last executing test programs: 2m8.445506729s ago: executing program 2 (id=4437): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@deltaction={0x74, 0x31, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xfff) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000480)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0xffffffffffffff2d) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000540)={r10, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r10, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000fcfcbac4a97bd010eb462f9af119", @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) 2m7.285143586s ago: executing program 2 (id=4449): bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x5, 0x0, {{0x24, 0x4, 0x2, 0x29, 0x90, 0x65, 0x0, 0x9, 0x29, 0x0, @loopback, @local, {[@rr={0x7, 0x17, 0xd3, [@private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x15, 0x3, 0x0, [{@private=0xa010100, 0x1000}, {@remote, 0x80000001}, {@private=0xa010101, 0x1ef}, {@local, 0x401}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x3}]}, @timestamp={0x44, 0x14, 0x30, 0x0, 0x4, [0x9, 0x9, 0x9, 0x8]}, @lsrr={0x83, 0xb, 0xeb, [@multicast1, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x14, 0xac, 0x3, 0x2, [{@loopback, 0x7}, {@private=0xa010100, 0x2}]}]}}}}}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffffffffff89, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x28b1b}}, 0x20}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0xff, 0x1}, 0xfe}, 0x18) 2m6.820653849s ago: executing program 2 (id=4455): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0022b1dee0000012f400e6ff0e400058"}}}]}, 0x48}}, 0x20008080) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001380)=@newchain={0x106c, 0x64, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {0x0, 0xfff2}, {0x6, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}, @TCA_RATE={0x6, 0x5, {0xc2, 0x3}}, @filter_kind_options=@f_flow={{0x9}, {0xff0, 0x2, [@TCA_FLOW_POLICE={0x430, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x6, 0x6, 0x2, 0x7, 0x3, 0x4, 0x5, 0x9, 0xfff, 0x0, 0x8, 0x6, 0x5, 0x8, 0x7ff, 0x6, 0x2, 0x15ce, 0x7, 0x10001, 0xdf7, 0x1565, 0xff, 0x80, 0x6, 0x0, 0xb79, 0x4, 0xffffffff, 0x0, 0xee93, 0x7fff, 0x7fff, 0x0, 0x10, 0x0, 0x5, 0x40, 0x6, 0x7, 0x0, 0x8, 0x9, 0x3, 0xff, 0xe, 0x9, 0x8, 0x5, 0x50, 0x7ff, 0x9, 0x5, 0x5, 0x5, 0x4, 0x2, 0x7, 0x3, 0xdd5, 0x3, 0x4d2e, 0x10, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0x7, 0xfffffff9, 0x3, 0x4, 0x4, 0x479, 0x8, 0xd, 0x5, 0x400, 0x7, 0x4, 0x8d, 0x9, 0xd3e, 0x7, 0x5, 0x7, 0x10, 0x2, 0x2fa, 0x9, 0x0, 0x80, 0x4, 0x8, 0x9, 0x0, 0x8, 0x4, 0x2, 0x3, 0x4, 0xc6, 0xe, 0x9, 0xfff, 0xa, 0x5, 0x8, 0x40000, 0x3, 0x5, 0x0, 0x7, 0x101, 0x7, 0x9, 0x7, 0x70e, 0xd9b0, 0x4, 0x0, 0x4cd6, 0x9, 0x4, 0x8, 0x100, 0x0, 0xff, 0xffffffff, 0x8598, 0x5, 0x5b99, 0x8, 0x8, 0xfffffff8, 0xd, 0xf, 0x401, 0x3ff, 0x0, 0xfff, 0x7fffffff, 0x2, 0x1, 0x6, 0x0, 0x0, 0xa, 0x6, 0x7, 0x2d3, 0x8, 0x1f, 0xfffffff0, 0x10, 0x4, 0x40, 0x8, 0x7, 0x80000000, 0x4, 0x5, 0x6, 0x7, 0x9, 0x6, 0x7, 0x7, 0xfffffffe, 0x10000, 0xad, 0x80000001, 0x6, 0x6, 0xe, 0x7, 0x7, 0x400, 0x3, 0xceda, 0x2, 0xd9b, 0x4, 0x0, 0xf, 0x5, 0x3, 0x0, 0x80, 0x40, 0x401, 0xffffffff, 0x48a7, 0x10, 0xfffffffb, 0xd, 0x5, 0x0, 0x3db4ed28, 0x200, 0xea, 0x2, 0xfffffff7, 0x7, 0x3b, 0x7, 0x7, 0x3, 0xfffffffc, 0x80000000, 0x8, 0x80000001, 0x8, 0x3, 0x8a24, 0xfffffffd, 0xa, 0x3, 0x6, 0xff, 0x3, 0xbec1, 0x1, 0x2, 0x80000001, 0x7f, 0x1, 0x1, 0x6, 0x8000, 0x9, 0x8c, 0x8, 0x8000, 0xfffffff0, 0x5, 0x9, 0x0, 0x7, 0x5, 0x0, 0x1, 0x80000000, 0x0, 0x3ff, 0x2, 0xfff, 0x5, 0x4458, 0x2, 0x8, 0x7, 0x7, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_FLOW_EMATCHES={0x4e0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xb, 0x3, 0xfff9}, {0x8001, 0x0, 0x3, 0x5}}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x200, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='l', @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="4093d40c3cb4a0c86c", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="8ae0", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="0eaad4516d172a", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="536fb8cc89ac19ec", @TCF_META_TYPE_VAR='[', @TCF_META_TYPE_VAR="51a4"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ef"]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8282, 0x8, 0x4}, {0xffffffffffffffff, 0x1, 0x2}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x8}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x8}, {0x6, 0x800, 0x1ff, 0x9}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x11}, {0x2, 0x7405, 0xfbff, 0x2, 0x8}}}, @TCF_EM_META={0x7c, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xc, 0x1}, {0x101, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf5, 0x0, 0x2}, {0x80, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="fa5b", @TCF_META_TYPE_VAR="6e1f3e2cd4e75c", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="7fa2ccb624", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3df75b3cceeea8"]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="a694ef43b5c81ae6", @TCF_META_TYPE_VAR="69ae68c2b289", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x40, 0x2}, {0xfff, 0x81, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x22c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x108, 0x2, 0x0, 0x0, {{0x8}, [@TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_VAR="ee06fd", @TCF_META_TYPE_VAR="69267a4d24467389", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="0a24d4703607", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3dbdac", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="93d5bef379a83f731e"]}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="dba9", @TCF_META_TYPE_VAR="2e0b33fae21754f61040", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR='5', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="00b86270e2ee53766052", @TCF_META_TYPE_VAR="c818806431396b5a39"]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="5db3ec40d6d5f963572f", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f6fde4", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="4e0b9cbee5ff3fb87f6f", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x32, 0x2, [@TCF_META_TYPE_VAR="680eae6de7ba9b1bd5", @TCF_META_TYPE_VAR="44d5020a70d51b81", @TCF_META_TYPE_VAR="a3e2d5a7aa8661", @TCF_META_TYPE_VAR="5cb234ef557d81feb7ea", @TCF_META_TYPE_VAR="8b4dad7cdb373764", @TCF_META_TYPE_INT=0x10000008]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0xe3, 0x1}, {0xfc01, 0x20, 0x2}}}, @TCA_EM_META_RVALUE={0x2a, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="a4619a7c6f2d846dd8", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="dd1f58e3dd681141f4"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_META={0xec, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="7f98", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="1dd4af98d6d2ef", @TCF_META_TYPE_VAR="e3ee634b", @TCF_META_TYPE_VAR="a1", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d5ef48c6c2d912", @TCF_META_TYPE_VAR="0f04197b1dd3"]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="9ec291f19a", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='}']}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x2, 0x2}, {0x6, 0xf7, 0x1}}}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="c567a7", @TCF_META_TYPE_VAR="26af00611a46", @TCF_META_TYPE_VAR="2f95c70dcc01f820ef", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="4418bf235bcde707ed", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="3dd88363aa72ef09", @TCF_META_TYPE_VAR="b78e6e640fd2662845"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x4, 0x2}, {0x6a6f, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="dbec9ae7"]}, @TCA_EM_META_LVALUE={0x32, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="b2e347b45d07", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="8be5349cfe35347b7a", @TCF_META_TYPE_VAR='u\'', @TCF_META_TYPE_VAR="17dd59dea2", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xc, 0x3, 0x9}, {0xb07c, 0x311e, 0x0, 0x7a3}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6bbf, 0x1, 0xc}, {0x2, 0x0, 0x7, 0x0, 0x1, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2c, 0x2, 0xcf3}, {0x5, 0x5, 0x1, "e667d24987"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4193, 0x1, 0x3}, {0x4, 0xc, 0x1, 0x3, 0x8, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x7}, {0x0, 0x0, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x5}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0x38, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x1}, {0xff, 0x8000, 0x1, 0x8}}}, @TCF_EM_CONTAINER={0xa0, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x5}, "4720951ce8fdb5ecc9c787f6055e2eb7503a190fa122a20d2e4bccc3777189c970d0e84875ee083c6f8392914098c8faf25d8281d2366cb2c2e2ba242d51e2d00a138eac293751aa15b170317677928412a1fb10674b79bea3b40cc00d559aacef3d74b04d467863e505a7945051b876ddc414c7a7b1c1b6fbd2381926feec4ba43df292f979ec89b74a19629111d1918ae5da"}}]}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x8, 0x5}, {0x4, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x40}, {0xeb1f, 0x6, 0x0, "f0f249fbd727"}}}]}]}, @TCA_FLOW_ACT={0x6d4, 0x9, 0x0, 0x1, [@m_simple={0xec, 0x14, 0x0, 0x0, {{0xb}, {0xc0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-\xb9\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x47, 0x8, 0x6, 0x6e5f303f, 0x7fff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x4, 0x6, 0x96d1, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x2, 0x1, 0x10000, 0x5}}, @TCA_DEF_DATA={0x7, 0x3, '[-\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}, @TCA_DEF_DATA={0xc, 0x3, ']-,-!*(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xea2, 0x3, 0x0, 0x5, 0x7e3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x575578bb, 0x6, 0x8, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x67ec860e, 0x7, 0x5, 0xfff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0x10c, 0xc, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x20000000, 0x9, 0x400}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x4, 0x0, 0x7, 0x10001}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0xde5, 0x1, 0x4, 0x401}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x3, 0x3, 0x5}, 0x28}}]}, {0x6e, 0x6, "8ebbe63ea362e9101b29e93d9a76b9a5468cede8f4b79c9a39c5f0c9db4f5557e4c3c8ffaf46f47f22eb78b9e36bfa3da6c736b5039953953583c9b2afb5ce0c605cbbf56ab8c57dc87e9d535c0028e707727706678a46083672bf7e83db82d7c021a9b9e872684a19f0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xb0, 0x7, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x7, 0x0, 0x8, 0x8}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0x5, 0xffffffffffffffff, 0xad, 0x101}, 0xb}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8d55, 0x9, 0x6, 0x80, 0x9}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x4, 0xc9, 0xa, 0x7}]}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x401, 0x9, 0x0, 0x5}, {0x91, 0x2, 0x3, 0x120}, {0x4, 0x5, 0x3, 0x200}, {0x1, 0xf, 0x0, 0x4}, {0x5, 0x1, 0x10, 0x4}, {0x1, 0x20, 0x7, 0x82}, {0xf26, 0x3, 0x4, 0x7}, {0x7, 0x0, 0x2, 0xff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x66, 0x8, 0xffffffffffffffff, 0x80, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x2e, 0x6, "6101fccbbf51f42ff24d3238e393187d1130759c35f27d710ce0528463ab98f7239bece322930dd8792e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x170, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb387, 0x7, 0x3, 0x7fffffff, 0xbc2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4543ac9, 0xfec, 0x10000000, 0x6c, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x30c, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x7, 0x8, 0x2, 0x5}}]}, {0xf0, 0x6, "c3ec2cdeba116137704cb5315b7780557e7d465c5fcd8cca67d2a215a959dbc14d474815e356a427c5120b83294fdabf831c28604b65fe57d3d185df0e80afc05c9cf3385f7caf1d78f13124a51678f339382adaf4a0d9807b5c1079b85c461da08e52ab788b8092656eeb75a9bb81d86c62ea6e693fa0af1d072841c23319a1fe314a322e20d0510c4c5e0d276ddf4a2574232450c256b34f7d701401539bd6c90001b8aa63ef876d8b92b15d2f19dceb06da9f6709ecffae9f4a0a4a2e9a8f4e9c3732c0ada1df90ddf6af9de55a2a70056ae91deaf5625fba4031a4aa34ce09d8683b87aa9694e973df46"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0xa4, 0x9, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xda4f}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xb1}]}, {0x45, 0x6, "2a6191dcbc9b77834235843a7237d04f947ca3561380a433fca54481a9145101de324d9d527d65016edf6d951545bdf07477c0fbbe08db096aea97f5f164f8463f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x144, 0x19, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fff, 0x80000000, 0x5, 0xfd6, 0x1}, 0x3}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x4, 0x8, 0x52db, 0x6}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x8e, 0x4, 0xe7, 0x3}, 0xe}}]}, {0x80, 0x6, "b04fd97e0eaf1e496eecb6c29c51640a5d53c1dd42baf34b54c81593ba21f82cec87b402d3c29d1d252ecae99721088a39090d413e2cfde05e7e5826f15b625e7fc62239863e9b4178555f40b0723d65a8290a62073cd68e674f1ddafd44352446be1834e057ace5de124b06de147a72c0506f3b14ea7940f59ea864"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xa}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x106c}, 0x1, 0x0, 0x0, 0x20004005}, 0x4008810) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000014010000", @ANYRES32, @ANYBLOB="0000000000000000000000000a9a7b7411a3d6e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2m6.48292058s ago: executing program 2 (id=4458): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @private=0xa010101}], 0x20) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$unix(0x1, 0x5, 0x0) r2 = accept$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x61, "8d7826abde60b9c8db2229cec20c32387dd60330ed7e0ae6048ff14a738662eee15d453d3c6c479381afa2f1fec5e9b03260d7012b6f6008dcb42a4d041446c76ef90ea857c0d55582cd3c31e00c7c476a16710fedcee3397710419679cb88b0b5"}, &(0x7f0000000200)=0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r3, 0x2}, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x1411, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={r3, 0x1272, 0x0, 0xac7, 0xfff, 0x4}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000004c0)={r5, 0x6c, &(0x7f0000000440)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000500)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4a06a70}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x80c1) r8 = accept4$inet(r0, 0x0, &(0x7f0000000700), 0x800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4018, r8}, 0x18) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r9, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb3d, 0x54}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20004017) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2cc}]}, 0x1c}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000a40)={r6, 0x7, 0x10}, 0xc) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000a80)={0x7, 0xfffff0c4, 0x1, 0x6, 0x6}) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r10, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r13 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000c80)=0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000cc0)={0x0, r13}, 0x8) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000d00)={0xf1c2, 0x3}) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000d40)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000e00)={0x0, 0xb, "4973aae36e250128c4b7dc"}, &(0x7f0000000e40)=0x13) 2m5.6497128s ago: executing program 2 (id=4463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000500010007000900020073797a32000000003200078005001500080000000500050002000000050004000000000011000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000300)="14ab79bc2c7a9020291b53ef2ba20cba2c415bcd69a809da1143b47ceabb81373ab5dd745a14c426eac9beb61c00287e8f5cfb7ba7685fe5e12a78dc08ffdc2c672b1a6b65d774a5696645b9999826737901e4c55733d0fc72a9128624207bdb4d36fcc6cb06cb13f619b5e7e2c7a293cca0378ec3ccd99b8ff8ac1bb11f8e88234feeda676566db29dc940d9634cb4fa339886ee1b52b67adce9e2d1f1d88d8ea33f33a6862ed3ed95ff72440880a1eeb00ebe33aca6d7c") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x6, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x4044) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000108010c00000000000000000100050000000000000000000900010073797a30000000003122b79fc8fe428024f4066523a4d9639a07eb8db22b"], 0x28}, 0x1, 0x0, 0x0, 0x40014}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/92, 0x5c}], 0x1, 0x2, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2m5.006033763s ago: executing program 2 (id=4469): unshare(0x40000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x13, 0x2030}, 0x20) unshare(0x40020000) 1m49.453578464s ago: executing program 32 (id=4469): unshare(0x40000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x13, 0x2030}, 0x20) unshare(0x40020000) 1m15.593010088s ago: executing program 4 (id=4643): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44884) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000c800) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r11, 0x25, 0x4, @val=@netkit={@void, @value=r4}}, 0x1c) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r13, 0xa07, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20008840) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}}, 0x8004) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r15) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c06008018000a80140007000000000000000000000000000000000114008b006970766c616e310000000000000000001c0012800b0001006905006c6190b10fd6c73b4ba0c202cc6d8cbefbba116c5a76dfd4e58c82395949d1e0e9c8193f613744d54a5003c02c2427beed60a4cc4bb0280d864dc5b9154ab904656e2ae37be4379818afa9017ffd495c1dd2291b46228fa1ff964bbb5955"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) (async) socket$packet(0x11, 0x3, 0x300) 1m15.264237365s ago: executing program 4 (id=4646): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x10000, @value=r0}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r5 = socket$kcm(0x21, 0x2, 0x2) (rerun: 64) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) (async, rerun: 32) r9 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r11 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r11, &(0x7f00000014c0)={0x1d, r10, 0x0, {0x0, 0xf0}, 0x1}, 0x18) (async, rerun: 64) sendmsg$inet_sctp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="02", 0x1}], 0x1, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x8, 0x0, 0xa73f, 0xd7, 0x7, 0x7f, r7}}], 0x30, 0x4002000}, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={r7, 0x5, 0x30, 0x8001, 0x7fffffffffffffff}, &(0x7f0000000040)=0x18) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffeffff}, 0x1c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) (async, rerun: 64) recvfrom(r6, &(0x7f0000000440)=""/250, 0xfa, 0x121, &(0x7f0000000240)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x80) (rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) 1m14.650089128s ago: executing program 4 (id=4648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0x14, 0x8, {0x8}}, @RTA_FLOW={0x4, 0x10}]}, 0x30}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) 1m13.915384601s ago: executing program 1 (id=4650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0xe63}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44044804}, 0x48804) 1m13.63701765s ago: executing program 4 (id=4652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@ipv6_newaddr={0x18, 0x14, 0x100, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0x1, 0xc8, r2}}, 0x18}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000440)='GPL\x00', 0x5b5ba84c, 0x43, &(0x7f0000000480)=""/67, 0x41100, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xb, 0xfffffff7, 0x2}, 0x10, 0x2da90, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000005c0)=[{0x0, 0x4, 0x5, 0x8}, {0x0, 0x5, 0x0, 0x8}, {0x1, 0x5, 0x2, 0xb}, {0x0, 0x3, 0xe, 0x2}], 0x10, 0xb}, 0x94) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}}, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f00000006c0)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 1m13.432207596s ago: executing program 1 (id=4654): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4008800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001800010000000000000000000ae0"], 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m13.029265366s ago: executing program 1 (id=4656): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) r1 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) (async) socket(0x2, 0x80805, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) (async) 1m12.882439571s ago: executing program 3 (id=4657): socket(0x10, 0x803, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0180080006000800020048f400eb006400000d169078ac1414bb0a010102070f2064010101ac141424640101009404000001010044200e90000000070000140000000006ffffffa200000008000000030000000144541d01ac1414aa0000000e0000000000000095ac1414aa00000510e0000001e3e5980ded043ff59800008001ac1414bb000000000a01010200000001ac14143e00000001e000000100000009ff0400000000000000000001000000020000ca7a1386c40ed0593989b62632130581e14ee1c9b196c8b3d3b8204bc644e2248a50fce7d4e4d4f98c071fbf437fc76243b8699206033ebeb0ab123f4f388a6349b1"], 0xf5) write$tun(r1, &(0x7f0000000440)={@val={0x0, 0xf8}, @val={0x1, 0x80, 0xec5, 0x8001, 0xcc00, 0x7}, @eth={@random="ff89e92d46b2", @link_local, @void, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0x400}, {0x2, 0x0, 0x1}], @llc={@llc={0xff, 0x2, 'dI', "2b03e340da2202102a069c"}}}}}}}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e21, 0x6, @remote, 0x2}}}, 0x80, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42a60800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008010}, 0x40000) 1m10.547249026s ago: executing program 3 (id=4658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}}, 0x1c}}, 0x0) 1m10.433196844s ago: executing program 1 (id=4660): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000007e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$rose(r1, 0x104, 0x6ba05eb0794edd29, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3ff, @default, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}, @common=@frag={{0x30}, {[0x2, 0x7], 0xfff, 0x4, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = openat$cgroup_ro(r0, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x2, 0x0) 1m10.110557332s ago: executing program 1 (id=4662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x4) 1m10.029973946s ago: executing program 0 (id=4664): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 1m9.851792067s ago: executing program 0 (id=4665): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="5b20bc9cc46a", 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) 1m9.814887003s ago: executing program 0 (id=4666): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000080)={0x10, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r2, 0x9f2b3e4cfb3ec977, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008810) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r6, r8, 0x25, 0x0, @val=@tcx}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0xb8, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xe, 0xe}, {0x4, 0xfff3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r11}, @TCA_ATM_HDR={0x2d, 0x3, "58eddaeb503e33a5a04c362da4e06af46e554affdd06babdf5d7ecec79ef438ec787e1b6d23aaf9e39"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xfff1}}, @TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xa}}, @TCA_ATM_HDR={0x9, 0x3, "f9f933648e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040840}, 0x4) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000540)={0x1100, 0x204, 0x52, 0x10000}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000120001002bbd7000fbdbdf251502070e4e204e220600000008000000442a00000300000002000000080000000400000003000000f450be6918d3c12e8bab164d82fbd258ac", @ANYRES32=0x0, @ANYBLOB="0010000006000000a0ee000083110000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_DIOINFO(r12, 0x800c581e, &(0x7f0000000000)) 1m7.796019873s ago: executing program 4 (id=4667): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffedf, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0x8, 0x5, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c090}, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 1m7.666833014s ago: executing program 3 (id=4668): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="38930000", @ANYRES32=r1, @ANYBLOB="00000000000201001800128008000100677265000c000280060010004e220000"], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1m7.556974336s ago: executing program 3 (id=4669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "85f32f0a887130ebcad580f09d2604bb988cab295c5c7527d853d26cd74e83dd", "1cdde36751077a0258c5398b1f749e8f84542562f9023beb958bbe8fd36ccfb9", "28dd038b866b5ce68575f1eafc63bf169b1959a0718b9254945e6539a6af90e3", "b1148921ee9dd79fb881abd54c7e275e6c5b0273215b6ca5887aa46c91cbd211", "52b289bfc4d317e1e36be35d98d657ccbce94bf4f44b9aa90640146c0542331d", "0993d43fc40f59b0f334108b", 0x2, 0x1, 0x0, 0x9, 0x6}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x1, 0x8, 0x1000}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x205d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0xc0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @jmp={0x5, 0x1, 0x6, 0x4, 0xb, 0xc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "85f32f0a887130ebcad580f09d2604bb988cab295c5c7527d853d26cd74e83dd", "1cdde36751077a0258c5398b1f749e8f84542562f9023beb958bbe8fd36ccfb9", "28dd038b866b5ce68575f1eafc63bf169b1959a0718b9254945e6539a6af90e3", "b1148921ee9dd79fb881abd54c7e275e6c5b0273215b6ca5887aa46c91cbd211", "52b289bfc4d317e1e36be35d98d657ccbce94bf4f44b9aa90640146c0542331d", "0993d43fc40f59b0f334108b", 0x2, 0x1, 0x0, 0x9, 0x6}}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x1, 0x8, 0x1000}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x205d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0xc0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @jmp={0x5, 0x1, 0x6, 0x4, 0xb, 0xc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) 1m7.134973187s ago: executing program 0 (id=4670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110af000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000030000000030a010200000000000000000100fffb08000b40000000020900010073797a300000000008000a4000000004"], 0xa4}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) read(r1, &(0x7f0000000040)=""/244, 0xf4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)=':', 0x1}], 0x1) (async) ppoll(&(0x7f00000000c0)=[{r9, 0x8080}], 0x1, &(0x7f0000000180), 0x0, 0x0) close(r8) (async) socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r10 = socket$kcm(0x11, 0x3, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r12 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x1, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff0, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x1}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xa6, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x5, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0xfff, 0x101, 0x5, 0xfffffc01, 0x800}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0x0, 0x1, 0x0, 0x2}, {0x8, 0x7, 0x8, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x9, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0xd, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x2}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x2, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0x7}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x4, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x1ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x80000001, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x6, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x7, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0x6, 0x80000000, 0x2, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0xe, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x9, 0x0, 0x7fffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x4, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x6, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x7, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1m7.006083792s ago: executing program 0 (id=4671): unshare(0x20400) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x596, 0x7, 0x8, [0x0, 0x5, 0x2, 0x81, 0x8001, 0xc5]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x2, 0x3}}, 0x2e) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xfffffffffffffd66, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) accept4(r4, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m6.650659957s ago: executing program 1 (id=4672): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021692500000000002020207b1a00fe00000000bfa100000000000047010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000300)=r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002fb21a200000000ac0090"], 0x0) 1m6.588241438s ago: executing program 3 (id=4673): socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x48, 0x107, 0x2, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xab}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20014000}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x48, 0x107, 0x2, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xab}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20014000}, 0xc000) (async) 1m6.504188889s ago: executing program 4 (id=4674): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', r3, 0x700, 0x700, 0x5bf, 0x1265, {{0x17, 0x4, 0x0, 0x8, 0x5c, 0x68, 0x0, 0x76, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x5, 0xe, "d0f5792875e62554a7465d23"}, {0x6, 0x10, "d8fb74890582aa97e0ade3ee9990"}]}, @timestamp_addr={0x44, 0x1c, 0xce, 0x1, 0x6, [{@private=0xa010102, 0xb}, {@rand_addr=0x64010102, 0x94}, {@multicast2, 0x1}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x82, &(0x7f00000001c0)={r8, 0x40, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r8, 0x3}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b00000000001ea295b54fcd10ad9d5a399fb76ccb3dc9a09453eb61d47198bbec8b0dda0f063bdd8d66df"], 0x30}}, 0x0) 1m6.337180796s ago: executing program 3 (id=4675): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x5c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 1m6.028965165s ago: executing program 0 (id=4676): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000001100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[@fragment={0x2b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x66}, @srh={0x89, 0x0, 0x4, 0x0, 0xfb, 0x68, 0x81}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r2}, &(0x7f0000000340)=0x8) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r3, 0x8917, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 0s ago: executing program 33 (id=4676): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000001100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[@fragment={0x2b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x66}, @srh={0x89, 0x0, 0x4, 0x0, 0xfb, 0x68, 0x81}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r2}, &(0x7f0000000340)=0x8) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r3, 0x8917, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) kernel console output (not intermixed with test programs): vsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.725073][ T9664] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.752994][ T9664] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.912925][T18534] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 472.934832][T18534] bond1: entered promiscuous mode [ 472.940425][T18534] bond1: entered allmulticast mode [ 472.946831][T18534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.987029][T18543] openvswitch: netlink: IP tunnel dst address not specified [ 473.250227][T18557] xt_hashlimit: size too large, truncated to 1048576 [ 473.480932][T18568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.782480][T18575] openvswitch: netlink: Flow key attr not present in new flow. [ 474.081739][T18582] netlink: 'syz.3.3446': attribute type 13 has an invalid length. [ 474.139809][T18582] netlink: 'syz.3.3446': attribute type 13 has an invalid length. [ 474.143110][ T58] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.239732][ T58] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.252325][ T58] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.271492][ T58] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.495762][T18597] openvswitch: netlink: Flow key attr not present in new flow. [ 475.040444][T18622] __nla_validate_parse: 76 callbacks suppressed [ 475.040469][T18622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3456'. [ 475.288041][T18635] IPv6: sit1: Disabled Multicast RS [ 475.309378][T18635] sit1: entered allmulticast mode [ 475.335454][T18636] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 475.503259][T18644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3466'. [ 475.709568][T18658] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3470'. [ 475.738254][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3470'. [ 475.784070][T18658] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 475.797363][T18658] team0: Port device batadv1 added [ 475.980898][T18672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3474'. [ 476.145878][T18674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3475'. [ 476.336080][T18687] netlink: 'syz.4.3480': attribute type 4 has an invalid length. [ 476.347524][T18687] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3480'. [ 476.404673][T18687] .`: renamed from bond0 (while UP) [ 476.630091][T18707] netlink: 'syz.0.3485': attribute type 21 has an invalid length. [ 476.653439][T18707] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3485'. [ 476.662639][T18707] netlink: 'syz.0.3485': attribute type 4 has an invalid length. [ 476.687729][T18709] netlink: 'syz.3.3486': attribute type 21 has an invalid length. [ 476.709614][T18707] netlink: 'syz.0.3485': attribute type 5 has an invalid length. [ 476.735496][T18714] netlink: 'syz.0.3485': attribute type 21 has an invalid length. [ 476.744457][T18707] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3485'. [ 476.755350][T18714] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3485'. [ 476.774883][T18709] netlink: 'syz.3.3486': attribute type 6 has an invalid length. [ 476.806001][T18714] netlink: 'syz.0.3485': attribute type 4 has an invalid length. [ 476.814000][T18714] netlink: 'syz.0.3485': attribute type 5 has an invalid length. [ 477.017257][T18735] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 477.045249][T18735] bond1 (unregistering): Released all slaves [ 477.083644][T18743] netlink: 'syz.1.3494': attribute type 1 has an invalid length. [ 477.419797][T18758] bridge0: entered promiscuous mode [ 477.440888][T18758] macsec1: entered promiscuous mode [ 477.446601][T18758] macsec1: entered allmulticast mode [ 477.452259][T18758] bridge0: entered allmulticast mode [ 477.529292][ T58] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.542377][ T58] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.587563][ T9664] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.623770][ T9664] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.818067][T18786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.862486][T18782] ipt_REJECT: TCP_RESET invalid for non-tcp [ 478.909147][T18853] bond4: option min_links: invalid value (18446744073709551614) [ 479.025307][T18853] bond4: option min_links: allowed values 0 - 2147483647 [ 479.142182][T18853] bond4 (unregistering): Released all slaves [ 479.352784][T18848] bond4: option min_links: invalid value (18446744073709551614) [ 479.386354][T18848] bond4: option min_links: allowed values 0 - 2147483647 [ 479.397665][T18848] bond4 (unregistering): Released all slaves [ 479.677989][T18882] sctp: [Deprecated]: syz.2.3532 (pid 18882) Use of int in max_burst socket option. [ 479.677989][T18882] Use struct sctp_assoc_value instead [ 480.006944][T18902] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 480.036109][T18902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.051725][T18902] __nla_validate_parse: 25 callbacks suppressed [ 480.051746][T18902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3538'. [ 480.100284][T18907] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3540'. [ 480.222679][T18912] ipt_rpfilter: unknown options [ 480.480900][T18932] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3549'. [ 480.588725][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3553'. [ 480.643076][T18943] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3553'. [ 480.671808][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 481.025534][T18966] bond3 (unregistering): Released all slaves [ 481.137471][T18966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3556'. [ 481.358653][T18983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3563'. [ 481.414560][T18982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3562'. [ 481.441020][T18986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3565'. [ 481.486006][T18987] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 481.778368][T19001] netlink: set zone limit has 4 unknown bytes [ 482.068673][T19023] netlink: 'syz.4.3573': attribute type 11 has an invalid length. [ 482.103691][T19031] validate_nla: 7 callbacks suppressed [ 482.103714][T19031] netlink: 'syz.2.3576': attribute type 4 has an invalid length. [ 482.154519][T19033] netlink: 'syz.2.3576': attribute type 4 has an invalid length. [ 482.530620][ T5490] veth1_macvtap: left promiscuous mode [ 482.666078][T19055] netlink: 'syz.1.3581': attribute type 2 has an invalid length. [ 482.844696][T19069] tipc: Started in network mode [ 482.869683][T19069] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 482.893259][T19069] tipc: Enabled bearer , priority 2 [ 483.131786][T19089] openvswitch: netlink: Unknown key attributes 2 [ 483.616521][T19122] netlink: 'syz.3.3597': attribute type 5 has an invalid length. [ 483.709818][T19117] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 483.747200][T19117] bond3 (unregistering): Released all slaves [ 483.840039][T19127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.047346][T19141] syzkaller0: entered promiscuous mode [ 484.052987][T19141] syzkaller0: entered allmulticast mode [ 484.113405][ T5905] tipc: Node number set to 10463914 [ 484.250001][T19147] syzkaller0: entered promiscuous mode [ 484.257820][T19147] syzkaller0: entered allmulticast mode [ 484.267699][T19150] netlink: 'syz.1.3605': attribute type 3 has an invalid length. [ 484.821849][T19185] syzkaller0: entered promiscuous mode [ 484.827596][T19185] syzkaller0: entered allmulticast mode [ 484.865603][ T5842] block nbd1: Receive control failed (result -32) [ 485.308019][T19199] __nla_validate_parse: 16 callbacks suppressed [ 485.308042][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 485.802583][T19230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3627'. [ 485.823124][T19230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3627'. [ 485.953508][T19243] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3630'. [ 485.976512][T19230] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.002338][T19230] bridge_slave_0 (unregistering): left allmulticast mode [ 486.009962][T19230] bridge_slave_0 (unregistering): left promiscuous mode [ 486.017845][T19230] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.344317][T19259] netlink: 732 bytes leftover after parsing attributes in process `syz.1.3635'. [ 486.548748][T19268] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 486.575208][T19268] bond1 (unregistering): Released all slaves [ 486.689101][T19278] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 486.706112][T19278] bond1 (unregistering): Released all slaves [ 486.738525][T19287] dvmrp0: entered allmulticast mode [ 486.747710][T19287] netlink: 'syz.1.3641': attribute type 1 has an invalid length. [ 486.779082][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 486.791552][T19278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3637'. [ 486.901905][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 486.923140][T19278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3637'. [ 487.478801][T19335] can: request_module (can-proto-3) failed. [ 487.641830][T19345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3657'. [ 487.675063][T19345] netlink: 'syz.0.3657': attribute type 2 has an invalid length. [ 487.702579][T19353] netlink: 'syz.3.3659': attribute type 32 has an invalid length. [ 487.746727][T19353] bond2: Setting coupled_control to off (0) [ 487.858583][T19360] netlink: 'syz.0.3660': attribute type 25 has an invalid length. [ 487.937012][T19365] netlink: 'syz.1.3662': attribute type 4 has an invalid length. [ 487.972080][T19367] bond3: entered promiscuous mode [ 487.978212][T19367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.138960][T19380] : renamed from veth1_vlan (while UP) [ 488.466338][T19397] netlink: 'syz.4.3672': attribute type 4 has an invalid length. [ 488.508066][T19397] netlink: 'syz.4.3672': attribute type 4 has an invalid length. [ 488.696624][T19405] netlink: 'syz.4.3673': attribute type 10 has an invalid length. [ 489.195804][ T8249] IPVS: starting estimator thread 0... [ 489.201456][T19424] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 489.239667][T19424] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 489.327455][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.344975][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.359742][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.380753][T19438] netlink: 'syz.2.3681': attribute type 10 has an invalid length. [ 489.398647][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.407641][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.419564][T19425] IPVS: using max 31 ests per chain, 74400 per kthread [ 489.450739][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.471441][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.493797][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.507609][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.542161][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.554483][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.560878][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.641183][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.651452][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.652027][T19438] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 489.681621][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.696801][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.719498][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.760648][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.779995][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.801150][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.864974][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.871346][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.886202][T19452] : entered promiscuous mode [ 489.931464][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.963014][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.969385][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 489.994038][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 490.000454][T19424] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 490.107560][ T30] audit: type=1800 audit(1773220094.371:4): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3688" name="memory.events" dev="tmpfs" ino=391 res=0 errno=0 [ 490.192676][ T30] audit: type=1800 audit(1773220094.391:5): pid=19477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3688" name="memory.events" dev="tmpfs" ino=391 res=0 errno=0 [ 490.231306][ T30] audit: type=1804 audit(1773220094.391:6): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3688" name="/newroot/73/memory.events" dev="tmpfs" ino=391 res=1 errno=0 [ 490.324861][T19481] netlink: 'syz.2.3687': attribute type 32 has an invalid length. [ 490.565392][T19484] syzkaller0: entered promiscuous mode [ 490.571014][T19484] syzkaller0: entered allmulticast mode [ 490.900443][T19518] netlink: 'syz.0.3695': attribute type 11 has an invalid length. [ 490.922515][T19515] bond3: Unable to set down delay as MII monitoring is disabled [ 490.940018][T19511] netlink: 'syz.0.3695': attribute type 11 has an invalid length. [ 490.966666][T19515] bond3 (unregistering): Released all slaves [ 492.134280][T19541] __nla_validate_parse: 17 callbacks suppressed [ 492.134301][T19541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3700'. [ 493.420653][T19571] netlink: 'syz.0.3705': attribute type 10 has an invalid length. [ 493.429046][T19571] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3705'. [ 493.872724][T19597] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3713'. [ 493.908366][T19596] netlink: 'syz.0.3712': attribute type 11 has an invalid length. [ 493.917516][T19596] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3712'. [ 494.016066][T19606] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3711'. [ 494.070154][T19606] s5: renamed from vlan1 (while UP) [ 494.286465][T19621] tipc: Started in network mode [ 494.333138][T19621] tipc: Node identity f67b245da779, cluster identity 4711 [ 494.376349][T19621] tipc: Enabled bearer , priority 0 [ 494.434370][T19621] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 494.474450][T19630] syzkaller0: entered promiscuous mode [ 494.480012][T19630] syzkaller0: entered allmulticast mode [ 494.496965][T19632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3719'. [ 494.546273][T19639] tipc: Resetting bearer [ 494.642569][T19632] netlink: 'syz.2.3719': attribute type 2 has an invalid length. [ 494.673781][T19619] tipc: Resetting bearer [ 494.724308][T19619] tipc: Disabling bearer [ 494.756577][T19632] 9: entered promiscuous mode [ 494.890652][T19659] netlink: 'syz.0.3722': attribute type 1 has an invalid length. [ 494.931702][T19659] netlink: 'syz.0.3722': attribute type 3 has an invalid length. [ 494.980200][T19659] netlink: 'syz.0.3722': attribute type 1 has an invalid length. [ 494.994550][T19659] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3722'. [ 495.033819][T19659] NCSI netlink: No device for ifindex 830110067 [ 495.378035][T19687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3732'. [ 495.446029][T19687] netlink: 14392 bytes leftover after parsing attributes in process `syz.4.3732'. [ 495.475740][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3733'. [ 495.656118][T19701] netlink: 'syz.2.3734': attribute type 1 has an invalid length. [ 495.824841][T19668] netlink: 'syz.3.3727': attribute type 29 has an invalid length. [ 495.883223][T19668] netlink: 'syz.3.3727': attribute type 29 has an invalid length. [ 496.030875][T19723] openvswitch: netlink: IP tunnel dst address not specified [ 496.087122][T19726] openvswitch: netlink: IP tunnel dst address not specified [ 496.342713][T19739] netlink: 'syz.1.3747': attribute type 1 has an invalid length. [ 496.505257][T19739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 497.015020][T19768] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 497.383670][T19792] __nla_validate_parse: 6 callbacks suppressed [ 497.383714][T19792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 497.491547][T19800] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3756'. [ 497.998511][T19813] "syz.0.3761" (19813) uses obsolete ecb(arc4) skcipher [ 498.274758][T19831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.387851][T19839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3768'. [ 498.409983][T19840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.638744][T19851] "syz.0.3772" (19851) uses obsolete ecb(arc4) skcipher [ 498.713469][T19851] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 498.727851][T19851] bond4 (unregistering): Released all slaves [ 498.797736][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3775'. [ 498.903745][T19860] netlink: 'syz.3.3776': attribute type 32 has an invalid length. [ 498.911779][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3776'. [ 498.957378][T19860] bond4: option coupled_control: invalid value (3) [ 498.972459][T19860] bond4 (unregistering): Released all slaves [ 499.238267][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.455327][T19903] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3788'. [ 499.465483][T19903] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3788'. [ 499.895479][T19928] nbd: socks must be embedded in a SOCK_ITEM attr [ 499.924244][T19928] netlink: 'syz.1.3795': attribute type 2 has an invalid length. [ 499.941055][T19928] v: entered promiscuous mode [ 500.143473][T19939] delete_channel: no stack [ 500.919875][T19984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3813'. [ 500.967880][T19985] netlink: 'syz.2.3812': attribute type 1 has an invalid length. [ 500.980866][T19978] xt_bpf: check failed: parse error [ 501.081585][T19985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3812'. [ 501.102812][T19995] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 501.234617][T19985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.243721][T16618] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 501.385753][T16618] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 501.607570][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.742166][T16617] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.766702][ T983] IPVS: starting estimator thread 0... [ 501.782476][T16617] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.822242][ T152] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.859177][ T152] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.873914][T20038] IPVS: using max 28 ests per chain, 67200 per kthread [ 501.956307][T20046] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3826'. [ 502.179006][T20055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.517591][T20076] __nla_validate_parse: 2 callbacks suppressed [ 502.517615][T20076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3834'. [ 502.605584][ T152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.631711][ T152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.640271][ T983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.653064][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'. [ 502.706501][T20084] vxcan2: entered allmulticast mode [ 503.013555][ T8250] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.022747][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'. [ 503.072373][T20102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 503.183228][ T8250] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.263981][T20105] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3841'. [ 503.294092][T20105] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3841'. [ 503.624196][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3844'. [ 503.787194][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3849'. [ 503.881780][ T5842] block nbd2: Receive control failed (result -1) [ 504.167792][T20159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.253390][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3853'. [ 504.339533][T20165] netlink: 'syz.3.3854': attribute type 21 has an invalid length. [ 504.348769][T20165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3854'. [ 505.141167][T20199] netlink: 'syz.3.3867': attribute type 9 has an invalid length. [ 505.162696][T20199] veth1_macvtap: left promiscuous mode [ 505.528852][T20219] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 505.703383][T20233] netlink: 'syz.0.3874': attribute type 10 has an invalid length. [ 506.304569][T20278] syzkaller0: entered promiscuous mode [ 506.322006][T20278] syzkaller0: entered allmulticast mode [ 506.473184][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.666113][T20296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 507.097653][T20317] netlink: 'syz.3.3898': attribute type 1 has an invalid length. [ 507.195507][T20317] bond4: (slave bridge1): making interface the new active one [ 507.224866][T20317] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 507.539610][T20337] syzkaller1: entered promiscuous mode [ 507.549784][T20337] syzkaller1: entered allmulticast mode [ 507.809331][T20354] __nla_validate_parse: 9 callbacks suppressed [ 507.809362][T20354] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3909'. [ 508.083215][T20366] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3913'. [ 508.193746][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3914'. [ 508.342475][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3916'. [ 508.359197][T20385] veth0: entered promiscuous mode [ 508.364681][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3916'. [ 508.375039][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3919'. [ 508.974267][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3925'. [ 509.027789][T20431] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3925'. [ 509.074602][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3925'. [ 509.239209][T20439] "syz.4.3927" (20439) uses obsolete ecb(arc4) skcipher [ 509.521633][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 509.776307][T20473] atomic_op ffff888033e78998 conn xmit_atomic 0000000000000000 [ 510.007543][T20480] netlink: 'syz.0.3936': attribute type 2 has an invalid length. [ 510.212539][T20500] syzkaller0: entered promiscuous mode [ 510.219320][T20500] syzkaller0: entered allmulticast mode [ 510.666894][T20527] syzkaller0: entered promiscuous mode [ 510.681815][T20527] syzkaller0: entered allmulticast mode [ 511.564341][T20584] netlink: 'syz.0.3967': attribute type 83 has an invalid length. [ 511.764648][T20593] netlink: 'syz.3.3965': attribute type 5 has an invalid length. [ 512.057562][T20608] bond0: entered promiscuous mode [ 512.062671][T20608] bond_slave_0: entered promiscuous mode [ 512.083244][T20608] bond_slave_1: entered promiscuous mode [ 512.085466][T20610] netlink: 'syz.0.3973': attribute type 1 has an invalid length. [ 512.228200][T20618] netlink: 'syz.2.3974': attribute type 6 has an invalid length. [ 512.645330][T20650] netlink: 'syz.2.3981': attribute type 2 has an invalid length. [ 512.830503][T20655] __nla_validate_parse: 13 callbacks suppressed [ 512.830528][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3984'. [ 512.861999][T20657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3985'. [ 513.492185][T20671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3989'. [ 513.542520][T20671] veth1_vlan: entered allmulticast mode [ 513.705084][T20677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3992'. [ 513.753034][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.785821][T20674] syzkaller0: entered promiscuous mode [ 513.791456][T20674] syzkaller0: entered allmulticast mode [ 513.880867][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3992'. [ 514.123939][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3996'. [ 515.914893][T20722] IPv6: sit1: Disabled Multicast RS [ 515.930423][T20722] sit1: entered allmulticast mode [ 516.121093][T20727] netlink: 'syz.0.4006': attribute type 1 has an invalid length. [ 516.166684][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4008'. [ 516.196098][T20737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'. [ 516.234350][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4008'. [ 516.252429][T20737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'. [ 516.285949][T20745] netlink: 'syz.1.4009': attribute type 12 has an invalid length. [ 516.294041][T20727] IPVS: persistence engine module ip_vs_pe_ not found [ 516.327523][T20745] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 516.425164][T20750] pim6reg: entered allmulticast mode [ 516.509210][T20750] pim6reg: left allmulticast mode [ 517.325280][T20795] openvswitch: netlink: Missing valid actions attribute. [ 517.332616][T20795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.461861][T20801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.956742][T20823] __nla_validate_parse: 2 callbacks suppressed [ 517.956765][T20823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4032'. [ 518.002758][T20813] syzkaller0: entered promiscuous mode [ 518.014043][T20813] syzkaller0: entered allmulticast mode [ 518.047886][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4030'. [ 518.078080][T20813] tc action pedit 'at' offset 257 out of bounds [ 518.291939][T20836] tipc: Enabled bearer , priority 0 [ 518.481154][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 518.491758][T20839] tipc: Enabling of bearer rejected, failed to enable media [ 518.524502][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4037'. [ 518.533557][T20839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.544078][T20839] netlink: 'syz.1.4037': attribute type 1 has an invalid length. [ 518.602144][T20861] x_tables: unsorted underflow at hook 3 [ 518.769649][T20871] tipc: Resetting bearer [ 518.931878][T20876] bond4: option fail_over_mac: invalid value (16) [ 518.946831][T20876] bond4 (unregistering): Released all slaves [ 519.027061][T20871] vcan1: entered promiscuous mode [ 519.043679][T20871] vcan1: entered allmulticast mode [ 519.128121][T20882] x_tables: unsorted underflow at hook 3 [ 519.163506][T20869] tipc: Resetting bearer [ 519.181213][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'. [ 519.257524][T20889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.289606][T20894] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.4049'. [ 519.300922][T20894] tipc: Resetting bearer [ 519.326668][T20893] tipc: Resetting bearer [ 519.398418][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4050'. [ 519.847636][ T12] tipc: Resetting bearer [ 520.207675][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4060'. [ 520.219407][T20938] openvswitch: netlink: Unknown nsh attribute 0 [ 522.426344][T20900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.471486][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 522.590800][T20962] syz.4.4067: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 522.608463][T20962] CPU: 0 UID: 0 PID: 20962 Comm: syz.4.4067 Not tainted syzkaller #0 PREEMPT(full) [ 522.608494][T20962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 522.608509][T20962] Call Trace: [ 522.608518][T20962] [ 522.608539][T20962] dump_stack_lvl+0xe8/0x150 [ 522.608581][T20962] warn_alloc+0x249/0x340 [ 522.608611][T20962] ? stack_trace_save+0xa9/0x100 [ 522.608689][T20962] ? __pfx_warn_alloc+0x10/0x10 [ 522.608725][T20962] ? kasan_save_track+0x4f/0x80 [ 522.608755][T20962] ? kasan_save_track+0x3e/0x80 [ 522.608777][T20962] ? __kasan_kmalloc+0x93/0xb0 [ 522.608801][T20962] ? __kmalloc_cache_noprof+0x31c/0x660 [ 522.608832][T20962] ? xskq_create+0x56/0x170 [ 522.608970][T20962] ? xsk_setsockopt+0x54c/0x990 [ 522.608997][T20962] ? do_sock_setsockopt+0x17c/0x1b0 [ 522.609118][T20962] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 522.609152][T20962] ? do_syscall_64+0x14d/0xf80 [ 522.609179][T20962] __vmalloc_node_range_noprof+0x132/0x1730 [ 522.609239][T20962] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 522.609271][T20962] ? __kasan_kmalloc+0x93/0xb0 [ 522.609304][T20962] vmalloc_user_noprof+0xad/0xe0 [ 522.609328][T20962] ? xskq_create+0xbf/0x170 [ 522.609360][T20962] xskq_create+0xbf/0x170 [ 522.609394][T20962] xsk_init_queue+0x8a/0xe0 [ 522.609427][T20962] xsk_setsockopt+0x54c/0x990 [ 522.609459][T20962] ? __pfx_xsk_setsockopt+0x10/0x10 [ 522.609488][T20962] ? __pfx_aa_sk_perm+0x10/0x10 [ 522.609582][T20962] ? aa_sock_opt_perm+0xff/0x1a0 [ 522.609641][T20962] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 522.609682][T20962] ? __pfx_xsk_setsockopt+0x10/0x10 [ 522.609714][T20962] do_sock_setsockopt+0x17c/0x1b0 [ 522.609754][T20962] __x64_sys_setsockopt+0x13d/0x1b0 [ 522.609794][T20962] do_syscall_64+0x14d/0xf80 [ 522.609813][T20962] ? trace_irq_disable+0x3b/0x150 [ 522.609846][T20962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.609871][T20962] ? clear_bhb_loop+0x40/0x90 [ 522.609899][T20962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.609922][T20962] RIP: 0033:0x7fa61379c799 [ 522.609945][T20962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.609965][T20962] RSP: 002b:00007fa614634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 522.609989][T20962] RAX: ffffffffffffffda RBX: 00007fa613a15fa0 RCX: 00007fa61379c799 [ 522.610005][T20962] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 522.610019][T20962] RBP: 00007fa613832c99 R08: 0000000000000004 R09: 0000000000000000 [ 522.610034][T20962] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.610048][T20962] R13: 00007fa613a16038 R14: 00007fa613a15fa0 R15: 00007ffc054bd558 [ 522.610084][T20962] [ 522.610620][T20962] Mem-Info: [ 522.842473][T20970] xt_TPROXY: Can be used only with -p tcp or -p udp [ 522.879575][T20962] active_anon:5549 inactive_anon:0 isolated_anon:0 [ 522.879575][T20962] active_file:3026 inactive_file:40208 isolated_file:0 [ 522.879575][T20962] unevictable:768 dirty:96 writeback:0 [ 522.879575][T20962] slab_reclaimable:12495 slab_unreclaimable:120498 [ 522.879575][T20962] mapped:29254 shmem:1359 pagetables:1474 [ 522.879575][T20962] sec_pagetables:0 bounce:0 [ 522.879575][T20962] kernel_misc_reclaimable:0 [ 522.879575][T20962] free:1294968 free_pcp:19305 free_cma:0 [ 522.956211][T20962] Node 0 active_anon:22216kB inactive_anon:0kB active_file:12104kB inactive_file:160628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117084kB dirty:384kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14348kB pagetables:5708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.025450][T20966] bond0: Unable to set up delay as MII monitoring is disabled [ 523.034948][T20962] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.069755][T20962] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 523.100566][T20962] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 523.114391][T20962] Node 0 DMA32 free:1252276kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22468kB inactive_anon:0kB active_file:12104kB inactive_file:160628kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:44572kB local_pcp:17956kB free_cma:0kB [ 523.159104][T20962] lowmem_reserve[]: 0 0 0 0 0 [ 523.164137][T20962] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 523.202332][T20962] lowmem_reserve[]: 0 0 0 0 0 [ 523.208003][T20962] Node 1 Normal free:3915044kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:29488kB local_pcp:29488kB free_cma:0kB [ 523.241577][T20962] lowmem_reserve[]: 0 0 0 0 0 [ 523.248306][T20962] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 523.265025][T20962] Node 0 DMA32: 5769*4kB (UM) 4700*8kB (UM) 2281*16kB (UM) 274*32kB (UME) 245*64kB (UE) 493*128kB (UME) 580*256kB (U) 428*512kB (UM) 309*1024kB (UM) 159*2048kB (UME) 14*4096kB (U) = 1251732kB [ 523.290458][T20962] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 523.299305][T20983] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4072'. [ 523.314251][T20962] Node 1 Normal: 4*4kB (U) 13*8kB (UM) 18*16kB (UME) 12*32kB (UME) 9*64kB (UME) 8*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 4*2048kB (UE) 952*4096kB (M) = 3915096kB [ 523.333147][T20962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.343837][T20962] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.361140][T20962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.372530][T20962] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 523.382916][T20962] 44589 total pagecache pages [ 523.387883][T20962] 0 pages in swap cache [ 523.392205][T20962] Free swap = 124996kB [ 523.398002][T20962] Total swap = 124996kB [ 523.402354][T20962] 2097051 pages RAM [ 523.407861][T20962] 0 pages HighMem/MovableOnly [ 523.413154][T20962] 427020 pages reserved [ 523.417601][T20962] 0 pages cma reserved [ 523.436325][T20966] bond0 (unregistering): Released all slaves [ 523.465284][T20972] netlink: 'syz.3.4069': attribute type 1 has an invalid length. [ 523.544397][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 523.578626][T20980] bridge_slave_0: default FDB implementation only supports local addresses [ 523.894157][T21002] netlink: set zone limit has 4 unknown bytes [ 524.195911][T21036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.203239][T21036] IPv6: NLM_F_CREATE should be set when creating new route [ 524.217897][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4085'. [ 524.227670][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4085'. [ 524.402406][T21047] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 524.688021][T21065] syzkaller0: entered promiscuous mode [ 524.700138][T21065] syzkaller0: entered allmulticast mode [ 526.548263][T21098] tipc: Resetting bearer [ 526.565629][T21098] tipc: Resetting bearer [ 526.725753][ T152] tipc: Resetting bearer [ 526.793334][T21121] xt_connbytes: Forcing CT accounting to be enabled [ 526.884971][T21125] bond2: Unable to set down delay as MII monitoring is disabled [ 526.927425][T21125] bond2 (unregistering): Released all slaves [ 527.036298][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4114'. [ 527.068624][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4118'. [ 527.141164][T21133] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.234868][T21151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4121'. [ 527.446308][T21162] veth3: entered allmulticast mode [ 527.603496][T21177] netlink: 'syz.3.4129': attribute type 4 has an invalid length. [ 527.746111][T21191] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4133'. [ 527.767089][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4134'. [ 527.813147][T21191] .` (unregistering): left promiscuous mode [ 527.820670][T21194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4134'. [ 527.829674][T21191] bond_slave_0: left promiscuous mode [ 527.829857][T21191] bond_slave_1: left promiscuous mode [ 527.855305][T21191] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.897008][T21191] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.957088][T21191] .` (unregistering): Released all slaves [ 528.002293][T21201] netlink: 'syz.2.4136': attribute type 1 has an invalid length. [ 528.046041][ T152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.072461][ T152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.081614][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.195506][T21215] xt_CT: No such helper "pptp" [ 528.208686][T21212] SET target dimension over the limit! [ 528.323813][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.416580][T21225] __nla_validate_parse: 2 callbacks suppressed [ 528.416602][T21225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4143'. [ 528.680700][T21243] netlink: 'syz.0.4148': attribute type 2 has an invalid length. [ 528.695456][T21242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4149'. [ 528.699368][T21231] vlan0 (unregistering): left allmulticast mode [ 528.718110][T21231] veth0_vlan (unregistering): left allmulticast mode [ 528.726240][T21231] vlan0 (unregistering): left promiscuous mode [ 528.873404][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.892169][T21247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4149'. [ 529.116575][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.270373][T21229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.653611][T21267] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20001 [ 529.829994][T21276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4157'. [ 529.994956][T21288] tipc: Resetting bearer [ 530.119160][T21289] tipc: Resetting bearer [ 530.280012][T21302] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4163'. [ 530.310880][T16651] tipc: Resetting bearer [ 530.333517][T21301] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4163'. [ 530.372181][T21301] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 530.421231][T21301] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 530.724846][T21332] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4172'. [ 530.746362][T21332] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4172'. [ 530.849000][T21337] x_tables: duplicate entry at hook 1 [ 530.904133][T21339] netlink: 'syz.0.4174': attribute type 2 has an invalid length. [ 530.989003][T21346] tipc: Enabled bearer , priority 0 [ 531.025670][T21345] tipc: Disabling bearer [ 531.047626][T21348] net veth1_virt_wifi : renamed from virt_wifi0 [ 531.320267][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4180'. [ 531.417590][T21371] netlink: 'syz.0.4182': attribute type 1 has an invalid length. [ 531.442768][T21371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4182'. [ 531.907196][T21395] netlink: 'syz.0.4190': attribute type 18 has an invalid length. [ 531.929713][T21395] netlink: 'syz.0.4190': attribute type 18 has an invalid length. [ 532.102434][T21402] tipc: Resetting bearer [ 532.164751][T21402] netlink: 'syz.0.4191': attribute type 2 has an invalid length. [ 532.175707][T21404] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 532.233502][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.463478][T21417] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 532.512108][T21417] bond3: (slave lo): Enslaving as an active interface with an up link [ 532.548440][T21417] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 532.727971][T21434] openvswitch: netlink: Missing key (keys=40, expected=80) [ 532.802262][T21399] tipc: Resetting bearer [ 532.997256][T21446] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:19998 [ 533.011414][T21448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.358202][ T9662] tipc: Resetting bearer [ 533.584033][T21478] x_tables: duplicate underflow at hook 3 [ 533.797869][T21487] __nla_validate_parse: 9 callbacks suppressed [ 533.797891][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4216'. [ 533.981528][T21500] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4219'. [ 534.006719][ T5891] IPVS: starting estimator thread 0... [ 534.021443][T21501] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20004 [ 534.103162][T21503] IPVS: using max 30 ests per chain, 72000 per kthread [ 534.449049][T21530] netlink: 'syz.1.4231': attribute type 1 has an invalid length. [ 534.780821][T21537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4232'. [ 535.016108][T21539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.033511][T21539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.124712][T21539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.135408][T21539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.232360][T21543] netlink: 'syz.0.4235': attribute type 4 has an invalid length. [ 535.611248][T21564] netlink: 'syz.0.4243': attribute type 2 has an invalid length. [ 535.640644][T21564] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4243'. [ 535.805387][T21575] tipc: Resetting bearer [ 535.829351][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4247'. [ 535.854361][T21575] netlink: 'syz.0.4247': attribute type 1 has an invalid length. [ 535.862326][T21575] netlink: 'syz.0.4247': attribute type 2 has an invalid length. [ 535.876630][T21573] tipc: Resetting bearer [ 536.030485][T21586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4251'. [ 536.052632][T21588] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4252'. [ 536.082977][T21588] 0: renamed from hsr_slave_1 (while UP) [ 536.100139][T21588] 0: entered allmulticast mode [ 536.109283][T21588] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 536.416153][T21608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4254'. [ 536.432569][T21607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4257'. [ 536.715905][T16616] tipc: Resetting bearer [ 536.734271][T21591] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4253'. [ 537.641808][T21663] netlink: 'syz.0.4277': attribute type 1 has an invalid length. [ 537.681971][T21663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 537.708949][T21668] netlink: 'syz.4.4278': attribute type 1 has an invalid length. [ 537.767863][T21663] vlan2: entered promiscuous mode [ 537.774593][T21663] bond5: entered promiscuous mode [ 537.779966][T21663] vlan2: entered allmulticast mode [ 537.787561][T21663] bond5: entered allmulticast mode [ 537.801827][T21668] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 537.812704][T21668] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 537.825986][T21668] bond0: (slave ip6gre2): making interface the new active one [ 537.834877][T21668] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 537.879520][T21667] bond5: (slave bridge3): making interface the new active one [ 537.893079][T21667] bridge3: entered promiscuous mode [ 537.898681][T21667] bridge3: entered allmulticast mode [ 537.910062][T21667] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 537.978033][T21676] netlink: 'syz.1.4280': attribute type 1 has an invalid length. [ 537.989456][T21676] netlink: 'syz.1.4280': attribute type 1 has an invalid length. [ 538.020037][T21676] netlink: 'syz.1.4280': attribute type 1 has an invalid length. [ 538.078614][T21677] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.091871][T21677] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.150616][T21677] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.167546][T21677] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.253190][T21677] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.267965][T21677] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.360704][T21677] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.409301][T21677] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.604609][ T9670] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.648497][ T9670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.669216][T21708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 538.682764][ T9670] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.724582][ T9670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.757666][ T9662] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.768734][ T9662] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.786064][ T9670] nci: nci_ntf_packet: unknown ntf opcode 0x329 [ 538.802396][T21714] bridge0: port 3(veth0_to_bridge) entered blocking state [ 538.810344][T21714] bridge0: port 3(veth0_to_bridge) entered disabled state [ 538.819094][T21714] veth0_to_bridge: entered allmulticast mode [ 538.831660][T21714] veth0_to_bridge: entered promiscuous mode [ 538.838927][T21714] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.857964][T21714] bridge0: port 3(veth0_to_bridge) entered blocking state [ 538.865734][T21714] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 538.878319][T21712] bond0: (slave gre0): Error: Device type is different from other slaves [ 538.922238][T16651] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.930725][T16651] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.983454][T21676] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.005427][T21676] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.070459][T21676] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.090752][T21676] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.171708][T21676] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.182189][T21676] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.238002][T21676] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.248118][T21676] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.251051][T21728] __nla_validate_parse: 10 callbacks suppressed [ 539.251117][T21728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4295'. [ 539.417568][T21704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.514404][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 539.521428][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 539.559108][T21744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4300'. [ 539.760640][T21755] SET target dimension over the limit! [ 539.907794][T21765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4304'. [ 540.184897][T21770] bond1: entered allmulticast mode [ 540.281061][T21780] veth0: entered promiscuous mode [ 540.287248][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4310'. [ 540.306685][T21781] validate_nla: 2 callbacks suppressed [ 540.306704][T21781] netlink: 'syz.4.4308': attribute type 1 has an invalid length. [ 540.323973][T21780] veth0 (unregistering): left promiscuous mode [ 540.633146][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.654115][T21761] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 540.662195][T21796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4313'. [ 540.831527][T21805] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4316'. [ 540.900908][T21810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4317'. [ 540.900908][T21807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4317'. [ 541.101374][T21818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.257696][T21833] netlink: 'syz.0.4326': attribute type 1 has an invalid length. [ 541.257696][T21835] netlink: 'syz.2.4325': attribute type 2 has an invalid length. [ 541.358453][T21834] netlink: 'syz.4.4327': attribute type 1 has an invalid length. [ 541.404480][T21846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4330'. [ 541.414337][T21846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4330'. [ 541.571296][T21855] netlink: 'syz.4.4332': attribute type 10 has an invalid length. [ 541.637174][T21861] delete_channel: no stack [ 541.886498][T21875] xt_policy: too many policy elements [ 541.912964][ T5842] Bluetooth: hci4: command 0x0401 tx timeout [ 541.920688][T21877] syzkaller0: create flow: hash 2298376880 index 1 [ 541.941758][T16648] syzkaller0: tun_net_xmit 76 [ 541.948475][T16648] syzkaller0: tun_net_xmit 48 [ 541.973537][ T8248] syzkaller0: tun_net_xmit 76 [ 542.010512][T21873] syzkaller0: delete flow: hash 2298376880 index 1 [ 542.479456][T21897] netlink: 'syz.3.4346': attribute type 10 has an invalid length. [ 542.656447][T21900] netlink: 'syz.0.4348': attribute type 1 has an invalid length. [ 543.733950][T21897] batman_adv: batadv0: Adding interface: netdevsim0 [ 543.744903][T21897] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.775949][T21897] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 543.787984][T21899] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 543.821387][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.841871][T21907] openvswitch: netlink: Flow actions attr not present in new flow. [ 543.851197][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.900047][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.932979][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.969065][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.991127][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.014770][ T9662] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.023803][ T9662] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.085670][T21915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.227127][T21928] netlink: 'syz.1.4354': attribute type 1 has an invalid length. [ 544.282778][T21915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.549939][T21932] bond6: (slave gretap1): making interface the new active one [ 544.562378][T21932] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 544.653386][T21928] netlink: 'syz.1.4354': attribute type 12 has an invalid length. [ 544.771899][T21960] __nla_validate_parse: 7 callbacks suppressed [ 544.771919][T21960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4363'. [ 544.820374][T21967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4362'. [ 544.889004][T21963] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 544.904128][T21964] netlink: 556 bytes leftover after parsing attributes in process `syz.0.4363'. [ 545.057927][T21978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.087902][T21978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.139359][T21989] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4370'. [ 545.186989][T21991] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4366'. [ 545.202090][T21994] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4370'. [ 545.323167][T21998] netlink: 'syz.2.4371': attribute type 11 has an invalid length. [ 545.343087][T21998] netlink: 'syz.2.4371': attribute type 11 has an invalid length. [ 545.367032][T21998] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4371'. [ 546.017511][T22049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4379'. [ 546.063559][T22046] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4381'. [ 546.100934][T22046] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4381'. [ 546.187842][T22049] 8021q: adding VLAN 0 to HW filter on device bond7 [ 546.748735][T22082] IPv6: sit1: Disabled Multicast RS [ 547.680735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.693396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.705871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.718353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.730863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.743363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.755829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.768325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.780776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.984765][T22119] xt_hashlimit: size too large, truncated to 1048576 [ 548.735700][T22143] vcan0: entered promiscuous mode [ 548.788246][T22143] vcan0: entered allmulticast mode [ 548.842861][ C0] net_ratelimit: 2585 callbacks suppressed [ 548.842884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.861194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.873685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.886141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.898558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.911004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.923479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.935962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.948400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.960875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 549.753613][ T5145] Bluetooth: hci4: command 0x0401 tx timeout [ 549.841933][T22181] __nla_validate_parse: 6 callbacks suppressed [ 549.841953][T22181] netlink: 468 bytes leftover after parsing attributes in process `syz.4.4414'. [ 549.886087][T22182] ipt_REJECT: TCP_RESET invalid for non-tcp [ 550.170801][T22191] netlink: 'syz.3.4417': attribute type 14 has an invalid length. [ 550.206459][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4417'. [ 550.272546][T22191] netlink: 'syz.3.4417': attribute type 14 has an invalid length. [ 550.307188][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4417'. [ 550.704904][T22210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4417'. [ 550.832999][T22208] delete_channel: no stack [ 551.795765][T22238] netlink: 'syz.2.4428': attribute type 29 has an invalid length. [ 551.856931][T22238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4428'. [ 552.118337][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4431'. [ 552.137486][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4431'. [ 552.149266][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4431'. [ 552.279815][T22259] netlink: 'syz.2.4433': attribute type 11 has an invalid length. [ 552.311728][T22259] netlink: 'syz.2.4433': attribute type 11 has an invalid length. [ 552.345104][T22259] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4433'. [ 552.401319][T22264] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4435'. [ 552.483210][T22264] netlink: 'syz.3.4435': attribute type 2 has an invalid length. [ 552.814386][T22271] sctp: [Deprecated]: syz.2.4437 (pid 22271) Use of int in maxseg socket option. [ 552.814386][T22271] Use struct sctp_assoc_value instead [ 553.170640][T22286] netlink: 'syz.1.4445': attribute type 1 has an invalid length. [ 553.187489][T22284] netlink: 'syz.4.4443': attribute type 7 has an invalid length. [ 553.231369][T22288] netlink: 'syz.4.4443': attribute type 1 has an invalid length. [ 553.265213][T22284] netlink: 'syz.4.4443': attribute type 8 has an invalid length. [ 553.380745][T22293] netlink: 'syz.1.4445': attribute type 1 has an invalid length. [ 553.852972][ C0] net_ratelimit: 10836 callbacks suppressed [ 553.852992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.871519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.884019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.896547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.909092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.922712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.935303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.947874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.960417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.972938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 554.276199][T22323] tipc: Resetting bearer [ 554.353019][T22322] SET target dimension over the limit! [ 554.595309][T22317] tipc: Resetting bearer [ 555.441416][T22359] __nla_validate_parse: 6 callbacks suppressed [ 555.441440][T22359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4463'. [ 555.468323][T16651] tipc: Resetting bearer [ 555.570762][T22363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4463'. [ 557.285222][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 557.842612][T22419] syzkaller0: entered promiscuous mode [ 557.880875][T22419] syzkaller0: entered allmulticast mode [ 557.946699][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4478'. [ 558.558347][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.862851][ C0] net_ratelimit: 12136 callbacks suppressed [ 558.862888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.881382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.893854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.906394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.919174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.931684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.944215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.956547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.969058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.981548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.645192][T22448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4484'. [ 562.828816][T22448] bond6: entered promiscuous mode [ 562.856039][T22448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 563.706032][T22472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4489'. [ 563.774379][T22472] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4489'. [ 563.872941][ C0] net_ratelimit: 13040 callbacks suppressed [ 563.872962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.891488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 563.903986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.916542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 563.929050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.941608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 563.954239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.966758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 563.979270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.991808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 564.003896][ C0] sched: DL replenish lagged too much [ 564.323838][T22486] netlink: 'syz.1.4493': attribute type 1 has an invalid length. [ 564.538117][T22500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4493'. [ 565.076948][T22486] bond7: entered promiscuous mode [ 565.108189][T22486] 8021q: adding VLAN 0 to HW filter on device bond7 [ 565.697080][T22521] netlink: 'syz.3.4498': attribute type 4 has an invalid length. [ 565.714594][T22521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4498'. [ 565.960669][T22500] bond7: entered allmulticast mode [ 566.042369][T22503] bond7: (slave bridge3): making interface the new active one [ 566.058112][T22503] bridge3: entered promiscuous mode [ 566.072651][T22503] bridge3: entered allmulticast mode [ 566.089348][T22503] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 566.108019][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4496'. [ 566.738880][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4503'. [ 566.944590][T22533] tipc: Resetting bearer [ 567.103670][T22540] vlan0: entered allmulticast mode [ 567.210415][T22531] tipc: Resetting bearer [ 568.279515][ T152] tipc: Resetting bearer [ 568.521088][T22571] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4513'. [ 568.544442][T22565] netlink: 'syz.3.4512': attribute type 23 has an invalid length. [ 568.674290][T22575] tipc: Resetting bearer [ 568.791714][T22576] netlink: 'syz.0.4514': attribute type 10 has an invalid length. [ 568.884107][ C0] net_ratelimit: 12059 callbacks suppressed [ 568.884132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 568.902621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.915207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 568.927744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.940300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 568.952834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.965392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 568.977923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.990602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 569.003146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.344250][T22579] netlink: 'syz.1.4516': attribute type 22 has an invalid length. [ 571.360547][T22575] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 571.371767][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 571.483543][T22574] tipc: Resetting bearer [ 571.552907][ T8248] syz2: Port: 1 Link DOWN [ 571.575935][T22579] netlink: 'syz.1.4516': attribute type 22 has an invalid length. [ 571.631768][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 571.840941][T22597] pim6reg: entered allmulticast mode [ 572.385222][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.398608][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.418098][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.439375][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.447542][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 572.624621][T16648] tipc: Resetting bearer [ 573.767290][T22643] netlink: 'syz.3.4533': attribute type 10 has an invalid length. [ 573.804050][T22643] netlink: 396 bytes leftover after parsing attributes in process `syz.3.4533'. [ 573.893264][ C0] net_ratelimit: 14052 callbacks suppressed [ 573.893288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 573.912770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.925360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 573.937875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.950420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 573.962982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.975611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 573.988074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 574.000623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 574.013118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 574.475527][T22657] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4535'. [ 574.539093][T22657] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4535'. [ 574.553975][ T5145] Bluetooth: hci3: command tx timeout [ 574.847864][T22658] netlink: 'syz.3.4536': attribute type 25 has an invalid length. [ 575.343119][T22614] chnl_net:caif_netlink_parms(): no params data found [ 576.083706][T22687] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4541'. [ 576.112406][ T9664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.165868][ T9664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.451061][T22697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4544'. [ 576.633626][ T5145] Bluetooth: hci3: command tx timeout [ 576.785781][T22705] netlink: 'syz.4.4547': attribute type 1 has an invalid length. [ 576.925890][T22715] No such timeout policy "syz0" [ 577.175820][ T9664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.212456][ T9664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.276168][T22705] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 577.587134][T22614] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.625813][T22614] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.648806][T22614] bridge_slave_0: entered allmulticast mode [ 577.672701][T22614] bridge_slave_0: entered promiscuous mode [ 577.983804][ T9664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.022476][ T9664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.094039][T22614] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.123913][T22614] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.137999][T22614] bridge_slave_1: entered allmulticast mode [ 578.164039][T22614] bridge_slave_1: entered promiscuous mode [ 578.680430][ T9664] bond0: (slave netdevsim0): Releasing backup interface [ 578.733050][ T5145] Bluetooth: hci3: command tx timeout [ 578.747238][ T9664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.793920][ T9664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.903082][ C0] net_ratelimit: 11772 callbacks suppressed [ 578.903108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 578.921578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.934122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 578.946623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.959187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 578.971936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.984476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 578.996992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 579.009535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 579.022075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 579.041019][T22750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4560'. [ 579.103049][T22750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4560'. [ 580.647190][T22614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.761856][T22614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.801927][ T5145] Bluetooth: hci3: command tx timeout [ 581.019487][T22614] team0: Port device team_slave_0 added [ 581.057173][T22614] team0: Port device team_slave_1 added [ 581.451833][T22614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.495683][T22614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.591431][T22614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.720238][T22614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.757585][T22614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.862302][T22614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.969187][ T9664] bridge_slave_1: left allmulticast mode [ 581.987643][ T9664] bridge_slave_1: left promiscuous mode [ 582.028983][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.184217][ T9664] bridge_slave_0: left allmulticast mode [ 582.189951][ T9664] bridge_slave_0: left promiscuous mode [ 582.231622][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.667524][T22814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4573'. [ 582.906873][T22822] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4575'. [ 583.092356][T22832] netlink: 'syz.4.4576': attribute type 1 has an invalid length. [ 583.912899][ C0] net_ratelimit: 12514 callbacks suppressed [ 583.912922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.931439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 583.944001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.956560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 583.969000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.981481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 583.993844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 584.006318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 584.018789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 584.031271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 584.117675][ T9664] bond1 (unregistering): (slave bridge4): Removing an active aggregator [ 584.130321][ T9664] bond1 (unregistering): (slave bridge4): Releasing backup interface [ 584.396949][ T9664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.427889][ T9664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.444983][ T9664] bond0 (unregistering): Released all slaves [ 584.459435][ T9664] bond1 (unregistering): Released all slaves [ 584.481071][ T9664] bond2 (unregistering): Released all slaves [ 584.511249][ T9664] bond3 (unregistering): (slave lo): Releasing backup interface [ 584.527306][ T9664] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 584.544964][ T9664] bond3 (unregistering): Released all slaves [ 585.251037][T22855] tipc: Resetting bearer [ 585.258693][ T9664] 9: left promiscuous mode [ 585.396356][T22614] hsr_slave_0: entered promiscuous mode [ 585.451096][T22614] hsr_slave_1: entered promiscuous mode [ 585.495386][T22614] debugfs: 'hsr0' already exists in 'hsr' [ 585.505011][T22870] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4582'. [ 585.515588][T22614] Cannot create hsr debugfs directory [ 585.532482][T22854] tipc: Resetting bearer [ 585.551617][ T9664] tipc: Left network mode [ 585.695925][T22872] netlink: 'syz.4.4584': attribute type 1 has an invalid length. [ 585.749382][ T152] tipc: Resetting bearer [ 585.855217][T22878] "syz.0.4586" (22878) uses obsolete ecb(arc4) skcipher [ 585.983240][T22881] xt_cluster: node mask cannot exceed total number of nodes [ 586.947277][T22908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4593'. [ 587.494192][T22924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4597'. [ 587.742277][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4599'. [ 587.928171][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4599'. [ 588.374854][ T9664] hsr_slave_0: left promiscuous mode [ 588.410980][ T9664] hsr_slave_1: left promiscuous mode [ 588.429321][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.472182][ T9664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.511232][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.536160][ T9664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.588915][ T9664] veth1_macvtap: left promiscuous mode [ 588.608671][ T9664] veth0_macvtap: left promiscuous mode [ 588.623402][ T9664] : left promiscuous mode [ 588.631729][ T9664] veth0_vlan: left promiscuous mode [ 588.923451][ C0] net_ratelimit: 11617 callbacks suppressed [ 588.923475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 588.942004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.954480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 588.967067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.979526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 588.992147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.004746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 589.017355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.029867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 589.042410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.364921][ T9664] team0 (unregistering): Port device team_slave_1 removed [ 589.396621][ T9664] team0 (unregistering): Port device team_slave_0 removed [ 590.557583][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 590.667858][T22981] syzkaller0: entered promiscuous mode [ 590.691071][T22981] syzkaller0: entered allmulticast mode [ 590.952762][T22614] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 591.018517][T22614] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 591.240763][T22614] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 591.376257][T22614] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 592.227370][T23009] syzkaller0: entered promiscuous mode [ 592.262970][T23009] syzkaller0: entered allmulticast mode [ 593.933117][ C0] net_ratelimit: 11955 callbacks suppressed [ 593.933138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 593.951589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.964049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 593.976685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.989078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 594.001637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.014014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 594.026532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.038962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 594.051587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.810659][T23040] syzkaller0: entered promiscuous mode [ 596.833052][T23040] syzkaller0: entered allmulticast mode [ 598.091771][T23065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.942879][ C0] net_ratelimit: 13314 callbacks suppressed [ 598.942901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 598.961319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.973944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 598.986628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.999184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 599.011658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.024090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 599.036557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.049069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 599.061579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.331722][T22614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.465400][T23090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4623'. [ 601.547988][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4623'. [ 601.579891][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4623'. [ 601.618195][T22614] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.828658][T23090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 601.970539][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.977812][ T9670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.168993][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.176269][ T9670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.707278][T23109] syzkaller0: entered promiscuous mode [ 602.752894][T23109] syzkaller0: entered allmulticast mode [ 603.652276][T23137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.747001][ T152] bond0: (slave ip6gre2): link status definitely down, disabling slave [ 603.865540][ T152] bond0: now running without any active interface! [ 603.952917][ C0] net_ratelimit: 12396 callbacks suppressed [ 603.952940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 603.971372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.983921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 603.996408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.008916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 604.021499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.034073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 604.046611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.059174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 604.071653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.180213][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4634'. [ 604.258483][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4634'. [ 604.376023][T23156] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4636'. [ 604.597857][T22614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.157406][T23170] bond8 (unregistering): Released all slaves [ 605.184708][T23175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4641'. [ 605.402322][T23178] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 605.534111][T23179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'. [ 606.180858][T23211] netlink: 'syz.3.4645': attribute type 2 has an invalid length. [ 607.369681][T22614] veth0_vlan: entered promiscuous mode [ 607.466932][T22614] veth1_vlan: entered promiscuous mode [ 607.486436][T23238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4651'. [ 607.730246][T23251] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4654'. [ 608.217066][T23268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4657'. [ 608.962997][ C0] net_ratelimit: 12245 callbacks suppressed [ 608.963018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.981545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 608.993950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.006469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 609.018971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.031410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 609.044014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.056460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 609.069035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.081430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 610.298505][T22614] veth0_macvtap: entered promiscuous mode [ 610.769521][T23284] --map-set only usable from mangle table [ 611.214822][T23300] netlink: 'syz.0.4666': attribute type 1 has an invalid length. [ 611.266854][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4662'. [ 613.060062][T22614] veth1_macvtap: entered promiscuous mode [ 613.474643][T23323] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4667'. [ 613.534107][T23323] xt_hashlimit: size too large, truncated to 1048576 [ 613.751332][T23300] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 613.973117][ C0] net_ratelimit: 15364 callbacks suppressed [ 613.973140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.000006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 614.012501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.024937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 614.037451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.049797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 614.062281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.074611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 614.087099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.099638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:0) [ 614.246527][T23335] tipc: Resetting bearer [ 614.298744][ T983] syz2: Port: 1 Link ACTIVE [ 614.353790][T23335] tipc: Resetting bearer [ 614.471406][ T983] syz2: Port: 1 Link DOWN [ 614.501439][T22614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.532543][T22614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.565358][T23346] sctp: [Deprecated]: syz.4.4674 (pid 23346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.565358][T23346] Use struct sctp_sack_info instead [ 614.613020][T16648] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.658505][T16648] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.724395][T23349] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 614.911504][T16648] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.982870][ C0] net_ratelimit: 20025 callbacks suppressed [ 618.982895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 618.983066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 618.990219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 619.002009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.013916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 619.026319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.038245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 619.050249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.062075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 619.074690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.355112][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.993019][ C0] net_ratelimit: 21799 callbacks suppressed [ 623.993042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 623.993046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 623.994003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.000029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 624.013215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.024541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 624.036133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.048257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 624.060542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 624.072494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 629.002829][ C0] net_ratelimit: 21980 callbacks suppressed [ 629.002852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 629.003594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.009722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 629.022260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.034351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 629.046043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.060469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 629.070470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 629.082010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 629.093897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.012898][ C0] net_ratelimit: 22200 callbacks suppressed [ 634.012922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 634.013701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.020134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 634.032243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.044043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 634.056650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.068274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 634.079960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 634.092122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 634.104591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.022924][ C1] net_ratelimit: 21618 callbacks suppressed [ 639.022948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.024362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 639.030572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.041926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 639.054187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.066615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 639.078477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.090100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 639.102092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.114460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 644.032878][ C0] net_ratelimit: 21908 callbacks suppressed [ 644.032903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 644.033805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.040270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 644.052015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.063940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 644.076595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.088433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 644.100393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.112157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 644.124700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.043014][ C1] net_ratelimit: 21893 callbacks suppressed [ 649.043048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.043239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 649.050488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.062502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 649.073969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.086059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 649.098574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.110276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 649.122020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 649.133995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 653.383453][ T5145] Bluetooth: hci1: command 0x0405 tx timeout [ 654.052860][ C0] net_ratelimit: 22203 callbacks suppressed [ 654.052872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.052885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 654.054272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 654.060477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.072309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 654.084886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.096645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 654.108508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 654.120222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 654.132886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 655.195725][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 659.063093][ C1] net_ratelimit: 17241 callbacks suppressed [ 659.063117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.064202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 659.070158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.084225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 659.094823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.109474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 659.118400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.130294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 659.142741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 659.158470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 664.072938][ C1] net_ratelimit: 16006 callbacks suppressed [ 664.072962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.076877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 664.079964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.092094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 664.104672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.119244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 664.127949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.140258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 664.152279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 664.167784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 669.082916][ C1] net_ratelimit: 17497 callbacks suppressed [ 669.082940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.083577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.089988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.104887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 669.114632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.126021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 669.138285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.150220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.162634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.174261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.093155][ C1] net_ratelimit: 17859 callbacks suppressed [ 674.093179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.097036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 674.100233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.112504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 674.125052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.136898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.148448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.160741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.172903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 674.187405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 679.103049][ C1] net_ratelimit: 18346 callbacks suppressed [ 679.103072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.103232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 679.110571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.122933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.134228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.146547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.158324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.173074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 679.182075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 679.194017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 684.112950][ C1] net_ratelimit: 18145 callbacks suppressed [ 684.112982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 684.114509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 684.120567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 684.131979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 684.144094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 684.156313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 684.168649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 684.180367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 684.192098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 684.207104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 689.122904][ C0] net_ratelimit: 18831 callbacks suppressed [ 689.122928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 689.122930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.124309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.133018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 689.142162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.153798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.166285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.178082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.189895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 689.204426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 694.133029][ C1] net_ratelimit: 18815 callbacks suppressed [ 694.133055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 694.133235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 694.140171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 694.152137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 694.164655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 694.176183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 694.188229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 694.200198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 694.212605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 694.224278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 699.142863][ C1] net_ratelimit: 18547 callbacks suppressed [ 699.142887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 699.146314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 699.150169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 699.161857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 699.174008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 699.186186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 699.198379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 699.210170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 699.221780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 699.234208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 704.152804][ C0] net_ratelimit: 18525 callbacks suppressed [ 704.152828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 704.152828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 704.153926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 704.159907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 704.172467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 704.184157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 704.196019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 704.208037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 704.220429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 704.232114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.162936][ C1] net_ratelimit: 18523 callbacks suppressed [ 709.162959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.163093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.170620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.185474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 709.195177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.206848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 709.218999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.231081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 709.243441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 709.254891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 714.172977][ C1] net_ratelimit: 19266 callbacks suppressed [ 714.172977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 714.173000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 714.180313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 714.192531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 714.204521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 714.216203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 714.228462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 714.240461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 714.252900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 714.267979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 719.183139][ C1] net_ratelimit: 19072 callbacks suppressed [ 719.183164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 719.183218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 719.190554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 719.202082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 719.214215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 719.226580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 719.238536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 719.250215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 719.262098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 719.274434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 724.192885][ C0] net_ratelimit: 19342 callbacks suppressed [ 724.192909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 724.193696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 724.202698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 724.212004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 724.223952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 724.236351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 724.246849][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 724.246866][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): [ 724.247292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 724.247497][ C1] P23361/1:b..l [ 724.247523][ C1] rcu: (detected by 1, t=10502 jiffies, g=97105, q=1662 ncpus=2) [ 724.247552][ C1] task:syz.0.4676 state:R running task stack:27192 pid:23361 tgid:23361 ppid:18004 task_flags:0x400040 flags:0x00080000 [ 724.247629][ C1] Call Trace: [ 724.247638][ C1] [ 724.247655][ C1] __schedule+0x15dd/0x52d0 [ 724.247729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 724.247724][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 724.247794][ C1] ? __pfx___schedule+0x10/0x10 [ 724.247829][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 724.247870][ C1] preempt_schedule_irq+0x4d/0xa0 [ 724.247908][ C1] irqentry_exit+0x599/0x620 [ 724.247942][ C1] ? trace_irq_disable+0x3b/0x150 [ 724.247983][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 724.248009][ C1] RIP: 0010:lock_release+0x0/0x3d0 [ 724.248039][ C1] Code: be 00 00 50 00 e9 70 fe ff ff 41 be 2f 00 00 00 e9 0e ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 [ 724.248059][ C1] RSP: 0018:ffffc9000d7b71b0 EFLAGS: 00000202 [ 724.248080][ C1] RAX: 0000000000000001 RBX: ffffffff90b49601 RCX: 0000000080000001 [ 724.248096][ C1] RDX: ffffc9000d7b7201 RSI: ffffffff81767a45 RDI: ffffffff8e7602e0 [ 724.248114][ C1] RBP: dffffc0000000000 R08: ffffc9000d7b7538 R09: 0000000000000000 [ 724.248130][ C1] R10: ffffc9000d7b72d8 R11: fffff52001af6e5d R12: ffffc9000d7b7548 [ 724.248147][ C1] R13: ffffc9000d7b0000 R14: ffffc9000d7b7288 R15: ffffffff81767a45 [ 724.248164][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 724.248223][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 724.248260][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 724.248287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 724.248301][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 724.248344][ C1] ? __reset_page_owner+0x71/0x1f0 [ 724.248387][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 724.248413][ C1] arch_stack_walk+0x11b/0x150 [ 724.248459][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 724.248490][ C1] stack_trace_save+0xa9/0x100 [ 724.248518][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 724.248555][ C1] save_stack+0x122/0x230 [ 724.248582][ C1] ? __pfx_save_stack+0x10/0x10 [ 724.248623][ C1] ? page_ext_put+0x97/0xc0 [ 724.248654][ C1] __reset_page_owner+0x71/0x1f0 [ 724.248682][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 724.248718][ C1] __slab_free+0x263/0x2b0 [ 724.248736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 724.248758][ C1] qlist_free_all+0x97/0x100 [ 724.248782][ C1] ? vm_area_dup+0x2b/0x680 [ 724.248807][ C1] kasan_quarantine_reduce+0x148/0x160 [ 724.248863][ C1] __kasan_slab_alloc+0x22/0x80 [ 724.248891][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 724.248913][ C1] ? vm_area_dup+0x2b/0x680 [ 724.248937][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 724.248966][ C1] vm_area_dup+0x2b/0x680 [ 724.248997][ C1] __split_vma+0x1dc/0xa40 [ 724.249043][ C1] ? __pfx___split_vma+0x10/0x10 [ 724.249099][ C1] vma_modify+0x91b/0x2060 [ 724.249149][ C1] vma_modify_flags+0x24b/0x330 [ 724.249182][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 724.249226][ C1] ? rcu_is_watching+0x15/0xb0 [ 724.249256][ C1] ? percpu_counter_add_batch+0xea/0x1d0 [ 724.249398][ C1] ? __vm_enough_memory+0x11b/0x380 [ 724.249441][ C1] mprotect_fixup+0x47a/0xa80 [ 724.249480][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 724.249510][ C1] ? apparmor_file_mprotect+0x1d0/0x400 [ 724.249535][ C1] ? security_file_mprotect+0x1a/0x290 [ 724.249603][ C1] do_mprotect_pkey+0x8ab/0xcd0 [ 724.249647][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 724.249692][ C1] ? __se_sys_futex+0x3a8/0x450 [ 724.249731][ C1] ? rcu_is_watching+0x15/0xb0 [ 724.249772][ C1] __x64_sys_mprotect+0x80/0x90 [ 724.249801][ C1] do_syscall_64+0x14d/0xf80 [ 724.249822][ C1] ? trace_irq_disable+0x3b/0x150 [ 724.249854][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.249878][ C1] ? clear_bhb_loop+0x40/0x90 [ 724.249906][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.249929][ C1] RIP: 0033:0x7f52cb99c597 [ 724.249956][ C1] RSP: 002b:00007ffee4e03828 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 724.249980][ C1] RAX: ffffffffffffffda RBX: 00007f52c9bf66c0 RCX: 00007f52cb99c597 [ 724.249997][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f52c9bd7000 [ 724.250012][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 724.250026][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffee4e03980 [ 724.250042][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 724.250077][ C1] [ 729.202852][ C1] net_ratelimit: 18005 callbacks suppressed [ 729.202876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 729.203340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 729.209837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 729.222054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 729.234247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 729.250427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 729.257867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 729.269962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 729.282272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 729.294047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 734.213224][ C1] net_ratelimit: 19776 callbacks suppressed [ 734.213246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 734.214106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:a5:da:2d:57:7f, vlan:1) [ 734.220247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)