last executing test programs: 36.65101943s ago: executing program 2 (id=8314): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e23, @rand_addr=0x2}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000f6ffffff0000000000000000"], 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e26, 0x80003, @ipv4={'\x00', '\xff\xff', @remote}, 0x10}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000477630099747fd8db8045b90f1b61fa", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan4\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r12) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r14, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="090001"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket(0xa, 0x6, 0x6) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x4048004) 35.966051512s ago: executing program 4 (id=8321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x1, 0x7, 0xb, {0x7, 0x2, 0x1, 0x80, 0x6572}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) close(r9) ioctl$SIOCRSACCEPT(r6, 0x89e3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 35.467958015s ago: executing program 2 (id=8325): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x24, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x11, r2, 0xffffc000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe14, 0x0, 0x0}, &(0x7f0000000000)=0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000050000000a00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000210400"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x15, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0xfffffdb5, &(0x7f0000000300)="95f47baf0b04ededfced6718264f0edd25894975bb28c8d26d0151c7e940407b6967c4971ee0b41b32b418e83bcb55", 0x0, 0x4, 0x0, 0x9}, 0x48) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000700)="60b0f22b72d8e87bc0c0ec0db5d1222de79ea7d57725dfd010c5ecd2e596cbe781f8eb42386bb94f8e9edd7501258ae3ef85e4dc8adac50d6f4636d9ca8bfac464716bce77390c5f25da1fecba6c1a8d18266368065d1e24a21955f9010a9e20ac92c95594328657a0c1fcd605610b319d6cf536c47b866a5c0e00cf94f71bf8f3bb50e833a24f1a5e", 0x89}, {&(0x7f0000000880)="4c3e305ccc3ce0e8895fad1aeb61ca7fa4b687a0ab203fd2cbf916cb746a7f28e475c2279f2c8c59831370013e5072a10f4472fc05f35fd1622d87443258efae4b36e41e652953fe69ad121b5f526c78a0f0f7c46c8d0bbf58daac99b141992933db2df2c325e1ca17635a7fcb8c71286e64ec6f3975dde81021840397d0508973beea01d52c999f18d9f00fa38892590f06990b6d2819103c3cbcfeb0c4e01f86fd7f07b3d66b3d7accbac82cb32726ebbca6265a77263713a5f73ef0a7f39d0214a1cdea71a4a62f8d4e386548877baecbc1f1", 0xd4}, {&(0x7f00000004c0)="17ea61aa157f4ec378326d58cf8ae51b609d88ffd5fbbf29ccc6d0da29acf138371908546c8fddf4c7e4d65b", 0x2c}, {&(0x7f0000000980)="0d7ece0ce103814761dd8c291b6b45f2aeb9d057857f6bbbc8c653d45aed7e8b09eb8aa478641261ac0de945bb27f220bc10cf7b8a4c1751f996a0237261d7c14e7f327af4230913f8de82f7300316912b7318a243623b08b09e58d8f83b9ba8897e04ca3d590a3151b840f44c84d0f44ad42fae109c35c2ac8cac8311b4cb8792a9b37ed11d8078dfc8185e69517c2b05cb3e48d80b49fc7265f392f7a166a06c791a4b181c05c2f87c76b8b77bb6d8e410a52da8dec5", 0xb7}, {&(0x7f0000000b00)="1dae6ac7a88dbe050499a7d412ca0ec59a169e027edc9c167f18080ef852553d4cd1f9a98ffeaba43cc932bada6b21a80efd55d9c8752754cb57d78e74d8352af151b4caae91cec311de15c4b2c6b7be52df9bbf55498684b8db6b07dda1331b49a7b73492a85ab516ef7c2898c1b4cad1f1f4068047e19d1e10fb19250f38b16ff4765894e857818b56e5e65b17208d8ebb1c651d27aa8222829453fa71e7441cb254fc3ff77ab4d3c5bc2fc406885555e078a35cdb7a54781b95b1c38a5a352e02", 0xc2}, {&(0x7f0000000c00)="5c4dcde8a0b04eeda863bcd01e8016a82b59f5d63ac303766f262afffd7cce7bd02a6f795164375eb5751255eb56642e7160c453c7e4c95e9fec2c57a3aa7aa097a3fc74ffad736a3777f9270a1ea33c8676cf26889c3fa5625382838518742e177bb5ef6f28ac978aab6444e5dc66d2a80fe8e0f9c8e27fbb8aa7a68d0408b034b3a120862004419cff21e798770e42d4c8e268091d066ba663b9d3f4ad8530f9f0b6120613d14f651ce2e70b980e0bbf", 0xb1}, {&(0x7f00000005c0)="c105fb775c39e63729c17fec9ba87e251de6f6d84fdbfe", 0x17}], 0x7}, 0x4801) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[], 0x20}}, 0x0) bind$netlink(r4, &(0x7f00000002c0), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYRESHEX=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.231478014s ago: executing program 0 (id=8328): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) (async) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x300) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=@gettaction={0x2c, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) 35.231059826s ago: executing program 4 (id=8329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'veth1_macvtap\x00', {}, 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 35.017847237s ago: executing program 0 (id=8331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff7fffe}, 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x1c, 0x0, &(0x7f0000000140)="259a53f271a76d2608fff74588a80a3888a82f15bb925c84f5659443", 0x0, 0x200, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x9, 0x7}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={r5, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={r5, 0x5df2, 0xf, 0x3}, &(0x7f00000001c0)=0x10) socket$inet6_sctp(0xa, 0x2, 0x84) socket$isdn(0x22, 0x2, 0x3) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {}, 0x4, 0x0, 0x0, 0x2000}}, 0x26) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e23, @local}}, 0x1, 0x7}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={r5, 0xda}, &(0x7f0000000240)=0x8) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r8, 0x28, 0x46, 0x0, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) 34.671720492s ago: executing program 4 (id=8333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xd8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="b406007bcc9e369214dc34b800000000dc1071112400000000008510000002000000850000000700000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x1, 0xffffff34, 0x9, @mcast2, @local, 0x10, 0x40, 0x8000, 0x36}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'veth0_macvtap\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x29, 0x97, 0xd, 0x9be3, 0x8, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x7800, 0xffffffff, 0x35647857}}) (async) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x4, 0x15, 0x7f, 0x5, 0x8, @mcast1, @local, 0x80, 0x10, 0x1, 0x6}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x2b, 0x7, 0xc, @private2, @empty, 0x80a7, 0x7, 0x5, 0x3}}) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000ac0)={@local, 0x0}, &(0x7f0000000b00)=0x14) (rerun: 64) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000b40)={0x75c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r4}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x3, 0x97, 0x4, 0x3ff}, {0x6, 0x3, 0xfe, 0x4}, {0x10, 0x6, 0x8, 0x5d4}, {0x3, 0x1, 0x4, 0x7fff}, {0x6, 0x8, 0x6, 0x9dc}, {0x2, 0x6, 0x7, 0x4}, {0x4, 0x2, 0x4, 0x4}, {0xf800, 0x0, 0x3, 0x7fff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2852bade}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x0, 0x81, 0x6}, {0xe, 0x9, 0x0, 0xfffffd8f}]}}}]}}]}, 0x75c}, 0x1, 0x0, 0x0, 0x20000019}, 0x2400c00c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 34.600097781s ago: executing program 2 (id=8335): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x7, 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xfffffffffffffffc}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x800442d3, 0x200000f3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0xfffc, 0x0, 0x8, 0x0, 0xc0, 0x36, 0x101}, 0xc) 34.246401422s ago: executing program 1 (id=8336): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000000c0)="e47d441f47f1f697f9cb22b6ab608002f9be1feb63a371f51d9cd5b533ed0d92227da92f4fa6a8deef2e7e9b03f149b38db0e5517334b52dd2dd8319fcfe61db9cfa167602df2986a61b0b531c88d592cf36b10b436ceaf75ec3b360ef61f277b1bcf17705dc8109f40c6eabcc7ad49edc25d2eaae9e5d2d17f70d31fbf028047d5e0acf90742ee8922ea86875306086dda68f953131da971c60463d7e2f1447057b9de7bbfe2ccbaa83613acb89ec8dd4dbc326d9"}, 0x20) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnetconf={0x2c, 0x52, 0x4bbb613d1cd9a337, 0x70bd26, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x10001}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040080}, 0x4000004) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={r0, &(0x7f0000000300)="0617bb0aa0cbdc4b3b468b10f7f5b6ffa486eab0d4990cb7e34e40afc262fb7a0ba830894f40627ffe67c78cb75f8d0b4f29f5621cc3de8af0ebec03b9e811bfde6a51cb4a0f0feabebb832763df57640128585c3bad77", &(0x7f0000000380)=""/4096}, 0x20) (async) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000013c0)={{0x0, 0xc0000, 0x2, 0x0, 0x7, 0xf6, 0xc6e4, 0x2, 0x3, 0xd, 0xd, 0x3de, 0x7, 0xcf6, 0x2800000}, 0x18, [0x0, 0x0, 0x0]}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001480)) (async) read(r3, &(0x7f00000014c0)=""/138, 0x8a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000002080)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002040)={&(0x7f0000001600)={0xa24, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x5}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd4, 0x400, 0x23, 0xfffe, 0x8, 0x5, 0xe, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x48, 0x36, 0x16, 0x12, 0x74, 0xc, 0x36, 0x16, 0x4, 0x6, 0x1b, 0xb, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x3, 0x36, 0x5, 0x4, 0x2, 0x36, 0x48, 0x1, 0x60, 0x30, 0x1b, 0x1b]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x866d, 0x6, 0xa, 0x7, 0xe94f, 0x1, 0x3, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x6, 0x6c, 0x60, 0x7a, 0xc, 0x16, 0x36, 0x4, 0x16, 0x48, 0x24, 0x4e, 0x24, 0x1, 0x1, 0x0, 0x60, 0x0, 0xb, 0x16, 0xb, 0x6c, 0x3, 0x12, 0x12, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80c, 0x4, 0x1, 0x8, 0x0, 0xae05, 0x5, 0x808]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0xa}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x7}, {0x7, 0x8}, {0x5}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x1}]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x2b, 0x0, 0x60, 0x6c, 0x12, 0x18, 0x4, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x18, 0x30, 0x12, 0x49, 0x1b, 0x31, 0x5, 0xb, 0x4, 0x36, 0x3, 0x6, 0x6, 0x24, 0x5, 0x18, 0x16, 0x48, 0x5, 0x36, 0x15, 0x24, 0x24, 0x6, 0x2, 0xc]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x0, 0x3, 0x3, 0x60, 0x30, 0x24, 0x36, 0xc, 0xc, 0x327734ac979e7add, 0x48, 0x24, 0x18, 0x30, 0x30, 0x48, 0x3, 0x24, 0x48, 0xc, 0x18, 0x30]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0xffff, 0x1482, 0xfff8, 0x5aa9, 0x8, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2000, 0x1, 0x1, 0x0, 0x1f4, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x9, 0x16, 0x4, 0x4, 0x6, 0x1, 0x48, 0x1, 0xb, 0xbfdf3ce5a23d9bf1, 0x16, 0x6c, 0x6c, 0x36, 0x6, 0x9, 0xca1954ad12572f42, 0x9, 0x16, 0x24, 0x48, 0x6, 0x30, 0x2, 0x24, 0x1, 0x48, 0x18, 0x1b, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x6, 0x30, 0x6c, 0x48, 0x60, 0x60, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x8, 0x1, 0x3, 0xfff8, 0x1, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5f9, 0x10, 0x0, 0x8001, 0x850, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x38, 0x9, 0x2, 0x18, 0x18, 0xc, 0x4, 0x3, 0x6c, 0x12, 0x6c, 0x12, 0x48, 0x48, 0x6c, 0x12, 0x60, 0x18, 0x36, 0x0, 0x5, 0x6c, 0x3, 0x48, 0x4]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x2, 0x3}, {0x3, 0x8}, {0x3, 0x4}, {0x3, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x2, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0xa}, {0x3}, {0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xc8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8001, 0xffe1, 0x9, 0xd9b, 0x5, 0x4, 0x10]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x0, 0x9, 0x12, 0x2, 0x3]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x3}, {0x3, 0x5}, {0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x2}, {0x1}, {0x0, 0x8}, {}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x463c26a8da40640a}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x60, 0x1, 0x12, 0xc, 0x72, 0x2, 0x9, 0x3, 0x0, 0x5, 0x6c, 0x18, 0x2, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdb, 0x7, 0x3, 0x2, 0x7e5, 0xfff, 0x6, 0x33d0]}}]}]}, @NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0xa}, {0x1, 0x3}, {0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x6}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x2, 0x8}, {0x5, 0x2}, {0x6, 0xa}, {0x2, 0x7}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x9}, {0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x2}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x7}, {0x4, 0x5}, {0x6, 0x4}, {0x5, 0x3}, {0x7, 0xa}, {0x2}, {0x6, 0x2}, {0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x1, 0x1}, {0x6, 0x3}, {0x3, 0x9}, {0x0, 0x6}, {0x2, 0x3}, {0x7, 0x4}, {0x2, 0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x1cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0xfffd, 0x8000, 0xb, 0xf010, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x8, 0x9, 0x9, 0xff10, 0x2, 0x8]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x24, 0x16, 0x1b, 0x36, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0xa}, {0x3, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x3}, {0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0xbc79, 0x45f5, 0xc, 0x1, 0xfffe]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0xa}, {0x5, 0x6}, {0x0, 0x9}, {0x3, 0x2}, {0x6, 0x4}, {0x5}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0xa}, {0x7, 0x8}, {0x7, 0x5}, {0x4, 0x1}, {0x2}, {0x6, 0x3}, {0x4, 0xa}, {0x7, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x6, 0x6}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x5}, {0x5, 0x8}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x3, 0x36, 0x1b, 0x24, 0x30, 0x9, 0x24, 0x18, 0x60, 0xc, 0x1b, 0x1, 0x2, 0x1b, 0x48, 0x24, 0x30, 0xb, 0x60, 0x12, 0x1, 0x36, 0x48, 0x1, 0x3, 0x16, 0x3, 0x60, 0x6, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x401, 0x79, 0x7, 0x9, 0x200, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x4}, {0x5, 0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x1}, {0x0, 0x3}, {0x4, 0x4}, {0x2, 0x6}, {0x0, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x6}, {0x3, 0x4}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x6, 0x6}, {0x4, 0x6}, {0x1}, {0x5, 0x9}, {0x4, 0x8}, {0x7, 0x3}, {0x6, 0x6}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x5}, {0x0, 0x2}, {0x2}, {0x7, 0x3}, {0x4, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x6}, {0x4, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x4}, {0x3, 0x2}, {0x0, 0x2}, {0x3, 0x5}, {0x7, 0xa}, {0x0, 0x8}, {0x3, 0x9}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7b2, 0x4c9f, 0xf645, 0x401, 0xf565, 0x5, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x36, 0x18, 0x36, 0xc, 0xc, 0x0, 0x3, 0x24, 0x60, 0x48, 0x3, 0x18, 0x16, 0x16, 0x2d, 0x6, 0x1b, 0x2, 0x12, 0x36, 0x1b, 0x60]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x48, 0xb, 0x6c, 0x1b, 0x60, 0xc, 0x60, 0x30, 0x1b, 0x1b, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8000, 0x9, 0x3, 0x9b, 0x7, 0x5, 0x148]}}]}]}, @NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2e, 0xa901, 0x5, 0x1, 0x9, 0x6, 0x85]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x5}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x1000, 0x1, 0x800, 0x9, 0x7f, 0x40, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0xfffb, 0x8, 0x2114, 0x5, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x36, 0x3, 0x4, 0x4, 0x48, 0xb, 0x2, 0x2, 0x60, 0xb, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfdab, 0x5, 0x0, 0xbd7, 0x5, 0xffc0, 0x1ff, 0xec5]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x6, 0x2, 0xfc3a, 0x8000, 0x0, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x6, 0x400, 0x1d33, 0x1aa, 0x3ff, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x401, 0xfd9b, 0x0, 0x169a, 0x81, 0xff, 0x3]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x4, 0x36, 0x60, 0x30, 0x18, 0x6c, 0x420e0f2d2bf1b68e, 0x2, 0x14, 0x1b, 0x1b, 0x3, 0x24, 0x30]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x2, 0x32, 0xb, 0x4, 0x3, 0xb, 0x48, 0x30, 0x6, 0x48, 0x6, 0x1, 0x0, 0x6, 0xc, 0xb, 0x0, 0x12, 0x6c, 0x36, 0xc, 0xb, 0x12, 0x6, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0xb, 0x30, 0xb, 0x12, 0x6e, 0x24, 0x24, 0x9, 0x2, 0x12, 0x6c, 0x16, 0x2a4782d0269b9728, 0x48, 0x1b, 0x0, 0xc, 0x24, 0x5, 0x16, 0x6c, 0x6c, 0x6, 0xeab548c63e611991, 0x2, 0x6c, 0x9, 0x36, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0x8001, 0x4, 0x0, 0xca, 0x4, 0x55e]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x24, 0x1, 0x1b, 0x4, 0x5, 0x1b, 0x5, 0x18, 0x6, 0xc, 0x4, 0x9, 0x48, 0x12, 0x3, 0x48, 0x30, 0x3, 0x34, 0xb, 0x48, 0x12, 0x6c, 0x16, 0x12, 0x18, 0x36, 0x6c, 0x6, 0x48]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x48, 0x1b, 0x6c, 0xaeb8564283b10ba1, 0x1, 0x12, 0x12, 0x33, 0x130d775f81301a2c, 0x12, 0x1b, 0x1f, 0x2b65538b36394bca, 0x1b, 0x24, 0x3, 0x4, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x2, 0x6c, 0x1b, 0x1, 0x12, 0x16, 0x9, 0xa1cdaa4d142ba066, 0x30, 0x1b, 0x18, 0x36, 0x12, 0x18, 0x60, 0x1]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x3, 0x5, 0xa29, 0x5, 0x80, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xffff, 0x400, 0x2, 0x9b3, 0x4, 0x3, 0x1ff]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x1}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x1e}, {0x4, 0x6}, {0x7, 0x8}, {0x4, 0x7}, {0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x24, 0x6c, 0x4, 0x48, 0x60, 0x12, 0x18, 0xb, 0x12, 0xb]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x36, 0x30, 0x9, 0xc, 0x12, 0x2e, 0x2, 0x1b, 0x24, 0x1b, 0x3, 0x1, 0x9, 0x48, 0xb, 0x48, 0x16, 0x18, 0x18, 0x24, 0x6c, 0x24, 0x30, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x9, 0xca0f650b6d78793a, 0x9, 0x36, 0x2, 0xc, 0x6, 0x60, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3, 0x1, 0x4, 0xef0, 0x7, 0xe, 0x216]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xa, 0x9, 0x2, 0x2, 0x401, 0x7fff, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x12, 0xb, 0xc, 0x2, 0x30, 0x1, 0x36, 0xb]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x988, 0x0, 0xb0, 0x8, 0x7f, 0x8, 0x6, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x400, 0x200, 0x7f, 0x4, 0x4, 0x300]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xff, 0x2, 0x9, 0x7fff, 0x1, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x2, 0x4, 0x3, 0x9, 0x1000, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x400, 0x0, 0x80, 0xfa8d, 0x3b, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x6, 0x3, 0x9, 0x8, 0x4, 0x151]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x13, 0x2, 0x3ff, 0x9, 0x4, 0x2, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x3}, {0x7}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x6}, {0x3, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {}, {0x0, 0x9}, {0x5, 0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x3, 0x7}, {0x1}, {0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x5}, {0x7}, {0x1, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x7}, {0x5, 0x9}, {0x7, 0x8}, {0x2, 0x7}, {0x2, 0x4}, {0x0, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0x6}, {0x6, 0x9}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x2}, {0x3, 0x9}, {0x7, 0x4}, {0x4}, {0x7, 0x1}, {0x0, 0x8}, {0x4, 0x7}, {0x2, 0x7}, {0x4, 0x3}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0xa}, {0x2, 0x5}, {0x7, 0x7}, {0x2, 0x8}, {0x2, 0x2}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x7, 0x6}, {0x3, 0x3}, {0x2, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x9}, {0x4, 0x9}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x1, 0x1}, {0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x3, 0x6}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x18, 0xc, 0x2, 0xb, 0x49, 0x18, 0x1b, 0x8f, 0x24, 0x5, 0x72, 0x12, 0x2, 0x1e, 0x36, 0x6c, 0x6, 0x12, 0x2, 0xb, 0x6c, 0x36, 0x3, 0x30, 0x12, 0x36, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xa24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r5 = openat$cgroup(r1, &(0x7f00000020c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000002100), 0x2, 0x0) (async) getsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000002140), &(0x7f0000002180)=0x4) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002300)={r0, &(0x7f00000021c0)="b91e8d38246c18b5bbcbf64b60ddba9f09ee70547b2bb5cbf8c01cf647e48a2392ff9bd2fa63b0b106add91c783599e34f975d21c6d502769f4b57657978518488e099b138c61c84621f5612b7969740499b6e5d10edb1965954f40832d357b7fdc8cd8871706dc8e6ebd929fd8603b30aee65034fca1d20052c4754dd2ec1b0aadbeb895c28628432252cd6aa0cfd9acd87430599a075f14708362d2646b42e748f478e5609a1a3c44beddb5a3c83547c3bdfd227bb2efc12fcd7f3b50516fa008fd85e", &(0x7f00000022c0)=""/64}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}]}, 0x48}}, 0x4000) (async, rerun: 32) ioctl$int_in(r6, 0x5421, &(0x7f00000024c0)=0x7) (async, rerun: 32) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000002500)={0x7, 0x7}, 0x2) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000002540), &(0x7f0000002580)=0x4) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x1}, {0x2, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}], 0x30) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000002640)={'team0\x00', 0x0}) (async) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000026c0)=@generic={&(0x7f0000002680)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$nl_route(r9, &(0x7f0000002780)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)=@getlink={0x40, 0x12, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x0, 0x2101}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x36c}, @IFLA_GROUP={0x8, 0x1b, 0xffffffec}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r11}]}, @IFLA_IFALIASn={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x12}, 0x800) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000027c0)=[{{0x3, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x40) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000028c0)={r6, r6, 0x8, 0xbf, &(0x7f0000002800)="f194a6aa6d1fd416b9ef5e335e5e415c421f75d622bdbb4382964fb51ab28d1b2c4ddf7ce1493474e94aa2600b1a7ddb1108c93c221f9f2384c39ac95878e5fa0caf4594fac1dd0bfe9d6c3669bb042ec2b8a0b4b89c8df51e03e1234fdeb01f971e15204f44351ef8e3ff4cefa5eee2aa90a1c15d812be7e4f7c74cf02576f66487f3e45c8a40b5e1b36524dac902fe61a22164bc64c7e4300860c6514757ab534087de813097ec9030dd27dea618a2e3363f69085bc0683ad0934695ff02", 0x3, 0x9, 0xfff8, 0x0, 0x3, 0x1, 0x5, 'syz0\x00'}) (rerun: 32) 34.246054345s ago: executing program 2 (id=8337): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xb6}]}]}, 0x28}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 34.159482908s ago: executing program 3 (id=8338): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r2 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x42) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x34, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfd}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 34.131918864s ago: executing program 4 (id=8339): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063019d00000000009500000000000001"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0xbe8, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 33.928793853s ago: executing program 0 (id=8340): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000240)={0x0, 0x28, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104280000000000000000000000540201"], 0x268}, 0x1, 0x0, 0x0, 0x8064}, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r6, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) socket(0xf, 0x4, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="c8ba", 0x2, 0x4040000, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @local, 0x3}, 0x1c) 33.829542437s ago: executing program 1 (id=8341): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) 33.68699704s ago: executing program 3 (id=8342): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001640)="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", 0x5c9}, {&(0x7f0000000200)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69ecce", 0xe8}, {&(0x7f0000000540)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a85ff030000000000003e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ea00000000000000fb6e58560c62d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000b00)="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", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f0000000040)="8700144add194dc92eae56786de91e98227fdd2d44b1e9b684d79af467410fae0aa2958eeb11856055f582d7ed3b9ca5bf48d2e97becf8673e1532a863df3503b6871ebd508591d22033fbd26a268caf4e9b8b8c14f4f4fa2e80d77ccdd66f9ba9efc985bff55c1b80fda6f279c05feece5382e174ba308a84cebdbbf77f880a287b88c0434c5d452601c24f69deaace47a3972a6b240626a49f59058feddf0dceaafeec259dbb05f6ed16513c0e", 0xae}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8fc385c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {&(0x7f0000000dc0)="f50266", 0x3}], 0x9, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}], 0x20}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@arp={0x806, @generic={0x20, 0x2, 0x6, 0x3, 0x9, @remote, "3872f7", @random="3e65e4b63576", "0c71c09f49de4440d3c8"}}}}, &(0x7f0000000140)={0x0, 0x2, [0x696, 0x430, 0xd5b, 0xcee]}) 33.50825704s ago: executing program 1 (id=8343): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 33.345784194s ago: executing program 4 (id=8344): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x294, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x5, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8}}, {0x0, 0x2, [0x6, 0x6]}}, {{0x0, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3}}, {0x0, 0x2, [0x5fd]}}, {{0x0, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x0, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0x2}}, @TCA_RATE={0x0, 0x5, {0x10, 0x2}}]}, 0x2c4}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) 33.34504039s ago: executing program 3 (id=8345): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x58}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 33.329253493s ago: executing program 2 (id=8346): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="398deac6b464b90e7fdb9bc6412d744f0ca4587cadf1b689c501956379b406d8f7456a7d734164e7c1aa61bed8c7f8b0b2b5f69628fbaaef5538c47d05371bdeaa432b57f6fe6a850389b44a876924c0c1d5a1c9ab5809aac31be8b7104a31c08d9f1eef1e1be1677a4f94781178fcf9f6527e02fada43665302c45d06eb8943fc1b9f75f79c5948bcd95281f2113a49f92f0b1e8c8950eb113f0a0d7151a1e3c61283706ddbe310669ac9ec15fdf9ff8d5c58c4e3405c6daaf75eed86d595a94b96382daad4717e0ce673c604790bb93073e6dc0f8e1d5d94d8c8c9bbb8fa434addc44a4fb366d87338e769d2a9f5ac36c3a1d8b58dab62f4b8e2ca5a6948013d0fa000c647ec46e463b7eb4f82fc29d635253fb58d0f3e7f19a48a3e367c86c4c911e555b0610179dd548b53d127e9a85815b575eeb3e23899073cba7800bf39c5aeb6d41e23a3d9e24b280594d7da61e603f86677c9f41d9bc6f34f16e124ae6435ad4b8ee0cfc57828c63039d09432f561c336921798ba5a82a6759d07720aae673c86cbc7a2cee5e0d0140ce0dc56d28ec5ca7c8d0f1102605bb5080a4499c29c2aaaa690a7141a1abaea78207111d2a01dda92fca4813099d4eb9dfffe04aa54ccf6a13b6a5bb7d7c68f1c9bb2589602b5604cc5048b7da31439e9f5ac1e490cc1ba9a1bab00416598025e4226477728517d064950693cd43a1ea5e12cf110f1809caf7142225878ef38b975c45d6d4534c75b53e7eac27fe3b82db54bc94477919589d58614796e0ef395bce8d000fffc3f5a8fb116086038039c190a4d0adf4d0869b34ffd1947cebdffb85df14691ab4348ba3602bdb23ef13d6610684cadb85d208549cfb9620720c365eec906e1e39f0118a6d05bdba17a3612c7da9d72d5049a7ad8421b185a6d6e4eba2800448f3831ba1cdb9262e60830ea8a1f812985c334029198c64de7c5dac8cc193b8b4783b35054c3fdd22a051c39ae102fc1be39bbf976f416a8aa4de797f55183ac4fa73a078e6c1f14deb2195f97cef80bf951ba9482dddefe95267333eedb2967994b0a852deb0b4ed6e9a4410938cbe8952c6117afea3228ea3818a56f8849d4d5c1f91d1c398146ffc5cd62c15b959bef0939d95fcd5d88835dc3e6e5beb021861fb3e7695edc4229c6eed907c5944a4eafa63202eafd7233e2f8484fceeee294dab3cca707dfe4a2380601f56d914758f2308e9f99baa802c0ed673d468d8c62456d5f05637343a03e9d4a29b8daeb37930003918425e62f73a21fba20f052e8c3b87db3724958d3d36e2d8880d6b718ad5bd494ff26ba687adf0a4c71237a90fc8c28202c5eb99cfea7ff76304fe8d7d6638216ccebc30264d5b06ba372f2f8515054b4d176bc1e48545aa1a3b8bf331b6edcd5734df029ea92f5b6695cbdd676dec9a6853e39b49d30b8cdb17754123fdcb19a4805c5394f0a1553dbd8e8c228290598e0840713883717a919dd16cb76fc6378d31148d51b6080bb575d4bfc3bcf3d65dd7172c16d5270042fcb71db213b5ee8aac47545870914217eede6c755f8f69c3fbf3890d9c4253960bf6f7f444bf6ef007fcf1c5caeca5e63b2c60eb346177961189d612f75393081bd1f22ec1bf3747ed1813736fb851a2ab7d72b9122b21a9ae45eeacb8cac6dc4ff3d5b5276077acdba1815d28bcb1fce1181fa616892d751b164aca5e1f072991fdbd7b182d5f7d98e66da606396c87d123288d8ee0a5372a88d3e39779d8b081547f793", 0x4e5}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a3200000000090001007358f6255e2e866464f7d906dc306955797a3000000000080005400000001f08000340000002074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00054000000000000003ff0900010073797a3000000000140000001000010000000000000000000000000a"], 0xd8}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) 33.312362628s ago: executing program 1 (id=8347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000084) syz_genetlink_get_family_id$nl80211(0x0, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000000)={{{@in=@local, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2536) 32.931245224s ago: executing program 0 (id=8348): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 32.850489374s ago: executing program 3 (id=8349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000080), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 32.818564658s ago: executing program 1 (id=8350): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010000000000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="801d0059040000001c0012800b0001006d616373656300be8aa03c001fa31b000c002280060002404e230000f24f7779e981f599e1d5f1860ece946a382597485d1b9a6533cee9a32fef64bbdd78042b8a4f69a456b15a571d93333f92f49676f36e014c11ecbf0d20af514e326276dcd6773fe9b92611e1bf415230b17fa373eb2614d998c0e3da2951ef6aeae1fc79596826bac5e240e2621e83099d03e00e26555f19cc3a0813ca6c05dbffaeb8ec185c65716a684f719c8c21c6731f17a8959eb1e344efc7f07f5ce2fadebea4a621c8545247e82af273d01e9398c916fcd3c70a16dd7cfbffffffffffffff72a7a5842e9f7f093c6b90d5f55eaa6d1c7b2268c2bc78990fd56b589e2d2bf45b3534"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2004c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$kcm(0x10, 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000001100)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0xd0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'tunl0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'bridge_slave_0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'ip_vti0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES64=r6, @ANYRESHEX=r7], 0x26}}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000300e1ffffff"], 0x3c}}, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4000000) setsockopt$inet6_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f00000000c0)={0x3}, 0x4) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) 32.817722444s ago: executing program 4 (id=8351): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xd4, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x88}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="000e00"}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x2, @val=@tcx={@void, @value=r3}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf252500000008002c000000040005002e00ff00000005002a000600000008000200", @ANYRES32=r9, @ANYBLOB="05002b000a"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r12, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r10}, 0x20) recvmmsg(r10, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r13 = socket(0x10, 0x803, 0x0) sendto(r13, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$inet6(r10, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 32.731906633s ago: executing program 0 (id=8352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@setneightbl={0x30, 0x43, 0x400, 0x70bd28, 0x25dfdbff, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x8}, @NDTA_THRESH3={0x8, 0x4, 0x6}, @NDTA_NAME={0xb, 0x1, 'g)S\xb1\xc1e\x85'}]}, 0x30}}, 0x40800) 32.67294123s ago: executing program 3 (id=8353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000019580)={'filter\x00', 0x7, 0x4, 0x4c8, 0x110, 0x0, 0x110, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0xff000000, 0xff, 0x9, 0x1, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x0, 0x8, 0x3ff, 0x2, 0x2, 'veth0_vlan\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010100, @loopback, 0xf, 0x1}}}, {{@arp={@local, @empty, 0xff000000, 0xff000000, 0xe, 0x6, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="757930b1b98a", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0xffff, 0x4, 0x21, 0x5, 0x2, 'ip_vti0\x00', 'pim6reg1\x00', {0xff}, {0x7f}, 0x0, 0x26c}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@multicast2, @broadcast, 0xffffff00, 0x0, 0xc, 0x9, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="23fc13b910db", {[0x0, 0xff]}}, 0xfb3, 0x1, 0x2, 0x9, 0x5, 0x3, 'geneve0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x0, 0xbdffa750df69ccdb}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x40, 'system_u:object_r:lost_found_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6(0xa, 0x2, 0x0) close(0x3) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0}, 0x40c0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000000000000000077400060800020000000000080003"], 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x4000001}, 0x0) 32.587767046s ago: executing program 0 (id=8354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) close(r0) 32.437663452s ago: executing program 3 (id=8355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0xec1f16368cdd74c2, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c040}, 0x14) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d, 0x2d}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40840}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x180080}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'secondname\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x20008080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) r6 = socket$netlink(0x10, 0x3, 0x5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x804) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) syz_genetlink_get_family_id$nbd(&(0x7f00000008c0), r7) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r2) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r10, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), r4) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r13, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080c1}, 0x85) close(r0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r14, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r15, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc2c}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) 32.344628295s ago: executing program 1 (id=8356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)={0x20, r1, 0x539, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', r2, 0x4, 0x0, 0x6, 0x1, 0x29, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x7, 0x40, 0x2, 0x3}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)={0x6f4, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3948}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x266d5033}}}]}}, {{0x8, 0x1, r2}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdb}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x736c, 0x61, 0x3, 0x2}, {0xfffb, 0x6, 0x4, 0x7}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x4008881}, 0x4040811) 26.331176023s ago: executing program 2 (id=8357): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00'}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00c14b5c4c5ba905845a4e406cc00337b1e025fa58739058254728348be69ed69681ad5b4c3ad7fb6c536cf129", @ANYRES16=r4, @ANYBLOB="01002ab97000fbdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000027fe0b00090000000600110002000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x200c0850) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x11, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000980)='GPL\x00', 0x6, 0x2e, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 32 (id=8354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) close(r0) kernel console output (not intermixed with test programs): 6] netlink: 'syz.4.6715': attribute type 1 has an invalid length. [ 709.746643][T30824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.793333][T30816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 710.106597][T30841] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6722'. [ 710.163021][T30845] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6724'. [ 710.179519][T30845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6724'. [ 710.198609][T30845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6724'. [ 710.214581][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6724'. [ 710.248446][T30845] netlink: 'syz.0.6724': attribute type 1 has an invalid length. [ 710.320777][T30850] xt_l2tp: v2 sid > 0xffff: 1114112 [ 710.347264][T30853] netlink: 'syz.2.6727': attribute type 1 has an invalid length. [ 710.533239][T30864] netlink: 'syz.2.6730': attribute type 9 has an invalid length. [ 711.151062][T30903] netlink: 'syz.4.6740': attribute type 7 has an invalid length. [ 711.360877][T30923] IPv6: sit1: Disabled Multicast RS [ 711.465770][T30928] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 711.678335][T30947] ip6tnl0: Caught tx_queue_len zero misconfig [ 711.751860][T30952] sctp: [Deprecated]: syz.3.6756 (pid 30952) Use of int in maxseg socket option. [ 711.751860][T30952] Use struct sctp_assoc_value instead [ 712.077460][T30982] tipc: Enabled bearer , priority 0 [ 712.106959][T30982] syzkaller0: entered promiscuous mode [ 712.112476][T30982] syzkaller0: entered allmulticast mode [ 712.209268][T30982] tipc: Resetting bearer [ 712.224344][T30981] tipc: Resetting bearer [ 712.274686][T30981] tipc: Disabling bearer [ 712.307916][T31000] netlink: 'syz.4.6770': attribute type 1 has an invalid length. [ 712.325243][T31002] tipc: Enabled bearer , priority 10 [ 712.510410][T31015] netlink: 'syz.4.6776': attribute type 11 has an invalid length. [ 712.545463][T31015] IPVS: Error connecting to the multicast addr [ 712.621421][T31018] IPVS: Error connecting to the multicast addr [ 712.645535][T31017] lo speed is unknown, defaulting to 1000 [ 712.658412][T23150] Bluetooth: hci3: command 0x0405 tx timeout [ 712.773685][T31023] syzkaller0: entered promiscuous mode [ 712.782458][T31023] syzkaller0: entered allmulticast mode [ 712.837308][T31023] netlink: 'syz.2.6778': attribute type 16 has an invalid length. [ 712.861394][T31028] netlink: 'syz.1.6780': attribute type 1 has an invalid length. [ 714.864155][T31034] bond1: (slave geneve3): making interface the new active one [ 714.872823][T31034] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 714.882941][T31037] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 714.883507][T22345] tipc: Node number set to 3207961310 [ 714.948584][ T44] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 714.964928][ T44] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 715.029279][ T44] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 715.039223][ T44] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 715.099498][T31049] validate_nla: 1 callbacks suppressed [ 715.099518][T31049] netlink: 'syz.4.6787': attribute type 58 has an invalid length. [ 715.121295][T31049] __nla_validate_parse: 18 callbacks suppressed [ 715.121314][T31049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6787'. [ 715.214868][T31061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 715.222166][T31061] IPv6: NLM_F_CREATE should be set when creating new route [ 715.229533][T31061] IPv6: NLM_F_CREATE should be set when creating new route [ 715.291753][T31061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 715.835497][T31078] netlink: 'syz.2.6793': attribute type 1 has an invalid length. [ 715.844924][T31079] netlink: 'syz.2.6793': attribute type 1 has an invalid length. [ 715.897994][T31079] bond7: entered promiscuous mode [ 715.903490][T31079] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.968885][T31077] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.976444][T31077] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 715.989968][T31077] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 716.002311][T31084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6795'. [ 716.004962][T31077] bond7: (slave vti0): making interface the new active one [ 716.017434][T31084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6795'. [ 716.028881][T31077] vti0: entered promiscuous mode [ 716.037550][T31077] bond7: (slave vti0): Enslaving as an active interface with an up link [ 716.065572][T31082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6794'. [ 716.211768][T31097] netlink: 'syz.2.6799': attribute type 13 has an invalid length. [ 716.235709][T31097] gretap0: refused to change device tx_queue_len [ 716.252176][T31097] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 716.288302][T31099] netlink: 696 bytes leftover after parsing attributes in process `syz.4.6800'. [ 716.511443][T31116] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6804'. [ 716.536382][T31120] openvswitch: netlink: Duplicate or invalid key (type 0). [ 716.545535][T31120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.904272][T31151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6819'. [ 716.943719][T31155] netlink: 'syz.1.6820': attribute type 1 has an invalid length. [ 716.954505][T31151] netlink: 'syz.2.6819': attribute type 7 has an invalid length. [ 716.964429][T31151] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6819'. [ 717.069843][T31161] netlink: 264 bytes leftover after parsing attributes in process `syz.1.6822'. [ 717.151153][T31163] ipvlan2: entered allmulticast mode [ 717.157086][T31163] batadv_slave_1: entered allmulticast mode [ 717.169921][T31163] batman_adv: batadv0: Adding interface: ipvlan2 [ 717.176514][T31163] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.203045][T31163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.214285][T31163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.225309][T31163] batman_adv: batadv0: Interface activated: ipvlan2 [ 717.233550][T31167] netlink: 'syz.0.6824': attribute type 4 has an invalid length. [ 717.243381][T31170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6826'. [ 717.254268][T31167] netlink: 'syz.0.6824': attribute type 4 has an invalid length. [ 717.284934][T31167] netlink: 'syz.0.6824': attribute type 4 has an invalid length. [ 717.328032][T31167] netlink: 'syz.0.6824': attribute type 4 has an invalid length. [ 717.409051][T31180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.517847][T31189] netlink: 'syz.3.6831': attribute type 11 has an invalid length. [ 717.665821][T31193] vxlan0: entered promiscuous mode [ 717.672166][T31193] vxlan0: entered allmulticast mode [ 717.683118][T25081] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.700487][T25081] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.730663][T25081] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.740552][T25081] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.885098][T31215] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 718.341753][T31249] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 718.383842][T31249] bond2 (unregistering): Released all slaves [ 718.540862][T31262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.576966][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 718.599139][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079262000: rx timeout, send abort [ 718.608196][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079262000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 719.384965][T31311] syzkaller0: entered promiscuous mode [ 719.391551][T31311] syzkaller0: entered allmulticast mode [ 719.483698][T31318] tipc: Started in network mode [ 719.489109][T31318] tipc: Node identity 56b70d71b9e, cluster identity 4711 [ 719.505116][T31318] tipc: Enabled bearer , priority 0 [ 719.530007][T31318] syzkaller0: entered promiscuous mode [ 719.535519][T31318] syzkaller0: entered allmulticast mode [ 719.611097][T31318] tipc: Resetting bearer [ 719.634499][T31317] tipc: Resetting bearer [ 719.655258][T31330] sctp: [Deprecated]: syz.2.6877 (pid 31330) Use of int in maxseg socket option. [ 719.655258][T31330] Use struct sctp_assoc_value instead [ 719.737801][T31317] tipc: Disabling bearer [ 719.966883][T31345] vcan0: tx address claim with different name [ 720.201083][T31367] validate_nla: 68 callbacks suppressed [ 720.201106][T31367] netlink: 'syz.2.6889': attribute type 4 has an invalid length. [ 720.216577][T31360] __nla_validate_parse: 20 callbacks suppressed [ 720.216598][T31360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6888'. [ 720.480544][T31386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6897'. [ 720.509245][T31386] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6897'. [ 720.512543][T31383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 720.623717][T31394] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 720.673137][T31394] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6899'. [ 720.792962][T31414] netlink: 89 bytes leftover after parsing attributes in process `syz.3.6903'. [ 720.959887][T31422] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6908'. [ 720.978770][T31422] openvswitch: netlink: Flow key attr not present in new flow. [ 721.176838][T31436] tipc: Enabled bearer , priority 0 [ 721.189210][T31436] syzkaller0: entered promiscuous mode [ 721.218152][T31436] syzkaller0: entered allmulticast mode [ 721.292282][T31436] tipc: Resetting bearer [ 721.347162][T31436] tipc: Disabling bearer [ 721.374903][T31453] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6919'. [ 721.382427][T31455] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6918'. [ 721.397562][T31455] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6918'. [ 721.526983][T31467] TCP: TCP_TX_DELAY enabled [ 721.683650][T31477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6927'. [ 721.737979][T31480] netlink: 'syz.1.6929': attribute type 17 has an invalid length. [ 721.777062][T31480] gretap0: entered promiscuous mode [ 721.784529][T31480] gretap0: left promiscuous mode [ 721.810340][T31485] netlink: 'syz.0.6931': attribute type 4 has an invalid length. [ 722.115838][T31499] netlink: 'syz.2.6938': attribute type 1 has an invalid length. [ 722.149550][T31499] bond8 (unregistering): Released all slaves [ 722.223176][T31509] netlink: 'syz.3.6937': attribute type 1 has an invalid length. [ 722.331375][T31509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.401965][T31513] bond2: (slave gretap1): making interface the new active one [ 722.416244][T31513] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 722.435450][T31515] netlink: 'syz.1.6941': attribute type 29 has an invalid length. [ 722.517059][T31522] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 722.613242][T31527] netlink: 'syz.1.6944': attribute type 12 has an invalid length. [ 722.721515][T31535] geneve4: entered promiscuous mode [ 722.801366][T31535] geneve4: entered promiscuous mode [ 722.882744][T31543] netlink: 'syz.4.6949': attribute type 32 has an invalid length. [ 722.904302][T31535] geneve4: entered promiscuous mode [ 722.975754][T31535] geneve4: entered promiscuous mode [ 723.031890][T31535] geneve4: entered promiscuous mode [ 723.092269][T31535] geneve4: entered promiscuous mode [ 723.151793][T31535] geneve4: entered promiscuous mode [ 723.211810][T31535] geneve4: entered promiscuous mode [ 723.272037][T31535] geneve4: entered promiscuous mode [ 723.332163][T31535] geneve4: entered promiscuous mode [ 723.393488][T31535] geneve4: entered promiscuous mode [ 723.452724][T31535] geneve4: entered promiscuous mode [ 723.513476][T31535] geneve4: entered promiscuous mode [ 723.691407][T31556] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 725.628512][T31529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.640996][T31543] __nla_validate_parse: 22 callbacks suppressed [ 725.641016][T31543] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6949'. [ 725.657603][T31544] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6949'. [ 725.778111][T31563] netlink: 'syz.3.6955': attribute type 2 has an invalid length. [ 725.806607][T31563] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6955'. [ 726.038752][T31584] netlink: 'syz.1.6962': attribute type 29 has an invalid length. [ 726.060522][T31587] Cannot find add_set index 0 as target [ 726.069490][T31584] netlink: 'syz.1.6962': attribute type 29 has an invalid length. [ 726.069741][T31585] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6962'. [ 726.155052][T31585] unsupported nla_type 58 [ 726.184149][T31595] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6964'. [ 726.228017][T31598] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6965'. [ 726.277820][T31604] pimreg3: entered allmulticast mode [ 726.596479][T31627] netlink: 'syz.1.6970': attribute type 3 has an invalid length. [ 726.604868][T31627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6970'. [ 726.714228][T31636] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6974'. [ 726.746851][T31636] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6974'. [ 726.939148][T31652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6977'. [ 726.975501][T31652] netlink: 'syz.2.6977': attribute type 10 has an invalid length. [ 727.042913][T31652] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 727.162485][T31667] tipc: Enabled bearer , priority 0 [ 727.179249][T31667] syzkaller0: entered promiscuous mode [ 727.189771][T31667] syzkaller0: entered allmulticast mode [ 727.202890][T31667] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 727.286722][T31667] tipc: Resetting bearer [ 727.305335][T31666] tipc: Resetting bearer [ 727.369963][T31666] tipc: Disabling bearer [ 727.623147][T31699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 727.668481][T31706] netlink: 'syz.4.6993': attribute type 11 has an invalid length. [ 727.788613][T31713] tipc: Enabled bearer , priority 2 [ 727.887737][T31723] netlink: 'syz.4.7000': attribute type 1 has an invalid length. [ 727.911709][T31723] netlink: 'syz.4.7000': attribute type 11 has an invalid length. [ 727.943447][T31723] netlink: 'syz.4.7000': attribute type 4 has an invalid length. [ 727.961903][T31723] netlink: 'syz.4.7000': attribute type 5 has an invalid length. [ 727.986117][T31723] netlink: 'syz.4.7000': attribute type 6 has an invalid length. [ 728.344301][T31771] bond4: option resend_igmp: invalid value (32767) [ 728.355331][T31771] bond4: option resend_igmp: allowed values 0 - 255 [ 728.356713][T31778] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 728.387814][T31779] "syz.4.7011" (31779) uses obsolete ecb(arc4) skcipher [ 728.389375][T31771] bond4 (unregistering): Released all slaves [ 728.409282][T31780] x_tables: unsorted underflow at hook 4 [ 728.878850][T31815] x_tables: duplicate entry at hook 1 [ 728.904197][T31796] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.912044][T31796] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.004234][ T24] tipc: Node number set to 4015459697 [ 729.105189][T31817] syzkaller0: entered promiscuous mode [ 729.111351][T31817] syzkaller0: entered allmulticast mode [ 729.134326][T31821] netlink: 'syz.4.7024': attribute type 11 has an invalid length. [ 731.296512][T31828] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 731.459285][T31852] __nla_validate_parse: 16 callbacks suppressed [ 731.459309][T31852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7031'. [ 731.581162][T31852] sctp: [Deprecated]: syz.0.7031 (pid 31852) Use of int in maxseg socket option. [ 731.581162][T31852] Use struct sctp_assoc_value instead [ 731.657377][T31864] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7036'. [ 731.717345][T31864] syzkaller0: entered promiscuous mode [ 731.733261][T31864] syzkaller0: entered allmulticast mode [ 731.756892][T31870] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7037'. [ 731.772072][T31870] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7037'. [ 731.968976][T31883] syzkaller0: entered promiscuous mode [ 731.974695][T31883] syzkaller0: entered allmulticast mode [ 731.984616][T31883] netlink: 'syz.3.7041': attribute type 24 has an invalid length. [ 732.169353][T31892] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.7042'. [ 732.300563][T31896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7044'. [ 732.522665][T31915] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7051'. [ 732.523772][T27368] IPVS: starting estimator thread 0... [ 732.636027][T31917] IPVS: using max 30 ests per chain, 72000 per kthread [ 732.744820][T31931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7055'. [ 732.780417][T31931] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 732.795279][T31932] syzkaller1: entered promiscuous mode [ 732.802800][T31932] syzkaller1: entered allmulticast mode [ 733.241683][T31964] tipc: Enabling of bearer rejected, failed to enable media [ 733.264306][T31960] lo speed is unknown, defaulting to 1000 [ 733.335412][T31970] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 733.905321][T31995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7068'. [ 733.922897][T31997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7071'. [ 733.982069][T32002] netlink: 'syz.1.7072': attribute type 1 has an invalid length. [ 734.081623][T32002] bond2: entered promiscuous mode [ 734.087036][T32002] bond2: entered allmulticast mode [ 734.092675][T32002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 734.188523][T32002] macvlan2: entered promiscuous mode [ 734.194307][T32002] macvlan2: entered allmulticast mode [ 734.209091][T32002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 734.266281][T32019] sctp: [Deprecated]: syz.2.7075 (pid 32019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.266281][T32019] Use struct sctp_sack_info instead [ 734.493844][T32025] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 734.846824][T32044] bond0: (slave gre0): Error: Device type is different from other slaves [ 734.866933][T32044] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 735.033030][T32057] team0: Caught tx_queue_len zero misconfig [ 735.157152][T32065] syzkaller0: entered promiscuous mode [ 735.162734][T32065] syzkaller0: entered allmulticast mode [ 735.221686][T32076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 735.229110][T32076] IPv6: NLM_F_CREATE should be set when creating new route [ 735.236398][T32076] IPv6: NLM_F_CREATE should be set when creating new route [ 735.243634][T32076] IPv6: NLM_F_CREATE should be set when creating new route [ 735.265058][T32075] pimreg: entered allmulticast mode [ 735.266987][T32073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 735.437626][T32088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 735.445026][T32088] IPv6: NLM_F_CREATE should be set when creating new route [ 735.452471][T32090] syzkaller0: entered promiscuous mode [ 735.476034][T32090] syzkaller0: entered allmulticast mode [ 735.571153][T32097] macsec0: entered promiscuous mode [ 735.580241][T32097] macsec0: entered allmulticast mode [ 735.591408][T32098] veth1_macvtap: entered promiscuous mode [ 735.597985][T32098] veth1_macvtap: entered allmulticast mode [ 735.604934][T32098] macsec0: left promiscuous mode [ 735.627505][T32098] macsec0: left allmulticast mode [ 735.633857][T32098] veth1_macvtap: left allmulticast mode [ 735.643240][T32097] veth1_macvtap: left promiscuous mode [ 735.654684][T32097] macsec0: entered promiscuous mode [ 735.660335][T32097] macsec0: entered allmulticast mode [ 735.718506][T32098] veth1_macvtap: entered promiscuous mode [ 735.731733][T32098] veth1_macvtap: entered allmulticast mode [ 735.746020][T32098] macsec0: left promiscuous mode [ 735.751152][T32098] macsec0: left allmulticast mode [ 735.775069][T32098] veth1_macvtap: left allmulticast mode [ 735.785858][T32104] syzkaller1: entered promiscuous mode [ 735.797468][T32104] syzkaller1: entered allmulticast mode [ 736.071886][ T24] IPVS: starting estimator thread 0... [ 736.090494][T32130] netlink: 'syz.0.7106': attribute type 1 has an invalid length. [ 736.102091][T32132] xt_recent: Unsupported userspace flags (000000b1) [ 736.112097][T32133] netlink: 'syz.1.7107': attribute type 15 has an invalid length. [ 736.159463][T32127] IPVS: set_ctl: invalid protocol: 60 16.0.133.6:0 [ 736.193556][T32128] IPVS: using max 30 ests per chain, 72000 per kthread [ 736.219421][T32130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 736.268176][T32126] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 736.698283][T32173] __nla_validate_parse: 12 callbacks suppressed [ 736.698305][T32173] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7116'. [ 736.744726][T32177] C: renamed from lo (while UP) [ 736.751476][T32177] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 736.810394][T32179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7117'. [ 736.825863][T32179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7117'. [ 736.981863][T32190] syzkaller1: entered promiscuous mode [ 736.988361][T32190] syzkaller1: entered allmulticast mode [ 736.998836][T32190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7122'. [ 737.094095][T32194] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7124'. [ 739.580029][T32163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.719925][T32207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7127'. [ 739.741847][T32207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7127'. [ 739.772432][T32207] netlink: 'syz.1.7127': attribute type 3 has an invalid length. [ 739.805091][T32212] syzkaller0: entered promiscuous mode [ 739.811392][T32212] syzkaller0: entered allmulticast mode [ 740.303345][T32247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7141'. [ 740.351467][T32252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7143'. [ 740.373199][T32252] openvswitch: netlink: Duplicate key (type 32). [ 740.500315][T32264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7146'. [ 740.911731][T32295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.081840][T32315] netlink: 'syz.1.7164': attribute type 1 has an invalid length. [ 741.121931][T32315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 741.144388][T32315] bond3: (slave veth0_to_bond): making interface the new active one [ 741.155766][T32315] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 741.176560][T32315] bond3: entered promiscuous mode [ 741.181706][T32315] veth0_to_bond: entered promiscuous mode [ 741.192463][T32315] bond3: entered allmulticast mode [ 741.196217][T32321] netlink: 'syz.2.7165': attribute type 6 has an invalid length. [ 741.198672][T32315] veth0_to_bond: entered allmulticast mode [ 741.401080][T32333] netlink: 'syz.3.7170': attribute type 10 has an invalid length. [ 741.402444][T32331] openvswitch: netlink: Key type 48 is out of range max 32 [ 741.444149][T32333] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 741.475836][T32332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.556983][T32338] x_tables: duplicate entry at hook 3 [ 741.790579][T32351] __nla_validate_parse: 2 callbacks suppressed [ 741.790599][T32351] netlink: 704 bytes leftover after parsing attributes in process `syz.4.7175'. [ 742.011656][ T7440] lec:lec_start_xmit: lec0:No lecd attached [ 742.157835][T32383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7180'. [ 742.208034][T32383] batadv_slave_0: entered promiscuous mode [ 742.224790][T32388] netlink: 'syz.4.7184': attribute type 4 has an invalid length. [ 742.267400][T32367] batadv_slave_0: left promiscuous mode [ 742.416718][T32396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7187'. [ 742.466463][T32400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7189'. [ 742.499620][T32400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7189'. [ 742.524963][T32400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7189'. [ 742.671354][T32410] xt_hashlimit: size too large, truncated to 1048576 [ 743.077760][T32429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.268838][T32446] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 743.298973][T32446] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 743.327357][T32453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7203'. [ 743.503473][T32464] tipc: Started in network mode [ 743.519673][T32464] tipc: Node identity 028bf8eec91f, cluster identity 4711 [ 743.527699][T32464] tipc: Enabled bearer , priority 0 [ 743.559792][T32464] syzkaller0: entered promiscuous mode [ 743.576127][T32464] syzkaller0: entered allmulticast mode [ 743.598888][T32471] syzkaller0: entered promiscuous mode [ 743.613042][T32471] syzkaller0: entered allmulticast mode [ 743.622711][T32474] netlink: 'syz.3.7207': attribute type 4 has an invalid length. [ 743.649820][T32464] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 743.658919][T32475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7211'. [ 743.705206][T32479] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 4, id = 0 [ 743.732927][T32463] tipc: Resetting bearer [ 743.791058][T32463] tipc: Disabling bearer [ 743.841889][T32485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7215'. [ 743.856206][T32485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7215'. [ 743.900058][T32485] erspan0: entered promiscuous mode [ 743.911429][T32485] gretap0: entered promiscuous mode [ 743.919394][T32485] debugfs: 'hsr0' already exists in 'hsr' [ 743.925802][T32485] Cannot create hsr debugfs directory [ 743.933423][T32489] netlink: 'syz.3.7216': attribute type 1 has an invalid length. [ 744.066571][T32497] xt_CT: No such helper "pptp" [ 744.222514][T32513] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 744.384826][T32525] Cannot find add_set index 1 as target [ 744.439283][T32527] siw: device registration error -23 [ 745.179129][T32579] syzkaller0: entered promiscuous mode [ 745.185417][T32579] syzkaller0: entered allmulticast mode [ 747.026182][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 747.034292][ C0] lec:lec_tx_timeout: lec0 [ 747.223719][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 747.591655][T32619] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 747.820337][T32644] sit1: entered promiscuous mode [ 747.825325][T32644] sit1: entered allmulticast mode [ 747.896549][T32652] __nla_validate_parse: 3 callbacks suppressed [ 747.896567][T32652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7266'. [ 748.101052][T32667] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7271'. [ 748.158348][T32670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7274'. [ 748.190820][T32674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7270'. [ 748.567259][T32692] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7277'. [ 748.612897][T32675] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7273'. [ 748.811156][T32695] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 749.184164][T32730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7291'. [ 749.518617][T32757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7301'. [ 749.769167][ T300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7305'. [ 749.948602][ T311] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.7307'. [ 750.025838][ T321] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 750.177018][ T334] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20002 [ 750.200544][ T339] netlink: 'syz.0.7314': attribute type 12 has an invalid length. [ 750.265671][ T350] netlink: 'syz.3.7317': attribute type 7 has an invalid length. [ 750.272606][ T349] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 750.318986][ T339] bond4: option primary_reselect: invalid value (255) [ 750.345071][ T339] bond4 (unregistering): Released all slaves [ 750.558691][ T345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.882063][ T393] netlink: 'syz.2.7328': attribute type 83 has an invalid length. [ 750.936951][ T391] can: request_module (can-proto-0) failed. [ 751.443849][ T445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.472525][ T440] xt_hashlimit: overflow, rate too high: 0 [ 751.527069][ T445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.565579][ T455] netlink: 'syz.2.7346': attribute type 10 has an invalid length. [ 751.654006][ T455] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 751.732917][ T465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.757427][ T461] IPVS: set_ctl: invalid protocol: 173 224.0.0.1:20004 [ 751.890524][ T477] netlink: 'syz.3.7353': attribute type 7 has an invalid length. [ 751.912539][ T479] vxcan1: tx drop: invalid da for name 0x0000000080000001 [ 752.127625][ T499] openvswitch: netlink: IP tunnel dst address not specified [ 752.326304][ T512] can: request_module (can-proto-4) failed. [ 752.481215][ T534] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 752.838538][ T556] netlink: 'syz.1.7381': attribute type 7 has an invalid length. [ 752.867647][ T556] netlink: 'syz.1.7381': attribute type 8 has an invalid length. [ 752.896046][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 752.904124][ C0] lec:lec_tx_timeout: lec0 [ 752.929841][ T561] erspan0: left promiscuous mode [ 753.079699][ T561] bond1: left promiscuous mode [ 753.085166][ T561] xfrm1: left promiscuous mode [ 753.127304][ T561] bond3: left promiscuous mode [ 753.132126][ T561] bridge1: left promiscuous mode [ 753.195565][ T561] bond5: left promiscuous mode [ 753.214314][ T561] bridge3: left promiscuous mode [ 753.229037][ T561] gtp0: left promiscuous mode [ 753.235304][ T561] geneve2: left promiscuous mode [ 753.252121][ T561] bond7: left promiscuous mode [ 753.268022][ T561] vti0: left promiscuous mode [ 753.319182][ T577] __nla_validate_parse: 20 callbacks suppressed [ 753.319200][ T577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7387'. [ 753.389201][ T583] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7389'. [ 753.454012][ T588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7391'. [ 753.643797][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7395'. [ 753.664398][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7395'. [ 753.868334][ T612] syzkaller0: entered promiscuous mode [ 753.896847][ T612] syzkaller0: entered allmulticast mode [ 754.005592][ T620] netlink: 'syz.1.7402': attribute type 1 has an invalid length. [ 754.057912][ T620] bond5: entered promiscuous mode [ 754.074050][ T620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 754.126645][ T622] bond5: (slave bridge5): making interface the new active one [ 754.134434][ T622] bridge5: entered promiscuous mode [ 754.141480][ T622] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 754.477398][ T639] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7410'. [ 754.512252][ T639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7410'. [ 754.596725][ T653] xt_limit: Overflow, try lower: 271964/0 [ 755.206980][ T698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7425'. [ 755.258977][ T702] netlink: 'syz.4.7427': attribute type 17 has an invalid length. [ 755.277635][ T702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7427'. [ 755.293207][ T702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7427'. [ 755.313229][ T702] gretap0: entered promiscuous mode [ 755.340790][ T702] gretap0: left promiscuous mode [ 755.384934][ T707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 755.413906][ T707] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 755.426906][ T707] gretap1: entered promiscuous mode [ 755.432847][ T707] gretap1: entered allmulticast mode [ 755.561135][ T721] netlink: 'syz.2.7433': attribute type 1 has an invalid length. [ 755.679918][ T733] tipc: Enabled bearer , priority 10 [ 755.759890][ T739] netlink: 'syz.4.7438': attribute type 6 has an invalid length. [ 755.771856][ T739] netlink: 'syz.4.7438': attribute type 6 has an invalid length. [ 756.153856][T25080] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.171238][T25080] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.201890][T25080] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.226056][T25080] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.462130][ T798] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 756.585449][ T806] netlink: 'syz.0.7457': attribute type 1 has an invalid length. [ 757.077823][ T810] lec:lec_atm_close: lec0: Shut down! [ 757.591216][ T866] netlink: 'syz.0.7475': attribute type 2 has an invalid length. [ 757.716595][ T866] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 757.812494][ T866] bond4 (unregistering): Released all slaves [ 758.044091][ T882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.065244][ T882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.232280][ T882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.243697][ T882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.386282][ T922] __nla_validate_parse: 17 callbacks suppressed [ 758.386301][ T922] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.7493'. [ 758.403754][ T922] netlink: Conntrack attr has 4 unknown bytes [ 758.448711][ T882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.472599][ T931] x_tables: unsorted underflow at hook 1 [ 758.481244][ T882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.568159][ T945] xt_l2tp: v2 doesn't support IP mode [ 758.583564][ T931] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7492'. [ 758.743972][ T882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.799621][ T882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.818570][ T967] netlink: 'syz.0.7497': attribute type 18 has an invalid length. [ 758.876671][ T971] ip6t_rpfilter: unknown options [ 758.958816][T25080] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.038585][ T980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7501'. [ 759.136298][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 759.220599][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.253738][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.597750][ T974] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 759.665539][ T974] sit1: left promiscuous mode [ 759.670821][ T974] sit1: left allmulticast mode [ 759.713112][T25080] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.780485][ T986] syzkaller0: entered promiscuous mode [ 759.786949][ T986] syzkaller0: entered allmulticast mode [ 759.824984][T25080] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.844028][T25080] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.893520][T25080] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.907606][T25080] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.926373][T25080] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.957398][T25080] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.027302][ T2967] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.036335][ T2967] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.053942][ T2967] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.086617][ T2967] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.112609][ T1003] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7506'. [ 760.137164][T31748] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.145378][T31748] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.200093][T31748] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.218439][T31748] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.334301][ T1017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7510'. [ 760.482165][ T1022] sctp: [Deprecated]: syz.3.7507 (pid 1022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 760.482165][ T1022] Use struct sctp_sack_info instead [ 760.493701][ T1029] netlink: 'syz.4.7512': attribute type 2 has an invalid length. [ 760.505984][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7507'. [ 760.589509][ T1022] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 760.763992][ T1051] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 760.815821][ T1051] bond8 (unregistering): Released all slaves [ 760.857322][ T1057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7517'. [ 760.903942][ T1066] netlink: 'syz.4.7519': attribute type 7 has an invalid length. [ 760.923774][ T1067] netlink: 'syz.4.7519': attribute type 1 has an invalid length. [ 761.118486][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7523'. [ 761.243816][ T1091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7528'. [ 761.253578][ T1091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7528'. [ 761.379872][ T1106] tipc: Enabled bearer , priority 10 [ 761.403531][ T1107] 8021q: VLANs not supported on gre0 [ 761.871058][ T1138] delete_channel: no stack [ 761.923480][ T1141] lo speed is unknown, defaulting to 1000 [ 762.588571][ T1185] netlink: 'syz.2.7550': attribute type 8 has an invalid length. [ 762.895999][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 762.904212][ C0] lec:lec_tx_timeout: lec0 [ 763.268906][ T1230] netlink: 'syz.2.7562': attribute type 23 has an invalid length. [ 763.314797][ T1237] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 763.414328][ T1236] netlink: 'syz.3.7563': attribute type 1 has an invalid length. [ 763.427757][ T1242] __nla_validate_parse: 7 callbacks suppressed [ 763.427775][ T1242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7563'. [ 763.505783][ T1250] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7567'. [ 763.714068][ T1261] netlink: 'syz.2.7570': attribute type 21 has an invalid length. [ 763.770779][ T1266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7572'. [ 763.822477][ T1270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7574'. [ 763.843724][ T1273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7574'. [ 763.962824][ T1276] bond4 (unregistering): Released all slaves [ 764.016755][ T1271] lo speed is unknown, defaulting to 1000 [ 764.049521][ T1279] syzkaller0: entered promiscuous mode [ 764.060319][ T1279] syzkaller0: entered allmulticast mode [ 764.075810][ T1275] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7575'. [ 764.557292][ T1298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7580'. [ 764.759134][ T1298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7580'. [ 764.816823][ T1308] syzkaller1: entered promiscuous mode [ 764.823096][ T1308] syzkaller1: entered allmulticast mode [ 764.861116][ T1311] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 764.881422][ T1311] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 764.946191][ T1311] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 765.150196][ T1321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7589'. [ 765.255105][ T1321] geneve0: entered promiscuous mode [ 765.527638][ T1348] lo: entered promiscuous mode [ 765.548962][ T1348] netlink: 'syz.1.7595': attribute type 2 has an invalid length. [ 765.560861][ T1348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.041718][ T1378] lo speed is unknown, defaulting to 1000 [ 766.062082][ T1384] dvmrp0: left allmulticast mode [ 766.097964][ T1382] netlink: 'syz.3.7605': attribute type 1 has an invalid length. [ 766.170038][ T1384] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20001 [ 766.360247][ T1392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7608'. [ 766.402122][ T1392] 8021q: adding VLAN 0 to HW filter on device bond8 [ 766.621256][ T1404] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 766.634770][ T1404] bond9 (unregistering): Released all slaves [ 767.217468][ T1448] netlink: 'syz.2.7621': attribute type 1 has an invalid length. [ 767.356934][ T1465] xt_ecn: cannot match TCP bits for non-tcp packets [ 767.380412][ T1461] bond9: (slave gretap1): making interface the new active one [ 767.389592][ T1461] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 767.401511][ T1466] bridge0: port 3(veth0_to_bridge) entered blocking state [ 767.434533][ T1466] bridge0: port 3(veth0_to_bridge) entered disabled state [ 767.444922][ T1466] veth0_to_bridge: entered allmulticast mode [ 767.465360][ T1466] veth0_to_bridge: entered promiscuous mode [ 767.475317][ T1466] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.504861][ T1466] bridge0: port 3(veth0_to_bridge) entered blocking state [ 767.512393][ T1466] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 767.543132][ T1474] bridge0: entered promiscuous mode [ 767.548971][ T1474] macsec1: entered promiscuous mode [ 767.554650][ T1474] macsec1: entered allmulticast mode [ 767.561694][ T1474] bridge0: entered allmulticast mode [ 767.569362][ T1474] bridge0: port 3(macsec1) entered blocking state [ 767.576418][ T1474] bridge0: port 3(macsec1) entered disabled state [ 767.597616][ T1474] bridge0: left allmulticast mode [ 767.602919][ T1474] bridge0: left promiscuous mode [ 767.692971][ T1485] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 767.708875][ T1485] tipc: Failed to remove unknown binding: 66,0,0/4015459697:3951562697/3951562698 [ 767.720137][ T1485] tipc: Failed to remove unknown binding: 66,0,0/4015459697:3951562697/3951562698 [ 767.953741][ T1497] lo speed is unknown, defaulting to 1000 [ 768.161842][ T1507] lo speed is unknown, defaulting to 1000 [ 768.432971][ T1522] syzkaller1: entered promiscuous mode [ 768.452303][ T1522] syzkaller1: entered allmulticast mode [ 768.766031][ T1545] netlink: 'syz.4.7646': attribute type 10 has an invalid length. [ 768.828120][ T1545] team0: Port device dummy0 added [ 768.948672][ T1550] __nla_validate_parse: 5 callbacks suppressed [ 768.948691][ T1550] netlink: 404 bytes leftover after parsing attributes in process `syz.3.7647'. [ 768.984882][ T1550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7647'. [ 769.004211][ T1550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7647'. [ 769.036068][ T1550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7647'. [ 769.089053][ T1555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7650'. [ 769.111562][ T1555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7650'. [ 769.139832][ T1555] gretap2: entered promiscuous mode [ 769.146496][ T1555] gretap2: entered allmulticast mode [ 769.263953][ T1567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7655'. [ 769.495661][ T1578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7660'. [ 769.517109][ T1578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7660'. [ 770.020021][ T1615] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 770.111701][ T1629] netlink: 'syz.1.7676': attribute type 2 has an invalid length. [ 770.139484][ T1631] netlink: 'syz.4.7675': attribute type 3 has an invalid length. [ 770.192223][ T1631] syzkaller1: entered promiscuous mode [ 770.195035][ T1635] netlink: 'syz.0.7678': attribute type 6 has an invalid length. [ 770.198231][ T1631] syzkaller1: entered allmulticast mode [ 770.222913][ T1637] netlink: 'syz.0.7678': attribute type 6 has an invalid length. [ 770.231518][ T1636] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7676'. [ 770.255770][ T1640] SET target dimension over the limit! [ 770.502377][ T1647] netlink: 'syz.0.7681': attribute type 2 has an invalid length. [ 770.515632][ T1647] netlink: 'syz.0.7681': attribute type 11 has an invalid length. [ 770.772766][ T1676] x_tables: duplicate underflow at hook 3 [ 771.129798][ T1704] geneve2: left promiscuous mode [ 771.172829][ T1704] sit1: left promiscuous mode [ 771.277398][T25080] tipc: Subscription rejected, illegal request [ 771.292244][ T1714] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 771.398173][ T1722] openvswitch: netlink: Invalid VLAN frame [ 771.431877][ T1724] netlink: 'syz.4.7704': attribute type 9 has an invalid length. [ 771.431877][ T1725] netlink: 'syz.4.7704': attribute type 9 has an invalid length. [ 771.509706][ T1733] sctp: [Deprecated]: syz.4.7706 (pid 1733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 771.509706][ T1733] Use struct sctp_sack_info instead [ 771.546461][ T1731] bond_slave_0: entered promiscuous mode [ 771.583944][ T1736] gre0: entered promiscuous mode [ 771.594126][ T1736] gre0: entered allmulticast mode [ 771.746804][ T1746] team0: Port device dummy0 removed [ 771.753290][ T1746] batman_adv: batadv0: Adding interface: dummy0 [ 771.760139][ T1746] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.792579][ T1746] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 772.003716][ T1752] lo speed is unknown, defaulting to 1000 [ 772.004207][ T1758] netlink: 'syz.0.7714': attribute type 4 has an invalid length. [ 772.235064][ T1770] gtp0: entered promiscuous mode [ 772.266062][ T1770] gtp0: entered allmulticast mode [ 772.319181][ T1774] xt_CT: No such helper "syz1" [ 772.657690][ T1800] lo speed is unknown, defaulting to 1000 [ 773.609098][ T1842] syzkaller0: entered promiscuous mode [ 773.614611][ T1842] syzkaller0: entered allmulticast mode [ 773.738046][ T1842] syzkaller0: left promiscuous mode [ 773.743329][ T1842] syzkaller0: left allmulticast mode [ 773.757095][ T1852] netem: change failed [ 774.294322][ T1873] syzkaller0: entered promiscuous mode [ 774.301806][ T1873] syzkaller0: entered allmulticast mode [ 774.311215][ T1876] __nla_validate_parse: 15 callbacks suppressed [ 774.311234][ T1876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7741'. [ 776.572609][ T1919] netlink: zone id is out of range [ 776.578320][ T1919] netlink: get zone limit has 4 unknown bytes [ 776.897458][ T1884] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 777.039379][ T1924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7753'. [ 777.065803][ T1927] lo speed is unknown, defaulting to 1000 [ 777.077822][ T1927] lo speed is unknown, defaulting to 1000 [ 777.103063][ T1927] lo speed is unknown, defaulting to 1000 [ 777.132722][ T1933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7755'. [ 777.457294][ T1927] infiniband syz0: set down [ 777.465295][ T1927] infiniband syz0: added lo [ 777.489118][ T1943] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 777.535540][ T24] lo speed is unknown, defaulting to 1000 [ 777.541387][ T1927] RDS/IB: syz0: added [ 777.556203][ T1927] smc: adding ib device syz0 with port count 1 [ 777.567023][ T1927] smc: ib device syz0 port 1 has no pnetid [ 777.590732][ T24] lo speed is unknown, defaulting to 1000 [ 777.602281][ T1927] lo speed is unknown, defaulting to 1000 [ 777.753684][ T1957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7761'. [ 777.856440][ T1960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7763'. [ 777.958848][ T1927] lo speed is unknown, defaulting to 1000 [ 778.072542][ T1971] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7767'. [ 778.081881][ T1968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7765'. [ 778.092736][ T1971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7767'. [ 778.122398][ T1971] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7767'. [ 778.163516][ T1971] netlink: 'syz.0.7767': attribute type 3 has an invalid length. [ 778.183690][ T1971] netlink: 'syz.0.7767': attribute type 2 has an invalid length. [ 778.197679][ T1971] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7767'. [ 778.213812][ T1973] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 778.326778][ T1978] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 778.400391][ T1927] lo speed is unknown, defaulting to 1000 [ 778.788368][ T2014] netlink: 'syz.4.7778': attribute type 1 has an invalid length. [ 778.799030][ T1927] lo speed is unknown, defaulting to 1000 [ 778.936407][ T2016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 779.103598][ T2030] veth0_virt_wifi: default FDB implementation only supports local addresses [ 779.255376][ T1927] lo speed is unknown, defaulting to 1000 [ 779.407678][ T2027] __nla_validate_parse: 8 callbacks suppressed [ 779.407780][ T2027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7787'. [ 779.537621][ T1927] lo speed is unknown, defaulting to 1000 [ 779.566543][ T2043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7790'. [ 779.612731][ T2043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7790'. [ 779.648943][ T2043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7790'. [ 779.658605][ T2045] syzkaller0: entered promiscuous mode [ 779.682096][ T2045] syzkaller0: entered allmulticast mode [ 779.710075][ T2045] openvswitch: netlink: IPv4 tunnel dst address is zero [ 779.992016][ T2062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7796'. [ 780.010219][ T1927] lo speed is unknown, defaulting to 1000 [ 780.070658][ T2064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7795'. [ 780.073672][ T2066] syzkaller0: entered promiscuous mode [ 780.110372][ T2066] syzkaller0: entered allmulticast mode [ 780.124635][ T2070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7795'. [ 780.138014][ T2072] 0: reclassify loop, rule prio 0, protocol 800 [ 780.168988][ T2070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7795'. [ 780.264419][ T2078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7799'. [ 780.318860][ T2080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7799'. [ 780.411442][ T2082] "syz.0.7800" (2082) uses obsolete ecb(arc4) skcipher [ 780.628742][ T1927] lo speed is unknown, defaulting to 1000 [ 780.749251][ T2096] xfrm1: entered allmulticast mode [ 780.913497][ T2105] netlink: 'syz.0.7806': attribute type 1 has an invalid length. [ 780.954773][ T2105] syzkaller0: entered promiscuous mode [ 780.986023][ T2105] syzkaller0: entered allmulticast mode [ 781.338717][ T1927] lo speed is unknown, defaulting to 1000 [ 781.593215][ T2139] netlink: 'syz.2.7816': attribute type 10 has an invalid length. [ 781.622207][ T2140] netlink: 'syz.2.7816': attribute type 10 has an invalid length. [ 781.689946][ T2139] bridge0: port 3(syz_tun) entered disabled state [ 781.724900][ T2139] syz_tun: left allmulticast mode [ 781.753285][ T2139] bridge0: port 3(syz_tun) entered disabled state [ 781.794089][ T2139] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 782.202336][ T2175] netlink: 'syz.1.7826': attribute type 11 has an invalid length. [ 782.427688][ T2195] syzkaller1: entered promiscuous mode [ 782.436760][ T2195] syzkaller1: entered allmulticast mode [ 782.660471][ T2202] netlink: 'syz.1.7834': attribute type 1 has an invalid length. [ 782.730194][ T2202] 8021q: adding VLAN 0 to HW filter on device bond6 [ 782.829907][ T2212] netlink: 'syz.4.7836': attribute type 11 has an invalid length. [ 782.838176][ T2212] netlink: 'syz.4.7836': attribute type 4 has an invalid length. [ 782.870939][ T2212] netlink: 'syz.4.7836': attribute type 5 has an invalid length. [ 782.929438][ T2212] netlink: 'syz.4.7836': attribute type 6 has an invalid length. [ 783.294337][ T2235] netlink: 'syz.4.7843': attribute type 3 has an invalid length. [ 783.338917][ T2237] netlink: ct family unspecified [ 783.459848][ T2244] bridge_slave_0: default FDB implementation only supports local addresses [ 783.641538][ T2257] netlink: 'syz.4.7852': attribute type 1 has an invalid length. [ 783.654792][ T2252] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 783.911168][ T2278] netlink: 'syz.3.7858': attribute type 1 has an invalid length. [ 783.949913][ T2278] netlink: 'syz.3.7858': attribute type 1 has an invalid length. [ 784.186112][ T2292] netlink: 'syz.2.7862': attribute type 4 has an invalid length. [ 784.475166][ T2313] __nla_validate_parse: 23 callbacks suppressed [ 784.475188][ T2313] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7867'. [ 784.592800][ T2313] netlink: 'syz.4.7867': attribute type 24 has an invalid length. [ 784.828648][ T2331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7872'. [ 784.865671][ T2334] netlink: 'syz.4.7873': attribute type 1 has an invalid length. [ 784.960169][ T2334] 8021q: adding VLAN 0 to HW filter on device bond5 [ 784.977594][ T2341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7876'. [ 785.110740][ T2342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.127708][ T2342] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 785.165864][ T2353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7873'. [ 785.177590][ T2342] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 785.204848][ T2355] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7879'. [ 785.398717][ T2341] 8021q: adding VLAN 0 to HW filter on device bond4 [ 785.420589][ T2350] macvlan3: entered promiscuous mode [ 785.434552][ T2350] macvlan3: entered allmulticast mode [ 785.499544][ T2353] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.515252][ T2373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7882'. [ 785.648515][ T2374] vlan2: entered promiscuous mode [ 785.658088][ T2374] bridge0: entered promiscuous mode [ 785.726537][ T2384] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7886'. [ 785.827570][ T2391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7887'. [ 786.283520][ T2422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7894'. [ 786.331896][ T2423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7894'. [ 786.699827][ T2447] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 787.041276][ T2474] 8021q: adding VLAN 0 to HW filter on device bond5 [ 787.094731][ T2481] xt_time: unknown flags 0xf4 [ 787.117313][ T2474] rdma_rxe: rxe_newlink: failed to add bond0 [ 787.418293][ T2502] netlink: 'syz.4.7912': attribute type 1 has an invalid length. [ 787.588538][ T2514] netlink: 'syz.4.7915': attribute type 1 has an invalid length. [ 787.588538][ T2513] netlink: 'syz.4.7915': attribute type 1 has an invalid length. [ 787.747032][ T2516] bond6 (unregistering): Released all slaves [ 788.608102][ T2578] vlan3: entered promiscuous mode [ 788.673887][ T2578] bridge0: entered promiscuous mode [ 789.100647][ T2608] syzkaller0: entered promiscuous mode [ 789.106684][ T2608] syzkaller0: entered allmulticast mode [ 789.427483][ T2633] syzkaller0: entered promiscuous mode [ 789.433003][ T2633] syzkaller0: entered allmulticast mode [ 789.514190][ T2644] tipc: Enabled bearer , priority 0 [ 789.595047][ T2631] tipc: Resetting bearer [ 789.599557][ T2656] __nla_validate_parse: 13 callbacks suppressed [ 789.599577][ T2656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7948'. [ 789.662350][ T2631] tipc: Disabling bearer [ 789.718420][ T2656] validate_nla: 1 callbacks suppressed [ 789.718438][ T2656] netlink: 'syz.3.7948': attribute type 1 has an invalid length. [ 789.720946][ T2659] team_slave_0: entered promiscuous mode [ 789.724068][ T2656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7948'. [ 789.732179][ T2659] team_slave_1: entered promiscuous mode [ 789.735354][ T2659] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 789.780825][ T2659] team0: Device macvlan2 is already an upper device of the team interface [ 789.810234][ T2659] team_slave_0: left promiscuous mode [ 789.815865][ T2659] team_slave_1: left promiscuous mode [ 789.852636][ T2674] rdma_rxe: rxe_newlink: failed to add lo [ 790.006583][ T2681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7956'. [ 790.078282][ T2694] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7959'. [ 790.144881][ T2705] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7959'. [ 790.181122][ T2709] netlink: 'syz.4.7960': attribute type 1 has an invalid length. [ 790.228131][ T2709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 790.257939][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 790.267113][ T2709] bond6: (slave veth0_to_bond): making interface the new active one [ 790.270954][ T2713] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 790.280150][ T2709] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 790.310240][ T2713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7961'. [ 790.344308][ T2719] netlink: 'syz.2.7962': attribute type 26 has an invalid length. [ 790.392544][ T2723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7963'. [ 790.394227][ T2722] xt_TCPMSS: Only works on TCP SYN packets [ 790.459927][ T2725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7965'. [ 790.521145][ T5884] IPVS: starting estimator thread 0... [ 790.616226][ T2731] IPVS: using max 32 ests per chain, 76800 per kthread [ 790.731054][ T2753] netlink: 'syz.1.7972': attribute type 1 has an invalid length. [ 790.742497][ T2753] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7972'. [ 790.845699][ T2756] netlink: 'syz.1.7973': attribute type 2 has an invalid length. [ 790.863518][ T2760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7975'. [ 790.939952][ T2762] xt_TCPMSS: Only works on TCP SYN packets [ 791.021599][ T2771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.104107][ T2771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.281730][ T2781] netlink: 'syz.4.7982': attribute type 11 has an invalid length. [ 791.511745][ T2799] bond6: option lp_interval: invalid value (0) [ 791.518176][ T2799] bond6: option lp_interval: allowed values 1 - 2147483647 [ 791.534782][ T2799] bond6 (unregistering): Released all slaves [ 791.554218][ T2806] netlink: Unknown conntrack attr (type=2304, max=9) [ 791.589906][ T2808] netlink: 'syz.4.7986': attribute type 1 has an invalid length. [ 792.843870][ T2920] netlink: 'syz.3.8016': attribute type 1 has an invalid length. [ 792.885124][ T2920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 792.890076][ T2925] netlink: 'syz.2.8018': attribute type 21 has an invalid length. [ 792.903476][ T2920] netlink: 'syz.3.8016': attribute type 1 has an invalid length. [ 793.289581][ T2952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.429727][ T2961] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 793.752373][ T2980] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 793.800046][ T2980] bond7 (unregistering): Released all slaves [ 793.813875][ T2991] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 793.943644][ T2999] bond10: ARP target 1.0.0.0 is already present [ 793.961415][ T2999] bond10: option arp_ip_target: invalid value (1) [ 793.971259][ T2999] bond10 (unregistering): Released all slaves [ 794.012181][ T3001] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 794.274568][ T3035] bond4: entered promiscuous mode [ 794.291166][ T3035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 794.467966][ T3050] IPVS: persistence engine module ip_vs_pe_ not found [ 794.678374][ T3068] team0: Device gtp1 is up. Set it down before adding it as a team port [ 794.975336][ T3096] validate_nla: 3 callbacks suppressed [ 794.975356][ T3096] netlink: 'syz.0.8067': attribute type 11 has an invalid length. [ 795.015504][ T3096] __nla_validate_parse: 17 callbacks suppressed [ 795.015523][ T3096] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8067'. [ 795.377699][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 795.490873][ T3137] syz.0.8081: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 795.526746][ T3135] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8080'. [ 795.549016][ T3132] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8080'. [ 795.576582][ T3137] CPU: 0 UID: 0 PID: 3137 Comm: syz.0.8081 Not tainted syzkaller #0 PREEMPT(full) [ 795.576629][ T3137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 795.576653][ T3137] Call Trace: [ 795.576660][ T3137] [ 795.576669][ T3137] dump_stack_lvl+0xe8/0x150 [ 795.576697][ T3137] warn_alloc+0x249/0x340 [ 795.576717][ T3137] ? stack_trace_save+0xa9/0x100 [ 795.576740][ T3137] ? __pfx_warn_alloc+0x10/0x10 [ 795.576765][ T3137] ? kasan_save_track+0x4f/0x80 [ 795.576780][ T3137] ? kasan_save_track+0x3e/0x80 [ 795.576794][ T3137] ? __kasan_kmalloc+0x93/0xb0 [ 795.576809][ T3137] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 795.576826][ T3137] ? xskq_create+0x56/0x170 [ 795.576842][ T3137] ? xsk_setsockopt+0x54c/0x990 [ 795.576862][ T3137] ? do_sock_setsockopt+0x17c/0x1b0 [ 795.576881][ T3137] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 795.576900][ T3137] ? do_syscall_64+0xe2/0xf80 [ 795.576920][ T3137] __vmalloc_node_range_noprof+0x132/0x1730 [ 795.576967][ T3137] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 795.576989][ T3137] ? __kasan_kmalloc+0x93/0xb0 [ 795.577009][ T3137] vmalloc_user_noprof+0xad/0xe0 [ 795.577026][ T3137] ? xskq_create+0xbf/0x170 [ 795.577043][ T3137] xskq_create+0xbf/0x170 [ 795.577062][ T3137] xsk_init_queue+0xad/0x110 [ 795.577088][ T3137] xsk_setsockopt+0x54c/0x990 [ 795.577113][ T3137] ? __pfx_xsk_setsockopt+0x10/0x10 [ 795.577135][ T3137] ? __pfx_aa_sk_perm+0x10/0x10 [ 795.577159][ T3137] ? aa_sock_opt_perm+0xff/0x1a0 [ 795.577191][ T3137] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 795.577209][ T3137] ? __pfx_xsk_setsockopt+0x10/0x10 [ 795.577233][ T3137] do_sock_setsockopt+0x17c/0x1b0 [ 795.577259][ T3137] __x64_sys_setsockopt+0x13d/0x1b0 [ 795.577284][ T3137] do_syscall_64+0xe2/0xf80 [ 795.577302][ T3137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.577319][ T3137] ? trace_irq_disable+0x37/0x100 [ 795.577335][ T3137] ? clear_bhb_loop+0x60/0xb0 [ 795.577357][ T3137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.577374][ T3137] RIP: 0033:0x7f287d19aeb9 [ 795.577391][ T3137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.577406][ T3137] RSP: 002b:00007f287e09c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 795.577425][ T3137] RAX: ffffffffffffffda RBX: 00007f287d415fa0 RCX: 00007f287d19aeb9 [ 795.577437][ T3137] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 795.577448][ T3137] RBP: 00007f287d208c1f R08: 0000000000000004 R09: 0000000000000000 [ 795.577460][ T3137] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.577471][ T3137] R13: 00007f287d416038 R14: 00007f287d415fa0 R15: 00007ffc9721ef48 [ 795.577502][ T3137] [ 795.577523][ T3137] Mem-Info: [ 795.649817][ T3133] netlink: 'syz.1.8079': attribute type 2 has an invalid length. [ 795.658212][ T3137] active_anon:7878 inactive_anon:7 isolated_anon:0 [ 795.658212][ T3137] active_file:2960 inactive_file:40506 isolated_file:0 [ 795.658212][ T3137] unevictable:768 dirty:86 writeback:0 [ 795.658212][ T3137] slab_reclaimable:13827 slab_unreclaimable:132487 [ 795.658212][ T3137] mapped:29373 shmem:1368 pagetables:1529 [ 795.658212][ T3137] sec_pagetables:0 bounce:0 [ 795.658212][ T3137] kernel_misc_reclaimable:0 [ 795.658212][ T3137] free:1274120 free_pcp:17282 free_cma:0 [ 795.922917][ T3137] Node 0 active_anon:31556kB inactive_anon:28kB active_file:11840kB inactive_file:161832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121712kB dirty:344kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16536kB pagetables:6236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 795.957337][ T3137] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 795.996479][ T3137] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.049194][ T3137] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 796.055007][ T3137] Node 0 DMA32 free:1189584kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32556kB inactive_anon:28kB active_file:11840kB inactive_file:161832kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:45748kB local_pcp:17280kB free_cma:0kB [ 796.100523][ T3137] lowmem_reserve[]: 0 0 1 1 1 [ 796.105288][ T3137] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.136975][ T3137] lowmem_reserve[]: 0 0 0 0 0 [ 796.172734][ T3137] Node 1 Normal free:3894528kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18016kB local_pcp:5412kB free_cma:0kB [ 796.236389][ T3137] lowmem_reserve[]: 0 0 0 0 0 [ 796.241168][ T3137] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 796.306375][ T3172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8090'. [ 796.339353][ T3137] Node 0 DMA32: 10146*4kB (UME) 7471*8kB (UM) 4385*16kB (UME) 132*32kB (UM) 525*64kB (UM) 701*128kB (UME) 467*256kB (UE) 329*512kB (UM) 195*1024kB (UME) 51*2048kB (UM) 72*4096kB (UM) = 1185104kB [ 796.381160][ T3137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 796.405498][ T3172] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 796.420931][ T3176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8090'. [ 796.430540][ T3137] Node 1 Normal: 154*4kB (UE) 53*8kB (UME) 45*16kB (UME) 83*32kB (UME) 27*64kB (UME) 6*128kB (UME) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3894528kB [ 796.430738][ T3137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.430755][ T3137] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 796.430770][ T3137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.430786][ T3137] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 796.430801][ T3137] 44832 total pagecache pages [ 796.430814][ T3137] 0 pages in swap cache [ 796.430822][ T3137] Free swap = 124996kB [ 796.430836][ T3137] Total swap = 124996kB [ 796.430845][ T3137] 2097051 pages RAM [ 796.430853][ T3137] 0 pages HighMem/MovableOnly [ 796.430861][ T3137] 426622 pages reserved [ 796.430869][ T3137] 0 pages cma reserved [ 796.473757][ T3172] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8090'. [ 796.546448][ T3179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8089'. [ 796.574384][ T3179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8089'. [ 796.607849][ T3176] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8090'. [ 796.750015][ T3189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8095'. [ 796.789826][ T3189] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 797.118863][ T3217] veth0: entered promiscuous mode [ 797.134754][ T3217] veth0: left promiscuous mode [ 797.400389][ T3233] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 797.545564][ T3249] veth0_to_bridge: entered promiscuous mode [ 797.594561][ T3254] veth1_macvtap: left promiscuous mode [ 797.617028][ T3254] macsec0: entered promiscuous mode [ 797.624479][ T3254] macsec0: entered allmulticast mode [ 797.658150][ T3259] veth1_macvtap: entered promiscuous mode [ 797.674937][ T3259] veth1_macvtap: entered allmulticast mode [ 797.681822][ T3259] macsec0: left promiscuous mode [ 797.690428][ T3259] macsec0: left allmulticast mode [ 797.695563][ T3259] veth1_macvtap: left allmulticast mode [ 797.784877][ T3245] veth0_to_bridge: left promiscuous mode [ 797.956209][ T5884] syz_tun: tun_net_xmit 90 [ 798.096737][ T3281] netlink: 'syz.1.8122': attribute type 2 has an invalid length. [ 798.129442][ T3285] sctp: [Deprecated]: syz.2.8123 (pid 3285) Use of int in max_burst socket option deprecated. [ 798.129442][ T3285] Use struct sctp_assoc_value instead [ 798.453542][ T3305] openvswitch: netlink: Multiple metadata blocks provided [ 798.777895][ T3330] netlink: 'syz.0.8135': attribute type 1 has an invalid length. [ 798.896676][ T5884] syz_tun: tun_net_xmit 90 [ 799.354657][ T3366] netlink: 'syz.2.8147': attribute type 21 has an invalid length. [ 799.425752][ T3366] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 799.478737][ T3366] bond10 (unregistering): Released all slaves [ 799.485380][ T3377] netlink: 'syz.0.8148': attribute type 1 has an invalid length. [ 800.226933][ T3432] netlink: 'syz.0.8161': attribute type 1 has an invalid length. [ 800.247023][ T3432] __nla_validate_parse: 14 callbacks suppressed [ 800.247042][ T3432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8161'. [ 800.499068][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 800.532074][ T3448] x_tables: unsorted entry at hook 1 [ 800.929351][ T3466] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8170'. [ 800.947362][ T3466] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 801.181664][ T3484] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8171'. [ 801.213331][ T3485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8173'. [ 801.396944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.410285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.423084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.435408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.447903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.460290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.472795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.485435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.796135][ C1] net_ratelimit: 667 callbacks suppressed [ 801.796155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.814414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.826981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.839663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.852326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.864838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.877612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.890089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.902584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.914882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.625267][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8180'. [ 802.639214][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8176'. [ 802.649193][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8180'. [ 802.745442][ T3513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8178'. [ 803.111411][ T3529] syzkaller1: entered promiscuous mode [ 803.147142][ T3529] syzkaller1: entered allmulticast mode [ 803.361014][ T3537] netlink: 'syz.1.8182': attribute type 3 has an invalid length. [ 803.523913][ T3541] IPv6: sit2: Disabled Multicast RS [ 803.889111][ T3554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8187'. [ 803.958734][ T3558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8189'. [ 804.798122][ T3583] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 804.883491][ T3583] bond6 (unregistering): Released all slaves [ 805.642787][ T3621] sch_fq: defrate 0 ignored. [ 805.825238][ T3622] 8021q: adding VLAN 0 to HW filter on device bond6 [ 805.845447][ T3622] rdma_rxe: rxe_newlink: failed to add bond0 [ 805.966264][ T7440] lec:lec_start_xmit: lec0:No lecd attached [ 806.491559][ T3658] __nla_validate_parse: 2 callbacks suppressed [ 806.491580][ T3658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8215'. [ 806.536452][ T3660] tipc: Bearer : already 2 bearers with priority 10 [ 806.560964][ T3660] tipc: Bearer : trying with adjusted priority [ 806.584860][ T3660] tipc: New replicast peer: 255.255.255.255 [ 806.608492][ T3660] tipc: Enabled bearer , priority 9 [ 806.634904][ T3664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8216'. [ 806.806023][ C1] net_ratelimit: 11262 callbacks suppressed [ 806.806043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.824624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.837122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.849579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.862147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.877253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.889810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.902366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.914696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.927138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.131868][ T3676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8219'. [ 807.408640][ T3688] netlink: 'syz.0.8225': attribute type 1 has an invalid length. [ 807.463907][ T3688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8225'. [ 807.890918][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8228'. [ 807.922568][ T3705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8230'. [ 807.935237][ T3706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8229'. [ 807.969912][ T3706] IPVS: Error connecting to the multicast addr [ 808.241945][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8233'. [ 808.513773][ T3724] netlink: 'syz.4.8234': attribute type 2 has an invalid length. [ 808.534372][ T3731] netlink: 'syz.3.8235': attribute type 1 has an invalid length. [ 808.545664][ T3730] netlink: 'syz.2.8236': attribute type 1 has an invalid length. [ 808.611716][ T3724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8234'. [ 808.668418][ T3723] syzkaller0: entered promiscuous mode [ 808.680659][ T3723] syzkaller0: entered allmulticast mode [ 808.786293][ T3730] bond10: entered promiscuous mode [ 808.791822][ T3730] bond10: entered allmulticast mode [ 808.798609][ T3730] 8021q: adding VLAN 0 to HW filter on device bond10 [ 808.827172][ T3747] x_tables: unsorted entry at hook 2 [ 808.834410][ T3738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8238'. [ 809.088069][ T3754] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 809.388881][ T3765] netlink: 'syz.2.8243': attribute type 1 has an invalid length. [ 809.409794][ T3765] netlink: 'syz.2.8243': attribute type 3 has an invalid length. [ 810.976976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 810.985087][ C0] lec:lec_tx_timeout: lec0 [ 810.990669][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 811.817525][ C1] net_ratelimit: 12519 callbacks suppressed [ 811.817546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.835935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.848711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.861134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.873484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.885918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.898631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.911068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.923487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.935973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.227101][ T3763] __nla_validate_parse: 2 callbacks suppressed [ 813.227123][ T3763] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8241'. [ 813.645669][ T3783] netlink: 'syz.1.8245': attribute type 1 has an invalid length. [ 813.733140][ T3783] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8245'. [ 813.778991][ C0] syz_tun: tun_net_xmit 86 [ 813.837806][ T3783] netlink: 658 bytes leftover after parsing attributes in process `syz.1.8245'. [ 813.907768][ T3783] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8245'. [ 814.341614][ T3804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8252'. [ 814.434374][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8250'. [ 814.449801][ T3804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8252'. [ 814.816632][ C0] syz_tun: tun_net_xmit 86 [ 815.087974][ T3832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8259'. [ 815.215610][T31760] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb [ 815.856332][ C0] syz_tun: tun_net_xmit 86 [ 816.005986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 816.014086][ C0] lec:lec_tx_timeout: lec0 [ 816.826088][ C1] net_ratelimit: 9636 callbacks suppressed [ 816.826110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.845717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.858055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.870567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.882890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.896505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.909005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.921911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.934458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.948116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.598694][ T3853] syzkaller1: entered promiscuous mode [ 817.604514][ T3853] syzkaller1: entered allmulticast mode [ 817.924112][ T3880] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8267'. [ 818.180387][ T3887] 8021q: VLANs not supported on wg1 [ 818.189957][ T3884] netlink: 'syz.0.8268': attribute type 1 has an invalid length. [ 818.388445][ T3884] 8021q: adding VLAN 0 to HW filter on device bond7 [ 818.763735][ T3911] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.8275'. [ 818.974597][ T3917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8278'. [ 818.999558][ T3916] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8279'. [ 819.924478][ T3951] netlink: 'syz.4.8287': attribute type 10 has an invalid length. [ 820.190934][ T3957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8288'. [ 820.387466][ T3969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8292'. [ 820.407096][ T3967] netlink: 'syz.4.8291': attribute type 11 has an invalid length. [ 820.414949][ T3967] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8291'. [ 820.566699][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8293'. [ 820.840473][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8297'. [ 820.908162][ T3982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8297'. [ 820.947651][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8298'. [ 821.049174][ T3996] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 821.069144][ T3995] netlink: 'syz.3.8300': attribute type 1 has an invalid length. [ 821.080603][ T3992] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 821.836300][ C1] net_ratelimit: 7640 callbacks suppressed [ 821.836324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.863729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.876229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.889024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.901433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.913786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 821.926208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.938743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.951234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.963647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.541424][ T4018] netlink: 'syz.2.8306': attribute type 1 has an invalid length. [ 822.854367][ T4033] netlink: 'syz.4.8305': attribute type 1 has an invalid length. [ 823.073704][ T4047] netlink: 'syz.3.8311': attribute type 1 has an invalid length. [ 823.215095][ T4018] bond11: entered promiscuous mode [ 823.380177][ T4018] 8021q: adding VLAN 0 to HW filter on device bond11 [ 823.479626][ T4033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 823.561584][ T4047] bond7: entered promiscuous mode [ 823.577564][ T4047] 8021q: adding VLAN 0 to HW filter on device bond7 [ 823.885168][ T4066] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 824.124261][ T4068] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 824.160537][ T4068] syzkaller1: Refused to change device type [ 824.690056][ T4088] syzkaller0: entered promiscuous mode [ 824.695572][ T4088] syzkaller0: entered allmulticast mode [ 825.019440][ T4103] netlink: 'syz.2.8325': attribute type 1 has an invalid length. [ 825.184114][ T4107] tc_dump_action: action bad kind [ 825.221474][ T4109] __nla_validate_parse: 2 callbacks suppressed [ 825.221557][ T4109] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8327'. [ 825.280245][ T4111] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 825.300276][ T4111] syzkaller1: linktype set to 823 [ 825.366115][ T4109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8327'. [ 825.457642][ T4114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8327'. [ 825.609728][ T4118] sctp: [Deprecated]: syz.0.8331 (pid 4118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 825.609728][ T4118] Use struct sctp_sack_info instead [ 825.713210][ T4123] netlink: 'syz.3.8332': attribute type 1 has an invalid length. [ 825.911687][ T4123] 8021q: adding VLAN 0 to HW filter on device bond8 [ 826.446295][ T4159] netlink: 'syz.3.8338': attribute type 16 has an invalid length. [ 826.514213][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8338'. [ 826.549778][ T4161] netlink: 'syz.0.8340': attribute type 10 has an invalid length. [ 826.845980][ C1] net_ratelimit: 8230 callbacks suppressed [ 826.846001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.864332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.877997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.890570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.903083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 826.915574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.928185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.940700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.953263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.966911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.074840][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8345'. [ 827.149960][ T4181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8346'. [ 827.183369][ T4181] netlink: 'syz.2.8346': attribute type 2 has an invalid length. [ 827.614584][ T4190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8350'. [ 827.659825][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8350'. [ 827.698012][ T4190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8350'. [ 827.800135][ T4190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8350'. [ 831.856081][ C1] net_ratelimit: 16410 callbacks suppressed [ 831.856110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.856178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.864268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.874523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.886650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.898563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.910315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 831.922281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.934297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.946303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.176175][ C1] sched: DL replenish lagged too much [ 836.865945][ C0] net_ratelimit: 18503 callbacks suppressed [ 836.865967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.865976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 836.866291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.872373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.884333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.896249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.908063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 836.920198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.932067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.943980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.876086][ C1] net_ratelimit: 18748 callbacks suppressed [ 841.876109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.876248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.882533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.894544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.906239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 841.918236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.930300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.942265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.954148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.965919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.885973][ C1] net_ratelimit: 18663 callbacks suppressed [ 846.885998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.886877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.892553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.904457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.916383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.928235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.940232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.952317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.965170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 846.976007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.896152][ C0] net_ratelimit: 18554 callbacks suppressed [ 851.896172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.896682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 851.902547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.914381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.926379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.938478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.950341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.962124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 851.974085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.986153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.906078][ C0] net_ratelimit: 19499 callbacks suppressed [ 856.906100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.907097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 856.912382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.924487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.936608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.948495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.960315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.972222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 856.984378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.996187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.916152][ C0] net_ratelimit: 19975 callbacks suppressed [ 861.916175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.916191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.922583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.934450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.946428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.959998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 861.970423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.982522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.994263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 862.006369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.926021][ C0] net_ratelimit: 19647 callbacks suppressed [ 866.926042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.926671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 866.932336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.944371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.956442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.968314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.980125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.992079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 867.004204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 867.016165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.935912][ C1] net_ratelimit: 19248 callbacks suppressed [ 871.935934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.935958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.943322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 871.954414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.966240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.978235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.990408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 872.002309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 872.014011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 872.026121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.945898][ C0] net_ratelimit: 18825 callbacks suppressed [ 876.945919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.946803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 876.952350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.964118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.976161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.988218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.000133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.011896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 877.023886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.035914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.956169][ C0] net_ratelimit: 18956 callbacks suppressed [ 881.956190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.956222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 881.962638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.974375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.986397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.998462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.010391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.022132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 882.034153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.046848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.966021][ C0] net_ratelimit: 18920 callbacks suppressed [ 886.966044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.966163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.972347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.984384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.996519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.008327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.020310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.033275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 887.044309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.056043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.976156][ C0] net_ratelimit: 19341 callbacks suppressed [ 891.976179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.977270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 891.982980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.994529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.007325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.018475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.030457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.042296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 892.054460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.066313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.986014][ C0] net_ratelimit: 19368 callbacks suppressed [ 896.986035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.986105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.992346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.004330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.016563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.029810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 897.040144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.052098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.064229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.076185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.995894][ C0] net_ratelimit: 19512 callbacks suppressed [ 901.995915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.997015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.002192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.014236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 902.026412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.038266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.050081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.062341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.074193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.086161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.530739][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 907.006221][ C0] net_ratelimit: 19407 callbacks suppressed [ 907.006242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.006341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.012595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.024716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.036796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.048582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.060549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.074616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 907.084553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.096293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.629903][T23150] Bluetooth: hci3: command 0x0405 tx timeout [ 907.868516][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 907.876584][ C0] lec:lec_tx_timeout: lec0 [ 912.015970][ C0] net_ratelimit: 19225 callbacks suppressed [ 912.015993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.016922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 912.022288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.034335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.046450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.058420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.070169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.082141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 912.094250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.106141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.025943][ C0] net_ratelimit: 18847 callbacks suppressed [ 917.025965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.026673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.032411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.044319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 917.056307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.068370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.080402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.092254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.104010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.116153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.036169][ C0] net_ratelimit: 18764 callbacks suppressed [ 922.036192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.036988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 922.042590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.054364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.067036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.078453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.090392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.102119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 922.114169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.126191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.045874][ C1] net_ratelimit: 18869 callbacks suppressed [ 927.045897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 927.046232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.052179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.064216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.076321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.088221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.099949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 927.111996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.124014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.136003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.056079][ C0] net_ratelimit: 18868 callbacks suppressed [ 932.056107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.057352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 932.062378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.074425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.086664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.098538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.110263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.122288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 932.134423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.146303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.066011][ C1] net_ratelimit: 18665 callbacks suppressed [ 937.066031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.066172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.072338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 937.085221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.096306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.108853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.120245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.132282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.144198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.156087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.076002][ C1] net_ratelimit: 17297 callbacks suppressed [ 942.076024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.076058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.082290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 942.094306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.106350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.118300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.130204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.142009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.154093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.166117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.235834][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 942.242814][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27529/1:b..l P4206/1:b..l [ 942.252506][ C1] rcu: (detected by 1, t=10503 jiffies, g=132293, q=1439 ncpus=2) [ 942.260423][ C1] task:syz.3.8355 state:R running task stack:27704 pid:4206 tgid:4203 ppid:29916 task_flags:0x400040 flags:0x00080002 [ 942.275298][ C1] Call Trace: [ 942.278613][ C1] [ 942.281560][ C1] __schedule+0x14ea/0x5050 [ 942.286089][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 942.291059][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 942.296105][ C1] ? __pfx___schedule+0x10/0x10 [ 942.301064][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 942.306453][ C1] preempt_schedule_common+0x82/0xd0 [ 942.311747][ C1] ? cfg80211_mlme_unregister_socket+0x2ce/0x670 [ 942.318096][ C1] preempt_schedule_thunk+0x16/0x30 [ 942.323318][ C1] __local_bh_enable_ip+0xe1/0x130 [ 942.328456][ C1] cfg80211_mlme_unregister_socket+0x2ce/0x670 [ 942.334646][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 942.339942][ C1] nl80211_netlink_notify+0x356/0x840 [ 942.345337][ C1] ? nl80211_netlink_notify+0x74/0x840 [ 942.350811][ C1] notifier_call_chain+0x19d/0x3a0 [ 942.355944][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 942.361676][ C1] netlink_release+0x123b/0x1ad0 [ 942.366639][ C1] ? netlink_release+0x101/0x1ad0 [ 942.371672][ C1] ? __pfx_netlink_release+0x10/0x10 [ 942.376958][ C1] ? down_write+0x16d/0x200 [ 942.381468][ C1] ? __pfx_down_write+0x10/0x10 [ 942.386340][ C1] ? locks_remove_posix+0x36f/0x650 [ 942.391561][ C1] sock_close+0xc3/0x240 [ 942.395827][ C1] ? __pfx_sock_close+0x10/0x10 [ 942.400696][ C1] __fput+0x44f/0xa70 [ 942.404704][ C1] fput_close_sync+0x11f/0x240 [ 942.409479][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 942.414789][ C1] __x64_sys_close+0x7e/0x110 [ 942.419478][ C1] do_syscall_64+0xe2/0xf80 [ 942.423994][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.430068][ C1] ? trace_irq_disable+0x37/0x100 [ 942.435096][ C1] ? clear_bhb_loop+0x60/0xb0 [ 942.439775][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.445679][ C1] RIP: 0033:0x7ff50735b78e [ 942.450096][ C1] RSP: 002b:00007ff50827bf38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 942.458521][ C1] RAX: ffffffffffffffda RBX: 00007ff50827d6c0 RCX: 00007ff50735b78e [ 942.466598][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 942.474572][ C1] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 942.482544][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.490522][ C1] R13: 00007ff507616038 R14: 00007ff507615fa0 R15: 00007fff9501b478 [ 942.498528][ C1] [ 942.501551][ C1] task:syz-executor state:R running task stack:21664 pid:27529 tgid:27529 ppid:27514 task_flags:0x400140 flags:0x00080000 [ 942.515039][ C1] Call Trace: [ 942.518319][ C1] [ 942.521263][ C1] __schedule+0x14ea/0x5050 [ 942.525785][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 942.530912][ C1] ? do_sock_getsockopt+0x2d3/0x3f0 [ 942.536124][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 942.542287][ C1] ? __pfx___schedule+0x10/0x10 [ 942.547163][ C1] preempt_schedule_irq+0x4d/0xa0 [ 942.552192][ C1] irqentry_exit+0x597/0x620 [ 942.556785][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 942.562777][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 942.568935][ C1] Code: de 5b e9 73 c2 5c 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d a8 38 2e 11 <65> 8b 15 c9 38 2e 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 942.588551][ C1] RSP: 0018:ffffc9000f7af270 EFLAGS: 00000202 [ 942.594626][ C1] RAX: ffffffff8236ee2a RBX: 0000000000000001 RCX: ffff888063759e80 [ 942.602601][ C1] RDX: ffff888063759e80 RSI: ffffffff8c073960 RDI: ffffffff8c073920 [ 942.610583][ C1] RBP: ffff88801ce64fc4 R08: ffff88801ce64f87 R09: 1ffff110039cc9f0 [ 942.618562][ C1] R10: dffffc0000000000 R11: ffffed10039cc9f1 R12: 000000000004fa99 [ 942.626538][ C1] R13: 0000000000000001 R14: ffffffff8236ea6e R15: ffff88801ce64fd0 [ 942.634520][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 942.640773][ C1] ? __update_page_owner_free_handle+0x3ea/0x470 [ 942.647142][ C1] __update_page_owner_free_handle+0x3ea/0x470 [ 942.653310][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 942.659562][ C1] __reset_page_owner+0x85/0x1f0 [ 942.664515][ C1] __free_frozen_pages+0xbf8/0xd70 [ 942.669646][ C1] __put_partials+0x146/0x170 [ 942.674335][ C1] __slab_free+0x294/0x320 [ 942.678759][ C1] ? qlist_free_all+0x8c/0x100 [ 942.683549][ C1] qlist_free_all+0x97/0x100 [ 942.688151][ C1] kasan_quarantine_reduce+0x148/0x160 [ 942.693623][ C1] __kasan_slab_alloc+0x22/0x80 [ 942.698479][ C1] __kmalloc_cache_node_noprof+0x3f1/0x6d0 [ 942.704290][ C1] ? pick_next_task_fair+0x1992/0x19d0 [ 942.709758][ C1] ? __get_vm_area_node+0x13f/0x300 [ 942.714968][ C1] __get_vm_area_node+0x13f/0x300 [ 942.719999][ C1] __vmalloc_node_range_noprof+0x372/0x1730 [ 942.725896][ C1] ? alloc_counters+0x64/0x5d0 [ 942.730671][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 942.736575][ C1] ? rcu_is_watching+0x15/0xb0 [ 942.741340][ C1] ? trace_contention_end+0x39/0x100 [ 942.746636][ C1] ? trace_sched_exit_tp+0x36/0xf0 [ 942.751767][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 942.758090][ C1] ? xt_find_table_lock+0x54/0x3e0 [ 942.763213][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 942.768242][ C1] ? net_generic+0x1e/0x240 [ 942.772755][ C1] ? alloc_counters+0x64/0x5d0 [ 942.777517][ C1] vzalloc_noprof+0xb2/0xe0 [ 942.782025][ C1] ? alloc_counters+0x64/0x5d0 [ 942.786795][ C1] alloc_counters+0x64/0x5d0 [ 942.791390][ C1] ? xt_find_table_lock+0x35e/0x3e0 [ 942.796608][ C1] do_ipt_get_ctl+0xada/0x1240 [ 942.801386][ C1] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 942.806586][ C1] ? do_ip_getsockopt+0x1235/0x1c10 [ 942.811799][ C1] ? __mutex_trylock_common+0x158/0x260 [ 942.817358][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 942.823259][ C1] ? rcu_is_watching+0x15/0xb0 [ 942.828026][ C1] ? trace_contention_end+0x39/0x100 [ 942.833320][ C1] ? nf_getsockopt+0x224/0x290 [ 942.838086][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 942.843725][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 942.848756][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 942.854741][ C1] ? __might_fault+0xaf/0x130 [ 942.859430][ C1] nf_getsockopt+0x26e/0x290 [ 942.864042][ C1] ip_getsockopt+0x19e/0x230 [ 942.868646][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 942.873769][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 942.879136][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 942.885032][ C1] do_sock_getsockopt+0x2d3/0x3f0 [ 942.890064][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 942.895623][ C1] ? rcu_is_watching+0x15/0xb0 [ 942.900386][ C1] ? kfree+0x4d/0x650 [ 942.904393][ C1] __x64_sys_getsockopt+0x1a4/0x240 [ 942.909621][ C1] do_syscall_64+0xe2/0xf80 [ 942.914129][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.920324][ C1] ? trace_irq_disable+0x37/0x100 [ 942.925352][ C1] ? clear_bhb_loop+0x60/0xb0 [ 942.930041][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.935936][ C1] RIP: 0033:0x7f3e2799c6aa [ 942.940361][ C1] RSP: 002b:00007ffe8914de08 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 942.948778][ C1] RAX: ffffffffffffffda RBX: 00007ffe8914de90 RCX: 00007f3e2799c6aa [ 942.956760][ C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 942.964729][ C1] RBP: 0000000000000003 R08: 00007ffe8914de2c R09: 0000000000000000 [ 942.972700][ C1] R10: 00007ffe8914de90 R11: 0000000000000212 R12: 00007f3e27be2be0 [ 942.980669][ C1] R13: 00007ffe8914de2c R14: 0000000000000000 R15: 00007f3e27be4020 [ 942.988664][ C1] [ 942.991691][ C1] rcu: rcu_preempt kthread starved for 1291 jiffies! g132293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 943.002879][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 943.012846][ C1] rcu: RCU grace-period kthread stack dump: [ 943.018724][ C1] task:rcu_preempt state:R running task stack:27448 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 943.032218][ C1] Call Trace: [ 943.035488][ C1] [ 943.038425][ C1] __schedule+0x14ea/0x5050 [ 943.042942][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 943.047895][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 943.052946][ C1] ? __pfx___schedule+0x10/0x10 [ 943.057812][ C1] ? schedule+0x90/0x360 [ 943.062063][ C1] schedule+0x164/0x360 [ 943.066227][ C1] schedule_timeout+0x158/0x2c0 [ 943.071086][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 943.076456][ C1] ? __pfx_process_timeout+0x10/0x10 [ 943.081748][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 943.087566][ C1] ? prepare_to_swait_event+0x340/0x370 [ 943.093119][ C1] rcu_gp_fqs_loop+0x312/0x1560 [ 943.097975][ C1] ? rcu_gp_init+0x11c4/0x1640 [ 943.102773][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 943.108934][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 943.114222][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 943.119436][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 943.125258][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 943.129863][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 943.135067][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 943.140001][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 943.145034][ C1] kthread+0x726/0x8b0 [ 943.149114][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 943.154327][ C1] ? __pfx_kthread+0x10/0x10 [ 943.158925][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 943.164134][ C1] ? __pfx_kthread+0x10/0x10 [ 943.168729][ C1] ret_from_fork+0x51b/0xa40 [ 943.173328][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 943.178440][ C1] ? __switch_to+0xc82/0x1410 [ 943.183127][ C1] ? __pfx_kthread+0x10/0x10 [ 943.187729][ C1] ret_from_fork_asm+0x1a/0x30 [ 943.192510][ C1] [ 943.195521][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 943.201840][ C1] Sending NMI from CPU 1 to CPUs 0: [ 943.207058][ C0] NMI backtrace for cpu 0 [ 943.207075][ C0] CPU: 0 UID: 0 PID: 25082 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 943.207110][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 943.207131][ C0] Workqueue: events_unbound toggle_allocation_gate [ 943.207167][ C0] RIP: 0010:__lock_acquire+0x3c4/0x2cf0 [ 943.207206][ C0] Code: 0d 52 0e 48 c7 c6 68 3b de 8d 67 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 dc 2f 5a 12 <73> 17 48 69 c0 c8 00 00 00 48 8d 88 b0 83 9b 93 84 db 75 3f e9 10 [ 943.207219][ C0] RSP: 0018:ffffc90000006850 EFLAGS: 00000003 [ 943.207231][ C0] RAX: 0000000000000007 RBX: 0000000000000003 RCX: 0000000000000007 [ 943.207241][ C0] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000000000000 [ 943.207250][ C0] RBP: 0000000000000008 R08: ffffffff81759195 R09: ffffffff8e55a360 [ 943.207261][ C0] R10: ffffc90000006b58 R11: ffffffff81afb170 R12: 0000000000000007 [ 943.207272][ C0] R13: ffff88804d7de7f0 R14: ffff88804d7ddb80 R15: ffff88804d7de6b0 [ 943.207283][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 943.207296][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.207306][ C0] CR2: 00007fae5deb3ff8 CR3: 000000000e346000 CR4: 00000000003526f0 [ 943.207320][ C0] Call Trace: [ 943.207326][ C0] [ 943.207336][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 943.207351][ C0] ? lock_acquire+0x106/0x330 [ 943.207371][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 943.207385][ C0] ? lock_acquire+0x106/0x330 [ 943.207403][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 943.207418][ C0] lock_acquire+0x106/0x330 [ 943.207435][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 943.207452][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 943.207467][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 943.207484][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 943.207498][ C0] unwind_next_frame+0xc2/0x23c0 [ 943.207512][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 943.207529][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 943.207543][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 943.207559][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 943.207575][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 943.207592][ C0] arch_stack_walk+0x11b/0x150 [ 943.207611][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 943.207627][ C0] stack_trace_save+0xa9/0x100 [ 943.207643][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 943.207667][ C0] ? kasan_save_track+0x4f/0x80 [ 943.207679][ C0] ? kasan_save_track+0x3e/0x80 [ 943.207694][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 943.207711][ C0] kasan_save_track+0x3e/0x80 [ 943.207724][ C0] ? kasan_save_track+0x3e/0x80 [ 943.207736][ C0] ? kasan_save_free_info+0x46/0x50 [ 943.207752][ C0] ? __kasan_slab_free+0x5c/0x80 [ 943.207765][ C0] ? kmem_cache_free+0x195/0x610 [ 943.207779][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 943.207795][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 943.207809][ C0] ? nf_hook_slow+0xc5/0x220 [ 943.207823][ C0] ? NF_HOOK+0x21f/0x3c0 [ 943.207839][ C0] ? netif_receive_skb+0x278/0xbb0 [ 943.207853][ C0] ? NF_HOOK+0xa4/0x3a0 [ 943.207865][ C0] ? br_handle_frame_finish+0x14b2/0x1b40 [ 943.207879][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 943.207897][ C0] ? br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 943.207912][ C0] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 943.207930][ C0] ? br_handle_frame+0x1277/0x1510 [ 943.207944][ C0] ? __netif_receive_skb_core+0x98f/0x30a0 [ 943.207958][ C0] ? process_backlog+0x76d/0x1950 [ 943.207972][ C0] ? __napi_poll+0xae/0x340 [ 943.207985][ C0] ? net_rx_action+0x627/0xf70 [ 943.207999][ C0] ? handle_softirqs+0x22a/0x7c0 [ 943.208012][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 943.208024][ C0] ? irq_exit_rcu+0x9/0x30 [ 943.208036][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 943.208050][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 943.208079][ C0] kasan_save_free_info+0x46/0x50 [ 943.208095][ C0] __kasan_slab_free+0x5c/0x80 [ 943.208110][ C0] kmem_cache_free+0x195/0x610 [ 943.208124][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 943.208143][ C0] ip6_mc_input+0x8de/0xbd0 [ 943.208162][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 943.208182][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 943.208198][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 943.208214][ C0] ip_sabotage_in+0x1e1/0x270 [ 943.208227][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 943.208241][ C0] nf_hook_slow+0xc5/0x220 [ 943.208258][ C0] NF_HOOK+0x21f/0x3c0 [ 943.208274][ C0] ? skb_orphan+0xaf/0xd0 [ 943.208290][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 943.208306][ C0] ? NF_HOOK+0x9e/0x3c0 [ 943.208321][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 943.208338][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 943.208357][ C0] ? netif_receive_skb+0x102/0xbb0 [ 943.208372][ C0] netif_receive_skb+0x278/0xbb0 [ 943.208385][ C0] ? NF_HOOK+0xfa/0x3a0 [ 943.208397][ C0] ? lock_acquire+0x106/0x330 [ 943.208416][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 943.208431][ C0] ? br_netif_receive_skb+0x126/0x190 [ 943.208447][ C0] NF_HOOK+0xa4/0x3a0 [ 943.208460][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 943.208474][ C0] ? NF_HOOK+0xfa/0x3a0 [ 943.208487][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 943.208502][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 943.208518][ C0] ? br_pass_frame_up+0x275/0x420 [ 943.208533][ C0] br_handle_frame_finish+0x14b2/0x1b40 [ 943.208547][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 943.208564][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 943.208583][ C0] ? ip6t_do_table+0xe3/0x1560 [ 943.208599][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 943.208614][ C0] ? nf_hook_slow+0x176/0x220 [ 943.208630][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 943.208644][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 943.208670][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 943.208690][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 943.208704][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 943.208726][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 943.208741][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 943.208760][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 943.208774][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 943.208789][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 943.208805][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 943.208819][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 943.208841][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 943.208859][ C0] br_handle_frame+0x1277/0x1510 [ 943.208877][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 943.208892][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 943.208911][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 943.208924][ C0] __netif_receive_skb_core+0x98f/0x30a0 [ 943.208940][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 943.208964][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 943.208979][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 943.208996][ C0] ? NF_HOOK+0x336/0x3c0 [ 943.209015][ C0] ? process_backlog+0x3eb/0x1950 [ 943.209033][ C0] ? process_backlog+0x3eb/0x1950 [ 943.209048][ C0] ? process_backlog+0x3eb/0x1950 [ 943.209063][ C0] ? process_backlog+0x3eb/0x1950 [ 943.209077][ C0] process_backlog+0x76d/0x1950 [ 943.209100][ C0] __napi_poll+0xae/0x340 [ 943.209113][ C0] ? skb_defer_free_flush+0x233/0x260 [ 943.209129][ C0] net_rx_action+0x627/0xf70 [ 943.209144][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 943.209168][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 943.209195][ C0] handle_softirqs+0x22a/0x7c0 [ 943.209209][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 943.209225][ C0] __irq_exit_rcu+0x5f/0x150 [ 943.209238][ C0] irq_exit_rcu+0x9/0x30 [ 943.209250][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 943.209264][ C0] [ 943.209270][ C0] [ 943.209276][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 943.209291][ C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x1270 [ 943.209308][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 c4 db 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 6f d7 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 53 d7 [ 943.209320][ C0] RSP: 0018:ffffc900102ef6a0 EFLAGS: 00000293 [ 943.209333][ C0] RAX: ffffffff81b89ffd RBX: 1ffff110170e8129 RCX: ffff88804d7ddb80 [ 943.209344][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 943.209353][ C0] RBP: ffffc900102ef7e0 R08: ffffffff8fef1a77 R09: 1ffffffff1fde34e [ 943.209364][ C0] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: ffff8880b8740948 [ 943.209376][ C0] R13: dffffc0000000000 R14: ffff8880b863bb00 R15: 0000000000000001 [ 943.209390][ C0] ? smp_call_function_many_cond+0xcfd/0x1270 [ 943.209412][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 943.209432][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 943.209447][ C0] ? rcu_is_watching+0x15/0xb0 [ 943.209461][ C0] ? kmem_cache_alloc_bulk_noprof+0xae/0x740 [ 943.209477][ C0] ? __pfx___text_poke+0x10/0x10 [ 943.209494][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 943.209510][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 943.209527][ C0] smp_text_poke_batch_finish+0x5f5/0x1160 [ 943.209547][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 943.209562][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 943.209581][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 943.209604][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 943.209621][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 943.209641][ C0] static_key_enable+0x1a/0x20 [ 943.209663][ C0] toggle_allocation_gate+0xab/0x290 [ 943.209679][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 943.209694][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 943.209716][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 943.209734][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 943.209752][ C0] process_scheduled_works+0xaec/0x17a0 [ 943.209782][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 943.209799][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 943.209816][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 943.209831][ C0] ? schedule+0x90/0x360 [ 943.209847][ C0] worker_thread+0xda6/0x1360 [ 943.209877][ C0] kthread+0x726/0x8b0 [ 943.209894][ C0] ? __pfx_worker_thread+0x10/0x10 [ 943.209912][ C0] ? __pfx_kthread+0x10/0x10 [ 943.209929][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 943.209947][ C0] ? __pfx_kthread+0x10/0x10 [ 943.209962][ C0] ret_from_fork+0x51b/0xa40 [ 943.209982][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 943.209999][ C0] ? __switch_to+0xc82/0x1410 [ 943.210018][ C0] ? __pfx_kthread+0x10/0x10 [ 943.210034][ C0] ret_from_fork_asm+0x1a/0x30 [ 943.210058][ C0] [ 947.086137][ C0] net_ratelimit: 14179 callbacks suppressed [ 947.086160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.086350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.092633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.104404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.116453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.129443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 947.140408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.153730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.164155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.176252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.095945][ C0] net_ratelimit: 17347 callbacks suppressed [ 952.095966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.096722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:71:ca:1a:b2:37, vlan:0) [ 952.102394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.115152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.126209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.138231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.150250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.162066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.173872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.185905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)