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x8010) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50002011}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xd8}], 0x1}, 0x44004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="094a9e5203eb4a", 0x7, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="4c00000011000f14000500020000180001000000200000", 0x17) 1m8.407885504s ago: executing program 0 (id=3264): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 1m8.247014753s ago: executing program 0 (id=3265): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000400000008000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100000004"], 0x18}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, 0x0, 0x240440c4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4005) 1m8.130603762s ago: executing program 4 (id=3266): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000000400)=@qipcrtr={0x2a, 0x0, 0x2}, 0x80, 0x0}, 0x0) unshare(0x2c020400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xfffa}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xe70}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff040000000800"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x471e, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$can_bcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="0100000044090000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000c04466"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x8040480) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, 0x0, 0x0) 1m8.086165885s ago: executing program 3 (id=3267): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x10c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2227f, 0x1040}, [@IFLA_AF_SPEC={0xd8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x10}, {0x8, 0x18, 0x0, 0x0, 0x7}, {0x8, 0x1d, 0x0, 0x0, 0x7}, {0x8, 0x7, 0x0, 0x0, 0x4}, {0x8, 0x10, 0x0, 0x0, 0x5}, {0x8, 0x21, 0x0, 0x0, 0x80}, {0x8, 0x17, 0x0, 0x0, 0x74cb9e8b}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x4, 0x0, 0x0, 0x1cef}]}}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x10c}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r7}, 0x38) 1m8.04753116s ago: executing program 2 (id=3268): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8881}, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) unshare(0x8040480) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200"], 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) 1m7.945021217s ago: executing program 1 (id=3269): unshare(0x22020400) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @remote, 'gretap0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x13) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x6}, 0x4) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x2004002c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m7.592010724s ago: executing program 2 (id=3270): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x298, 0x0, 0x0, 0x200, 0x200, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x368}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) close(0x3) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x4, 0xa, 0x10001, 0x2, 0x8, 0x7fffffffffffffff, 0x3, 0x80000000, 0x1b8000, 0xfff, 0xfffffffffffffffc, 0x80000001, 0x1, 0x9}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xd}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x5, 0x9, 0x3, 0x1f86f77d}, 0x10, 0xeae3, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001980)=[{0x3, 0x2, 0x8, 0x9}], 0x10, 0x16}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, 0x0, &(0x7f0000000000)=""/104}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 1m7.531315301s ago: executing program 1 (id=3271): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB='\b\x00\b'], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m7.188175512s ago: executing program 0 (id=3272): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a1", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a00000409"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m7.012383671s ago: executing program 1 (id=3273): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x10c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2227f, 0x1040}, [@IFLA_AF_SPEC={0xd8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x10}, {0x8, 0x18, 0x0, 0x0, 0x7}, {0x8, 0x1d, 0x0, 0x0, 0x7}, {0x8, 0x7, 0x0, 0x0, 0x4}, {0x8, 0x10, 0x0, 0x0, 0x5}, {0x8, 0x21, 0x0, 0x0, 0x80}, {0x8, 0x17, 0x0, 0x0, 0x74cb9e8b}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x4, 0x0, 0x0, 0x1cef}]}}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x10c}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1, 0x4f, 0x9) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.79956594s ago: executing program 2 (id=3274): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r6, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xd, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f0", 0x0, 0x200020fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x88f5}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x20, 0x800, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c3, 0x9, 0x0, @gue={{0x1, 0x1, 0x2, 0x5, 0x100, @void}}}}}}}}, 0x3a) 0s ago: executing program 32 (id=3272): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a1", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a00000409"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): family [ 425.206203][T13436] ipt_ECN: cannot use operation on non-tcp rule [ 425.409733][T13418] bond7: (slave veth9): Enslaving as an active interface with an up link [ 427.354601][T13467] netlink: 'syz.2.1903': attribute type 6 has an invalid length. [ 427.589066][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 428.376651][T13489] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 428.393679][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1906'. [ 428.405054][T13491] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 428.592035][T13496] ipt_ECN: cannot use operation on non-tcp rule [ 429.194656][T13492] bond8: (slave veth11): Enslaving as an active interface with an up link [ 430.399989][T13526] netlink: 'syz.2.1915': attribute type 6 has an invalid length. [ 431.608933][T13545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1922'. [ 431.714261][T13550] netlink: 'syz.1.1922': attribute type 6 has an invalid length. [ 433.530742][T13577] netlink: 'syz.0.1931': attribute type 6 has an invalid length. [ 434.578547][T13594] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1936'. [ 434.660686][T13598] netlink: 'syz.0.1936': attribute type 6 has an invalid length. [ 435.756413][T13609] netlink: 'syz.4.1938': attribute type 6 has an invalid length. [ 437.896763][T13647] netlink: 'syz.0.1947': attribute type 6 has an invalid length. [ 437.899502][T13646] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 438.703537][T13651] bond11: (slave veth19): Enslaving as an active interface with an up link [ 438.995293][T13669] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1951'. [ 439.075334][T13672] netlink: 'syz.0.1951': attribute type 6 has an invalid length. [ 439.328273][T13673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.376038][T13673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.529595][T13679] netlink: 'syz.3.1954': attribute type 6 has an invalid length. [ 440.241490][T13673] net_ratelimit: 433 callbacks suppressed [ 440.241516][T13673] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 441.427295][T13705] netlink: 'syz.1.1961': attribute type 6 has an invalid length. [ 442.834354][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'. [ 443.081358][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 443.172452][T13727] netlink: 'syz.0.1965': attribute type 6 has an invalid length. [ 443.273984][T13730] netlink: 'syz.1.1966': attribute type 1 has an invalid length. [ 444.263301][T13732] bond9: (slave veth13): Enslaving as an active interface with an up link [ 444.515292][T13749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1969'. [ 444.674023][T13753] netlink: 'syz.0.1969': attribute type 23 has an invalid length. [ 445.673532][T13770] netlink: 'syz.0.1973': attribute type 6 has an invalid length. [ 445.751937][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 446.893936][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1979'. [ 446.980933][T13793] netlink: 'syz.1.1979': attribute type 6 has an invalid length. [ 447.081881][T13794] netlink: 'syz.4.1981': attribute type 1 has an invalid length. [ 447.750128][T13798] bond8: (slave veth7): Enslaving as an active interface with an up link [ 448.495572][T13819] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 449.657539][T13842] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 450.055563][T13847] bond11: (slave veth15): Enslaving as an active interface with an up link [ 450.203244][T13854] netlink: 'syz.4.1995': attribute type 1 has an invalid length. [ 450.766468][T13858] bond9: (slave veth9): Enslaving as an active interface with an up link [ 450.874015][T13871] netlink: 'syz.3.1997': attribute type 1 has an invalid length. [ 451.530655][T13873] bond12: (slave veth21): Enslaving as an active interface with an up link [ 453.469842][T13909] netlink: 'syz.2.2006': attribute type 1 has an invalid length. [ 453.930882][T13927] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 454.052128][T13916] bond12: (slave veth17): Enslaving as an active interface with an up link [ 454.664222][T13935] netlink: 'syz.1.2011': attribute type 1 has an invalid length. [ 454.921766][T13945] netlink: 'syz.2.2012': attribute type 1 has an invalid length. [ 455.020771][T13941] bond10: (slave veth15): Enslaving as an active interface with an up link [ 455.829738][T13948] bond13: (slave veth19): Enslaving as an active interface with an up link [ 455.890257][T13964] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 456.743842][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'. [ 456.762804][T13979] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 457.002942][T13983] ipt_ECN: cannot use operation on non-tcp rule [ 457.425510][T13968] bond10: (slave veth11): Enslaving as an active interface with an up link [ 457.831580][T13993] netlink: 'syz.3.2022': attribute type 1 has an invalid length. [ 457.965636][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 458.348860][T14003] bond13: (slave veth23): Enslaving as an active interface with an up link [ 459.945324][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 460.034327][T14046] netlink: 'syz.3.2034': attribute type 1 has an invalid length. [ 460.115074][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 460.149881][T14045] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 460.374212][T14054] ipt_ECN: cannot use operation on non-tcp rule [ 460.714199][T14048] bond14: (slave veth25): Enslaving as an active interface with an up link [ 460.963308][T14059] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 460.963336][T14059] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2036'. [ 460.963355][T14059] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 461.136524][T14059] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2036'. [ 461.528681][T14068] netlink: 'syz.3.2039': attribute type 1 has an invalid length. [ 461.676644][T14071] bond15: (slave veth27): Enslaving as an active interface with an up link [ 461.934304][T14083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2040'. [ 462.162495][T14087] netlink: 'syz.0.2040': attribute type 23 has an invalid length. [ 462.517462][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2046'. [ 462.540281][T14093] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 462.791546][T14105] ipt_ECN: cannot use operation on non-tcp rule [ 463.765514][T14109] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 463.994175][T14114] bond8: (slave veth13): Enslaving as an active interface with an up link [ 465.107827][T14130] netlink: 'syz.3.2053': attribute type 6 has an invalid length. [ 466.040243][T14143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2058'. [ 466.258487][T14145] netlink: 'syz.1.2059': attribute type 1 has an invalid length. [ 466.258516][T14145] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2059'. [ 466.258534][T14145] netlink: 'syz.1.2059': attribute type 1 has an invalid length. [ 466.377480][T14149] netlink: 'syz.2.2060': attribute type 1 has an invalid length. [ 466.377506][T14149] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2060'. [ 466.377524][T14149] netlink: 'syz.2.2060': attribute type 1 has an invalid length. [ 466.407193][T14145] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2059'. [ 466.455768][T14149] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2060'. [ 466.606172][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 466.606958][T14153] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 466.750701][T14152] ipt_ECN: cannot use operation on non-tcp rule [ 467.000462][T14158] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 467.348867][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 467.539449][T14161] bond11: (slave veth17): Enslaving as an active interface with an up link [ 468.378676][T14183] netlink: 'syz.0.2068': attribute type 6 has an invalid length. [ 468.447274][T14182] netlink: 'syz.4.2066': attribute type 6 has an invalid length. [ 469.661380][T14198] netlink: 'syz.4.2072': attribute type 1 has an invalid length. [ 469.661407][T14198] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2072'. [ 469.661426][T14198] netlink: 'syz.4.2072': attribute type 1 has an invalid length. [ 469.780083][T14206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2075'. [ 469.784656][T14205] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2072'. [ 469.907568][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'. [ 469.928501][T14207] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 470.011574][T14210] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2077'. [ 470.139096][T14216] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2077'. [ 470.257069][T14217] ipt_ECN: cannot use operation on non-tcp rule [ 470.574316][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 471.490912][T14228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2079'. [ 471.855062][T14237] validate_nla: 2 callbacks suppressed [ 471.855085][T14237] netlink: 'syz.1.2081': attribute type 6 has an invalid length. [ 475.673689][T14286] netlink: 'syz.3.2097': attribute type 6 has an invalid length. [ 475.709250][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'. [ 478.081528][T14323] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 479.047317][T14333] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 479.047364][T14333] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2109'. [ 479.047416][T14333] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 479.159701][T14331] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2109'. [ 479.535968][T14339] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 479.971176][T14347] netlink: 'syz.3.2113': attribute type 6 has an invalid length. [ 480.186835][T14343] bond11: (slave veth13): Enslaving as an active interface with an up link [ 480.691339][T14354] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2116'. [ 481.306388][T14370] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 481.306420][T14370] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2120'. [ 481.306441][T14370] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 481.391968][T14370] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2120'. [ 483.019094][T14390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2126'. [ 483.088281][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2126'. [ 483.117998][T14391] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 483.432695][T14401] ipt_ECN: cannot use operation on non-tcp rule [ 483.673833][T14404] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 483.673862][T14404] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2130'. [ 483.673881][T14404] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 483.788023][T14403] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2130'. [ 484.512365][T14414] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2132'. [ 485.140784][T14424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2136'. [ 485.171420][T14424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2136'. [ 485.264730][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 485.833679][T14433] netlink: 'syz.0.2141': attribute type 1 has an invalid length. [ 485.833707][T14433] netlink: 'syz.0.2141': attribute type 1 has an invalid length. [ 486.588357][T14448] __nla_validate_parse: 2 callbacks suppressed [ 486.588381][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2144'. [ 486.793659][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2145'. [ 486.846275][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 486.910381][T14456] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 487.274910][T14455] bridge0: port 3(bond0) entered blocking state [ 487.275043][T14455] bridge0: port 3(bond0) entered forwarding state [ 487.276206][T14455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.336447][T14455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.419628][T14454] ipt_ECN: cannot use operation on non-tcp rule [ 487.654326][T14466] netlink: 'syz.4.2148': attribute type 1 has an invalid length. [ 487.654392][T14466] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2148'. [ 487.654450][T14466] netlink: 'syz.4.2148': attribute type 1 has an invalid length. [ 487.859421][T14455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.872298][T14455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.951043][T14465] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2148'. [ 487.952005][T14455] veth1_macvtap: left promiscuous mode [ 487.960504][T14455] veth0_macvtap: left promiscuous mode [ 487.978185][T14455] veth0_macvtap: entered promiscuous mode [ 487.982661][T14455] veth1_macvtap: entered promiscuous mode [ 488.040730][T14470] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2149'. [ 488.109646][T14455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.110954][T14455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.112232][T14455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.113412][T14455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.114150][T14455] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 488.115538][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.182852][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.182980][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.201825][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.201966][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.262693][ T1169] bridge0: port 4(vlan0) entered blocking state [ 488.262805][ T1169] bridge0: port 4(vlan0) entered forwarding state [ 488.286931][ T1169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.306062][ T8769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.466044][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 488.466810][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 488.605112][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 488.607574][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 488.744338][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 488.744967][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 488.896752][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 488.897774][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 489.760584][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 491.849497][T14529] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2167'. [ 492.101694][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 493.516730][ C0] net_ratelimit: 9 callbacks suppressed [ 493.516755][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 493.517193][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 494.863997][T14570] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 495.090228][T14575] netlink: 'syz.1.2179': attribute type 1 has an invalid length. [ 495.837100][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 495.837651][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 496.057681][T14587] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2180'. [ 496.077365][T14590] netlink: 'syz.2.2182': attribute type 23 has an invalid length. [ 496.561482][T14600] netlink: 'syz.0.2186': attribute type 1 has an invalid length. [ 496.664383][T14600] bond9: (slave veth15): Enslaving as an active interface with an up link [ 497.346471][T14617] netlink: 'syz.3.2188': attribute type 23 has an invalid length. [ 498.262299][T14632] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 498.284688][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.294797][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.299871][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.307921][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.851750][T14639] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2195'. [ 499.317615][T14645] netlink: 'syz.3.2197': attribute type 23 has an invalid length. [ 499.740126][T14656] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 499.857632][T14654] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 499.857657][T14654] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2199'. [ 499.857718][T14654] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 499.956985][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.959732][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.041165][T14654] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2199'. [ 500.111002][T14657] Bluetooth: hci0: unsupported parameter 5135 [ 500.111028][T14657] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 500.218843][T14665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2202'. [ 500.353199][T14659] bond14: (slave veth21): Enslaving as an active interface with an up link [ 500.432694][T14669] netlink: 'syz.0.2202': attribute type 23 has an invalid length. [ 500.956578][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.957010][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.652076][T14686] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 501.652104][T14686] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2207'. [ 501.652122][T14686] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 501.803747][T14686] Bluetooth: hci0: unsupported parameter 5135 [ 501.803775][T14686] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 502.480652][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.482165][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.620579][T14707] netlink: 'syz.0.2214': attribute type 1 has an invalid length. [ 502.911261][T14716] netlink: 'syz.1.2215': attribute type 1 has an invalid length. [ 503.137479][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.138459][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.177581][T14709] bond10: (slave veth17): Enslaving as an active interface with an up link [ 503.250646][T14712] bridge0: port 4(team0) entered disabled state [ 503.251581][T14712] bridge0: port 3(vlan2) entered disabled state [ 503.254127][T14712] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.254629][T14712] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.705120][ T8769] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.706465][ T8769] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.706512][ T8769] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.706553][ T8769] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.820093][T14714] bond12: (slave veth19): Enslaving as an active interface with an up link [ 504.180444][T14734] netlink: 'syz.0.2220': attribute type 1 has an invalid length. [ 504.180468][T14734] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2220'. [ 504.180486][T14734] netlink: 'syz.0.2220': attribute type 1 has an invalid length. [ 504.240395][T14736] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2220'. [ 504.283092][T14736] Bluetooth: hci0: unsupported parameter 5135 [ 504.283118][T14736] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 504.422692][T14742] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 505.056984][T14760] netlink: 'syz.1.2228': attribute type 23 has an invalid length. [ 505.489349][T14753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.492978][T14753] dummy0: left promiscuous mode [ 505.497272][T14753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.552411][T14753] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 505.831676][T14767] netlink: 'syz.0.2230': attribute type 6 has an invalid length. [ 505.869681][T14769] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 506.342094][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2239'. [ 507.278863][T14813] netlink: 'syz.3.2246': attribute type 1 has an invalid length. [ 507.278889][T14813] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2246'. [ 507.278907][T14813] netlink: 'syz.3.2246': attribute type 1 has an invalid length. [ 507.280605][T14813] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2246'. [ 507.381486][T14816] Bluetooth: hci0: unsupported parameter 5135 [ 507.381512][T14816] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 507.416949][T14819] netlink: 'syz.1.2247': attribute type 1 has an invalid length. [ 507.820956][T14820] bond13: (slave veth21): Enslaving as an active interface with an up link [ 508.460781][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2256'. [ 508.860145][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2259'. [ 508.941882][T14867] netlink: 'syz.0.2259': attribute type 23 has an invalid length. [ 509.131945][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 509.131972][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 510.013836][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2264'. [ 510.041976][T14881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2263'. [ 510.457878][T14888] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 510.457984][T14888] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2266'. [ 510.458005][T14888] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 510.460034][T14888] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2266'. [ 510.549338][T14891] Bluetooth: hci0: unsupported parameter 5135 [ 510.549367][T14891] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 510.738135][T14892] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 511.059034][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 511.550861][T14915] netlink: 'syz.3.2272': attribute type 23 has an invalid length. [ 512.142021][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2277'. [ 512.225480][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 512.511205][T14948] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 512.607333][T14949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2282'. [ 513.803973][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2289'. [ 514.544579][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 514.571541][T14991] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 515.129934][T15007] bridge0: port 4(vlan0) entered disabled state [ 515.132814][T15007] bridge0: port 3(bond0) entered disabled state [ 515.133626][T15007] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.134116][T15007] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.394141][T15007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.431692][T15007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.738346][ T149] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.740016][ T8767] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.740067][ T8767] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.855774][T15049] __nla_validate_parse: 1 callbacks suppressed [ 516.855796][T15049] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2311'. [ 516.859362][T15049] Bluetooth: hci0: unsupported parameter 5135 [ 516.859403][T15049] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 517.922420][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 517.922449][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 518.214603][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'. [ 518.214633][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'. [ 518.334118][T15083] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 518.334144][T15083] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2321'. [ 518.334160][T15083] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 518.403853][T15083] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2321'. [ 518.602938][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 518.634238][T15092] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 518.784700][T15101] ipt_ECN: cannot use operation on non-tcp rule [ 519.306948][T15120] netlink: 'syz.0.2329': attribute type 6 has an invalid length. [ 519.424711][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 519.424739][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 520.586265][T15153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.589723][T15153] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.348424][T15153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 521.348453][T15153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.351916][T15153] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 521.409765][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.409880][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.431515][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.431624][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.556916][ T141] bridge0: port 4(team0) entered blocking state [ 521.557028][ T141] bridge0: port 4(team0) entered forwarding state [ 521.748697][T15173] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 521.859307][T15168] netlink: 'syz.0.2343': attribute type 23 has an invalid length. [ 522.158654][T15189] netlink: 'syz.4.2348': attribute type 1 has an invalid length. [ 522.500048][T15203] __nla_validate_parse: 2 callbacks suppressed [ 522.500070][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'. [ 522.500085][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'. [ 522.530820][T15193] bond12: (slave veth15): Enslaving as an active interface with an up link [ 523.683002][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 523.683029][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 523.836615][T15219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.852228][T15219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.287045][T15219] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 524.678627][T15247] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 524.733901][T15250] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 524.762264][T15251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2362'. [ 524.905825][T15251] netlink: 'syz.0.2362': attribute type 23 has an invalid length. [ 524.963427][T15257] ipt_ECN: cannot use operation on non-tcp rule [ 525.040335][T15258] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 525.302072][T15253] bond15: (slave veth23): Enslaving as an active interface with an up link [ 526.088784][T15289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.090590][T15289] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.006080][T15289] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 527.036829][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.036944][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.039182][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.039284][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.140967][T15306] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 527.324617][T15316] ipt_ECN: cannot use operation on non-tcp rule [ 527.398960][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 527.461182][T15324] netlink: 'syz.4.2380': attribute type 1 has an invalid length. [ 527.903007][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 527.903054][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 528.011292][T15325] bond13: (slave veth17): Enslaving as an active interface with an up link [ 528.093931][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 528.093959][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 528.354011][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2384'. [ 528.354131][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2384'. [ 528.514435][T15336] bridge0: port 4(team0) entered disabled state [ 528.515664][T15336] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.516418][T15336] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.329088][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 529.329117][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 529.565849][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2390'. [ 529.565879][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2390'. [ 530.233304][T15380] netlink: 'syz.4.2395': attribute type 1 has an invalid length. [ 530.404882][T15384] bond14: (slave veth19): Enslaving as an active interface with an up link [ 531.181921][T15400] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 532.974711][T15439] netlink: 'syz.2.2410': attribute type 6 has an invalid length. [ 533.698263][T15438] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.698543][T15438] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.207145][T15457] __nla_validate_parse: 3 callbacks suppressed [ 534.207169][T15457] netlink: 173 bytes leftover after parsing attributes in process `syz.0.2415'. [ 535.105509][T15474] bridge0: port 3(bond0) entered blocking state [ 535.105638][T15474] bridge0: port 3(bond0) entered forwarding state [ 535.109666][T15474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.223668][T15474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.658328][T15474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.662417][T15474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.700222][T15474] veth1_macvtap: left promiscuous mode [ 535.710969][T15474] veth0_macvtap: left promiscuous mode [ 535.719439][T15474] veth0_macvtap: entered promiscuous mode [ 535.731000][T15474] veth1_macvtap: entered promiscuous mode [ 535.771635][T15474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.784021][T15474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.794572][T15474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.808620][T15474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.814751][T15474] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 535.849878][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.850010][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.852149][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.852279][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.908555][ T8769] bridge0: port 4(vlan0) entered blocking state [ 535.908665][ T8769] bridge0: port 4(vlan0) entered forwarding state [ 535.917018][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.917823][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.923741][ T8768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.002017][ T8768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.002852][ T8768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.063434][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2423'. [ 536.074601][T15491] netlink: 'syz.1.2423': attribute type 6 has an invalid length. [ 536.101258][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.102349][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.122505][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.123726][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.246626][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.247180][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.379888][T15494] netlink: 'syz.0.2426': attribute type 1 has an invalid length. [ 536.379928][T15494] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2426'. [ 536.379944][T15494] netlink: 'syz.0.2426': attribute type 1 has an invalid length. [ 536.427052][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.454202][T15495] netlink: 'syz.1.2425': attribute type 1 has an invalid length. [ 536.473239][T15494] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2426'. [ 536.536906][T15503] Bluetooth: hci0: unsupported parameter 5135 [ 536.536929][T15503] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 536.649932][T15506] netlink: 'syz.2.2424': attribute type 6 has an invalid length. [ 536.670039][T15500] netlink: 173 bytes leftover after parsing attributes in process `syz.3.2428'. [ 537.046452][T15501] bond14: (slave veth23): Enslaving as an active interface with an up link [ 537.238229][T15519] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2431'. [ 537.537501][T15527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2433'. [ 537.781856][T15537] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 537.781883][T15537] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2437'. [ 537.781901][T15537] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 537.819470][T15537] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2437'. [ 537.842172][T15537] Bluetooth: hci0: unsupported parameter 5135 [ 537.842197][T15537] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 538.234387][T15550] netlink: 173 bytes leftover after parsing attributes in process `syz.2.2442'. [ 538.439777][T15556] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 538.628937][T15559] bond11: (slave veth19): Enslaving as an active interface with an up link [ 539.265043][T15576] netlink: 'syz.1.2448': attribute type 23 has an invalid length. [ 539.771327][T15585] __nla_validate_parse: 1 callbacks suppressed [ 539.771352][T15585] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2451'. [ 540.640491][T15606] netlink: 173 bytes leftover after parsing attributes in process `syz.0.2456'. [ 541.117742][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 541.117768][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 541.232511][T15623] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 541.328788][T15628] netlink: 'syz.0.2461': attribute type 17 has an invalid length. [ 541.387412][T15626] bond16: (slave veth25): Enslaving as an active interface with an up link [ 541.823109][T15642] netlink: 'syz.3.2465': attribute type 6 has an invalid length. [ 541.916560][ C1] net_ratelimit: 3 callbacks suppressed [ 541.916586][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.917028][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.383714][T15647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2467'. [ 542.541144][T15661] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2471'. [ 543.087508][T15676] netlink: 'syz.3.2474': attribute type 17 has an invalid length. [ 543.845303][T15698] netlink: 'syz.1.2478': attribute type 6 has an invalid length. [ 543.913985][T15699] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 543.963167][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 543.976701][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 544.098001][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2481'. [ 544.196599][T15703] bond15: (slave veth21): Enslaving as an active interface with an up link [ 544.373184][T15714] netlink: 'syz.3.2483': attribute type 16 has an invalid length. [ 544.610770][T15718] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2484'. [ 545.007994][T15728] netlink: 'syz.4.2486': attribute type 17 has an invalid length. [ 545.130777][T15730] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2487'. [ 545.342820][T15736] netlink: 'syz.4.2489': attribute type 1 has an invalid length. [ 545.853797][T15754] netlink: 'syz.0.2492': attribute type 6 has an invalid length. [ 547.085094][T15776] netlink: 'syz.2.2498': attribute type 1 has an invalid length. [ 547.085120][T15776] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2498'. [ 547.085138][T15776] netlink: 'syz.2.2498': attribute type 1 has an invalid length. [ 547.145885][T15776] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2498'. [ 547.262644][T15781] Bluetooth: hci0: unsupported parameter 5135 [ 547.262673][T15781] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 547.769712][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'. [ 547.769743][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'. [ 547.918314][T15794] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2503'. [ 547.960159][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 548.013673][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 548.055063][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 548.469186][T15803] netlink: 'syz.3.2505': attribute type 6 has an invalid length. [ 548.729339][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'. [ 548.957806][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.958246][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.989288][T15849] __nla_validate_parse: 4 callbacks suppressed [ 550.989312][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 550.989331][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 551.171511][T15856] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2519'. [ 553.349329][T15910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2532'. [ 553.449214][T15910] netlink: 'syz.2.2532': attribute type 23 has an invalid length. [ 553.731317][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 553.731343][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 553.926713][T15917] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2535'. [ 554.238809][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 554.238838][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 554.360400][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 555.580888][T15955] netlink: 'syz.4.2546': attribute type 23 has an invalid length. [ 555.880566][T15962] bridge0: port 4(vlan0) entered disabled state [ 555.884538][T15962] bridge0: port 3(bond0) entered disabled state [ 555.885472][T15962] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.886064][T15962] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.075814][T15962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.097513][T15962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.286174][ T8766] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.286229][ T8766] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.286268][ T8766] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.557951][T15984] netlink: 'syz.2.2553': attribute type 17 has an invalid length. [ 556.693450][T15988] __nla_validate_parse: 3 callbacks suppressed [ 556.693473][T15988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2554'. [ 556.763635][T15991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2556'. [ 556.933384][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'. [ 556.933411][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'. [ 557.245689][T16005] netlink: 'syz.4.2559': attribute type 1 has an invalid length. [ 557.498050][T16007] bond16: (slave veth23): Enslaving as an active interface with an up link [ 557.670824][T16013] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2561'. [ 557.973289][T16024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2564'. [ 558.144517][T16032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2565'. [ 558.220726][T16032] netlink: 'syz.0.2565': attribute type 23 has an invalid length. [ 558.317772][T16034] netlink: 'syz.4.2566': attribute type 17 has an invalid length. [ 558.620805][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'. [ 558.628546][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'. [ 558.677152][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2570'. [ 559.465146][T16071] netlink: 'syz.4.2576': attribute type 1 has an invalid length. [ 559.509790][T16075] netlink: 'syz.0.2577': attribute type 17 has an invalid length. [ 559.596600][T16077] bond17: (slave veth25): Enslaving as an active interface with an up link [ 560.606577][T16099] netlink: 'syz.4.2585': attribute type 1 has an invalid length. [ 560.864745][T16101] bond18: (slave veth27): Enslaving as an active interface with an up link [ 560.932292][T16112] netlink: 'syz.1.2588': attribute type 17 has an invalid length. [ 561.074540][T16114] netlink: 'syz.1.2590': attribute type 1 has an invalid length. [ 561.327694][T16118] bond15: (slave veth25): Enslaving as an active interface with an up link [ 561.355460][T16123] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 561.355486][T16123] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 561.385269][T16123] Bluetooth: hci0: unsupported parameter 5135 [ 561.385301][T16123] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 561.674386][T16135] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 561.854112][T16135] bond12: (slave veth21): Enslaving as an active interface with an up link [ 561.906422][T16142] __nla_validate_parse: 8 callbacks suppressed [ 561.906447][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'. [ 561.906466][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'. [ 561.976999][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 561.977029][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 562.516451][T16166] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 562.753997][T16168] bond19: (slave veth29): Enslaving as an active interface with an up link [ 562.884112][T16178] netlink: 'syz.2.2606': attribute type 1 has an invalid length. [ 563.042946][T16181] bond17: (slave veth27): Enslaving as an active interface with an up link [ 563.060023][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 563.060050][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 563.309514][T16192] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2608'. [ 564.079869][T16210] bond13: (slave veth23): Enslaving as an active interface with an up link [ 564.793066][T16225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.000776][T16236] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2620'. [ 565.548744][T16250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.737481][T16258] validate_nla: 2 callbacks suppressed [ 565.737502][T16258] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 566.265705][T16280] netlink: 'syz.0.2627': attribute type 17 has an invalid length. [ 566.390464][T16261] bond18: (slave veth29): Enslaving as an active interface with an up link [ 566.510150][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 566.510177][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 567.232459][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2631'. [ 567.515256][T16315] netlink: 'syz.0.2637': attribute type 1 has an invalid length. [ 567.515282][T16315] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2637'. [ 567.515312][T16315] netlink: 'syz.0.2637': attribute type 1 has an invalid length. [ 567.524115][T16315] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2637'. [ 567.570137][T16315] Bluetooth: hci0: unsupported parameter 5135 [ 567.570161][T16315] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 567.820730][T16322] netlink: 'syz.0.2639': attribute type 17 has an invalid length. [ 567.937417][T16325] netlink: 'syz.0.2642': attribute type 1 has an invalid length. [ 568.343204][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2643'. [ 568.358839][T16335] netlink: 'syz.2.2643': attribute type 6 has an invalid length. [ 568.469456][T16328] bond14: (slave veth25): Enslaving as an active interface with an up link [ 568.692875][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2644'. [ 568.692897][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2644'. [ 568.872981][T16348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.373520][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'. [ 569.399489][T16357] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 569.636213][T16353] ipt_ECN: cannot use operation on non-tcp rule [ 569.748390][T16366] netlink: 'syz.2.2650': attribute type 1 has an invalid length. [ 570.165620][T16388] netlink: 'syz.1.2654': attribute type 6 has an invalid length. [ 570.196801][T16374] bond19: (slave veth31): Enslaving as an active interface with an up link [ 570.303526][T16390] netlink: 'syz.4.2657': attribute type 1 has an invalid length. [ 570.550147][T16392] bond20: (slave veth31): Enslaving as an active interface with an up link [ 571.249334][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 571.253573][T16429] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 571.390862][T16434] ipt_ECN: cannot use operation on non-tcp rule [ 571.823289][T16443] validate_nla: 1 callbacks suppressed [ 571.823311][T16443] netlink: 'syz.3.2672': attribute type 17 has an invalid length. [ 571.938775][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 571.938806][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 572.022273][T16449] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 572.022303][T16449] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 572.155556][T16455] Bluetooth: hci0: unsupported parameter 5135 [ 572.155584][T16455] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 572.489360][T16463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.527865][T16458] hsr_slave_0: left promiscuous mode [ 572.541699][T16458] hsr_slave_1: left promiscuous mode [ 572.799134][T16472] netlink: 'syz.4.2680': attribute type 1 has an invalid length. [ 572.857864][T16473] netlink: 'syz.3.2681': attribute type 1 has an invalid length. [ 572.857887][T16473] __nla_validate_parse: 2 callbacks suppressed [ 572.857901][T16473] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2681'. [ 572.857917][T16473] netlink: 'syz.3.2681': attribute type 1 has an invalid length. [ 572.966952][T16481] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2683'. [ 572.970704][T16473] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2681'. [ 573.049104][T16485] Bluetooth: hci0: unsupported parameter 5135 [ 573.049129][T16485] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 573.122962][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2682'. [ 573.123762][T16491] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 573.280952][T16495] ipt_ECN: cannot use operation on non-tcp rule [ 573.350024][T16478] bond21: (slave veth33): Enslaving as an active interface with an up link [ 573.619831][T16498] netlink: 'syz.3.2685': attribute type 17 has an invalid length. [ 573.766830][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 573.795772][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 573.800172][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2686'. [ 573.803259][T16504] netlink: 'syz.0.2686': attribute type 6 has an invalid length. [ 573.841591][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2689'. [ 574.552798][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2693'. [ 574.570151][T16530] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 574.814030][T16535] ipt_ECN: cannot use operation on non-tcp rule [ 575.145446][T16542] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2697'. [ 575.390415][T16552] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 575.484620][T16556] netlink: 'syz.4.2700': attribute type 17 has an invalid length. [ 575.563089][T16558] netlink: 'syz.4.2701': attribute type 6 has an invalid length. [ 575.665834][T16561] ipt_ECN: cannot use operation on non-tcp rule [ 577.075414][T16586] bond22: (slave veth35): Enslaving as an active interface with an up link [ 577.828214][T16606] validate_nla: 1 callbacks suppressed [ 577.828237][T16606] netlink: 'syz.1.2712': attribute type 1 has an invalid length. [ 577.947340][T16609] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 578.101859][T16612] bond16: (slave veth27): Enslaving as an active interface with an up link [ 578.273025][T16624] __nla_validate_parse: 3 callbacks suppressed [ 578.273049][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 578.305505][T16624] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 578.503377][T16626] ipt_ECN: cannot use operation on non-tcp rule [ 578.553353][T16615] bond23: (slave veth37): Enslaving as an active interface with an up link [ 579.205699][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 579.205727][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 579.291599][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2717'. [ 579.291629][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2717'. [ 579.427219][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2720'. [ 579.430590][T16652] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸ŠŸ>úáÂN9Ü5äx×Ùhˉ½p¡þàn [ 579.964254][T16659] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2722'. [ 580.301605][T16665] netlink: 'syz.0.2725': attribute type 23 has an invalid length. [ 580.405763][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 580.405793][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 580.802694][T16687] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 580.985229][T16687] bond24: (slave veth39): Enslaving as an active interface with an up link [ 581.015752][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2732'. [ 581.749106][T16707] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 582.081302][T16715] netlink: 'syz.2.2737': attribute type 7 has an invalid length. [ 582.081327][T16715] netlink: 'syz.2.2737': attribute type 8 has an invalid length. [ 582.900027][T16732] netlink: 'syz.1.2741': attribute type 23 has an invalid length. [ 583.266410][T16756] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 583.330470][T16758] netlink: 'syz.4.2747': attribute type 1 has an invalid length. [ 583.469592][T16764] ipt_ECN: cannot use operation on non-tcp rule [ 583.867742][T16781] __nla_validate_parse: 6 callbacks suppressed [ 583.867766][T16781] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2751'. [ 583.993148][T16761] bond25: (slave veth41): Enslaving as an active interface with an up link [ 584.145374][T16788] netlink: 'syz.3.2753': attribute type 1 has an invalid length. [ 584.531116][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2754'. [ 584.548507][T16800] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 584.766503][T16793] bond16: (slave veth29): Enslaving as an active interface with an up link [ 585.030055][T16813] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2758'. [ 585.095148][T16812] Bluetooth: hci0: unsupported parameter 5135 [ 585.095174][T16812] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 587.317585][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 587.317616][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 588.137996][T16884] netlink: 'syz.0.2779': attribute type 16 has an invalid length. [ 588.595057][T16900] netlink: 'syz.4.2785': attribute type 6 has an invalid length. [ 588.688309][T16903] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2786'. [ 588.704313][T16903] Bluetooth: hci0: unsupported parameter 5135 [ 588.704338][T16903] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 588.742327][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 588.742357][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 589.334130][T16923] netlink: 'syz.3.2793': attribute type 16 has an invalid length. [ 589.563013][T16928] netlink: 'syz.3.2795': attribute type 6 has an invalid length. [ 590.126116][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 590.126144][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 590.373807][T16950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 590.390306][T16950] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 590.565949][T16961] ipt_ECN: cannot use operation on non-tcp rule [ 590.587376][T16962] netlink: 'syz.2.2804': attribute type 6 has an invalid length. [ 590.620204][T16963] netlink: 'syz.4.2805': attribute type 1 has an invalid length. [ 591.071378][T16958] bond26: (slave veth43): Enslaving as an active interface with an up link [ 591.349049][T16978] netlink: 'syz.2.2808': attribute type 6 has an invalid length. [ 591.788577][T16987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.803989][T16987] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.059203][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2814'. [ 592.062063][T17003] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 592.325439][T17002] ipt_ECN: cannot use operation on non-tcp rule [ 592.351808][T16987] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 592.401908][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.402020][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.442374][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.442485][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.619790][ T8769] bridge0: port 4(team0) entered blocking state [ 592.619901][ T8769] bridge0: port 4(team0) entered forwarding state [ 592.873689][T17017] netlink: 'syz.4.2819': attribute type 6 has an invalid length. [ 593.168756][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 593.179161][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 593.245711][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2821'. [ 593.255589][T17026] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 593.313102][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2823'. [ 593.424162][T17035] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 593.551076][T17035] ipt_ECN: cannot use operation on non-tcp rule [ 594.209847][T17054] netlink: 'syz.3.2828': attribute type 6 has an invalid length. [ 594.747043][T17056] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2829'. [ 594.767303][T17056] Bluetooth: hci0: unsupported parameter 5135 [ 594.767328][T17056] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 594.985827][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 594.991428][T17065] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 595.155436][T17074] netlink: 'syz.1.2833': attribute type 1 has an invalid length. [ 595.174994][T17076] ipt_ECN: cannot use operation on non-tcp rule [ 595.751301][T17079] bond17: (slave veth29): Enslaving as an active interface with an up link [ 595.892980][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 595.893007][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 596.352753][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2839'. [ 596.383291][T17098] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 596.496552][T17104] netlink: 'syz.0.2840': attribute type 6 has an invalid length. [ 596.605020][T17107] ipt_ECN: cannot use operation on non-tcp rule [ 597.122097][T17116] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2844'. [ 597.479087][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2846'. [ 597.936898][T17138] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 598.950075][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 599.097991][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 599.098019][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 599.226211][T17161] netlink: 'syz.4.2856': attribute type 6 has an invalid length. [ 599.432732][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'. [ 599.445687][T17167] netlink: 'syz.3.2857': attribute type 6 has an invalid length. [ 599.865575][T17171] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2859'. [ 599.884464][T17171] Bluetooth: hci0: unsupported parameter 5135 [ 599.884487][T17171] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 600.377414][T17196] netlink: 'syz.3.2868': attribute type 6 has an invalid length. [ 600.377962][T17188] bridge0: port 4(team0) entered disabled state [ 600.379044][T17188] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.379639][T17188] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.279945][T17219] netlink: 'syz.2.2873': attribute type 6 has an invalid length. [ 601.361921][T17224] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 601.718730][T17237] __nla_validate_parse: 6 callbacks suppressed [ 601.718752][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 601.802611][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2880'. [ 601.894574][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 601.894602][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 601.986630][T17239] batman_adv: batadv0: Adding interface: macvlan14 [ 601.986651][T17239] batman_adv: batadv0: The MTU of interface macvlan14 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.986694][T17239] batman_adv: batadv0: Interface activated: macvlan14 [ 602.079705][T17245] batman_adv: batadv0: Adding interface: macvlan19 [ 602.082663][T17245] batman_adv: batadv0: The MTU of interface macvlan19 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.082709][T17245] batman_adv: batadv0: Interface activated: macvlan19 [ 602.475054][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 602.475091][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 603.097634][T17263] netlink: 'syz.2.2887': attribute type 6 has an invalid length. [ 604.309848][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 604.309876][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 604.537386][T17292] netlink: 'syz.0.2897': attribute type 16 has an invalid length. [ 604.877673][T17295] batman_adv: batadv0: Adding interface: macvlan15 [ 604.889567][T17295] batman_adv: batadv0: The MTU of interface macvlan15 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.889614][T17295] batman_adv: batadv0: Interface activated: macvlan15 [ 605.304727][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 605.323974][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 605.657471][T17328] netlink: 'syz.3.2905': attribute type 1 has an invalid length. [ 605.717131][T17330] Bluetooth: hci0: unsupported parameter 5135 [ 605.717158][T17330] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 606.096932][T17340] netlink: 'syz.3.2908': attribute type 16 has an invalid length. [ 606.789554][T17358] __nla_validate_parse: 9 callbacks suppressed [ 606.789577][T17358] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2915'. [ 607.570520][T17379] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2920'. [ 607.588788][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2921'. [ 607.589595][T17384] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 608.016102][T17391] netlink: 'syz.2.2923': attribute type 6 has an invalid length. [ 608.298844][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'. [ 608.314325][T17399] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 608.524733][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 608.524890][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 608.693108][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 608.711047][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 608.770546][T17411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'. [ 609.085380][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'. [ 609.393155][T17416] batman_adv: batadv0: Adding interface: macvlan16 [ 609.393178][T17416] batman_adv: batadv0: The MTU of interface macvlan16 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.393214][T17416] batman_adv: batadv0: Interface activated: macvlan16 [ 609.608536][T17423] netlink: 'syz.4.2933': attribute type 23 has an invalid length. [ 610.253888][T17452] netlink: 'syz.3.2939': attribute type 1 has an invalid length. [ 610.556041][T17455] bridge0: port 3(bond0) entered blocking state [ 610.556173][T17455] bridge0: port 3(bond0) entered forwarding state [ 610.556482][T17455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.562305][T17455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.745412][T17455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.752144][T17455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.790842][T17455] veth1_macvtap: left promiscuous mode [ 610.803867][T17455] veth0_macvtap: left promiscuous mode [ 610.816779][T17455] veth0_macvtap: entered promiscuous mode [ 610.821359][T17455] veth1_macvtap: entered promiscuous mode [ 610.902865][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.904284][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.920926][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.922431][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.923075][T17455] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 611.039315][T17456] bond17: (slave veth31): Enslaving as an active interface with an up link [ 611.049248][ T141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.049393][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.049521][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.131848][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.131983][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.176832][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.176970][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.343760][ T12] bridge0: port 4(vlan0) entered blocking state [ 611.343870][ T12] bridge0: port 4(vlan0) entered forwarding state [ 611.406941][T17470] netlink: 'syz.0.2944': attribute type 6 has an invalid length. [ 611.408386][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 611.409425][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 611.414234][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 611.414705][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 611.839401][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 611.840007][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 612.004306][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 612.004821][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 612.024521][T17484] netlink: 'syz.2.2946': attribute type 23 has an invalid length. [ 612.081868][T17489] xt_hashlimit: size too large, truncated to 1048576 [ 612.371726][T17494] netlink: 'syz.2.2950': attribute type 6 has an invalid length. [ 612.704313][T17502] __nla_validate_parse: 6 callbacks suppressed [ 612.704335][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 612.721627][T17502] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 613.121419][T17510] netlink: 'syz.1.2954': attribute type 1 has an invalid length. [ 613.169579][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 613.283974][T17522] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2957'. [ 613.348116][T17527] Bluetooth: hci0: unsupported parameter 5135 [ 613.348141][T17527] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 613.388597][T17518] bond18: (slave veth31): Enslaving as an active interface with an up link [ 614.439853][T17549] netlink: 'syz.0.2960': attribute type 23 has an invalid length. [ 615.021591][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 616.425924][ C1] net_ratelimit: 7 callbacks suppressed [ 616.425948][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 616.426499][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 616.485901][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 616.486461][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 616.714659][T17582] batman_adv: batadv0: Adding interface: macvlan17 [ 616.714700][T17582] batman_adv: batadv0: The MTU of interface macvlan17 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.732683][T17582] batman_adv: batadv0: Interface activated: macvlan17 [ 616.961345][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 616.975177][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 616.982451][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2976'. [ 617.275004][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 617.669419][T17605] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2980'. [ 617.699457][T17605] Bluetooth: hci0: unsupported parameter 5135 [ 617.699483][T17605] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 617.855859][T17615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2983'. [ 618.064345][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2986'. [ 618.202999][T17635] netlink: 'syz.4.2987': attribute type 1 has an invalid length. [ 618.283510][T17637] bond27: (slave veth45): Enslaving as an active interface with an up link [ 618.905004][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 618.905556][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 618.910573][T17646] bridge0: port 5(vlan1) entered blocking state [ 618.910697][T17646] bridge0: port 5(vlan1) entered disabled state [ 618.910847][T17646] vlan1: entered allmulticast mode [ 618.960875][T17646] vlan1: entered promiscuous mode [ 619.217272][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.217981][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.564040][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 619.610020][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 619.610048][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 620.116401][T17672] netlink: 'syz.3.2997': attribute type 1 has an invalid length. [ 620.204362][T17672] bond18: (slave veth33): Enslaving as an active interface with an up link [ 620.716325][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 620.716351][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 622.590578][T17721] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3011'. [ 622.665711][T17730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3012'. [ 622.675467][T17730] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 622.947524][T17725] ipt_ECN: cannot use operation on non-tcp rule [ 622.948329][T17738] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 623.261292][T17744] netlink: 'syz.4.3015': attribute type 1 has an invalid length. [ 623.568962][T17739] bond19: (slave veth35): Enslaving as an active interface with an up link [ 623.790429][T17757] netlink: 'syz.1.3017': attribute type 6 has an invalid length. [ 623.838228][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 623.838676][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.371246][T17769] netlink: 'syz.2.3018': attribute type 23 has an invalid length. [ 624.528825][T17773] xt_hashlimit: size too large, truncated to 1048576 [ 625.433731][T17790] netlink: 'syz.3.3025': attribute type 6 has an invalid length. [ 625.514430][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3024'. [ 625.533036][T17793] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 625.584811][T17796] netlink: 'syz.1.3027': attribute type 7 has an invalid length. [ 625.584834][T17796] netlink: 'syz.1.3027': attribute type 8 has an invalid length. [ 625.715322][T17803] ipt_ECN: cannot use operation on non-tcp rule [ 625.876635][T17807] netlink: 'syz.3.3029': attribute type 1 has an invalid length. [ 626.100333][T17810] netlink: 'syz.1.3030': attribute type 1 has an invalid length. [ 626.103705][T17807] bond20: (slave veth37): Enslaving as an active interface with an up link [ 626.382319][T17812] bond19: (slave veth33): Enslaving as an active interface with an up link [ 626.437856][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 626.438443][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 626.729140][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 626.729756][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 626.831197][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3033'. [ 626.846800][T17828] xt_hashlimit: size too large, truncated to 1048576 [ 626.868713][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3033'. [ 626.887769][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3033'. [ 627.265451][T17844] netlink: 'syz.3.3038': attribute type 6 has an invalid length. [ 627.649056][T17849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.933815][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3043'. [ 627.945184][T17866] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 628.071027][T17871] ipt_ECN: cannot use operation on non-tcp rule [ 628.086184][T17872] netlink: 'syz.4.3045': attribute type 6 has an invalid length. [ 628.505872][T17877] netlink: 'syz.1.3046': attribute type 1 has an invalid length. [ 628.564411][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 628.564438][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 628.662592][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3048'. [ 628.734341][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3048'. [ 628.841439][T17881] bond20: (slave veth35): Enslaving as an active interface with an up link [ 629.175694][T17901] netlink: 'syz.2.3053': attribute type 1 has an invalid length. [ 629.531476][T17904] bond21: (slave veth33): Enslaving as an active interface with an up link [ 629.653568][T17912] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 629.999876][T17920] netlink: 'syz.3.3057': attribute type 6 has an invalid length. [ 630.305859][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.306429][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.386165][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.386752][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 630.833630][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 630.849362][T17941] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 631.004035][T17948] ipt_ECN: cannot use operation on non-tcp rule [ 631.863180][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3071'. [ 631.863207][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3071'. [ 632.144567][T17984] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3072'. [ 632.513719][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 632.586624][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 632.586652][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 632.968022][T18001] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 632.970778][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.971322][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 633.098710][T17999] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 633.261110][T18009] netlink: 'syz.2.3080': attribute type 6 has an invalid length. [ 633.562953][T18014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3081'. [ 633.580772][T18013] xt_hashlimit: size too large, truncated to 1048576 [ 633.587106][T18014] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 633.749634][T18014] ipt_ECN: cannot use operation on non-tcp rule [ 633.841570][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 633.842176][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.278957][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'. [ 634.297744][T18037] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 634.487093][T18037] ipt_ECN: cannot use operation on non-tcp rule [ 634.921424][T18031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.511238][T18065] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.943682][T18065] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 636.023334][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.023484][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.063359][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.063476][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.147281][T18083] netlink: 'syz.4.3094': attribute type 1 has an invalid length. [ 636.416670][T18085] bond28: (slave veth51): Enslaving as an active interface with an up link [ 636.659184][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'. [ 636.660152][T18100] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 636.787412][T18102] ipt_ECN: cannot use operation on non-tcp rule [ 637.247476][T18107] netlink: 'syz.3.3098': attribute type 23 has an invalid length. [ 637.627566][T18114] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3099'. [ 637.666819][T18119] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3102'. [ 637.670599][T18119] Bluetooth: hci0: unsupported parameter 5135 [ 637.670622][T18119] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 637.941491][T18125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.954613][T18125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.102999][T18125] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 638.411109][T18147] netlink: 'syz.3.3108': attribute type 6 has an invalid length. [ 639.426221][T18179] netlink: 'syz.3.3114': attribute type 6 has an invalid length. [ 639.466945][T18181] netlink: 'syz.0.3115': attribute type 6 has an invalid length. [ 639.471376][T18174] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3113'. [ 640.027497][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 640.027524][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 640.164723][T18194] netlink: 'syz.2.3119': attribute type 6 has an invalid length. [ 640.355587][T18193] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 640.487504][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.488153][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 640.853705][T18207] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3123'. [ 641.452552][T18222] xt_hashlimit: size too large, truncated to 1048576 [ 641.592465][T18224] xt_hashlimit: size too large, truncated to 1048576 [ 641.656155][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'. [ 642.037547][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3131'. [ 642.043730][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3131'. [ 642.043754][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3131'. [ 642.256102][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.256711][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.327249][T18247] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 642.832885][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 642.832912][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 642.879283][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'. [ 642.879310][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'. [ 643.122780][T18259] bridge0: port 4(vlan0) entered disabled state [ 643.124808][T18259] bridge0: port 3(bond0) entered disabled state [ 643.127412][T18259] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.127920][T18259] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.363104][T18259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.402904][T18259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.556811][T18259] batman_adv: batadv0: Interface deactivated: macvlan19 [ 643.788667][T18281] netlink: 'syz.3.3139': attribute type 6 has an invalid length. [ 643.905560][ T7940] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.909131][T18278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.946108][ T8766] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.951443][ T8769] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.955079][T18286] netlink: 'syz.1.3141': attribute type 6 has an invalid length. [ 644.351703][T18294] netlink: 'syz.4.3143': attribute type 1 has an invalid length. [ 644.575498][T18294] bond29: (slave veth53): Enslaving as an active interface with an up link [ 645.019490][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'. [ 645.019517][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'. [ 645.091167][T18308] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3147'. [ 645.125236][T18308] Bluetooth: hci0: unsupported parameter 5135 [ 645.125261][T18308] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 645.332328][T18314] netlink: 'syz.3.3148': attribute type 6 has an invalid length. [ 645.473650][T18316] netlink: 'syz.2.3149': attribute type 6 has an invalid length. [ 645.924874][T18322] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 646.898101][T18348] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 646.968778][T18348] bond30: (slave veth55): Enslaving as an active interface with an up link [ 647.137812][T18351] netlink: 'syz.3.3159': attribute type 1 has an invalid length. [ 647.256944][T18356] bond21: (slave veth39): Enslaving as an active interface with an up link [ 648.082568][T18375] __nla_validate_parse: 3 callbacks suppressed [ 648.082591][T18375] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3165'. [ 649.844334][T18429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.862662][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'. [ 649.865394][T18430] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 650.019849][T18437] ipt_ECN: cannot use operation on non-tcp rule [ 650.136649][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3177'. [ 650.137862][T18441] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 650.277153][T18443] ipt_ECN: cannot use operation on non-tcp rule [ 651.349019][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 651.368032][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 651.368067][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 652.401314][T18486] netlink: 'syz.1.3190': attribute type 1 has an invalid length. [ 652.618216][T18490] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3191'. [ 652.908585][T18504] netlink: 'syz.3.3195': attribute type 6 has an invalid length. [ 653.376698][T18506] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3197'. [ 653.853442][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3200'. [ 653.926871][T18523] netlink: 'syz.2.3200': attribute type 6 has an invalid length. [ 654.613748][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 654.613774][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 654.757636][T18533] batman_adv: batadv0: Adding interface: macvlan18 [ 654.757659][T18533] batman_adv: batadv0: The MTU of interface macvlan18 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.757702][T18533] batman_adv: batadv0: Interface activated: macvlan18 [ 654.950813][T18549] netlink: 'syz.4.3207': attribute type 6 has an invalid length. [ 655.250295][T18551] netlink: 'syz.4.3209': attribute type 7 has an invalid length. [ 655.250321][T18551] netlink: 'syz.4.3209': attribute type 8 has an invalid length. [ 655.353638][T18553] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3208'. [ 655.380052][T18553] Bluetooth: hci0: unsupported parameter 5135 [ 655.380076][T18553] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 655.439362][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 655.495994][T18558] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 655.897061][T18567] netlink: 'syz.4.3213': attribute type 1 has an invalid length. [ 655.933771][T18561] bond22: (slave veth35): Enslaving as an active interface with an up link [ 655.972196][T18571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3214'. [ 656.042079][T18575] netlink: 'syz.0.3214': attribute type 6 has an invalid length. [ 656.768329][T18586] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3217'. [ 656.771568][T18584] netlink: 'syz.2.3216': attribute type 7 has an invalid length. [ 657.495075][T18603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3221'. [ 657.521719][T18601] batman_adv: batadv0: Adding interface: macvlan16 [ 657.521739][T18601] batman_adv: batadv0: The MTU of interface macvlan16 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.521776][T18601] batman_adv: batadv0: Interface activated: macvlan16 [ 657.883719][T18611] validate_nla: 1 callbacks suppressed [ 657.883743][T18611] netlink: 'syz.3.3223': attribute type 1 has an invalid length. [ 658.222567][T18613] bond22: (slave veth41): Enslaving as an active interface with an up link [ 660.037860][T18653] batman_adv: batadv0: Interface deactivated: macvlan16 [ 660.143608][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'. [ 660.143654][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'. [ 660.411461][T18657] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3236'. [ 660.466322][T18662] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.466527][T18662] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.510664][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3237'. [ 660.510693][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3237'. [ 660.528496][T18667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3235'. [ 661.095224][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 661.095252][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 661.258173][T18682] netlink: 'syz.4.3241': attribute type 1 has an invalid length. [ 661.388700][T18689] bond32: (slave veth57): Enslaving as an active interface with an up link [ 661.434064][T18688] batman_adv: batadv0: Adding interface: macvlan20 [ 661.434087][T18688] batman_adv: batadv0: The MTU of interface macvlan20 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.434129][T18688] batman_adv: batadv0: Interface activated: macvlan20 [ 662.136531][T18703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.260890][T18713] netlink: 'syz.4.3247': attribute type 1 has an invalid length. [ 662.335369][T18713] bond33: (slave veth59): Enslaving as an active interface with an up link [ 662.789920][T18729] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3250'. [ 662.808585][T18729] Bluetooth: hci0: unsupported parameter 5135 [ 662.808609][T18729] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 663.380699][T18734] batman_adv: batadv0: Adding interface: macvlan17 [ 663.380720][T18734] batman_adv: batadv0: The MTU of interface macvlan17 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.380757][T18734] batman_adv: batadv0: Interface activated: macvlan17 [ 663.459732][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'. [ 663.471266][T18741] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 663.665431][T18740] Bluetooth: hci0: unsupported parameter 5135 [ 663.665455][T18740] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 663.668250][T18744] ipt_ECN: cannot use operation on non-tcp rule [ 664.459918][T18763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.064948][T18785] Bluetooth: hci0: unsupported parameter 5135 [ 665.064972][T18785] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 665.520952][T18787] bridge0: port 3(bond0) entered blocking state [ 665.521080][T18787] bridge0: port 3(bond0) entered forwarding state [ 665.521458][T18787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.557652][T18787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.703199][T18787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.714162][T18787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.737175][T18787] veth1_macvtap: left promiscuous mode [ 665.742188][T18787] veth0_macvtap: left promiscuous mode [ 665.756958][T18787] veth0_macvtap: entered promiscuous mode [ 665.759488][T18787] veth1_macvtap: entered promiscuous mode [ 665.800968][T18787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.803552][T18787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.823593][T18787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.832921][T18787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.842784][T18787] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 665.846543][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.846683][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.846788][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.911865][ T8741] bridge0: port 5(vlan1) entered blocking state [ 665.911985][ T8741] bridge0: port 5(vlan1) entered forwarding state [ 665.935747][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.936564][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 665.982460][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.982601][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.022031][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.022198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.227958][ T8741] bridge0: port 4(vlan0) entered blocking state [ 666.229280][ T8741] bridge0: port 4(vlan0) entered forwarding state [ 666.278711][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 666.279509][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 666.280412][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 666.281662][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 666.283533][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 666.284304][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 666.285178][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.844912][ C0] net_ratelimit: 6121 callbacks suppressed [ 670.844938][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.845573][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.846252][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.846935][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.848611][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.849735][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.850546][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.851315][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.852129][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 670.852726][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.855184][ C0] net_ratelimit: 6323 callbacks suppressed [ 675.855210][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.856049][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.857666][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.858307][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.859251][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.860015][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.860693][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.860803][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.861467][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 675.861559][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 677.544861][ C1] sched: DL replenish lagged too much [ 680.865149][ C1] net_ratelimit: 6434 callbacks suppressed [ 680.865174][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.865190][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.866831][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.867599][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.868414][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.869182][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.869951][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.870759][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.871382][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 680.871756][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.876213][ C0] net_ratelimit: 6575 callbacks suppressed [ 685.876237][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.876941][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.877776][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.878579][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.879509][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.880163][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.881639][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.881807][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.882357][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 685.882436][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.886756][ C0] net_ratelimit: 6821 callbacks suppressed [ 690.886780][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.887609][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.888388][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.888864][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.889203][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.889955][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.890407][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.891180][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.891514][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 690.891815][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.894931][ C1] net_ratelimit: 7087 callbacks suppressed [ 695.894955][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.895641][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.895792][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.898115][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.898363][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.899086][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.899704][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.901349][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.901550][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 695.902339][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.905334][ C0] net_ratelimit: 7318 callbacks suppressed [ 700.905358][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.906159][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.906902][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.907706][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.908388][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.909189][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.910646][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.911313][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.911937][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 700.913383][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.915251][ C1] net_ratelimit: 7775 callbacks suppressed [ 705.915275][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.915680][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.916006][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.916431][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.916777][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.917484][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.918068][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.918277][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.918778][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 705.919652][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.926124][ C1] net_ratelimit: 7578 callbacks suppressed [ 710.926148][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.927801][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.928108][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.928506][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.928988][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.929200][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.929864][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.930515][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.930712][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 710.931187][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.935276][ C0] net_ratelimit: 8191 callbacks suppressed [ 715.935297][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.936038][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.936524][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.936734][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.937285][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.937495][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.938323][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.939072][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.939905][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 715.940640][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.944888][ C0] net_ratelimit: 7973 callbacks suppressed [ 720.944912][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.944941][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.945600][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.945649][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.946318][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.946376][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.946967][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.947232][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.947657][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 720.947970][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.955003][ C0] net_ratelimit: 8104 callbacks suppressed [ 725.955027][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.955283][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.955831][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.956081][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.956545][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.956714][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.957235][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.957378][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.957924][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 725.958638][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.965113][ C0] net_ratelimit: 8698 callbacks suppressed [ 730.965136][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.965217][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.965853][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.965938][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.966620][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.966677][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.967292][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.967961][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.968027][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 730.968785][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.976620][ C0] net_ratelimit: 8761 callbacks suppressed [ 735.976662][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.977402][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.978096][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.978179][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.978941][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.979639][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.979688][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.980269][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.980333][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 735.980934][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.984802][ C0] net_ratelimit: 7739 callbacks suppressed [ 740.984824][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.985604][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.986319][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.987102][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.987769][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.988565][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.989227][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.989911][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.990662][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 740.991322][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 745.995114][ C1] net_ratelimit: 5948 callbacks suppressed [ 745.995138][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 745.995640][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 745.996943][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 745.997299][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 745.997605][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 745.998425][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 745.998961][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 745.999231][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 745.999971][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 746.000782][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.005028][ C1] net_ratelimit: 5112 callbacks suppressed [ 751.005049][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.005721][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.005721][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.006390][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.007197][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.007874][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.010393][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.011129][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.012968][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 751.015444][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.016090][ C1] net_ratelimit: 4438 callbacks suppressed [ 756.016113][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.018799][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.019310][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.019668][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.019989][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.021184][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.022690][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.023447][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.024154][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 756.024354][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.027715][ C1] net_ratelimit: 4021 callbacks suppressed [ 761.027739][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.028447][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.029856][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.030644][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.032883][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.032887][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.035228][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.036064][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.036272][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 761.039010][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.035170][ C0] net_ratelimit: 3813 callbacks suppressed [ 766.035193][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.036103][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.037395][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.038841][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.039666][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.040321][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.040405][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.041139][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.041802][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.044119][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.046531][ C0] net_ratelimit: 3502 callbacks suppressed [ 771.046554][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.048862][ C0] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.052086][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.052764][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.054723][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.056175][ C1] bridge0: received packet on vlan1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.056822][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.057517][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.058306][ C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.058953][ C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 771.844714][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 772.447998][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18810/1:b..l [ 772.456036][ C1] rcu: (detected by 1, t=10563 jiffies, g=112025, q=107889 ncpus=2) [ 772.464151][ C1] task:syz.0.3272 state:R running task stack:28032 pid:18810 tgid:18809 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 772.477719][ C1] Call Trace: [ 772.481138][ C1] [ 772.484200][ C1] __schedule+0x17db/0x58f0 [ 772.488950][ C1] ? __lock_acquire+0x747/0x2de0 [ 772.494061][ C1] ? __lock_acquire+0x747/0x2de0 [ 772.499035][ C1] ? __pfx___schedule+0x10/0x10 [ 772.504047][ C1] ? __lock_acquire+0x747/0x2de0 [ 772.509034][ C1] preempt_schedule_irq+0x4b/0x90 [ 772.514103][ C1] irqentry_exit+0x14f/0x910 [ 772.518736][ C1] ? trace_irq_disable+0x3b/0x140 [ 772.523851][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.529922][ C1] RIP: 0010:__read_once_word_nocheck+0x0/0x10 [ 772.536072][ C1] Code: 89 e7 e8 63 a9 bf 00 e9 1e fd ff ff 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 07 c3 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 [ 772.555725][ C1] RSP: 0018:ffffc9000533f510 EFLAGS: 00000202 [ 772.561910][ C1] RAX: ffffc9000533fc01 RBX: 1ffff92000a67ec1 RCX: 0000000000000001 [ 772.569924][ C1] RDX: ffffc9000533f648 RSI: dffffc0000000000 RDI: ffffc9000533fcb0 [ 772.577935][ C1] RBP: ffffc90005338000 R08: ffffc9000533fcb0 R09: 0000000000000000 [ 772.585984][ C1] R10: ffffc9000533f658 R11: fffff52000a67ecd R12: 1ffff92000a67ec2 [ 772.593993][ C1] R13: 1ffff92000a67ec3 R14: ffffc90005340000 R15: dffffc0000000000 [ 772.602018][ C1] deref_stack_reg+0x18e/0x220 [ 772.606834][ C1] unwind_next_frame+0x19bd/0x2550 [ 772.611994][ C1] ? setup_net+0x118/0x350 [ 772.616584][ C1] ? unwind_next_frame+0x8f/0x2550 [ 772.621751][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.627973][ C1] arch_stack_walk+0x11b/0x150 [ 772.632921][ C1] ? copy_net_ns+0x53b/0x780 [ 772.637562][ C1] stack_trace_save+0xa9/0x100 [ 772.642381][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 772.647808][ C1] ? kasan_save_track+0x4f/0x80 [ 772.652750][ C1] ? kasan_save_track+0x3e/0x80 [ 772.657647][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 772.662468][ C1] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 772.669118][ C1] ? fib_rules_register+0x2f/0x410 [ 772.674386][ C1] ? fib4_rules_init+0x21/0x160 [ 772.679358][ C1] kasan_save_track+0x3e/0x80 [ 772.684079][ C1] ? kasan_save_track+0x3e/0x80 [ 772.688964][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 772.693761][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 772.698824][ C1] ? fib_default_rule_add+0x4c/0x380 [ 772.704155][ C1] ? fib4_rules_init+0x48/0x160 [ 772.709054][ C1] ? fib_net_init+0x19c/0x410 [ 772.713895][ C1] ? ops_init+0x35d/0x5d0 [ 772.718261][ C1] ? setup_net+0x118/0x350 [ 772.722768][ C1] __kasan_kmalloc+0x93/0xb0 [ 772.727400][ C1] __kmalloc_noprof+0x36b/0x720 [ 772.732287][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 772.737347][ C1] ? fib_default_rule_add+0x4c/0x380 [ 772.742656][ C1] ? fib_default_rule_add+0x4c/0x380 [ 772.747964][ C1] fib_default_rule_add+0x4c/0x380 [ 772.753098][ C1] fib4_rules_init+0x48/0x160 [ 772.757820][ C1] fib_net_init+0x19c/0x410 [ 772.762350][ C1] ? __pfx_fib_net_init+0x10/0x10 [ 772.767399][ C1] ? timer_init_key+0x161/0x2c0 [ 772.772280][ C1] ? devinet_init_net+0x5c8/0x7c0 [ 772.777351][ C1] ops_init+0x35d/0x5d0 [ 772.781520][ C1] setup_net+0x118/0x350 [ 772.785765][ C1] ? __pfx_setup_net+0x10/0x10 [ 772.790540][ C1] ? down_read_killable+0x1bb/0x3b0 [ 772.795744][ C1] ? __ns_common_init+0x2fc/0x4a0 [ 772.800806][ C1] copy_net_ns+0x53b/0x780 [ 772.805235][ C1] create_new_namespaces+0x3f0/0x6b0 [ 772.810557][ C1] ? security_capable+0x7e/0x2c0 [ 772.815614][ C1] unshare_nsproxy_namespaces+0x149/0x190 [ 772.821355][ C1] ksys_unshare+0x5a7/0x950 [ 772.825878][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 772.830914][ C1] ? rcu_is_watching+0x16/0xb0 [ 772.835715][ C1] __x64_sys_unshare+0x38/0x50 [ 772.840488][ C1] do_syscall_64+0x166/0x520 [ 772.845137][ C1] ? trace_irq_disable+0x3b/0x140 [ 772.850161][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.856232][ C1] ? clear_bhb_loop+0x70/0xc0 [ 772.860926][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.866842][ C1] RIP: 0033:0x7fb3c9b9e159 [ 772.871280][ C1] RSP: 002b:00007fb3cab1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 772.879701][ C1] RAX: ffffffffffffffda RBX: 00007fb3c9e25fa0 RCX: 00007fb3c9b9e159 [ 772.887677][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 772.895687][ C1] RBP: 00007fb3c9c3506b R08: 0000000000000000 R09: 0000000000000000 [ 772.903676][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.911663][ C1] R13: 00007fb3c9e26038 R14: 00007fb3c9e25fa0 R15: 00007ffc3c1ea478 [ 772.919652][ C1] [ 772.922723][ C1] rcu: rcu_preempt kthread starved for 339 jiffies! g112025 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 772.933682][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 772.943866][ C1] rcu: RCU grace-period kthread stack dump: [ 772.949788][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 772.963365][ C1] Call Trace: [ 772.966686][ C1] [ 772.969697][ C1] __schedule+0x17db/0x58f0 [ 772.974243][ C1] ? __lock_acquire+0x747/0x2de0 [ 772.979421][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 772.984591][ C1] ? __pfx___schedule+0x10/0x10 [ 772.989491][ C1] ? lock_acquire+0x115/0x350 [ 772.994214][ C1] ? schedule+0x90/0x2b0 [ 772.998516][ C1] schedule+0x164/0x2b0 [ 773.002715][ C1] schedule_timeout+0x152/0x2c0 [ 773.007625][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 773.013048][ C1] ? __pfx_process_timeout+0x10/0x10 [ 773.018400][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 773.024262][ C1] ? prepare_to_swait_event+0x322/0x350 [ 773.029898][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 773.034799][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 773.041043][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 773.046377][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 773.051635][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 773.057499][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 773.062131][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 773.067369][ C1] ? __kthread_parkme+0x71/0x1f0 [ 773.072358][ C1] ? __kthread_parkme+0x199/0x1f0 [ 773.077446][ C1] kthread+0x38b/0x480 [ 773.081555][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 773.086790][ C1] ? __pfx_kthread+0x10/0x10 [ 773.091423][ C1] ret_from_fork+0x514/0xb70 [ 773.096103][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 773.101271][ C1] ? __switch_to+0xc89/0x1420 [ 773.105995][ C1] ? __pfx_kthread+0x10/0x10 [ 773.110619][ C1] ret_from_fork_asm+0x1a/0x30 [ 773.115510][ C1] [ 773.118576][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 773.124938][ C1] Sending NMI from CPU 1 to CPUs 0: [ 773.130195][ C0] NMI backtrace for cpu 0 [ 773.130219][ C0] CPU: 0 UID: 0 PID: 9942 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 773.130254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 773.130268][ C0] Workqueue: krds_cp_wq#12/1 rds_connect_worker [ 773.130388][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x7d/0x110 [ 773.130449][ C0] Code: 1e cd 11 45 31 c9 eb 0c 49 ff c1 4c 39 c8 0f 84 93 00 00 00 4e 8b 54 ce 10 65 4c 8b 1d 7c 1e cd 11 41 f7 c3 00 01 00 ff 74 2c <44> 89 db 81 e3 00 01 00 0f 81 fb 00 01 00 00 0f 95 c3 41 81 fb 00 [ 773.130466][ C0] RSP: 0018:ffffc90000006f60 EFLAGS: 00000206 [ 773.130482][ C0] RAX: 000000000000000c RBX: 0000000000000100 RCX: 0000000000000005 [ 773.130494][ C0] RDX: ffffffff8abbc881 RSI: ffffffff903b1a20 RDI: 0000000000000002 [ 773.130507][ C0] RBP: 000000009478e7bd R08: ffff88802f6e5dc0 R09: 000000000000000b [ 773.130520][ C0] R10: 000000000000000c R11: 8000000000000101 R12: 000000009478e7bd [ 773.130532][ C0] R13: ffff888034b38ec0 R14: ffffc90000007040 R15: 0000000000000002 [ 773.130546][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 773.130562][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.130575][ C0] CR2: 000055555f56f4e8 CR3: 000000002a7fa000 CR4: 00000000003526f0 [ 773.130593][ C0] Call Trace: [ 773.130600][ C0] [ 773.130610][ C0] jhash+0x261/0x750 [ 773.130683][ C0] br_vlan_lookup+0x1f0/0x7a0 [ 773.130703][ C0] ? __skb_clone+0x5c/0x6c0 [ 773.130763][ C0] ? br_vlan_lookup+0x8f/0x7a0 [ 773.130782][ C0] ? __skb_clone+0x449/0x6c0 [ 773.130806][ C0] ? __pfx_br_vlan_lookup+0x10/0x10 [ 773.130828][ C0] ? skb_clone+0x246/0x3a0 [ 773.130855][ C0] br_handle_vlan+0xde/0x5a0 [ 773.130877][ C0] __br_forward+0xbb/0x540 [ 773.130930][ C0] br_handle_frame_finish+0x1119/0x1950 [ 773.130963][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.130990][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 773.131063][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 773.131081][ C0] ? nf_hook_slow+0x176/0x220 [ 773.131134][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.131161][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 773.131211][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 773.131273][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 773.131300][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.131327][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 773.131355][ C0] ? lock_acquire+0x115/0x350 [ 773.131377][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 773.131406][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.131436][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 773.131465][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 773.131493][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 773.131523][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 773.131551][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 773.131581][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 773.131606][ C0] br_handle_frame+0x1329/0x1600 [ 773.131632][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 773.131660][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 773.131691][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 773.131718][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.131745][ C0] ? __asan_memmove+0x40/0x70 [ 773.131783][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 773.131808][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 773.131857][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 773.131882][ C0] ? __netif_receive_skb_core+0x2a33/0x30c0 [ 773.131902][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 773.131921][ C0] ? rds_connect_worker+0x1d8/0x290 [ 773.131938][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 773.131962][ C0] ? worker_thread+0xa47/0xfb0 [ 773.131986][ C0] ? ret_from_fork+0x514/0xb70 [ 773.132018][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 773.132045][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 773.132070][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 773.132125][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 773.132156][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 773.132187][ C0] ? dev_gro_receive+0x1097/0x2380 [ 773.132259][ C0] napi_complete_done+0x299/0x730 [ 773.132292][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 773.132324][ C0] ? gro_cell_poll+0x18a/0x630 [ 773.132369][ C0] gro_cell_poll+0x5ff/0x630 [ 773.132395][ C0] ? gro_cell_poll+0x18a/0x630 [ 773.132417][ C0] __napi_poll+0xaa/0x330 [ 773.132436][ C0] net_rx_action+0x61d/0xf50 [ 773.132463][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 773.132499][ C0] handle_softirqs+0x226/0x860 [ 773.132525][ C0] ? do_softirq+0x77/0xd0 [ 773.132551][ C0] ? __inet6_bind+0x301/0xf30 [ 773.132628][ C0] do_softirq+0x77/0xd0 [ 773.132651][ C0] [ 773.132657][ C0] [ 773.132664][ C0] __local_bh_enable_ip+0x100/0x140 [ 773.132688][ C0] __inet6_bind+0x301/0xf30 [ 773.132719][ C0] kernel_bind+0x13e/0x1c0 [ 773.132797][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 773.132819][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 773.132853][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 773.132918][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 773.132949][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 773.132977][ C0] ? lock_acquire+0x115/0x350 [ 773.133001][ C0] rds_connect_worker+0x1d8/0x290 [ 773.133020][ C0] ? process_scheduled_works+0x97a/0x1630 [ 773.133045][ C0] process_scheduled_works+0xc3d/0x1630 [ 773.133086][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 773.133115][ C0] ? assign_work+0x3cf/0x5d0 [ 773.133141][ C0] worker_thread+0xa47/0xfb0 [ 773.133193][ C0] ? __kthread_parkme+0x71/0x1f0 [ 773.133226][ C0] kthread+0x38b/0x480 [ 773.133243][ C0] ? __pfx_worker_thread+0x10/0x10 [ 773.133268][ C0] ? __pfx_kthread+0x10/0x10 [ 773.133287][ C0] ret_from_fork+0x514/0xb70 [ 773.133306][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 773.133335][ C0] ? __switch_to+0xc89/0x1420 [ 773.133362][ C0] ? __pfx_kthread+0x10/0x10 [ 773.133381][ C0] ret_from_fork_asm+0x1a/0x30 [ 773.133418][ C0]