last executing test programs: 27.376992809s ago: executing program 3 (id=6030): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000000091df4e7626dd8bb5e7b92c03d48e4c203ffffff000000000008000540000000000c00048008000140000000000900010073797a3000000000240002001400018008000100e000000208000200000000000c0002800500010000000000"], 0x58}}, 0x0) 27.068015834s ago: executing program 3 (id=6031): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001780)={0x2, 0x400, @status={[0x9, 0x8, 0x87, 0x8000000000000000, 0x80, 0x4]}, [0x3, 0x98d4, 0x2, 0xffffffffffffffff, 0x42, 0x0, 0x3, 0x9, 0x5, 0xe8f, 0x40, 0xc, 0x810, 0xd, 0x6, 0x7, 0x7, 0x8000000000000001, 0x2, 0x5, 0x200, 0x80000000, 0x10001, 0x3, 0xf74, 0x3, 0x2, 0xfdfffffffffffffd, 0x8, 0xe3a, 0x4, 0x200000000009, 0x4, 0x6, 0x1, 0x1, 0x9, 0x7, 0xffffffffffffdff8, 0x5404, 0x9, 0x1, 0x5, 0x1008, 0x9, 0xffffffffffffff25, 0x6, 0x0, 0x38, 0x0, 0x9, 0x4, 0x8, 0x9, 0x8, 0x9, 0x10, 0x2, 0x10000, 0xe, 0x3ff, 0x3, 0x10000, 0x8000]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001780)={0x2, 0x400, @status={[0x9, 0x8, 0x87, 0x8000000000000000, 0x80, 0x4]}, [0x3, 0x98d4, 0x2, 0xffffffffffffffff, 0x42, 0x0, 0x3, 0x9, 0x5, 0xe8f, 0x40, 0xc, 0x810, 0xd, 0x6, 0x7, 0x7, 0x8000000000000001, 0x2, 0x5, 0x200, 0x80000000, 0x10001, 0x3, 0xf74, 0x3, 0x2, 0xfdfffffffffffffd, 0x8, 0xe3a, 0x4, 0x200000000009, 0x4, 0x6, 0x1, 0x1, 0x9, 0x7, 0xffffffffffffdff8, 0x5404, 0x9, 0x1, 0x5, 0x1008, 0x9, 0xffffffffffffff25, 0x6, 0x0, 0x38, 0x0, 0x9, 0x4, 0x8, 0x9, 0x8, 0x9, 0x10, 0x2, 0x10000, 0xe, 0x3ff, 0x3, 0x10000, 0x8000]}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000002480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x61e4945a68697781}, 0xc, &(0x7f0000002440)={&(0x7f0000002580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x20024045) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000024c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=r5, @ANYRES16=r3, @ANYRES32=r6, @ANYBLOB="702e6439d5a69b04f14d1f71f1b4f066f347a4958a4feec1c70d2e0f2a80a7436fba05b200f6db30149178762399307d601a6b6d85a10522ceece705e5b7a93f1382f4b91a180fe4fa138b5e8f0faf902497d515e2150969593cde6efd826bc24e26a75d9ccda8e995326a1ebd1f1ef745e0677c158746756daedd7efd8d3a25676f4259c652fa5698dd686ef20b82"], 0x1c}}, 0x8800) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000024c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=r5, @ANYRES16=r3, @ANYRES32=r6, @ANYBLOB="702e6439d5a69b04f14d1f71f1b4f066f347a4958a4feec1c70d2e0f2a80a7436fba05b200f6db30149178762399307d601a6b6d85a10522ceece705e5b7a93f1382f4b91a180fe4fa138b5e8f0faf902497d515e2150969593cde6efd826bc24e26a75d9ccda8e995326a1ebd1f1ef745e0677c158746756daedd7efd8d3a25676f4259c652fa5698dd686ef20b82"], 0x1c}}, 0x8800) write$nci(r3, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x11) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf254100000008000300", @ANYRES32=r9, @ANYBLOB="0a23a6b3223b0f4c7eef1328352a9310c8ecae86a55ff5f0917e6b251fe80fc8e88b04cf1fd236b7d5842eab5c3fd654a29ef6697249a32a69948e72ee890704ab70b4ef444bd0708840fed5c4f8586065fba2921e0af7213e8ee59621d20b95607bf2c7cb2f00b921f7935ea0"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="9afa87eb7f111491e102e54a000000000000", 0x12}], 0x1}}, {{&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="ee05751810448c44d466ae74cbb04e29b94d921bcc026c4e54d5fd8cb14ce250f202303ad1", 0x25}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1d0}}], 0x2, 0x9200000000080040) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) close(0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x75, &(0x7f00000021c0)="e50ef30c305709a5ad045d4f55be8eeed0c0e48c22c43df5e8105f55182a84d260e3b1d2d8fb22c734bb4d2ad04ba94a208d6a4a4edecb4ce5caf1a02a0c33e203cc1a8a837a6952a9e06762e277c693c992057af2283342e270a505db26bd91fe4fae42a3adde864fb56c00d6a0c271df4e85704df315011ed872553707f0baa3cc17e22cb3af5f37824c678a5f22ad15e977fd55ad703ccc5fa0c21a9d0ea92d", 0xa1) 26.861116337s ago: executing program 3 (id=6035): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) ioctl$FIOCLEX(r2, 0x5451) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xc}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000009b0b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x400, 0xe66e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r8, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="6000000008060101000000000000000004000004050001000700000005000100070800000900020073797a3000000000050001000700000005000100070000000900023100000000050001000700000009000200ab797a3200000000f74274d1f3e59e19332ecbadb0c4ff8cd34174de9106698e297de1dc27432c991545f8e93278bb6cb5f0045ebe8243d6aa460e5f12525845abde03952135fef8f432574bd167b556acf962a9fa64025c9bdc4bfd520156abdd9ba7d4c4"], 0x60}, 0x1, 0x0, 0x0, 0x40984}, 0x80001) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xa8}}, 0x0) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x8}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 25.966196854s ago: executing program 3 (id=6047): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000d0a01030000000000000000050000000900020073797a32000000000800040100000000090001"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002640)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x35, 0x6, "f85056c5909574f553070aaff396895e5d05f06aafaedca2c477a76bf630e8a146d50077ff6862b53d53f70c4fa8239da2"}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x777eeaea}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x302b662f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b37a2a3}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELSETELEM={0x1fc0, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa2fb51f091359a80, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1fac, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x4e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x11c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x4c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x300, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xcd}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x25c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x248, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x244, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "307af4e7e6f4ad23ebbf694467dde6ad86994096c337a75ca40f1a35e40426c773c345a43b9581e14882887f6231e5956468a489ec757ab41f7a51e0c78ecf70a34516122b4b27ca73e7e7f33f54c89c2776ec9059cbbeeb4b5312279ff646da3a49f6bfdc6dbea577748cd53ee39e07a75209ded3265926a8fbbc63a71bd6bba9f41e5ed9aabb93afef2ad46e1d13b87acb246ed41cb878309774d62b"}, @NFTA_DATA_VALUE={0x6b, 0x1, "bb71ed43341bc5c0f32d7084bca2789f3c28f1c6ee8529095caa554577023a3f32bf8fe8559df439097691e8136536df2442ab370634ac94644d16aa7a1b5627d0da2af628c9290b87253d0985f4414c97192178083c61f6fa02a907efd26b5d9394f2bf07b5d3"}, @NFTA_DATA_VALUE={0x32, 0x1, "baf7dc69608a92405dbcb2cd758017c391605e796ba55377a88a6165d19e070aabd62fb1c311dddcd6a892879c8f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "e08ab8b821975293aef014dff038065b40c0a426c35d7b6389735f34e141a8eef5ab4e97a31f61aa1b48f602eff5d07d72eb38af8628816260ad155d86871b52e98ef19b59660d44d0201967235d949134787f6ecd5e0063d4af07f5bf268fa3de7073efa308cfa860bddf94d13f0a23d874ebd130d9cb2bba7c24238c73a21490b468ea823e31866dc24238906b99e0c31204c7a6c117c94c24b316357f8806a5247794b0c38e1bae212b8bb761256b08ad4e442029770bfeb8424e5b95373a362b26ad0557c30595ccaf69d0c523793b1f5ac02e1f7bcae587c24b7e88777b4f8b"}]}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xba, 0x6, 0x1, 0x0, "e5fdc75eb1b565fc7c871a4c96f99471d1cb2a6cfa233d3a457a4ec88d1152f8b75b8a3a0b9523fa261d0a820733686c689911e56bbce1bc60a4d9d38a10b63b2c0bd625d0677053d0bd5f4ce28f7ec59954cd892a20fd457ac66f1a85b66788eac0d803bc6b6c7a4afc8ad70eb3c9648d3b6e217a267c8295647341e618c6f881dcf6028666db5035e626f9941ddfef8eb275e74e2c134d61e2c027482e330ff1124d3fe6f3d9ad6696569a8641172e6133050c8040"}]}, {0x174, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "898453e906f453553788650bc92249915c8d2a9a6f3d9b005bfd34133a23b63bb1e7fff9a6c10e50ec5606adb585d4806c9d3b59b4e541e916c33b029f96b43fac04aa79f0876666880767d16b197b50f070da3156bdad58dfef08bbfa658c1e71b0722300deb2b31f855ff7bb118cb20a971e2caaefc241647444fd3398cf1b053b6e292593beba648f4d13b628655f7964fb582b0407fb220fb65ca6fad33ed7ffda7d6fc8179b5ca580a63c4b7c357726e0f1c4e281ae08be2a835a1f907ebbe5592cf73ef88955d021b258123243a40771f11323fcacb39a68b3cb4f19e4889a1c35e3"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffff01}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x17, 0x1, "81f71ac04c4d912c3c0987a0fd31a7fcdb4647"}]}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x3d, 0x1, "3587d64823b6e116675f4c22fad04a2f26c526284536688a0525330b26368f5a64b87a5d3b9682c28b28447fe4a2dfbff2d62f9e636b696204"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x88c}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "f82a3944a9649b1b14059787438339670aa88a06d2a28fdc7f46f0cabe503b366949086f174c0ef9093a8d757f6731e44e22185ef89ef03eaaa318cc38915cf86da360d4d863bcb283b26129e8639e62c52df7583abac83459603a9079483b3c8fc3f027bcc9519eb5dc08afbae93c0b8e617ca44296060be4a0b568e7fad5f7fa02ed6855f3dbdfd1cb326306c243e1ab69a1c4854f853c367431ead59d36b58eab728f9bcd2b37e43316d19e723c5ef7"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x44}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x1310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa6, 0x6, 0x1, 0x0, "e3685f25bdd0bfc5d9944ed3a64b71c18628f46742822837759d331fbb5e99ed0c3339ec0f919890cb5e6c66442b5cad6bc870cf94aeb03adec8c66cd9aba8451c8cd1b82cd431b39630b1d8c82c64a51dcb9c4db027704328e5aa269cd36a94defa391ffb245f0f7a14c6f0dff1dd672c5d90902605c5a9403b34a7b4567330530d049ec28fbf013eabab3b6679ee31967a35a0923b8b17c45b51f7b99a4e3b8a96"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0x1254, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "a961370e100cdd5c2c492016f352234f33e8d696b8a2bcfa56bcebf51b793ca9d187e2271772840a425cb9723e42aaa5ce189c04669765c9f59c32ed99d6e3d3bb6fbd97796e31da8c8210e17786bd1801427bb2cc4dec9f18fb180f84e61b882add5e579e9112732ddec918e1cb0ecf2c73feaef41a19628c5b9f701e34ee1372994cc732aa72e7aa20ac71e4320efd1621a24cb446c3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x3f, 0x1, "97fc107359e9c3ac062b1f84a3fab15b5534202497815bc93b2ddf39118d5815edc0d8f978618fa1dfaa8b865de0e54b4da383131cf67b5abee957"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "644ae50b1a96476f0222c50906a9d5caf250cebcd20267af4d9032537a65cbdbf498d491f0d8d83e06308b0305c37bf8d9e928e721003cb2e712382c84446ed8eb21b9712e4b638945ff2ecc282ca1bddd7ea1d50fab90aa35b5e85d8ee5b4feb12fbebefc0834aac4aac4379e07412e956f8ff8210d170bbba86b8ce993e5bc5111a747d74b9c7e4956101b3a9fa3f7c13faad93b822a14d9e9d3743a132820e411a230debc7d39f06a374ee6f36167d508e78d09d9751ccaac81af04b5ec0569d06001a8319a3d1033d451a69ce1b4ac10142d0448adcd6f9e7b824c91f98cdac763e0c0e0e359e904bcfae50888b7af50cb94"}]}]}, {0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x83, 0x6, 0x1, 0x0, "3de153cc45ef06e0f9ebdf67890df5f7bfda6f29aad52fcf01a0eb167f7c4f48d96670a7ad204006d1be1d8827877e73b1c215f680ddfc3cdeecde3ce42436ea17fd59ca4714dd1fdd127ca2b152c5d8845b6685636b4e456d0082ad418b94c64eee2214ac0c885dbb8e88cb8026dafd3eb614da5b9c600d4fd39d5c4f070a"}, @NFTA_SET_ELEM_DATA={0x348, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "275769e5345fcdf5b1b82931904d3a2cee2fd623b4173e790678056287633cc229fd0c9d2575bcdde4eefe92c1e54dc2802a129f9fd4b4fc32233f94915b62d1875bc9c4ebf8396ca44199fd35e163a25d944bc986e63e24d381f62cd487ed4e8230e22980e8eb224f330cb29d013bffe0f3f3ece052913aa70aecd7e686de390417321e0e24a8fb9aa886745dfb7d6ee30457cea0c20935bb5cf9460f3ca348e8"}, @NFTA_DATA_VALUE={0x89, 0x1, "53dc4ff90307490a8e7e596167716afbea1267150dfa029b7343ace10fa346eacd0bb40a4d28871a1645cf2ba3aef52cb891b478f33b175343268373300eb1474f10bf28d84bfbce0cc510a2a0c0f7046b48d629d8ce4b89e8c49695d2cc297734ac28701714234ce631d28c1ece92eeb3a9b06a59ef4e4a436199f381e7ecb546bb350e75"}, @NFTA_DATA_VALUE={0x39, 0x1, "b8b509b25e50c2a13f0f3a08bc995eff7368b0bb0e54a029e57e3f6b96e4fb9b34b2975f334d95c425aba065c01f1f9785b600d5cd"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2b, 0x1, "834ed73ebc5d513cee5c8a9aa711bd730c4911a38de808756cd5f770421cab0b87aa34c364effe"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "11462345c66f8aaf8b019028762fcf856b3bd4de842d2bc84876781c0bec2058ab47c6c7b075d2b7f05f614ca9823b5e29016bc4444e2ed02158c7370516efbc5a9d8fb0611ba1c373817c94aa572221fd08e20567bd83352f8c5c8e79b6196ad669c9e8329cd0b8b8c679e6389c33ba7a0cbe3b648169126554e405bef5b5f9da92af4ff6ba3acd3e4fd3ab8b9ddf625024bac3d03d2003660dd1900de7"}, @NFTA_DATA_VALUE={0x9b, 0x1, "adbda4fa752e2b525af048584ee51282af9672c9d3fd157b8e24b82f3ae119f29d057542c9bf7b93b4a0e1d1fef20f19ea9eedbee3929150b8bd25ab6fc344e2f2987a072fa9b21e87cec93224231d78c96bc0e966e0fdad916065d1108570ff67ff4e5536f1a68071b233de41592ec108610a0235dedde0217a371890f9ba2e3feb9e95c33288e03218e722f31f8b72a8c01818a2be6b"}]}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x212c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000010) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000140)=0x23, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffeb21871190c832fffffc0c00098008000140000000010800084000000001140000001100010000000000005b61b779014d8b"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 25.755328866s ago: executing program 3 (id=6052): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16], 0x294}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x141, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r6, 0x0) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0x4008081) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000400ac14140008000200"], 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000200001002dbd7000000000000a801040000000080000000014000200fe9d00000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000680)={@rand_addr=' \x01\x00', 0x69, r7}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114300000000030000000000000000b7000000000000009500080000000000a900001200000500"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 24.41730978s ago: executing program 3 (id=6056): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$unix(0x1, 0x1, 0x0) (async) listen(r0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) 21.356279501s ago: executing program 0 (id=6098): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) (async) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8805, 0x2, 0x0, 0xc, 0x6]}, &(0x7f0000000140)=0x54) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) listen(0xffffffffffffffff, 0x7fffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) (async) write$tun(r3, &(0x7f00000001c0)={@void, @val={0x3, 0x3, 0x2, 0x7, 0xc, 0x33}, @x25={0x1, 0x0, 0x9, "43ae95a8ad5738cb1ef850516e50908658ff124c42be0f4007b34bd3010f875360e79f8aa40bb0062d43e6c78ca478e1afb81f5cbd1a6f3c9bb281f471c1e580e3c04751c2a72c0321065fc264614ce05772d4cc6d1029e2a2cf88bd3c0c4429923fcae176438e657ea49de14cbd390b8abb645d312cef1823a3d872fe06dfd720f582f0ba7da4312c4d9f1f4857beccbec0597d63ecacdd0390ed0d4e74e7c94239d3d8ae3a2ea14a60a4908ebd6a09eb309e087ad11fd1d5dd49c2bd81c406031f9b26e6dd91840c754a99320bc5903551ce"}}, 0xe0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012803f00010065727370612f580c9500028006000f000000001a0400120006001000000000000600110000000000e545e6c472b9c4f3aba99004a6c9b17ffcf3b614fe0c77e50872328e2fe8e4ded850e45265691ddfaa2997335338b02bfc11446c450f2ee8eff5ec75f98fd8c791ad9c519ee3e4818252a1023022dc841328638e8fbf0d00a992e05a8dcc20113ad83941624e270e8502e9aca0f517"], 0x50}}, 0x0) 21.288588616s ago: executing program 2 (id=6101): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa797, 0xb, 0x20000000, 0x1000005}, 0x4f, 0x5}, [{0x0, 0x3, 0x9, 0x1, 0xf, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x7fff, 0x6, 0x7ff, 0xa1}, {0x6, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x6, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x400, 0x7, 0xfffffffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x1, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x6, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0xfffff1ad, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x9, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x3, 0x30000000, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x1, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x8, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8002, 0x3}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x78b83211, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24dd3}, {0x7, 0x3, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x1, 0x2, 0x0, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x200}, {0x7, 0x1, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x4, 0xe, 0x9, 0x8, 0x457}, {0x9, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x7, 0x1, 0x100}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x4, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x7, 0x71, 0x0, 0x9}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x9, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0xf3, 0x4, 0x4, 0x4, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0xd, 0x8, 0x7, 0xa, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x7, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0x1ff}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x1, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0xa}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0x1, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x9}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 21.151706317s ago: executing program 2 (id=6102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) close(r1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f00000004c0)={r5, &(0x7f00000001c0)='syzkaller0\x00', 0x20000, &(0x7f0000000280)={@_ha_fsid={[0x4]}, {0x1, 0xa, 0x4, 0xffffffffffffffff}}, 0x3, &(0x7f00000002c0), &(0x7f00000003c0)=0x13}) splice(r4, &(0x7f0000000140)=0x7, r6, &(0x7f0000000500), 0x5, 0x1) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 20.409337458s ago: executing program 2 (id=6110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x11, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) 20.017382891s ago: executing program 4 (id=6115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003800c00029905000100000000002c00018014110300fe8000000000000000000000000000bb14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c000280050001"], 0x90}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) 19.77129794s ago: executing program 0 (id=6117): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="94", 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x709) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000a422880bbb49d148ec5be200"/39], 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0xffffff11) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r9, @ANYBLOB="04002cbd7000fedbdf251b000000b80022803400008008000100070000000800060010000000080005000600000008000500090000000800060001000000080005000101000014000080080002000500000008000500030000001c000080080002000600000008000300000100000800060090a40000340000800800020038000000080006000100000008000300000004000800070005000000080003000600000008000300000000001c000080080002003f4600000a00050009000000080001002a0b000008009a000100000008009a00020000002322f3a09e1d7db04455610d311cff930a5f150aa75816863efe5adcc14fa64b82f037de23df10636464f33c6897b9e5545d8c58f2062251582c9186a7846053b24049c388f0cff75b4c93de889634ab7d2b48c1517c81ec08c37dd3e43534c84ae6e239d8caeb7dca2f5bf34f6951b37ef9849bbf8e42c5d6e3052cfdf83b98428a4b52799d63b0056b1f5d411b0f02320ea25e8cce39628eef49bce80d"], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000804) tee(r0, r3, 0x8f5, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 19.725362525s ago: executing program 4 (id=6118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) 19.580361789s ago: executing program 4 (id=6120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008b00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in=@loopback, 0x4e24, 0xb638, 0x4e22, 0x0, 0xa, 0xa76ed405d8e1b3fe, 0x20, 0x1d, r3, r5}, {0xa0b, 0x6, 0x5eea, 0x9, 0x8000, 0x0, 0x2, 0x2}, {0x7, 0x6, 0x2}, 0x5, 0x6e6bbc, 0x1, 0x1, 0x2, 0x2}, {{@in6=@mcast1, 0x4d3, 0xff}, 0x2, @in6=@mcast1, 0x3505, 0x0, 0x0, 0xb3, 0x9, 0x7, 0xaaba}}, 0xe8) getsockname(r4, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000440)=0x80) 19.461318999s ago: executing program 1 (id=6121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000026b82bd90000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmmsg$inet6(r1, &(0x7f0000000040), 0x0, 0x20000841) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a800a88800", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400081000000db050000007f0000000000000000", @ANYRESHEX=r0, @ANYBLOB="c486070000000000180012800b0001006970366772650000080002800400120008001f0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 19.460751055s ago: executing program 0 (id=6122): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000080), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r4, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r4, 0x1, 0xe9, 0x6, @local}, 0x14) r5 = socket(0x18, 0x5, 0x1) accept$packet(r5, 0x0, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0x1, 0xa}, 0x6c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x20) close(0x4) getsockname$packet(r5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x1b8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}, 0x4000000) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 19.3707371s ago: executing program 1 (id=6123): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000000)="e6", 0x0}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x9, &(0x7f00000001c0)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r2}, @ldst={0x1, 0x2, 0x6, 0x7, 0x4, 0xfffffffffffffff8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) 19.251178286s ago: executing program 0 (id=6124): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf2502000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2300, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getpeername$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000b00)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=@delpolicy={0x0, 0x14, 0x100, 0x70bd29, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@empty, 0x4e21, 0x7f, 0x4e24, 0x8, 0xa, 0x0, 0x20, 0x2e, r6, r7}, 0x0, 0x1}, [@proto={0x0, 0x19, 0xff}, @srcaddr={0x0, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @encap={0x0, 0x4, {0x0, 0x17, 0x4e22, @in=@remote}}, @proto={0x0, 0x19, 0x2b}, @XFRMA_SET_MARK={0x0, 0x1d, 0x1}, @migrate={0x0, 0x11, [{@in=@broadcast, @in=@remote, @in=@multicast2, @in6=@local, 0x2b, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x1, 0x0, 0x3507, 0xa, 0xa}, {@in6=@loopback, @in6=@mcast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0xff, 0x3, 0x0, 0x3500, 0x2}, {@in=@private=0xa010101, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0xff, 0x3, 0x0, 0x3505, 0xa, 0x2}, {@in=@remote, @in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x33, 0x0, 0x0, 0x3501, 0x2, 0x2}]}, @coaddr={0x0, 0xe, @in=@multicast1}, @policy_type={0x0, 0x10, {0xf6d3725fc4275a7}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c000) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xc8, 0x8e, 0x64, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x6, 0x532b}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0xd, 0x7, 0xad, 0x1000, r0, 0x5, '\x00', r9, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010200000000000000000200000305000100070000000900020073797a31000000000500040003000000050005000300000011000300686173533a69702c706f72740000dc87d1e45f352107cdd68bc879347dfb30"], 0x4c}}, 0x8080) r10 = socket(0xa, 0x1, 0x0) close(r10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r10, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000802000000000000000000000000000000000000007202a611"], 0x30}], 0x1, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r12, &(0x7f0000000000)="41000200010001", 0x7) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) 19.192639963s ago: executing program 1 (id=6125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x40}]}}}]}, 0x5c}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='ip6erspan\x00', 0x1c000, &(0x7f0000000040)={@align=0x6, {0x9, 0x0, 0xd, 0x4}}, 0x74, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000300)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x84d4}, 0x80) 19.192206731s ago: executing program 4 (id=6126): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmsg(r3, &(0x7f0000001400)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/6, 0x6}], 0x4}, 0x10000) (async) recvmsg(r3, &(0x7f0000001400)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/6, 0x6}], 0x4}, 0x10000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52}, 0x20) recvmmsg(r3, &(0x7f0000004e00), 0x0, 0x4030, 0x0) 19.139088149s ago: executing program 4 (id=6127): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) recvfrom(r0, &(0x7f00000000c0)=""/145, 0x91, 0x40010000, &(0x7f00000002c0)=@nfc={0x27, r5, 0xffffffffffffffff, 0x3}, 0x80) 19.04204034s ago: executing program 1 (id=6128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff933, 0x0, 0x0, 0x0, 0x8001}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001380)={0x3, 0x1, 0x400, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000013c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000001400)=[{0x2, 0x4, 0x5, 0x9}, {0x0, 0x2, 0xa, 0x1}, {0x5, 0x3, 0x1, 0x4}, {0x2, 0x3, 0x10, 0x6}, {0x3, 0x4, 0x12}], 0x10, 0x7ff}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001540)={r1, r0}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="8759183b471d50cbe03f1d41bc87e7cf978d89422a6ce8", @ANYRES32=0x41424344, @ANYBLOB="50000000907800005e4cd36bb96bd2b9"], 0x0) 18.945462676s ago: executing program 2 (id=6129): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) 18.945087613s ago: executing program 0 (id=6130): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0004295e4379bb93321829f03f35"], 0x14}}, 0x0) 18.944869851s ago: executing program 1 (id=6131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x8080) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x4810) 18.879308001s ago: executing program 1 (id=6132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) socket(0xb, 0x3, 0xfffefffd) (async) r2 = socket(0xb, 0x3, 0xfffefffd) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x40082, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4f0}}}, 0x108) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x40082, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4f0}}}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x8, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r8, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r8, @ANYBLOB="01002cbd70000400000005000000080009000200000065229045a50a000008000b0000000000060001000600000075cddc0fdc9e95264987c51e3effae13fe9f2bc6911abec75100a8966398eb1409909036697819e2f91e489a4402bb07326ca1a649721b8726971539a834550986a1485c5d7518c973c9b8ec420a96fb21a52726ba78f2a6e1eacae6abd6719482f316c6e454538b962f33d6f726a2ede678b156d0ea116dcdb82a4af6246f3142d3d738f24209c569e40ab45ef0aa858c16cccc80493ab96328ea29bd412b32906d37b6365bd098417ef7ba166d52176fdebd7ee1f502f28295a7e1bf77b3397102006c6998719c3e22d1ec1795f189a5cf60ab528626b77a998fbc16e3ecfd46309f200281c68135f546cae5ac375ea95c572a2ee5fe"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16=r2, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x1d, r12, 0x0, {0x1, 0x1, 0x2}, 0x2}, 0x18, &(0x7f0000000580)={&(0x7f0000000540)="45342fd5120a3e41d4", 0x9}, 0x1, 0x0, 0x0, 0x20000840}, 0x40815) (async) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x1d, r12, 0x0, {0x1, 0x1, 0x2}, 0x2}, 0x18, &(0x7f0000000580)={&(0x7f0000000540)="45342fd5120a3e41d4", 0x9}, 0x1, 0x0, 0x0, 0x20000840}, 0x40815) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r14, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x2, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x6c8000, 0x0) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) 15.99903896s ago: executing program 2 (id=6133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000009c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) 15.766554732s ago: executing program 0 (id=6134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000390400000000fdff050000008000", @ANYRES32=r4, @ANYBLOB="01980000000000002800128008000100677265001c00028006000e000200000008000700ffffffff06000f00fe"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) sendto$packet(r1, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c86", 0x2d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0xc000) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r6, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 15.765159982s ago: executing program 4 (id=6135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x3c0, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x250, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']*/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '(/.\xb1^:^@]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x174, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf033}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '@\\&\xd8.,\')+,[#(\xfd\x8e\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{[\\$$\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '^/\'#{&{$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xb1&^:)\x86\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff7bb}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']-/[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&-$*#%}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '()++*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x212}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x22, 0x4, "9287412e3bbaa95e687b220cd77b38f855f490086a6daad73db4dbc29f06"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x19, 0x5, "cc354874ea68df12f5d72a13ed4a2894a1589b0198"}, @ETHTOOL_A_BITSET_MASK={0x7d, 0x5, "85d5dcfed69667a95d2f83400e28397043fff55672c97e5c7d0c5d7bbd4a824a808dde86a2027bbc61ce2d7296c144eaaf0120e956706c289ef4af8cb1456bde101cee22c1e9aed357a7b778061377de7776459edfdca63d23edd73de44a13014f11bc8de32bfb9e7c141079f0225b1ae428898eed0d24bb96"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x50}}, 0x4000800) (async) r4 = accept(r1, 0x0, &(0x7f0000000740)) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000780)={0x14, @empty, 0x4e20, 0x1, 'lblc\x00', 0x8, 0x7, 0x47}, 0x2c) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x2, 0x7, {{0x28, 0x4, 0x1, 0x2d, 0xa0, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x8, [{@broadcast, 0x3}, {@multicast1, 0x3}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x773bc225}]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0x5, [0x31ac]}, @noop, @noop, @ssrr={0x89, 0x7, 0x8d, [@local]}, @lsrr={0x83, 0xb, 0x6f, [@remote, @broadcast]}, @generic={0xaa42365c120ce4bd, 0xa, "1fc3b327e234c8d8"}, @timestamp_addr={0x44, 0x2c, 0x2d, 0x1, 0x3, [{@loopback, 0x3}, {@broadcast, 0x9}, {@local, 0x9}, {@remote, 0x5}, {@broadcast, 0x6}]}, @rr={0x7, 0x7, 0xb5, [@remote]}, @cipso={0x86, 0xe, 0x3, [{0x7, 0x8, "e2baf6c7ed66"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x74, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000c80), 0x4) (async) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000cc0)=@gcm_256={{0x304}, "ba5d1df885fcaf50", "39dfcca37339b16c9bb18054f4baef97d7162c084f5f657a3f15960baa380bb7", "8b5bfeae", "f14ad3996c2c2a6c"}, 0x38) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4400) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x1412, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x20000010) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001000), r4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r10, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x20040000) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r9) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r1) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xd0, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6e47fd89}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4c054) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000001600)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0xdc, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_USERDATA={0x77, 0xd, 0x1, 0x0, "6a5d35b2faf45048398f2a6399f8b3ff361f7cbc887dd69ea1a1211c3f3a04d4bf07571ede161c947fda04b7ef0a967285c57882ba50c228343eaa0d163cd218bf30dbb9b70f73b811c179cfee803f5f106ead88bc9ee55e25c6343f023099a5a06fc63b5d140c0a837a681882210a32d386ff"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf4, 0x6, "509c0acc7e04eab03b67a4d20564f50617f05aed6fe7d1b928c0c0453f3e30c3baeb481c858ba92aedf68b10911cfd7894f1bfb5c17b21acc65e6f621d43610a21b48db8e6218f71ed9118068ac0857a7ebe85b5fb404e1276b2452ae24adfb1dcbe217e332e6d9fd2ee0af28b7452b80d4d4d8288f6143e06e74886d7b5a3b70e068dcacd202c6617da10d61230f3d587753325d188784571482164ece8f8b5b78b53ed760a2fb5fa36b71cdf685b40f921d1c1c99d9f2569c5b02d309aa71ba93cdd1374c52741c90a9bf1363402a3082ded8cd136dadfe3282cab19319516be442f769515803de4ea97bf53ddeb2d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x218}, 0x1, 0x0, 0x0, 0x20048880}, 0x20000004) (async) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000001640)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x0, 0x5, 0x6e, 0x400, 0xde16, 0x40010104, r6}) 15.733368908s ago: executing program 2 (id=6136): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x34}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000000000000000000009e652ce6b3d7774ce5dd20d3543b8f2e01591d1113d5b073", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback, r9, 0x2f, 0x2030, 0x4, @void, @void, @value=r10}, 0x20) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x6c, r12, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r8, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3.200181462s ago: executing program 32 (id=6132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) socket(0xb, 0x3, 0xfffefffd) (async) r2 = socket(0xb, 0x3, 0xfffefffd) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x40082, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4f0}}}, 0x108) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x40082, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4f0}}}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x8, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r8, @ANYBLOB="01002cbd70000400000005000000080009000200000065229045a50a000008000b0000000000060001000600000075cddc0fdc9e95264987c51e3effae13fe9f2bc6911abec75100a8966398eb1409909036697819e2f91e489a4402bb07326ca1a649721b8726971539a834550986a1485c5d7518c973c9b8ec420a96fb21a52726ba78f2a6e1eacae6abd6719482f316c6e454538b962f33d6f726a2ede678b156d0ea116dcdb82a4af6246f3142d3d738f24209c569e40ab45ef0aa858c16cccc80493ab96328ea29bd412b32906d37b6365bd098417ef7ba166d52176fdebd7ee1f502f28295a7e1bf77b3397102006c6998719c3e22d1ec1795f189a5cf60ab528626b77a998fbc16e3ecfd46309f200281c68135f546cae5ac375ea95c572a2ee5fe"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r8, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16=r2, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x1d, r12, 0x0, {0x1, 0x1, 0x2}, 0x2}, 0x18, &(0x7f0000000580)={&(0x7f0000000540)="45342fd5120a3e41d4", 0x9}, 0x1, 0x0, 0x0, 0x20000840}, 0x40815) (async) sendmsg$can_j1939(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x1d, r12, 0x0, {0x1, 0x1, 0x2}, 0x2}, 0x18, &(0x7f0000000580)={&(0x7f0000000540)="45342fd5120a3e41d4", 0x9}, 0x1, 0x0, 0x0, 0x20000840}, 0x40815) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r14, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x2, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x6c8000, 0x0) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) 158.701493ms ago: executing program 33 (id=6134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000390400000000fdff050000008000", @ANYRES32=r4, @ANYBLOB="01980000000000002800128008000100677265001c00028006000e000200000008000700ffffffff06000f00fe"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) sendto$packet(r1, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c86", 0x2d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0xc000) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r6, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 60.372103ms ago: executing program 34 (id=6136): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x34}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000000000000000000009e652ce6b3d7774ce5dd20d3543b8f2e01591d1113d5b073", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback, r9, 0x2f, 0x2030, 0x4, @void, @void, @value=r10}, 0x20) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x6c, r12, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r8, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 0s ago: executing program 35 (id=6135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x3c0, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x250, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']*/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '(/.\xb1^:^@]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x174, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf033}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '@\\&\xd8.,\')+,[#(\xfd\x8e\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{[\\$$\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '^/\'#{&{$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xb1&^:)\x86\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff7bb}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']-/[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&-$*#%}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '()++*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x212}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x22, 0x4, "9287412e3bbaa95e687b220cd77b38f855f490086a6daad73db4dbc29f06"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x19, 0x5, "cc354874ea68df12f5d72a13ed4a2894a1589b0198"}, @ETHTOOL_A_BITSET_MASK={0x7d, 0x5, "85d5dcfed69667a95d2f83400e28397043fff55672c97e5c7d0c5d7bbd4a824a808dde86a2027bbc61ce2d7296c144eaaf0120e956706c289ef4af8cb1456bde101cee22c1e9aed357a7b778061377de7776459edfdca63d23edd73de44a13014f11bc8de32bfb9e7c141079f0225b1ae428898eed0d24bb96"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x50}}, 0x4000800) (async) r4 = accept(r1, 0x0, &(0x7f0000000740)) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000780)={0x14, @empty, 0x4e20, 0x1, 'lblc\x00', 0x8, 0x7, 0x47}, 0x2c) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x2, 0x7, {{0x28, 0x4, 0x1, 0x2d, 0xa0, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x8, [{@broadcast, 0x3}, {@multicast1, 0x3}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x773bc225}]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0x5, [0x31ac]}, @noop, @noop, @ssrr={0x89, 0x7, 0x8d, [@local]}, @lsrr={0x83, 0xb, 0x6f, [@remote, @broadcast]}, @generic={0xaa42365c120ce4bd, 0xa, "1fc3b327e234c8d8"}, @timestamp_addr={0x44, 0x2c, 0x2d, 0x1, 0x3, [{@loopback, 0x3}, {@broadcast, 0x9}, {@local, 0x9}, {@remote, 0x5}, {@broadcast, 0x6}]}, @rr={0x7, 0x7, 0xb5, [@remote]}, @cipso={0x86, 0xe, 0x3, [{0x7, 0x8, "e2baf6c7ed66"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x74, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000c80), 0x4) (async) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000cc0)=@gcm_256={{0x304}, "ba5d1df885fcaf50", "39dfcca37339b16c9bb18054f4baef97d7162c084f5f657a3f15960baa380bb7", "8b5bfeae", "f14ad3996c2c2a6c"}, 0x38) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4400) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x1412, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x20000010) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001000), r4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r10, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x20040000) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r9) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r1) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xd0, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6e47fd89}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4c054) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000001600)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0xdc, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_USERDATA={0x77, 0xd, 0x1, 0x0, "6a5d35b2faf45048398f2a6399f8b3ff361f7cbc887dd69ea1a1211c3f3a04d4bf07571ede161c947fda04b7ef0a967285c57882ba50c228343eaa0d163cd218bf30dbb9b70f73b811c179cfee803f5f106ead88bc9ee55e25c6343f023099a5a06fc63b5d140c0a837a681882210a32d386ff"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf4, 0x6, "509c0acc7e04eab03b67a4d20564f50617f05aed6fe7d1b928c0c0453f3e30c3baeb481c858ba92aedf68b10911cfd7894f1bfb5c17b21acc65e6f621d43610a21b48db8e6218f71ed9118068ac0857a7ebe85b5fb404e1276b2452ae24adfb1dcbe217e332e6d9fd2ee0af28b7452b80d4d4d8288f6143e06e74886d7b5a3b70e068dcacd202c6617da10d61230f3d587753325d188784571482164ece8f8b5b78b53ed760a2fb5fa36b71cdf685b40f921d1c1c99d9f2569c5b02d309aa71ba93cdd1374c52741c90a9bf1363402a3082ded8cd136dadfe3282cab19319516be442f769515803de4ea97bf53ddeb2d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x218}, 0x1, 0x0, 0x0, 0x20048880}, 0x20000004) (async) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000001640)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x0, 0x5, 0x6e, 0x400, 0xde16, 0x40010104, r6}) kernel console output (not intermixed with test programs): 6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 406.108468][T23376] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 406.127806][T23376] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 406.157738][T23376] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 406.185738][T23370] veth0: left promiscuous mode [ 406.198282][T23379] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5047'. [ 406.199035][T23376] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 406.579608][T23399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5054'. [ 406.714691][T23399] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 406.735469][T23399] bond0 (unregistering): Released all slaves [ 406.744181][T23406] openvswitch: netlink: Key type 30 is not supported [ 406.766673][T23408] netlink: 'syz.4.5057': attribute type 4 has an invalid length. [ 406.801821][T23405] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 406.841375][ T8605] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 407.534409][T23453] Cannot find set identified by id 3 to match [ 408.197853][T23443] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 408.507096][T23492] SET target dimension over the limit! [ 408.611490][T23499] team_slave_0: left promiscuous mode [ 408.641003][T23499] team0 (unregistering): Port device team_slave_0 removed [ 408.675319][T23499] team_slave_1: left promiscuous mode [ 408.709880][T23499] team0 (unregistering): Port device team_slave_1 removed [ 408.847286][T23517] netlink: 1116 bytes leftover after parsing attributes in process `syz.3.5079'. [ 408.871154][T23520] 8021q: VLANs not supported on nlmon0 [ 408.963094][T23525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5084'. [ 409.146883][T23540] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 409.290537][T23551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'. [ 409.301053][T23551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5094'. [ 409.416256][T23558] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5096'. [ 409.607313][T23564] lo speed is unknown, defaulting to 1000 [ 409.681051][T23569] bridge6: entered allmulticast mode [ 409.759746][T23574] tipc: Failed to remove unknown binding: 66,1,1/0:2574949870/2574949872 [ 409.783147][T23574] tipc: Failed to remove unknown binding: 66,1,1/0:2574949870/2574949872 [ 409.790238][T23571] netlink: set zone limit has 4 unknown bytes [ 410.024479][T23589] netlink: 'syz.0.5106': attribute type 1 has an invalid length. [ 410.174257][T23589] 8021q: adding VLAN 0 to HW filter on device bond7 [ 410.220123][T23591] bond7: (slave geneve3): making interface the new active one [ 410.236378][T23591] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 410.360858][T23615] __nla_validate_parse: 7 callbacks suppressed [ 410.360878][T23615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5111'. [ 410.632856][T23626] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 410.738924][T23635] bond0: option fail_over_mac: invalid value (16) [ 410.768678][T23635] bond0 (unregistering): Released all slaves [ 410.892379][T23650] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5122'. [ 410.942249][T23651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5123'. [ 410.957788][T23650] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5122'. [ 410.966844][T23648] syzkaller0: entered promiscuous mode [ 410.972989][T23648] syzkaller0: entered allmulticast mode [ 410.982075][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5124'. [ 410.996690][T23653] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5124'. [ 411.038265][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5124'. [ 411.547123][T23673] syzkaller0: entered promiscuous mode [ 411.560188][T23673] syzkaller0: entered allmulticast mode [ 411.695600][T23693] syzkaller0: entered promiscuous mode [ 411.701961][T23693] syzkaller0: entered allmulticast mode [ 411.781669][T23702] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5138'. [ 411.787892][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5137'. [ 411.843432][T23707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5138'. [ 411.928431][T23708] bridge7: entered promiscuous mode [ 411.943811][T23708] bridge7: entered allmulticast mode [ 412.015485][T23664] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 412.156386][T23719] netlink: 'syz.2.5142': attribute type 1 has an invalid length. [ 412.859310][T23761] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 412.874340][T23762] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 413.100894][T23777] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 413.152248][T23780] x_tables: duplicate underflow at hook 3 [ 413.610037][T23822] netlink: 'syz.2.5170': attribute type 6 has an invalid length. [ 413.827335][T23839] netlink: 'syz.0.5175': attribute type 10 has an invalid length. [ 413.925747][T23847] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 414.082540][T23860] syzkaller0: entered promiscuous mode [ 414.100334][T23860] syzkaller0: entered allmulticast mode [ 414.167305][T23862] netlink: 'syz.0.5181': attribute type 4 has an invalid length. [ 414.524773][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.630811][T23884] tipc: Enabled bearer , priority 0 [ 414.638461][T23884] syzkaller0: entered promiscuous mode [ 414.644848][T23884] syzkaller0: entered allmulticast mode [ 414.655303][T23884] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 415.130146][T23890] tipc: Resetting bearer [ 415.238715][T23892] bridge_slave_0: invalid flags given to default FDB implementation [ 415.260320][T23883] tipc: Resetting bearer [ 415.291649][T23883] tipc: Disabling bearer [ 415.307513][T23909] netlink: 'syz.3.5195': attribute type 3 has an invalid length. [ 415.465040][T23911] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 415.478375][T23921] __nla_validate_parse: 17 callbacks suppressed [ 415.478397][T23921] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5199'. [ 415.506440][T23911] bond0 (unregistering): Released all slaves [ 415.566863][T23925] netlink: 'syz.3.5200': attribute type 1 has an invalid length. [ 415.581076][T23922] syzkaller0: entered promiscuous mode [ 415.598045][T23922] syzkaller0: entered allmulticast mode [ 415.611822][T23915] netlink: 'syz.0.5197': attribute type 1 has an invalid length. [ 415.634970][T23925] 8021q: adding VLAN 0 to HW filter on device bond8 [ 415.673693][T23915] bond8 (unregistering): Released all slaves [ 415.722980][T23938] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5202'. [ 416.060807][T23959] netlink: 'syz.3.5209': attribute type 1 has an invalid length. [ 416.349882][T23983] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5215'. [ 416.470799][T23983] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5215'. [ 416.490926][T23986] syzkaller0: entered promiscuous mode [ 416.524112][T23986] syzkaller0: entered allmulticast mode [ 416.598535][T23986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5216'. [ 416.635113][T23986] netlink: 'syz.1.5216': attribute type 1 has an invalid length. [ 416.658988][T23986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5216'. [ 416.908104][T24020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5225'. [ 417.022708][T24020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.079777][T24031] ipt_ECN: cannot use operation on non-tcp rule [ 417.261320][T12622] IPVS: starting estimator thread 0... [ 417.373454][T24058] IPVS: using max 35 ests per chain, 84000 per kthread [ 417.427500][T24066] netlink: 'syz.1.5238': attribute type 1 has an invalid length. [ 417.883798][T24095] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.5245'. [ 417.899583][T24098] x_tables: unsorted entry at hook 2 [ 417.909901][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 417.941918][T24099] netlink: 'syz.4.5247': attribute type 3 has an invalid length. [ 418.031031][T24103] syzkaller1: entered promiscuous mode [ 418.039405][T24103] syzkaller1: entered allmulticast mode [ 418.088863][T24107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5249'. [ 418.321176][T24123] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 418.360065][T24122] syzkaller0: entered promiscuous mode [ 418.371017][T24122] syzkaller0: entered allmulticast mode [ 418.388290][T24123] xt_cgroup: invalid path, errno=-2 [ 418.398900][T24122] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 418.610711][T24138] netlink: 'syz.2.5257': attribute type 10 has an invalid length. [ 420.116044][T24214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.640702][T24244] syzkaller1: entered promiscuous mode [ 420.664107][T24244] syzkaller1: entered allmulticast mode [ 420.815654][T24253] bond3: Unable to set down delay as MII monitoring is disabled [ 420.825706][T24253] bond3 (unregistering): Released all slaves [ 420.858709][T24254] __nla_validate_parse: 9 callbacks suppressed [ 420.858760][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5284'. [ 420.936534][T24254] macvtap2: entered promiscuous mode [ 420.942455][T24254] vlan0: entered promiscuous mode [ 420.949508][T24254] macvtap2: entered allmulticast mode [ 420.956980][T24254] vlan0: entered allmulticast mode [ 421.030988][T24263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5286'. [ 421.164417][T24260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.197410][T24260] bond4 (unregistering): Released all slaves [ 421.389171][T24279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5291'. [ 421.410340][T24280] netlink: 'syz.4.5290': attribute type 12 has an invalid length. [ 421.699661][ T29] audit: type=1804 audit(1782307468.487:6): pid=24292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5294" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2403 res=1 errno=0 [ 421.771139][ T29] audit: type=1800 audit(1782307468.487:7): pid=24292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5294" name="cgroup.controllers" dev="tmpfs" ino=2403 res=0 errno=0 [ 421.996375][T24302] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 422.374893][T24333] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5302'. [ 422.417170][T24333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5302'. [ 422.456367][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5302'. [ 422.624388][T24340] netlink: 'syz.2.5305': attribute type 1 has an invalid length. [ 422.666402][T24340] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5305'. [ 422.688297][T24340] netlink: 'syz.2.5305': attribute type 1 has an invalid length. [ 422.700062][T24340] netlink: 'syz.2.5305': attribute type 8 has an invalid length. [ 422.719650][T24340] netlink: 606 bytes leftover after parsing attributes in process `syz.2.5305'. [ 422.744026][T24340] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5305'. [ 422.782567][T24350] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5308'. [ 422.936881][T24357] netlink: 'syz.2.5309': attribute type 16 has an invalid length. [ 422.959093][T24357] netlink: 'syz.2.5309': attribute type 17 has an invalid length. [ 422.985686][T24359] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 423.001339][T24359] bond8 (unregistering): Released all slaves [ 423.088391][T24357] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.098747][T24357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.170057][T24357] veth1_to_bridge: left allmulticast mode [ 423.224785][T24357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.238856][T24357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.258706][T24357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.270887][T24357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.291179][T24357] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 423.309747][ T5710] lo speed is unknown, defaulting to 1000 [ 423.326862][T13066] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.334573][ T5710] syú2: Port: 1 Link ACTIVE [ 423.339868][T13066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.390625][T13066] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.398371][T13066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.439835][T24395] x_tables: duplicate underflow at hook 2 [ 423.460148][T24396] x_tables: duplicate underflow at hook 2 [ 423.507323][T13066] bridge0: port 3(team0) entered blocking state [ 423.514226][T13066] bridge0: port 3(team0) entered forwarding state [ 423.892760][T24423] pim6reg: entered allmulticast mode [ 424.350118][T24455] tipc: Enabled bearer , priority 0 [ 424.387913][T24455] syzkaller0: entered promiscuous mode [ 424.408050][T24455] syzkaller0: entered allmulticast mode [ 424.434333][T24455] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 424.465948][T24463] netlink: 'syz.0.5337': attribute type 7 has an invalid length. [ 424.488790][T24455] tipc: Resetting bearer [ 424.525617][T24454] tipc: Resetting bearer [ 424.589646][T24454] tipc: Disabling bearer [ 424.661038][T24476] netlink: 'syz.3.5343': attribute type 1 has an invalid length. [ 424.670555][T24473] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 424.689979][T24476] netlink: 'syz.3.5343': attribute type 1 has an invalid length. [ 424.726558][T24476] netlink: 'syz.3.5343': attribute type 8 has an invalid length. [ 424.769771][T24475] netlink: 'syz.0.5340': attribute type 16 has an invalid length. [ 424.811261][T24475] veth0_macvtap: entered allmulticast mode [ 425.037869][T24499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.694052][T24550] openvswitch: netlink: Missing valid actions attribute. [ 425.744293][T24550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.417814][T24596] __nla_validate_parse: 14 callbacks suppressed [ 426.417836][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5368'. [ 426.466195][T24594] netlink: set zone limit has 4 unknown bytes [ 426.590850][T24599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.691973][T24605] bond6: option min_links: invalid value (18446744073709551614) [ 426.705730][T24605] bond6: option min_links: allowed values 0 - 2147483647 [ 426.718246][T24605] bond6 (unregistering): Released all slaves [ 426.746485][T24594] bond4: (slave batadv1): Opening slave failed [ 426.909546][T24623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5373'. [ 427.099065][T24641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5374'. [ 427.130125][T24638] syzkaller0: entered promiscuous mode [ 427.136382][T24638] syzkaller0: entered allmulticast mode [ 427.152464][T24643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5379'. [ 427.312609][T24651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5383'. [ 427.412311][T24659] netlink: 780 bytes leftover after parsing attributes in process `syz.1.5386'. [ 427.434861][T24659] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 427.481248][T24661] bond9: option fail_over_mac: invalid value (16) [ 427.491106][T24661] bond9 (unregistering): Released all slaves [ 430.523775][ T1774] block nbd5: Connection timed out, retrying (0/2 alive) [ 430.531256][ T1774] block nbd5: Connection timed out, retrying (0/2 alive) [ 430.538868][T17012] block nbd5: Dead connection, failed to find a fallback [ 430.546860][T17012] block nbd5: shutting down sockets [ 430.552416][ T1774] block nbd5: Connection timed out, retrying (0/2 alive) [ 430.560024][T17012] blk_print_req_error: 138 callbacks suppressed [ 430.560049][T17012] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.577130][ T1774] block nbd5: Connection timed out, retrying (0/2 alive) [ 430.585455][T17012] buffer_io_error: 138 callbacks suppressed [ 430.585478][T17012] Buffer I/O error on dev nbd5, logical block 0, async page read [ 430.600004][T17012] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.610053][T17012] Buffer I/O error on dev nbd5, logical block 3, async page read [ 430.618480][T17012] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.628313][T17012] Buffer I/O error on dev nbd5, logical block 2, async page read [ 430.637086][T17012] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.646904][T17012] Buffer I/O error on dev nbd5, logical block 1, async page read [ 430.655984][T22874] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.666392][T22874] Buffer I/O error on dev nbd5, logical block 0, async page read [ 430.674821][T22874] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.685958][T22874] Buffer I/O error on dev nbd5, logical block 1, async page read [ 430.694804][T22874] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.704970][T22874] Buffer I/O error on dev nbd5, logical block 2, async page read [ 430.714743][T22874] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.724218][T22874] Buffer I/O error on dev nbd5, logical block 3, async page read [ 430.732547][T22874] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.742609][T22874] Buffer I/O error on dev nbd5, logical block 0, async page read [ 430.751706][T22874] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.761009][T22874] Buffer I/O error on dev nbd5, logical block 1, async page read [ 430.771581][T22874] ldm_validate_partition_table(): Disk read failed. [ 430.780517][T22874] Dev nbd5: unable to read RDB block 0 [ 430.787506][T22874] nbd5: unable to read partition table [ 430.799310][T22874] ldm_validate_partition_table(): Disk read failed. [ 430.807951][T22874] Dev nbd5: unable to read RDB block 0 [ 430.815921][T22874] nbd5: unable to read partition table [ 432.443486][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 450.022773][T24693] validate_nla: 4 callbacks suppressed [ 450.022807][T24693] netlink: 'syz.0.5388': attribute type 11 has an invalid length. [ 450.057773][T24696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.076966][T24709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5393'. [ 450.300386][T24724] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5398'. [ 450.426615][T24728] netlink: 'syz.3.5400': attribute type 19 has an invalid length. [ 450.471153][ T1107] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.471285][T24728] netlink: 'syz.3.5400': attribute type 19 has an invalid length. [ 450.510567][ T1107] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.543627][ T1107] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.565564][ T1107] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.699591][T24751] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5405'. [ 451.009899][T24766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5408'. [ 451.096588][T24775] netlink: 'syz.3.5411': attribute type 2 has an invalid length. [ 451.131586][T24779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5413'. [ 451.141304][T24775] netlink: 'syz.3.5411': attribute type 1 has an invalid length. [ 451.166397][T24775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5411'. [ 451.181199][T24778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5412'. [ 451.205197][T24775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5411'. [ 451.232983][T24791] netlink: 'syz.0.5414': attribute type 1 has an invalid length. [ 451.344702][T24791] 8021q: adding VLAN 0 to HW filter on device bond8 [ 451.519860][T24804] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.5420'. [ 451.568332][T24800] netlink: 'syz.1.5418': attribute type 3 has an invalid length. [ 451.817184][T24827] tipc: Enabled bearer , priority 0 [ 451.842842][T24827] syzkaller0: entered promiscuous mode [ 451.860722][T24827] syzkaller0: entered allmulticast mode [ 451.895219][T24827] tipc: Resetting bearer [ 451.910090][T24827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5427'. [ 451.928973][T24837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.947538][T24825] tipc: Resetting bearer [ 451.972307][T24825] tipc: Disabling bearer [ 451.998486][T24837] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 452.303498][ T1107] nci: nci_rx_work: unknown MT 0x4 [ 455.199750][T24854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.412206][T24896] __nla_validate_parse: 7 callbacks suppressed [ 455.412225][T24896] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5451'. [ 455.459870][T24900] netlink: 'syz.3.5450': attribute type 1 has an invalid length. [ 455.469691][T24901] netlink: 'syz.1.5449': attribute type 7 has an invalid length. [ 455.520626][T24900] 8021q: adding VLAN 0 to HW filter on device bond9 [ 455.606833][T24901] netlink: 'syz.1.5449': attribute type 7 has an invalid length. [ 455.718219][T24918] xt_hashlimit: max too large, truncated to 1048576 [ 455.763987][T24918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.922219][T24938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5461'. [ 456.120407][T24949] netlink: 'syz.1.5465': attribute type 1 has an invalid length. [ 456.142804][T24949] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5465'. [ 456.157812][T24949] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5465'. [ 456.168574][T24949] netlink: 658 bytes leftover after parsing attributes in process `syz.1.5465'. [ 456.342440][T24965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'. [ 456.466238][T24969] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_rx_wq": -EINTR [ 456.668585][T25004] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5476'. [ 456.976659][T25021] geneve3: entered promiscuous mode [ 456.985050][ T8606] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 45490 - 0 [ 457.009271][ T8606] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 45490 - 0 [ 457.042218][T25027] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5482'. [ 457.071886][ T8606] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 45490 - 0 [ 457.088370][ T8606] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 45490 - 0 [ 457.343980][T25050] syzkaller0: entered promiscuous mode [ 457.362866][T25050] syzkaller0: entered allmulticast mode [ 457.567034][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5495'. [ 468.923725][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 483.792453][T25074] batadv_slave_1: entered promiscuous mode [ 483.801306][T25074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5500'. [ 483.812604][T25074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5500'. [ 483.842300][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5500'. [ 483.864062][T25079] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5498'. [ 483.874151][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5500'. [ 483.876818][T25083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5500'. [ 483.925271][T25083] batadv_slave_1 (unregistering): left promiscuous mode [ 483.975639][T25083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.000519][T25086] ip6t_srh: unknown srh invflags 4000 [ 484.027703][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5502'. [ 484.191944][T25095] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.5506'. [ 484.268060][T25101] syzkaller0: entered promiscuous mode [ 484.295856][T25101] syzkaller0: entered allmulticast mode [ 484.326532][T25108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5510'. [ 484.354808][T25108] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5510'. [ 484.462316][T25114] netlink: 'syz.1.5512': attribute type 1 has an invalid length. [ 485.189089][T25180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.725931][T25211] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 485.748637][T25214] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 485.887206][T25221] syzkaller0: entered promiscuous mode [ 485.893772][T25221] syzkaller0: entered allmulticast mode [ 486.351269][T25253] syzkaller0: entered promiscuous mode [ 486.357481][T25253] syzkaller0: entered allmulticast mode [ 488.876883][T25286] __nla_validate_parse: 12 callbacks suppressed [ 488.876902][T25286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5564'. [ 489.137511][T25317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5572'. [ 489.311070][T25333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5575'. [ 489.348512][T25332] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5576'. [ 489.363962][T25332] netlink: ct family unspecified [ 489.506942][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5581'. [ 489.533414][T25350] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 489.907114][T25383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5593'. [ 489.971264][T25383] bond4: option xmit_hash_policy: invalid value (64) [ 490.008651][T25389] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5592'. [ 490.022109][T25383] bond4 (unregistering): Released all slaves [ 490.066243][T25389] netlink: 'syz.1.5592': attribute type 2 has an invalid length. [ 490.202462][T25402] sock: sock_set_timeout: `syz.2.5598' (pid 25402) tries to set negative timeout [ 490.521043][T25422] netlink: 'syz.3.5602': attribute type 1 has an invalid length. [ 490.588465][T25422] bond10: entered promiscuous mode [ 490.597024][T25422] 8021q: adding VLAN 0 to HW filter on device bond10 [ 490.654129][T25422] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 490.714813][T25430] syzkaller0: entered promiscuous mode [ 490.720992][T25430] syzkaller0: entered allmulticast mode [ 490.917210][T25437] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5607'. [ 490.944637][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5610'. [ 490.964686][T25437] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5607'. [ 491.697916][T25498] syzkaller1: entered promiscuous mode [ 491.733741][T25498] syzkaller1: entered allmulticast mode [ 492.070598][T25512] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 492.088694][T25514] 8021q: VLANs not supported on vxcan1 [ 492.177061][T25519] netlink: 'syz.4.5630': attribute type 2 has an invalid length. [ 492.189142][T25519] netlink: 'syz.4.5630': attribute type 2 has an invalid length. [ 492.641275][T25559] tipc: Enabled bearer , priority 0 [ 492.656759][T25559] syzkaller0: entered promiscuous mode [ 492.664504][T25559] syzkaller0: entered allmulticast mode [ 492.710449][T25559] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 492.734884][T25559] tipc: Resetting bearer [ 492.751154][T25558] tipc: Resetting bearer [ 492.764376][T25558] tipc: Disabling bearer [ 492.884668][T25575] vlan0: entered promiscuous mode [ 492.889773][T25575] geneve1: entered promiscuous mode [ 493.049571][T25581] xt_hashlimit: size too large, truncated to 1048576 [ 495.580607][T25556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.590536][T25566] __nla_validate_parse: 15 callbacks suppressed [ 495.590578][T25566] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5643'. [ 495.624078][T25583] sysfs: cannot create duplicate filename '/class/ieee80211/KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' [ 495.635613][T25583] CPU: 1 UID: 0 PID: 25583 Comm: syz.4.5649 Not tainted syzkaller #0 PREEMPT(full) [ 495.635644][T25583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.635659][T25583] Call Trace: [ 495.635667][T25583] [ 495.635676][T25583] dump_stack_lvl+0xe8/0x150 [ 495.635705][T25583] sysfs_warn_dup+0x8e/0xa0 [ 495.635732][T25583] sysfs_do_create_link_sd+0xc0/0x110 [ 495.635760][T25583] device_add_class_symlinks+0x1cf/0x240 [ 495.635786][T25583] device_add+0x467/0xb80 [ 495.635807][T25583] wiphy_register+0x1fc8/0x2ff0 [ 495.635842][T25583] ? __pfx_wiphy_register+0x10/0x10 [ 495.635868][T25583] ? __pfx_netdev_run_todo+0x10/0x10 [ 495.635888][T25583] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 495.635911][T25583] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 495.635939][T25583] ieee80211_register_hw+0x3d3d/0x4a50 [ 495.635975][T25583] ? ieee80211_register_hw+0x19f1/0x4a50 [ 495.636016][T25583] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 495.636045][T25583] ? __asan_memset+0x22/0x50 [ 495.636070][T25583] ? __hrtimer_setup+0x1b7/0x260 [ 495.636093][T25583] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 495.636124][T25583] mac80211_hwsim_new_radio+0x3238/0x5680 [ 495.636167][T25583] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 495.636194][T25583] ? kstrndup+0xbd/0x160 [ 495.636216][T25583] ? kstrndup+0xbd/0x160 [ 495.636234][T25583] hwsim_new_radio_nl+0xd8b/0xf90 [ 495.636268][T25583] genl_family_rcv_msg_doit+0x233/0x340 [ 495.636297][T25583] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 495.636341][T25583] ? bpf_lsm_capable+0x9/0x20 [ 495.636359][T25583] ? security_capable+0x7e/0x2c0 [ 495.636395][T25583] genl_rcv_msg+0x614/0x7a0 [ 495.636423][T25583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.636447][T25583] ? ref_tracker_free+0x689/0x830 [ 495.636470][T25583] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 495.636496][T25583] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.636525][T25583] netlink_rcv_skb+0x226/0x4a0 [ 495.636556][T25583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.636580][T25583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.636622][T25583] ? down_read+0x2be/0x330 [ 495.636654][T25583] genl_rcv+0x28/0x40 [ 495.636676][T25583] netlink_unicast+0x7bb/0x940 [ 495.636709][T25583] netlink_sendmsg+0x813/0xb40 [ 495.636733][T25583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.636765][T25583] ? futex_unqueue+0x22/0x240 [ 495.636784][T25583] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.636805][T25583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.636833][T25583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.636866][T25583] ____sys_sendmsg+0x9b9/0xa20 [ 495.636902][T25583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.636934][T25583] ? lock_release+0x4b/0x3c0 [ 495.636966][T25583] ? import_iovec+0x73/0xa0 [ 495.636995][T25583] ___sys_sendmsg+0x2a5/0x360 [ 495.637028][T25583] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.637060][T25583] ? futex_wait+0x2a2/0x390 [ 495.637101][T25583] ? __fget_files+0x2a/0x420 [ 495.637125][T25583] ? __fget_files+0x3a2/0x420 [ 495.637153][T25583] __x64_sys_sendmsg+0x1b1/0x290 [ 495.637185][T25583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.637223][T25583] ? rcu_is_watching+0x15/0xb0 [ 495.637246][T25583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.637268][T25583] do_syscall_64+0x174/0x580 [ 495.637297][T25583] ? clear_bhb_loop+0x40/0x90 [ 495.637329][T25583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.637351][T25583] RIP: 0033:0x7f5a4c79ce59 [ 495.637371][T25583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.637391][T25583] RSP: 002b:00007f5a4a9b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.637415][T25583] RAX: ffffffffffffffda RBX: 00007f5a4ca16180 RCX: 00007f5a4c79ce59 [ 495.637432][T25583] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000007 [ 495.637446][T25583] RBP: 00007f5a4c832e6f R08: 0000000000000000 R09: 0000000000000000 [ 495.637460][T25583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.637473][T25583] R13: 00007f5a4ca16218 R14: 00007f5a4ca16180 R15: 00007ffdb771ccc8 [ 495.637497][T25583] [ 496.097889][T25596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.179752][T25600] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 496.193145][T25604] netlink: 'syz.1.5655': attribute type 12 has an invalid length. [ 496.203678][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5655'. [ 496.317529][T25612] vlan0: entered promiscuous mode [ 496.332947][T25603] tipc: Enabled bearer , priority 0 [ 496.349716][T25603] syzkaller0: entered promiscuous mode [ 496.355438][T25603] syzkaller0: entered allmulticast mode [ 496.380230][T25603] tipc: Resetting bearer [ 496.397458][T25602] tipc: Resetting bearer [ 496.441880][T25602] tipc: Disabling bearer [ 496.490538][T25620] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5659'. [ 496.557793][T25629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5660'. [ 496.962569][T25652] netlink: 'syz.0.5669': attribute type 1 has an invalid length. [ 496.972671][T25652] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5669'. [ 497.066509][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5670'. [ 497.077991][T25661] netlink: 'syz.0.5670': attribute type 1 has an invalid length. [ 497.169961][T25670] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 497.178815][T25670] syzkaller1: Linktype set failed because interface is up [ 497.194808][ T6730] syzkaller1: tun_net_xmit 90 [ 497.622239][T25700] netlink: 'syz.1.5682': attribute type 1 has an invalid length. [ 497.632377][T25697] IPv6: sit2: Disabled Multicast RS [ 497.646823][T25694] netlink: 'syz.0.5680': attribute type 13 has an invalid length. [ 497.664547][T25696] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5681'. [ 497.707908][T25700] 8021q: adding VLAN 0 to HW filter on device bond6 [ 497.720078][T25701] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5681'. [ 497.735489][T25694] 0ªX¹¦Dö»: refused to change device tx_queue_len [ 497.742824][T25694] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 497.809032][T25706] bond6: (slave veth7): Enslaving as an active interface with a down link [ 497.888688][T25700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.901400][T25700] bond6: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 498.022281][T25724] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5688'. [ 498.052576][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5688'. [ 498.190942][T25733] bridge8: entered promiscuous mode [ 498.196997][T25733] bridge8: entered allmulticast mode [ 498.228572][T25728] syzkaller0: entered promiscuous mode [ 498.237794][T25728] syzkaller0: entered allmulticast mode [ 498.321663][T25733] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 498.324566][T25741] netlink: 'syz.0.5692': attribute type 1 has an invalid length. [ 498.561408][T25758] tipc: Enabling of bearer rejected, failed to enable media [ 498.630228][T25762] hsr0 speed is unknown, defaulting to 1000 [ 498.709204][T25762] hsr0 speed is unknown, defaulting to 1000 [ 498.776743][T25762] hsr0 speed is unknown, defaulting to 1000 [ 498.795281][T25762] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 498.812586][T25762] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 498.837217][T25762] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 498.871736][T25762] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 498.919425][T25773] ±ÿª¨úrBº“: renamed from lo [ 498.954637][T25762] hsr0 speed is unknown, defaulting to 1000 [ 498.976267][T25762] hsr0 speed is unknown, defaulting to 1000 [ 498.992607][T25762] hsr0 speed is unknown, defaulting to 1000 [ 499.010836][T25762] hsr0 speed is unknown, defaulting to 1000 [ 499.024719][T25762] hsr0 speed is unknown, defaulting to 1000 [ 499.034354][T25762] hsr0 speed is unknown, defaulting to 1000 [ 499.043117][T25762] hsr0 speed is unknown, defaulting to 1000 [ 499.052260][T25762] hsr0 speed is unknown, defaulting to 1000 [ 499.066935][T25762] hsr0 speed is unknown, defaulting to 1000 [ 499.126551][T25784] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 499.168097][T25784] bond11 (unregistering): Released all slaves [ 499.197726][T25786] netlink: 'syz.3.5706': attribute type 25 has an invalid length. [ 499.420606][T25796] tc action pedit offset must be on 32 bit boundaries [ 499.517077][T25801] syzkaller0: entered promiscuous mode [ 499.522839][T25801] syzkaller0: entered allmulticast mode [ 499.559283][T25799] syzkaller0: entered promiscuous mode [ 499.566860][T25799] syzkaller0: entered allmulticast mode [ 499.790887][T25812] x_tables: duplicate underflow at hook 1 [ 499.897414][T25816] bond6: Unable to set up delay as MII monitoring is disabled [ 499.907628][T25816] bond6 (unregistering): Released all slaves [ 499.960821][T25814] bond10: entered promiscuous mode [ 499.966558][T25814] 8021q: adding VLAN 0 to HW filter on device bond10 [ 499.988437][T25823] 8021q: adding VLAN 0 to HW filter on device bond10 [ 499.995772][T25823] bond10: (slave sit1): The slave device specified does not support setting the MAC address [ 500.008460][T25823] bond10: (slave sit1): Error -95 calling set_mac_address [ 500.152968][T25832] veth1_to_hsr: mtu less than device minimum [ 500.240510][T25844] netlink: 'syz.0.5725': attribute type 3 has an invalid length. [ 500.305334][T25847] netlink: 'syz.4.5726': attribute type 3 has an invalid length. [ 500.308704][T25846] netlink: 'syz.4.5726': attribute type 3 has an invalid length. [ 500.727806][T25884] __nla_validate_parse: 8 callbacks suppressed [ 500.727826][T25884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5738'. [ 500.746898][T25886] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5737'. [ 500.789596][T25886] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5737'. [ 500.828281][T25886] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5737'. [ 500.878102][T25896] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5740'. [ 501.025992][T25902] bridge0: port 4(veth1_to_bridge) entered blocking state [ 501.033953][T25902] bridge0: port 4(veth1_to_bridge) entered disabled state [ 501.041375][T25902] veth1_to_bridge: entered allmulticast mode [ 501.050716][T25902] veth1_to_bridge: entered promiscuous mode [ 501.059946][T25902] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 501.075225][T25902] bridge0: port 4(veth1_to_bridge) entered blocking state [ 501.083007][T25902] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 501.323096][T25924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5747'. [ 501.339480][T25925] netlink: 'syz.1.5750': attribute type 1 has an invalid length. [ 501.421676][T25928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5749'. [ 501.450741][T25928] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5749'. [ 501.477324][T25933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5751'. [ 501.502641][T25933] atomic_op ffff888028624198 conn xmit_atomic 0000000000000000 [ 501.512488][T25880] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 501.521618][T25880] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 501.640771][T25939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5753'. [ 501.809915][T25951] netlink: 'syz.3.5754': attribute type 1 has an invalid length. [ 501.966927][T25962] pim6reg: left allmulticast mode [ 501.979328][T25961] xt_hashlimit: size too large, truncated to 1048576 [ 502.020272][T25964] openvswitch: netlink: IP tunnel TTL not specified. [ 502.050491][T25968] bridge_slave_0 (unregistering): left allmulticast mode [ 502.071719][T25968] bridge_slave_0 (unregistering): left promiscuous mode [ 502.085566][T25968] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.580408][T26003] openvswitch: netlink: IPv6 tunnel dst address is zero [ 502.850118][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.867942][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.882451][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.898683][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.907890][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 503.947938][T26063] netlink: 'syz.0.5780': attribute type 8 has an invalid length. [ 504.146160][T26090] syzkaller0: entered promiscuous mode [ 504.169228][T26090] syzkaller0: entered allmulticast mode [ 504.242501][T26093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.296534][T26018] lo speed is unknown, defaulting to 1000 [ 504.311439][T26018] hsr0 speed is unknown, defaulting to 1000 [ 504.334171][T26097] netlink: 'syz.3.5787': attribute type 13 has an invalid length. [ 504.414328][ T6730] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 504.769010][T26018] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.788298][T26018] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.799405][T26018] bridge_slave_0: entered allmulticast mode [ 504.815503][T26018] bridge_slave_0: entered promiscuous mode [ 504.828838][T26018] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.847586][T26018] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.856852][T26018] bridge_slave_1: entered allmulticast mode [ 504.867601][T26018] bridge_slave_1: entered promiscuous mode [ 504.923710][ T5629] Bluetooth: hci2: command tx timeout [ 504.931565][T26018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.947336][T26018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.001172][T26018] team0: Port device team_slave_0 added [ 505.013823][T26018] team0: Port device team_slave_1 added [ 505.053434][ T5710] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 505.108914][T26141] openvswitch: netlink: IPv4 tun info is not correct [ 505.122306][T26139] veth0_macvtap: entered allmulticast mode [ 505.147706][T26139] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 505.218036][T26018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.237936][T26018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.271775][T26018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.288841][T26142] netlink: 'syz.1.5797': attribute type 19 has an invalid length. [ 505.312705][T26018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.321263][T26018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.349315][T26018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.577425][T26161] hsr_slave_1 (unregistering): left promiscuous mode [ 505.622597][T26018] hsr_slave_0: entered promiscuous mode [ 505.642805][T26018] hsr_slave_1: entered promiscuous mode [ 505.661180][T26018] debugfs: 'hsr0' already exists in 'hsr' [ 505.667260][T26018] Cannot create hsr debugfs directory [ 505.685152][T26172] vlan1: entered allmulticast mode [ 505.691211][T26172] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 506.111125][T26200] bridge0: port 1(veth1_to_bridge) entered blocking state [ 506.120705][T26200] bridge0: port 1(veth1_to_bridge) entered disabled state [ 506.130239][T26201] IPVS: length: 105 != 8 [ 506.136264][T26200] veth1_to_bridge: entered allmulticast mode [ 506.148430][T26200] veth1_to_bridge: entered promiscuous mode [ 506.155419][T26200] bridge0: port 1(veth1_to_bridge) entered blocking state [ 506.163138][T26200] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 506.176468][T26204] __nla_validate_parse: 18 callbacks suppressed [ 506.176487][T26204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5816'. [ 506.202538][T26207] x_tables: duplicate underflow at hook 3 [ 506.454594][T26018] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 506.476034][T26018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.499590][T26018] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 506.542485][T26018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.564475][T26018] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 506.596101][T26018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.607503][T26018] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 506.618749][T26229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5826'. [ 506.636108][T26018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.912967][T26018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.966515][T26018] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.001124][T13066] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.008342][T13066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.011893][ T5629] Bluetooth: hci2: command tx timeout [ 507.049284][T13066] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.057006][T13066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.702145][T26280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5838'. [ 507.941861][T26018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.042821][T26018] veth0_vlan: entered promiscuous mode [ 508.063992][T26018] veth1_vlan: entered promiscuous mode [ 508.098949][T26294] xt_hashlimit: size too large, truncated to 1048576 [ 508.109679][T26291] xt_hashlimit: size too large, truncated to 1048576 [ 508.127034][T26018] veth0_macvtap: entered promiscuous mode [ 508.141750][T26018] veth1_macvtap: entered promiscuous mode [ 508.193808][T26018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.239720][T26018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.264668][T13067] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.279836][T13067] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.300743][T13067] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.318738][T13067] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.083595][ T5629] Bluetooth: hci2: command tx timeout [ 510.089601][T26261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.206049][T13069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.240358][T13069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.260793][T26302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5843'. [ 510.276519][T26302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5843'. [ 510.286943][T26302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5843'. [ 510.325666][T13066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.343623][T13066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.421345][T26308] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5847'. [ 510.773080][T26341] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 510.810121][T26341] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5856'. [ 510.875213][T26344] geneve4: entered promiscuous mode [ 510.880876][T26344] geneve4: entered allmulticast mode [ 510.891304][T13069] netdevsim netdevsim1 : set [1, 2] type 2 family 0 port 19999 - 0 [ 510.928571][T13069] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 510.986585][T13069] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 511.001349][T13069] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 511.050230][T26358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5863'. [ 511.087510][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5865'. [ 511.163533][ T5621] Bluetooth: hci2: command tx timeout [ 511.225666][T26369] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.339500][T26382] ipvlan0: entered promiscuous mode [ 511.407902][T26389] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 511.457179][T26387] macvtap1: entered promiscuous mode [ 511.470363][T26387] macvtap1: entered allmulticast mode [ 511.485857][T26387] veth1_vlan: entered allmulticast mode [ 511.502012][T26397] netlink: 'syz.0.5874': attribute type 10 has an invalid length. [ 511.520564][T26397] __nla_validate_parse: 2 callbacks suppressed [ 511.520586][T26397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5874'. [ 511.615461][T26401] netlink: 'syz.3.5877': attribute type 1 has an invalid length. [ 511.624730][T26401] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5877'. [ 511.694652][T26404] nbd: nbd2 already in use [ 511.710052][T26406] nbd: must specify a device to reconfigure [ 511.885554][T26419] openvswitch: netlink: Multiple metadata blocks provided [ 511.957773][T26422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5885'. [ 512.170723][T26432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5887'. [ 512.197952][T26432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.275005][T26435] netlink: 'syz.3.5888': attribute type 4 has an invalid length. [ 512.299343][T26435] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5888'. [ 512.390211][T26420] netlink: 'syz.2.5882': attribute type 1 has an invalid length. [ 512.463040][T26446] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 512.530864][T26452] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5893'. [ 512.530914][T26451] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5893'. [ 512.643132][T26456] netlink: 'syz.3.5895': attribute type 1 has an invalid length. [ 512.643708][T26458] xt_hashlimit: size too large, truncated to 1048576 [ 512.711244][T26456] bond11: entered promiscuous mode [ 512.725308][T26463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5894'. [ 512.760478][T26456] 8021q: adding VLAN 0 to HW filter on device bond11 [ 512.992732][T26469] netlink: 'syz.4.5898': attribute type 1 has an invalid length. [ 513.076877][T26456] 8021q: adding VLAN 0 to HW filter on device bond11 [ 513.107641][T26456] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 513.125364][T26456] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 513.145142][T26456] bond11: (slave vti0): making interface the new active one [ 513.155934][T26456] vti0: entered promiscuous mode [ 513.178456][T26456] vti0: left promiscuous mode [ 513.251499][T26472] 8021q: adding VLAN 0 to HW filter on device bond7 [ 513.266062][T26472] bond6: (slave bond7): making interface the new active one [ 513.274470][T26472] bond6: (slave bond7): Enslaving as an active interface with an up link [ 513.498692][T26492] openvswitch: netlink: Message has 250 unknown bytes. [ 513.507680][T26492] netlink: 'syz.0.5904': attribute type 4 has an invalid length. [ 513.719474][T26504] syzkaller1: entered promiscuous mode [ 513.741724][T26504] syzkaller1: entered allmulticast mode [ 513.769832][T26508] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 513.789761][T26508] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 513.934407][T26520] syzkaller0: entered promiscuous mode [ 513.952783][T26520] syzkaller0: entered allmulticast mode [ 514.088791][T26528] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 514.212612][T26529] netlink: 'syz.0.5916': attribute type 5 has an invalid length. [ 514.276435][T26533] netlink: 'syz.3.5917': attribute type 1 has an invalid length. [ 514.347743][T26533] bond12: entered promiscuous mode [ 514.355727][T26533] 8021q: adding VLAN 0 to HW filter on device bond12 [ 514.427819][T26532] 8021q: adding VLAN 0 to HW filter on device bond12 [ 514.464874][T26532] bond12: (slave vti0): The slave device specified does not support setting the MAC address [ 514.507776][T26532] bond12: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 514.554307][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.562439][T26532] bond12: (slave vti0): making interface the new active one [ 514.575546][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.585626][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.595004][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.596464][T26532] vti0: entered promiscuous mode [ 514.619489][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.669410][T26532] vti0: left promiscuous mode [ 514.715211][T26552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 514.770938][T26555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5923'. [ 514.788071][T26552] netlink: 'syz.2.5922': attribute type 7 has an invalid length. [ 515.062454][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.079492][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.099549][T26574] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 515.168739][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.219864][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.336145][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.365675][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.390242][T26591] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 515.470498][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.488524][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.696291][ T57] bridge_slave_1: left allmulticast mode [ 515.706437][ T57] bridge_slave_1: left promiscuous mode [ 515.717550][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.739468][ T57] bridge_slave_0: left allmulticast mode [ 515.747293][ T57] bridge_slave_0: left promiscuous mode [ 515.753667][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.163259][ T57] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 516.245942][ T57] bond7 (unregistering): (slave geneve3): Releasing active interface [ 516.261710][ T57] team0: Port device geneve1 removed [ 516.397848][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.407116][ T57] bond_slave_0: left promiscuous mode [ 516.413017][ T57] bond0 (unregistering): Released all slaves [ 516.423104][ T57] bond1 (unregistering): Released all slaves [ 516.443356][ T57] bond2 (unregistering): Released all slaves [ 516.457234][ T57] bond3 (unregistering): Released all slaves [ 516.472102][ T57] bond4 (unregistering): Released all slaves [ 516.490360][ T57] bond5 (unregistering): Released all slaves [ 516.502590][ T57] bond6 (unregistering): Released all slaves [ 516.516130][ T57] bond7 (unregistering): Released all slaves [ 516.528937][ T57] bond8 (unregistering): Released all slaves [ 516.540025][ T57] bond9 (unregistering): Released all slaves [ 516.553561][ T57] bond10 (unregistering): Released all slaves [ 516.576361][T26546] lo speed is unknown, defaulting to 1000 [ 516.585585][T26546] hsr0 speed is unknown, defaulting to 1000 [ 516.686003][ T5621] Bluetooth: hci4: command tx timeout [ 516.686577][ T57] tipc: Left network mode [ 516.760982][T26623] Cannot find set identified by id 65534 to match [ 517.066088][T26647] validate_nla: 3 callbacks suppressed [ 517.066122][T26647] netlink: 'syz.2.5946': attribute type 61 has an invalid length. [ 517.242913][T26657] netlink: 'syz.2.5948': attribute type 1 has an invalid length. [ 518.138001][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 518.179776][T26672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.288509][ T57] batman_adv: batadv0: Removing interface: wlan0 [ 518.408118][T26546] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.421737][T26546] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.429975][T26546] bridge_slave_0: entered allmulticast mode [ 518.440442][ T29] audit: type=1800 audit(1782307565.217:8): pid=26687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5953" name="memory.events" dev="tmpfs" ino=130 res=0 errno=0 [ 518.462348][T26546] bridge_slave_0: entered promiscuous mode [ 518.466955][T26546] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.480146][T26546] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.489279][T26546] bridge_slave_1: entered allmulticast mode [ 518.496796][T26546] bridge_slave_1: entered promiscuous mode [ 518.569982][T26546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.608997][T26546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.652095][ T10] IPVS: starting estimator thread 0... [ 518.703551][T26546] team0: Port device team_slave_0 added [ 518.731183][T26546] team0: Port device team_slave_1 added [ 518.755005][T26701] IPVS: using max 37 ests per chain, 88800 per kthread [ 518.764251][ T5621] Bluetooth: hci4: command tx timeout [ 518.790897][T26546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.814785][T26546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.939136][T26546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.991796][T26546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.019402][T26546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.108024][T26546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.386636][T26546] hsr_slave_0: entered promiscuous mode [ 519.424284][T26546] hsr_slave_1: entered promiscuous mode [ 519.437370][T26742] netlink: 'syz.2.5962': attribute type 1 has an invalid length. [ 519.460253][T26546] debugfs: 'hsr0' already exists in 'hsr' [ 519.474516][T26742] netlink: 'syz.2.5962': attribute type 2 has an invalid length. [ 519.487092][T26546] Cannot create hsr debugfs directory [ 519.503835][T26742] netlink: 'syz.2.5962': attribute type 1 has an invalid length. [ 519.519034][T26741] __nla_validate_parse: 4 callbacks suppressed [ 519.519078][T26741] netlink: 404 bytes leftover after parsing attributes in process `syz.4.5961'. [ 519.559301][T26742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5962'. [ 519.580607][T26741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5961'. [ 519.594578][T26741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5961'. [ 519.604268][T26741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5961'. [ 519.809865][T26756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5965'. [ 519.837911][T26759] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5966'. [ 519.854722][T26756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5965'. [ 519.971713][ T57] hsr_slave_0: left promiscuous mode [ 519.990847][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.013757][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.025237][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.035929][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.077817][ T57] veth1_macvtap: left promiscuous mode [ 520.088731][ T57] veth0_macvtap: left promiscuous mode [ 520.473764][ T1107] smbdirect: ib_dev[syz0] removed [ 520.541595][ T57] team0 (unregistering): Port device team_slave_1 removed [ 520.588098][ T57] team0 (unregistering): Port device team_slave_0 removed [ 520.727705][ T57] team0 (unregistering): Port device dummy0 removed [ 520.798174][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 520.820819][ T10] hsr0 speed is unknown, defaulting to 1000 [ 520.835990][ T10] infiniband syz0: ib_query_port failed (-19) [ 520.844227][ T5621] Bluetooth: hci4: command tx timeout [ 521.181511][ T57] IPVS: stop unused estimator thread 0... [ 521.524525][T26829] C: Caught tx_queue_len zero misconfig [ 521.701219][T26839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5985'. [ 521.728215][T26839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5985'. [ 522.106878][T26858] veth0_to_team: entered promiscuous mode [ 522.140935][T26858] veth0_to_team: left promiscuous mode [ 522.181034][T26863] sit0: Caught tx_queue_len zero misconfig [ 522.871562][T26893] openvswitch: netlink: Unknown key attributes 2 [ 522.923840][ T5621] Bluetooth: hci4: command tx timeout [ 524.239483][T26822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.252952][T26546] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.322160][T26546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.337090][T26546] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.362357][T26546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 524.390579][T26546] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.430596][T26546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 524.442744][T26546] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.459391][T26546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.476102][T26938] team_slave_1: Caught tx_queue_len zero misconfig [ 524.753821][T26957] : entered promiscuous mode [ 524.801203][T26961] netlink: 'syz.2.6006': attribute type 1 has an invalid length. [ 524.822016][T26961] __nla_validate_parse: 3 callbacks suppressed [ 524.822037][T26961] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6006'. [ 524.839912][T26546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.892340][T26546] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.928894][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.936646][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.965256][T26970] netlink: 'syz.1.6009': attribute type 5 has an invalid length. [ 524.974447][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.982114][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.078805][T26976] netlink: 'syz.1.6009': attribute type 2 has an invalid length. [ 525.099867][T26976] netlink: 8812 bytes leftover after parsing attributes in process `syz.1.6009'. [ 525.110023][T26976] netlink: 'syz.1.6009': attribute type 2 has an invalid length. [ 525.129592][T26971] netlink: 'syz.1.6009': attribute type 2 has an invalid length. [ 525.157291][T26971] netlink: 8812 bytes leftover after parsing attributes in process `syz.1.6009'. [ 525.179032][T26971] netlink: 'syz.1.6009': attribute type 2 has an invalid length. [ 525.408617][T26993] tipc: Started in network mode [ 525.424688][T26993] tipc: Node identity ceef2309d20b, cluster identity 4711 [ 525.437680][T26993] tipc: Enabled bearer , priority 0 [ 525.460516][T26995] syzkaller0: entered promiscuous mode [ 525.472225][T26995] syzkaller0: entered allmulticast mode [ 525.492064][T26993] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6014'. [ 525.516374][T26989] tipc: Resetting bearer [ 525.535138][T26989] tipc: Disabling bearer [ 525.602398][T27007] netlink: 'syz.3.6017': attribute type 3 has an invalid length. [ 525.623698][T27007] netlink: 'syz.3.6017': attribute type 1 has an invalid length. [ 525.656187][T27007] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6017'. [ 525.712087][T27007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6017'. [ 525.922172][T27022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6022'. [ 525.961881][T27026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6023'. [ 526.147175][T27039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6029'. [ 526.195106][T27038] netlink: 'syz.4.6027': attribute type 1 has an invalid length. [ 526.240840][T27037] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.248714][T27037] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.325752][T27037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.343830][T27037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.429035][T27050] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6030'. [ 526.501661][T27037] veth1_vlan: left allmulticast mode [ 526.518815][T27038] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 526.526673][T13067] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.573323][T13067] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.588662][T26546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.642466][ T8604] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.661615][ T8604] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.676768][T27062] bond0: (slave bond_slave_1): Releasing backup interface [ 526.716167][T27066] netlink: 'syz.4.6033': attribute type 3 has an invalid length. [ 526.796088][T26546] veth0_vlan: entered promiscuous mode [ 526.834466][T26546] veth1_vlan: entered promiscuous mode [ 526.926466][T26546] veth0_macvtap: entered promiscuous mode [ 526.941523][T26546] veth1_macvtap: entered promiscuous mode [ 526.997899][T26546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.040564][T26546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.078709][T13067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.096632][T13067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.226932][T27087] syzkaller0: entered promiscuous mode [ 527.232580][T27087] syzkaller0: entered allmulticast mode [ 527.242493][T13067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.270219][T27092] geneve3: entered promiscuous mode [ 527.275763][T27092] geneve3: entered allmulticast mode [ 527.308755][T13067] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.372693][T13067] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 527.384126][T13067] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 527.524797][T13067] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 527.550223][T13067] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 527.805103][T13067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.814548][T27122] syzkaller0: entered promiscuous mode [ 527.844797][T27122] syzkaller0: entered allmulticast mode [ 527.860901][T13067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.936329][T27122] tipc: Enabled bearer , priority 0 [ 528.615156][T13067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.626859][T27122] tipc: Resetting bearer [ 528.639094][T13067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.656567][T27122] tipc: Disabling bearer [ 528.737118][T27140] bond7 (unregistering): Released all slaves [ 528.809704][T27145] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 528.811092][ T8604] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.844861][ T8604] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.856781][ T8604] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 45490 - 0 [ 528.886249][ T8604] netdevsim netdevsim1 : unset [1, 2] type 2 family 0 port 19999 - 0 [ 528.910379][ T8604] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.940119][ T8604] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.956559][ T8604] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 45490 - 0 [ 528.980192][ T8604] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 529.006879][T27136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.032734][T27136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.052910][T27136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45490 - 0 [ 529.065723][T27136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 529.101311][ T8604] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.122579][ T8604] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.143534][ T8604] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 45490 - 0 [ 529.165789][ T8604] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 529.330791][T27188] xt_hashlimit: size too large, truncated to 1048576 [ 529.462071][T27192] xfrm0: entered promiscuous mode [ 529.507614][T27192] xfrm0: entered allmulticast mode [ 529.728099][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.737285][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.746479][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.754952][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.762497][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 529.844119][T27203] __nla_validate_parse: 17 callbacks suppressed [ 529.844153][T27203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6062'. [ 529.964064][T27203] bond9: entered promiscuous mode [ 529.971351][T27203] 8021q: adding VLAN 0 to HW filter on device bond9 [ 530.442983][T27205] lo speed is unknown, defaulting to 1000 [ 530.607811][T27259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6074'. [ 530.627205][T27261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6075'. [ 530.650440][T27262] IPv6: Can't replace route, no match found [ 530.657746][T27261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6075'. [ 530.668091][T27262] IPv6: Can't replace route, no match found [ 530.715393][T27259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.044737][T27279] syzkaller0: entered promiscuous mode [ 531.050562][T27279] syzkaller0: entered allmulticast mode [ 531.058833][T27205] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.066635][T27205] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.075909][T27205] bridge_slave_0: entered allmulticast mode [ 531.077881][T27287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6082'. [ 531.093603][T27205] bridge_slave_0: entered promiscuous mode [ 531.109709][T27205] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.118566][T27205] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.126482][T27205] bridge_slave_1: entered allmulticast mode [ 531.134522][T27205] bridge_slave_1: entered promiscuous mode [ 531.173040][T27279] tipc: Started in network mode [ 531.179751][T27279] tipc: Node identity 46d09562c8f7, cluster identity 4711 [ 531.187477][T27279] tipc: Enabled bearer , priority 0 [ 531.224792][T27277] tipc: Resetting bearer [ 531.250007][T27277] tipc: Disabling bearer [ 531.270611][T27205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.309895][T27294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6084'. [ 531.337695][T27205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.476514][T27205] team0: Port device team_slave_0 added [ 531.496003][T27306] validate_nla: 6 callbacks suppressed [ 531.496022][T27306] netlink: 'syz.2.6088': attribute type 21 has an invalid length. [ 531.515441][T27205] team0: Port device team_slave_1 added [ 531.581993][T27205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.589162][T27205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.640950][T27205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.670753][T27311] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 531.680421][T27205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.690173][T27205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.719976][T27205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.766938][T27312] nbd: must specify an index to disconnect [ 531.803979][ T5629] Bluetooth: hci5: command tx timeout [ 531.835066][T27205] hsr_slave_0: entered promiscuous mode [ 531.841830][T27205] hsr_slave_1: entered promiscuous mode [ 531.851362][T27205] debugfs: 'hsr0' already exists in 'hsr' [ 531.858071][T27205] Cannot create hsr debugfs directory [ 532.082752][T27205] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.105358][T27205] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.186562][T27205] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.212837][T27205] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.294921][T27205] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.318709][T27205] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.349630][T27351] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6100'. [ 532.389280][T27344] lo speed is unknown, defaulting to 1000 [ 532.506324][T27205] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.530001][T27205] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.657387][T27371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6105'. [ 532.705275][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6106'. [ 532.716439][T27374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6106'. [ 532.728186][T27373] netlink: 'syz.4.6106': attribute type 1 has an invalid length. [ 532.738623][T27374] netlink: 'syz.4.6106': attribute type 1 has an invalid length. [ 532.803355][T27357] syzkaller0: entered promiscuous mode [ 532.809852][T27357] syzkaller0: entered allmulticast mode [ 533.071640][T27386] netlink: 'syz.4.6109': attribute type 21 has an invalid length. [ 533.092436][T27386] netlink: 'syz.4.6109': attribute type 5 has an invalid length. [ 533.109984][T27386] netlink: 'syz.4.6109': attribute type 6 has an invalid length. [ 533.218272][T27205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 533.245171][T27205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.279964][T27205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 533.297710][T27205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.311282][T27205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 533.347217][T27205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.369646][T27205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.392251][T27205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.456907][T27404] netlink: 'syz.1.6114': attribute type 2 has an invalid length. [ 533.596997][T27205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.641330][T27205] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.671036][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.678255][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.721040][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.728279][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.884604][ T5629] Bluetooth: hci5: command tx timeout [ 534.555598][T27205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.662119][T27466] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 534.681482][T27205] veth0_vlan: entered promiscuous mode [ 534.700253][T27205] veth1_vlan: entered promiscuous mode [ 534.779153][T27205] veth0_macvtap: entered promiscuous mode [ 534.789498][T27205] veth1_macvtap: entered promiscuous mode [ 534.807751][T27205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.827581][T27205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.841755][T13069] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.852006][T13069] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.865646][T13069] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.876250][T13069] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.964131][ T5629] Bluetooth: hci5: command tx timeout [ 537.404448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.417468][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.430687][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.440528][T27453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 537.446176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.465299][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.478806][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.492556][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.506068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.519501][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.532929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 537.622102][T13066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.664973][T27476] __nla_validate_parse: 7 callbacks suppressed [ 537.664994][T27476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6133'. [ 537.690629][T13066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.959574][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6136'. [ 538.050528][ T5629] Bluetooth: hci5: command tx timeout [ 542.413452][ C0] net_ratelimit: 15758 callbacks suppressed [ 542.413488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.433004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.445985][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.459263][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.472493][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.485829][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.499202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.512192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.525259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.538701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 542.558867][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 547.423704][ C0] net_ratelimit: 9028 callbacks suppressed [ 547.423731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 547.443224][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 547.456670][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 547.471124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 547.484626][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 547.497944][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 547.511726][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 547.524685][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 547.537798][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 547.551587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 550.561159][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.568900][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.581362][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.589615][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.601777][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 552.434998][ C0] net_ratelimit: 8789 callbacks suppressed [ 552.435026][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 552.454557][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 552.467532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 552.481666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 552.494604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 552.507612][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 552.521502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 552.534611][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 552.547910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 552.561979][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 552.683430][ T5629] Bluetooth: hci1: command tx timeout [ 553.600182][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.609152][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.616512][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 553.630146][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 553.640684][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 553.871850][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 553.881931][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 553.889638][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 553.901020][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 553.910043][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 553.951733][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 553.961248][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 553.971006][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 553.980188][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 553.989246][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 554.763412][ T5621] Bluetooth: hci1: command tx timeout [ 555.723467][ T5621] Bluetooth: hci3: command tx timeout [ 555.964428][ T5621] Bluetooth: hci6: command tx timeout [ 556.043469][ T5621] Bluetooth: hci7: command tx timeout [ 556.844791][ T5621] Bluetooth: hci1: command tx timeout [ 557.443347][ C0] net_ratelimit: 6016 callbacks suppressed [ 557.443381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 557.465396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 557.478554][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 557.491541][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 557.506496][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 557.519618][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 557.532597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 557.547208][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 557.560550][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 557.573694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 557.805025][ T5621] Bluetooth: hci3: command tx timeout [ 558.088116][ T5621] Bluetooth: hci6: command tx timeout [ 558.239518][ T5621] Bluetooth: hci7: command tx timeout [ 558.518586][ C0] sched: DL replenish lagged too much [ 559.116137][ T5621] Bluetooth: hci1: command tx timeout [ 560.202059][ T5621] Bluetooth: hci3: command tx timeout [ 560.219705][ T5621] Bluetooth: hci6: command tx timeout [ 560.392727][ T5629] Bluetooth: hci7: command tx timeout [ 562.453193][ C0] net_ratelimit: 4039 callbacks suppressed [ 562.453229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 562.472798][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 562.488492][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 562.501886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 562.515282][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 562.530866][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 562.544255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 562.557536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 562.573118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 562.586595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 562.608124][ T5629] Bluetooth: hci6: command tx timeout [ 562.627506][ T5629] Bluetooth: hci3: command tx timeout [ 562.655683][ T5621] Bluetooth: hci7: command tx timeout [ 567.463414][ C0] net_ratelimit: 4000 callbacks suppressed [ 567.463448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 567.483110][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 567.496337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 567.513050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 567.526449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 567.539668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 567.555649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 567.569013][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 567.582056][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 567.597623][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 572.473325][ C0] net_ratelimit: 3959 callbacks suppressed [ 572.473359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 572.492993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 572.506270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 572.521800][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 572.535202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 572.548497][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 572.564154][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 572.577694][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 572.591493][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 572.607851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 577.483413][ C1] net_ratelimit: 7565 callbacks suppressed [ 577.483436][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 577.484240][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 577.491768][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 577.505174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 577.515408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 577.533636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 577.539857][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 577.554241][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 577.564646][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 577.578855][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 582.493608][ C1] net_ratelimit: 8587 callbacks suppressed [ 582.493631][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 582.502025][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 582.513342][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 582.527125][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 582.537966][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 582.551822][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 582.562334][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 582.579885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 582.587077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 582.601249][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 587.503214][ C0] net_ratelimit: 8537 callbacks suppressed [ 587.503250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 587.504124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 587.515566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 587.522819][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 587.537349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 587.548000][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 587.562366][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 587.572752][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 587.596182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 587.608782][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 592.513303][ C1] net_ratelimit: 8734 callbacks suppressed [ 592.513326][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 592.520284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 592.532876][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 592.547053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 592.557500][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 592.572034][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 592.582469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 592.600840][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 592.607091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 592.621489][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 597.523958][ C1] net_ratelimit: 8879 callbacks suppressed [ 597.523981][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 597.535951][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 597.543857][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 597.557411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 597.567588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 597.581932][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 597.592378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 597.609949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 597.622486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 597.631600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 602.533236][ C0] net_ratelimit: 8886 callbacks suppressed [ 602.533271][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 602.533759][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 602.541135][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 602.556255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 602.570411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 602.577314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 602.591513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 602.602081][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 602.616341][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 602.626666][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 607.543945][ C1] net_ratelimit: 8819 callbacks suppressed [ 607.543969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 607.546382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 607.552005][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 607.565212][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 607.575883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 607.589799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 607.604335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 607.617774][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 607.624800][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 607.638800][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 612.554092][ C1] net_ratelimit: 8855 callbacks suppressed [ 612.554116][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 612.559643][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 612.562373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 612.576166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 612.586277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 612.600202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 612.610976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 612.628397][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 612.640302][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 612.649621][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 617.563304][ C0] net_ratelimit: 9082 callbacks suppressed [ 617.563346][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 617.564306][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 617.571243][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 617.582589][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 617.596889][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 617.611203][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 617.625038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 617.631881][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 617.646203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 617.656565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 622.574908][ C0] net_ratelimit: 8725 callbacks suppressed [ 622.574908][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 622.574943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 622.582794][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 622.596232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 622.606979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 622.621233][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 622.631757][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 622.650002][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 622.656346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 622.670578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 627.583364][ C0] net_ratelimit: 8836 callbacks suppressed [ 627.583411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 627.583705][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 627.591202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 627.603404][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 627.620276][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 627.628063][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 627.641334][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 627.652604][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 627.666047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 627.680867][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 627.689877][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 632.593310][ C0] net_ratelimit: 8841 callbacks suppressed [ 632.593345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.593351][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 632.596667][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.601309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 632.621295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 632.629718][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 632.639145][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.648963][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 632.663463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.674071][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 637.604531][ C1] net_ratelimit: 8933 callbacks suppressed [ 637.604554][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 637.611628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 637.623996][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 637.638418][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.649049][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 637.663675][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.674267][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 637.691920][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 637.698888][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 637.713061][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.613439][ C1] net_ratelimit: 9040 callbacks suppressed [ 642.613462][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 642.616373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 642.622091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 642.635181][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.645112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 642.659149][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.669688][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 642.687211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 642.694336][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 642.708506][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.623168][ C0] net_ratelimit: 8941 callbacks suppressed [ 647.623204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.625298][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 647.639416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 647.643728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 647.657095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.666614][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 647.681152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.691398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 647.710197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 647.720289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 652.633845][ C1] net_ratelimit: 8946 callbacks suppressed [ 652.633869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 652.638986][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 652.642086][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 652.654913][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.665675][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 652.680068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.690605][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 652.711791][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 652.716093][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 652.729069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.643546][ C0] net_ratelimit: 9270 callbacks suppressed [ 657.643581][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 657.644271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 657.654778][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 657.662842][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 657.677366][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.687999][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 657.702050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.712802][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 657.727082][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 657.737491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 662.653328][ C0] net_ratelimit: 9560 callbacks suppressed [ 662.653371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 662.654055][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 662.661294][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.673028][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 662.687337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.697613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 662.712065][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 662.722712][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 662.738994][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.747633][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 667.663367][ C1] net_ratelimit: 10311 callbacks suppressed [ 667.663390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 667.671700][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.682936][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 667.696833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.707209][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 667.721368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 667.737012][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 667.747856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.756583][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 667.770587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 672.673889][ C1] net_ratelimit: 9508 callbacks suppressed [ 672.673915][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 672.673934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 672.681725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 672.695458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 672.706178][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 672.728551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 672.731283][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 672.746577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 672.754367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 672.768842][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 677.683821][ C1] net_ratelimit: 9627 callbacks suppressed [ 677.683845][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 677.692065][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 677.704218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 677.719744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 677.728351][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 677.742660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 677.753317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 677.767299][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 677.782956][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 677.793858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 682.693137][ C1] net_ratelimit: 9381 callbacks suppressed [ 682.693161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 682.699162][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 682.712257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 682.728497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 682.737557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 682.751516][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 682.761903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 682.780092][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 682.790704][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 682.802660][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 687.703270][ C0] net_ratelimit: 9016 callbacks suppressed [ 687.703306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 687.703780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 687.717965][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 687.723526][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 687.738459][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 687.750719][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 687.762697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 687.771429][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 687.785730][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 687.795904][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 690.743131][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 690.750155][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5359/1:b..l [ 690.758106][ C1] rcu: (detected by 1, t=10503 jiffies, g=110273, q=1017 ncpus=2) [ 690.766495][ C1] task:crond state:R running task stack:23832 pid:5359 tgid:5359 ppid:1 task_flags:0x400000 flags:0x00080000 [ 690.780033][ C1] Call Trace: [ 690.783352][ C1] [ 690.786322][ C1] __schedule+0x17d9/0x56c0 [ 690.790876][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 690.796033][ C1] ? unwind_next_frame+0x8f/0x2550 [ 690.801187][ C1] ? rcu_is_watching+0x15/0xb0 [ 690.805988][ C1] ? __pfx___schedule+0x10/0x10 [ 690.811184][ C1] ? unwind_next_frame+0x8f/0x2550 [ 690.816338][ C1] ? unwind_next_frame+0x8f/0x2550 [ 690.821577][ C1] ? rcu_is_watching+0x15/0xb0 [ 690.826471][ C1] preempt_schedule_irq+0x4d/0xa0 [ 690.831594][ C1] irqentry_exit+0x14f/0x8f0 [ 690.836232][ C1] ? trace_irq_disable+0x3b/0x140 [ 690.841311][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.847521][ C1] RIP: 0010:deref_stack_reg+0x1a2/0x220 [ 690.853115][ C1] Code: 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 12 07 00 00 49 89 c6 48 8b 5c 24 08 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 84 80 ba 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4 [ 690.872761][ C1] RSP: 0018:ffffc90003607478 EFLAGS: 00000246 [ 690.878881][ C1] RAX: 1ffff920006c0eb5 RBX: ffffc900036075a8 RCX: 0000000000000001 [ 690.886897][ C1] RDX: ffffc900036075a8 RSI: dffffc0000000000 RDI: ffffc90003607a38 [ 690.894908][ C1] RBP: ffffc90003600000 R08: ffffc90003607a38 R09: 0000000000000000 [ 690.902920][ C1] R10: ffffc900036075b8 R11: fffff520006c0eb9 R12: 1ffff920006c0eae [ 690.910927][ C1] R13: 1ffff920006c0eaf R14: 0000000000000101 R15: dffffc0000000000 [ 690.918946][ C1] ? deref_stack_reg+0x18e/0x220 [ 690.923940][ C1] unwind_next_frame+0x19bd/0x2550 [ 690.929092][ C1] ? alloc_empty_file+0x5b/0x1d0 [ 690.934065][ C1] ? unwind_next_frame+0x8f/0x2550 [ 690.939216][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 690.945414][ C1] arch_stack_walk+0x11b/0x150 [ 690.950220][ C1] ? path_openat+0x8f/0x3830 [ 690.954854][ C1] stack_trace_save+0xa9/0x100 [ 690.959662][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 690.965084][ C1] ? stack_depot_save_flags+0x33/0x800 [ 690.970588][ C1] save_stack+0x122/0x230 [ 690.975051][ C1] ? __pfx_save_stack+0x10/0x10 [ 690.979945][ C1] ? page_ext_get+0x22/0x2e0 [ 690.984607][ C1] ? __free_frozen_pages+0xc0d/0xd20 [ 690.989933][ C1] ? __slab_free+0x274/0x2c0 [ 690.994559][ C1] ? qlist_free_all+0x99/0x100 [ 690.999361][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 691.005031][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 691.010102][ C1] ? kmem_cache_alloc_noprof+0x2b8/0x650 [ 691.015818][ C1] ? alloc_empty_file+0x5b/0x1d0 [ 691.020801][ C1] ? lock_release+0x4b/0x3c0 [ 691.025438][ C1] ? page_ext_get+0x22/0x2e0 [ 691.030071][ C1] __reset_page_owner+0x71/0x1f0 [ 691.035046][ C1] __free_frozen_pages+0xc0d/0xd20 [ 691.040205][ C1] __slab_free+0x274/0x2c0 [ 691.044674][ C1] ? qlist_free_all+0x8e/0x100 [ 691.049493][ C1] qlist_free_all+0x99/0x100 [ 691.054118][ C1] ? alloc_empty_file+0x5b/0x1d0 [ 691.059095][ C1] kasan_quarantine_reduce+0x148/0x160 [ 691.064615][ C1] __kasan_slab_alloc+0x22/0x80 [ 691.065666][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 691.069516][ C1] kmem_cache_alloc_noprof+0x2b8/0x650 [ 691.069546][ C1] ? alloc_empty_file+0x5b/0x1d0 [ 691.069570][ C1] ? kmem_cache_alloc_noprof+0x156/0x650 [ 691.069600][ C1] alloc_empty_file+0x5b/0x1d0 [ 691.069625][ C1] path_openat+0x8f/0x3830 [ 691.069653][ C1] ? stack_depot_save_flags+0x33/0x800 [ 691.069678][ C1] ? do_getname+0x2e/0x250 [ 691.069699][ C1] ? kasan_save_track+0x4f/0x80 [ 691.069732][ C1] ? kasan_save_track+0x3e/0x80 [ 691.069758][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 691.069786][ C1] ? kmem_cache_alloc_noprof+0x2b8/0x650 [ 691.132863][ C1] ? do_getname+0x2e/0x250 [ 691.137324][ C1] ? do_sys_openat2+0xcc/0x200 [ 691.142127][ C1] ? __x64_sys_openat+0x138/0x170 [ 691.147190][ C1] ? do_syscall_64+0x174/0x580 [ 691.151995][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.158108][ C1] do_file_open+0x23e/0x4a0 [ 691.162661][ C1] ? __pfx_do_file_open+0x10/0x10 [ 691.167746][ C1] ? _raw_spin_unlock+0x28/0x50 [ 691.172633][ C1] ? alloc_fd+0x651/0x6c0 [ 691.177011][ C1] do_sys_openat2+0x115/0x200 [ 691.181733][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 691.186976][ C1] ? rcu_is_watching+0x15/0xb0 [ 691.191776][ C1] __x64_sys_openat+0x138/0x170 [ 691.196663][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.202773][ C1] do_syscall_64+0x174/0x580 [ 691.207405][ C1] ? clear_bhb_loop+0x40/0x90 [ 691.212126][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.218065][ C1] RIP: 0033:0x7fb7e9fbec3a [ 691.222516][ C1] RSP: 002b:00007ffc7c8434f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 691.230979][ C1] RAX: ffffffffffffffda RBX: 00005602bd6ec2a0 RCX: 00007fb7e9fbec3a [ 691.238986][ C1] RDX: 0000000000080000 RSI: 00007fb7ea05b45a RDI: 00000000ffffff9c [ 691.246995][ C1] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 691.254995][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fb7ea0597f4 [ 691.262996][ C1] R13: 00007fb7ea0597f4 R14: 0000000000000001 R15: 0000000000000034 [ 691.271015][ C1] [ 691.274076][ C1] rcu: rcu_preempt kthread starved for 8922 jiffies! g110273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 691.285311][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 691.295314][ C1] rcu: RCU grace-period kthread stack dump: [ 691.301235][ C1] task:rcu_preempt state:R running task stack:28408 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 691.314875][ C1] Call Trace: [ 691.318192][ C1] [ 691.321161][ C1] __schedule+0x17d9/0x56c0 [ 691.325711][ C1] ? rcu_is_watching+0x15/0xb0 [ 691.330524][ C1] ? rcu_is_watching+0x15/0xb0 [ 691.335848][ C1] ? __pfx___schedule+0x10/0x10 [ 691.340745][ C1] ? schedule+0x90/0x360 [ 691.345234][ C1] ? rcu_is_watching+0x15/0xb0 [ 691.350062][ C1] ? lock_release+0x4b/0x3c0 [ 691.354717][ C1] schedule+0x164/0x360 [ 691.358922][ C1] schedule_timeout+0x152/0x2c0 [ 691.363902][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 691.369311][ C1] ? __pfx_process_timeout+0x10/0x10 [ 691.374642][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 691.380491][ C1] ? prepare_to_swait_event+0x322/0x350 [ 691.386098][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 691.391354][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 691.397547][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 691.402873][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 691.408120][ C1] ? trace_irq_enable+0x3b/0x140 [ 691.413113][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 691.417839][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 691.423100][ C1] ? __kthread_parkme+0x71/0x1f0 [ 691.428081][ C1] ? __kthread_parkme+0x196/0x1f0 [ 691.433155][ C1] kthread+0x388/0x470 [ 691.437286][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 691.442530][ C1] ? __pfx_kthread+0x10/0x10 [ 691.447155][ C1] ret_from_fork+0x514/0xb70 [ 691.451783][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 691.456931][ C1] ? __switch_to+0xc89/0x1420 [ 691.461655][ C1] ? __pfx_kthread+0x10/0x10 [ 691.466279][ C1] ret_from_fork_asm+0x1a/0x30 [ 691.471136][ C1] [ 691.474180][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 691.480583][ C1] CPU: 1 UID: 0 PID: 3229 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 691.490330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.500415][ C1] Workqueue: bat_events batadv_tt_purge [ 691.506052][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x70 [ 691.512249][ C1] Code: f8 16 00 00 83 fa 02 75 21 48 8b 91 00 17 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 691.532153][ C1] RSP: 0018:ffffc90000a07e78 EFLAGS: 00000246 [ 691.538298][ C1] RAX: ffffffff8a6aa5c4 RBX: 0000000000000000 RCX: ffff888031e0dd00 [ 691.546304][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 691.554305][ C1] RBP: ffffc90000a08080 R08: ffffc90000a07fef R09: 0000000000000000 [ 691.562325][ C1] R10: ffffc90000a07fd0 R11: fffff52000140ffe R12: ffff88802bc31110 [ 691.570331][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802bc31188 [ 691.578426][ C1] FS: 0000000000000000(0000) GS:ffff88812537b000(0000) knlGS:0000000000000000 [ 691.587395][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.594018][ C1] CR2: 00007ff6706754fe CR3: 0000000076c40000 CR4: 00000000003526f0 [ 691.602030][ C1] Call Trace: [ 691.605345][ C1] [ 691.608217][ C1] ip6t_do_table+0x864/0x15b0 [ 691.612958][ C1] ? br_handle_frame+0x127f/0x1510 [ 691.618207][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 691.623101][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 691.628345][ C1] ? NF_HOOK+0xa2/0x6e0 [ 691.632540][ C1] ? rcu_is_watching+0x15/0xb0 [ 691.637342][ C1] ? lock_acquire+0x5f/0x350 [ 691.641981][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 691.647132][ C1] nf_hook_slow+0xc5/0x220 [ 691.651599][ C1] ? NF_HOOK+0xa2/0x6e0 [ 691.655797][ C1] NF_HOOK+0x560/0x6e0 [ 691.659929][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 691.664650][ C1] ? net_generic+0x1e/0x240 [ 691.669189][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 691.674964][ C1] ? lock_release+0x4b/0x3c0 [ 691.679608][ C1] ? __pfx_br_validate_ipv6+0x10/0x10 [ 691.685116][ C1] ? net_generic+0x1e/0x240 [ 691.689656][ C1] ? net_generic+0x1e/0x240 [ 691.694200][ C1] br_nf_forward_ip+0x7eb/0xa30 [ 691.699102][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 691.705036][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 691.710188][ C1] nf_hook_slow+0xc5/0x220 [ 691.714651][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 691.720141][ C1] NF_HOOK+0x23e/0x3f0 [ 691.724253][ C1] ? NF_HOOK+0xa2/0x3f0 [ 691.728440][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 691.733072][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 691.738574][ C1] ? skb_clone+0x246/0x3a0 [ 691.743023][ C1] ? br_switchdev_frame_uses_tx_fwd_offload+0x14/0x70 [ 691.749831][ C1] ? br_handle_vlan+0x3dc/0x530 [ 691.754727][ C1] __br_forward+0x397/0x540 [ 691.759267][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 691.764762][ C1] br_handle_frame_finish+0x1175/0x1990 [ 691.770352][ C1] ? skb_ext_add+0x148/0x8e0 [ 691.774995][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.781193][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 691.786089][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 691.791241][ C1] ? nf_hook_slow+0x176/0x220 [ 691.795958][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.801893][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 691.806922][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 691.812177][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 691.817685][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.823638][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 691.828879][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 691.834469][ C1] ? rcu_is_watching+0x15/0xb0 [ 691.839292][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 691.845336][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.851277][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 691.856694][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 691.862284][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 691.868223][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 691.874792][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 691.880043][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 691.885550][ C1] br_handle_frame+0x127f/0x1510 [ 691.890545][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 691.895876][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 691.901818][ C1] ? trace_irq_enable+0x3b/0x140 [ 691.906806][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 691.912134][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 691.917817][ C1] ? NF_HOOK+0x9e/0x3c0 [ 691.922016][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 691.927085][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 691.933188][ C1] ? ip6_rcv_finish+0x265/0x280 [ 691.938083][ C1] ? NF_HOOK+0x336/0x3c0 [ 691.942369][ C1] ? lock_acquire+0x5f/0x350 [ 691.947002][ C1] ? process_backlog+0x3c3/0x1860 [ 691.952073][ C1] ? process_backlog+0x3c3/0x1860 [ 691.957138][ C1] process_backlog+0x706/0x1860 [ 691.962032][ C1] ? process_backlog+0x3c3/0x1860 [ 691.967191][ C1] __napi_poll+0xaa/0x330 [ 691.972700][ C1] net_rx_action+0x61d/0xf50 [ 691.977361][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 691.982524][ C1] handle_softirqs+0x225/0x840 [ 691.987332][ C1] ? do_softirq+0x76/0xd0 [ 691.991706][ C1] ? batadv_tt_purge+0x4ae/0xa10 [ 691.996680][ C1] do_softirq+0x76/0xd0 [ 692.000884][ C1] [ 692.003876][ C1] [ 692.006832][ C1] __local_bh_enable_ip+0xf8/0x130 [ 692.011981][ C1] batadv_tt_purge+0x4ae/0xa10 [ 692.016787][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 692.022549][ C1] process_scheduled_works+0xa8e/0x14e0 [ 692.028146][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 692.034167][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 692.039268][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 692.044681][ C1] ? assign_work+0x3af/0x5d0 [ 692.049318][ C1] rescuer_thread+0x7b6/0x10b0 [ 692.054127][ C1] ? rescuer_thread+0xb8/0x10b0 [ 692.059037][ C1] kthread+0x388/0x470 [ 692.063156][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 692.068402][ C1] ? __pfx_kthread+0x10/0x10 [ 692.073028][ C1] ret_from_fork+0x514/0xb70 [ 692.077652][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 692.082806][ C1] ? __switch_to+0xc89/0x1420 [ 692.087552][ C1] ? __pfx_kthread+0x10/0x10 [ 692.092199][ C1] ret_from_fork_asm+0x1a/0x30 [ 692.097014][ C1] [ 692.713151][ C1] net_ratelimit: 6713 callbacks suppressed [ 692.713173][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 692.714639][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 692.720987][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 692.736263][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 692.748648][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 692.758930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 692.769281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 692.785515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 692.794127][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 692.810254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 697.723354][ C1] net_ratelimit: 8837 callbacks suppressed [ 697.723380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 697.731054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 697.742812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 697.758996][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 697.767272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 697.781502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 697.791995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 697.808072][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:22:35:4a:77:1e, vlan:1) [ 697.816462][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 697.832782][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)