last executing test programs: 1m0.025197678s ago: executing program 3 (id=3032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000002900)=""/4096, 0x78e}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000003900)=0x730) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@fwd={0xb}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @struct={0xa, 0x3, 0x0, 0x4, 0x0, 0x7, [{0x1, 0x4, 0x7}, {0x6, 0x3, 0x80000000}, {0xb, 0x5, 0x7}]}, @const={0xc, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/43, 0x6f, 0x2b, 0x1, 0x101, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000380)=""/79, 0x4f, 0x0, &(0x7f0000000480)=""/30, 0x1e}}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000540)=0x10, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r6, &(0x7f0000000640), &(0x7f0000000680)=@udp=r5, 0x2}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0xf6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) pipe(&(0x7f0000000640)={0xffffffffffffffff}) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) splice(r8, 0x0, r9, &(0x7f0000000840), 0x8f5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x1, 0x6, 0x2, 0x6, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x2, 0x1, 0x40, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x24, &(0x7f00000001c0)=""/36, 0x41100, 0x64, '\x00', 0x0, @sk_reuseport=0x27, r3, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x1, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r6, r7], 0x0, 0x10, 0x100}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000003940)={'syzkaller1\x00', @link_local}) 57.418942067s ago: executing program 3 (id=3036): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'netpci0\x00', {0x3}, 0xf}) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000080)="aaaaefabc5f9e96b6eef50079ae02756c5273f15e782158f7bfc856addc65f36211e7897cda09b0be10b1132d302a060ef7d0ab762afa11d91429eab2ce929731d8f86750dd0a58d2f8b7ae3db7d36369d66336a6bb8fdcba1f47822f6bc6f98b9fbdc7f0ce7427a46b3ba53007b1b3372b1b7661e39f4bb3bbe7a7c89708f3b904377f943bed28970ac674e4a7cb503d3686a3a4c1a577687261d387625bdd0f556cceafb1ce75aee6676d763dae74d98779e2b42276dab3a2524d72af21005ed3f6c4905ac4d19315a4c75f3983a2fd369b90b5867f021b9e437efa83c016227d4f13d4785edd47c2832c15dad073c2c4694fbb5e2b73a555a5e951689f738") ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pread64(r3, &(0x7f00000001c0)=""/4096, 0x1000, 0x3) (async) pread64(r3, &(0x7f00000001c0)=""/4096, 0x1000, 0x3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r4, 0x104, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x41}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r4, 0x104, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x41}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001380)={0x0, @empty, @private}, &(0x7f00000013c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001400)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001440)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={0x0, @initdev, @dev}, &(0x7f00000015c0)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={0x0, @initdev, @dev}, &(0x7f00000015c0)=0xc) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001600)={@private2}, &(0x7f0000001640)=0x14) (async) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001600)={@private2, 0x0}, &(0x7f0000001640)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001dc0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001680)={0x6e0, r5, 0x400, 0x70bd25, 0x67, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x214, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff6}, @ETHTOOL_A_BITSET_VALUE={0x102, 0x4, "49a2f5e18bf80a3e9489f76f5ab3b42536d23cee12fb9a8054a80183f722b9cecc99c862729fcc9aa93d7e2bd0c5830f8f8287724eecbe2b1e36fd3742e758eb5c1aa8660d5f178b0cb2fc55915d127526de79d80cbac83d8b459aa9d8f3d2ceb71d2694cd7df3f8298e3f88e1ddb806ddb1d10270b8fab1a74725ad26ce8548535b6ca8029cab951cdf8fb8fccb7afa32480039521a3c38e8cfcde67c089c02f3837147c3c6fb33e3105d6f3a8a19f2b1bd6a38bcf7807a8d50836ab8f71dd42e49a5caee4246d81342b747e9a5056470d90c291b13e0c3e2e1f531fe5c851e8d1b25a07dd66a143549d2f291197b2991bab5c50dad096954de078db971"}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-:-$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{%(+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@%(($\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'devices.allow\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#..$](-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5c3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x247f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_WANTED={0x16c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "b5b0d1e2c5577eeb771aabf2211327dc0983aa9e899cb66f693b19e60f5b763d070e8d82392fbad66a4c72a83ee32f75987b72765d73b4e58f2153b49778d55d0734d1e65850d233f72aeecd0def9be73747dee7d2e9da9c9bf26a07e53c0227b397dfc14d63bd6efbf54b469af5480e3b99952781e30a6f04d6ca3538882fdf73c664e0cbf796547551d26d64afd12cca9bb0cb606f0a6af8490907f1ddceef25cdb18c09f36312c0e480634263763265b429b30bee78a1948b37715cf2d47bded59ac0d9ad2777f4bb1512076d4de2706409757f2073b996f469e9014972772844ec72983bad35a9f0b31b21534f411c49c4e3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff800000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x849acc3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4b25}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'devices.allow\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',@[}\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x22c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8c, 0x4, "9fe0d46e4e6b8dc4c60e36614032502c0686b0cc81b322ca053308a8666553e694124b86fffbbfb061fc241dc44393a9bd93b91229278e2fadf787a34775548c022c61921f4bf901ce1e4321e05d015260114decd076fb06486a37d0fabebbc771f019ff3e350cd0b10c7e0c6cf65b70357a1a6c922ff180f7e18a09728c4bf91ca6ceb41880c206"}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "05daa3a9f99776590347e71fb800"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xdb, 0x5, "7b3890333c48856814b80eb5f6f5303425497c3189152ad9731862336f225dda66480763f5104c1189cd031db839dc24a34893379c029306829c73d274dfba467e45088e36b94d6be2940c782c31ed5b99ef665c72232a6d64241462c4a20787052d2cda28847c31568c79ea224f94eb6516dba4ae0fa30c7e319a8c6fc4f1bf4c64dc8ba8f751996f97b0f8588fc084addaf2ef9eb7617fed517d466ad11b8660d0d702f43131040560c143b5d744b2a1f92907f4c00ccb5c312f17b9466cf7d5d8f5e57ed98473c8810863dd835d8bd09ba571a06b9a"}, @ETHTOOL_A_BITSET_VALUE={0x46, 0x4, "8e1ef6f905f35b42ab5e8240242a272df2eb15e03b3cfde6c0495f63135db98317e286f1eb32247e7535a4c624bc66d304aaebeae949f199f1afe4e3b7cff6fc2145"}, @ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "1747a708b635e67ec1a2494a82e85a40eb7dfa420f274f66d6a2edcfe2949aa39b394aff989fef8496aa21f3ec29d22827b359867677dacd57d38c3941dcc517e35b28e98838c08297fac10c2e"}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x41}, 0x24000004) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000001e00)) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000001e40)) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000001e80)) r14 = syz_genetlink_get_family_id$team(&(0x7f0000001f00), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001f40), &(0x7f0000001f80)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001f40)={0x11, 0x0, 0x0}, &(0x7f0000001f80)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000002240)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002200)={&(0x7f0000001fc0)={0x240, r14, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x198, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe0000000}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x4, 0x8, 0x200000}, {0x5, 0x9, 0x0, 0x4e5}, {0x1ff, 0xb, 0x7, 0x5}, {0x8, 0xb, 0x4a, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000}, 0x104) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000002240)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002200)={&(0x7f0000001fc0)={0x240, r14, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x198, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe0000000}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x4, 0x8, 0x200000}, {0x5, 0x9, 0x0, 0x4e5}, {0x1ff, 0xb, 0x7, 0x5}, {0x8, 0xb, 0x4a, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000}, 0x104) preadv(r1, &(0x7f0000002500)=[{&(0x7f0000002280)=""/148, 0x94}, {&(0x7f0000002340)=""/226, 0xe2}, {&(0x7f0000002440)=""/174, 0xae}], 0x3, 0x1ff, 0x2) accept4$inet6(r3, 0x0, &(0x7f0000002540), 0x180000) (async) r16 = accept4$inet6(r3, 0x0, &(0x7f0000002540), 0x180000) ioctl$sock_inet_SIOCSIFADDR(r16, 0x8916, &(0x7f0000002580)={'team0\x00', {0x2, 0x4e22, @multicast2}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000025c0)={{0x0, 0x80, 0x3, 0x0, 0x4c6a, 0xffffffffe49baa10, 0x5, 0x7, 0x2, 0x9, 0x3, 0x4, 0x3, 0x8, 0x7}}) 57.180668299s ago: executing program 3 (id=3038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) 56.948664889s ago: executing program 3 (id=3041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008000000000000000000000000000000000000000e30e00de8cb1e0e1941fb5bd7aaa848dcf9b6b96ffdbb551b259e20914452f24c46074947657dd73e40e4767470e6f1d0ff428863d6378cc468d51659ec4b2bcaa3c9dc34c1e3da17b949fd58ff8aa0472f48139a2b2030b3908ded81847f4e8de94890dda371afa177e35c4f83386365b48bb83a3d367c344027e6f4a0c10234ae728c73034c12c73a33bdc2ca5c6e0d254a882c50eefef88ec72a8f7a2587d"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f00000002c0)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000380)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r6, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc0) sendfile(r2, r4, 0x0, 0xc1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffb0b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.742577751s ago: executing program 3 (id=3043): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newsa={0xf0, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, 0x0, 0x10000) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000040)=0x1000, 0x4) getsockopt$inet_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 56.625591966s ago: executing program 3 (id=3044): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0xc, 0xe, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000036c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000003800)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000003b80)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000003bc0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000003c00)=""/102393, &(0x7f000001cc00)=0x18ff9) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000003a40)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x5, 0x9, 0x3, 0x1, 0x4, 0xfffffff3, 0x1}}, {0x6, 0x2, [0x9e66]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x1, 0x7b32eed4, 0x1, 0x3}}, {0xa, 0x2, [0x6, 0xd, 0x8]}}, {{0x1c, 0x1, {0x4, 0x5, 0x7ff, 0x1, 0x0, 0x5, 0x4, 0x8}}, {0x14, 0x2, [0x77ad, 0x8, 0x9, 0x4f47, 0xfff, 0x6, 0x7e35, 0xffff]}}, {{0x1c, 0x1, {0xd, 0x7, 0x2, 0x100, 0x1, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0x300, 0x4]}}, {{0x1c, 0x1, {0xa, 0x80, 0x1, 0x3, 0x0, 0x0, 0x8c62, 0x5}}, {0xe, 0x2, [0x9, 0x5, 0x4, 0x90f7, 0x67d]}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="7c3134a4ca42566cbecbcf7afaf0079eb051075b19e7e2aecaf0bbc04c9034f98d8a472f223facaebcd981a53c72f342644d91d226d8d1925e3a3f17f908737e2ba59280693322745519a4334948a43431", 0x51}, {&(0x7f0000000380)="c8e3b203b1d6a677bc9ebd4d149f041d2e0b17d72454e6908b1a9851f5fb19ad42a6e6af775121120b3e8faf582053f892def8a3106ddfdbc3a4d18a61e041edf94cfc5711a5872bef332ec567ab61fbbb9ce0e6316fc3c0f0dd695eb11435801ac887e5fbcd7041aadc713a377fbc5b70e23a18562b3bbd78da66f73021275f91771df8d1cf1e3e5f59b432b164a32e470c1db76ee2d1262f4037ba4fce8cd37d376204f2b6bc3639d9695b8c363f4ce2779d02a515665d0372e90c7504dac49c9748cfce9e9c1bbeba5d805fa940d58c826b1b5309257ed661ea27849c5a15818d2d1413a37878a89710bd2ff2e47e", 0xf0}, {&(0x7f0000000480)="4b5134e45a8227b281774a94be2f5777c834b82fda008360b88451c20b62f35077e8e54bf5242fcabff02690f0428daf6353eae0b15b8ee70028c1e9a27ab282a7f9c6f20f4b4fcf1199cf55b1af354817275d1663f6d68ac2105842e6749876b1eb7cd4a080270c2097a6517a84460c3965b6d6b813ffbc5493a701b26f54b27c74f3104d6053273de5c49732a84a1ee25b890307978e7f5afbc596c0aec638ffed6cc30006b004681929fa091757", 0xaf}, {0x0}, {&(0x7f0000000540)="756b137b24b6a5f83db30dcb8b9c0ed52f00c2c04ad2c03c09f37e80266bf53386891740e58fc90813291fa0890cd965b8d155a8", 0x34}, {&(0x7f0000000580)="716d7cdf2ed1e7eb2db0c28951ea352f8c1fc40579fc4b2f477289aa2846a965e73ca5ee905d74206180f5f3ae89d4064a9756f51f6a8d3d008dee338d708af54a5592d4311ff0e3278881b94b61395e5f60f5248d227cf97080aef4a54dd6405d024f0fb54d37b4340c013e31384df52a979616c6946013ca3f45454bea7f165c9ade565fa792e30b538f0cf021acfd1a9e840cd38719c009fd66474f8c060d35ff721b6efda2f0baac79733850cff6dbfd", 0xb2}], 0x6, &(0x7f0000000640)=[{0x68, 0x88, 0x101, "b8158c679e5b9c362b29397d222728825d08c67a1618da40540d1265f6a9fdb231a369e3839e9cca29c3a7c472b92673b87ee68fcd87bf1c706b4daf738ed9e7ea6eb223a8219a59c0b397ec690fdceb715be9a22fd898f0"}], 0x68}, 0x8080) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x14, r8, 0x20, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r9) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f000001cc40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="05004bce95b0e1e638d1b45904a7d8000000000100000001010000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x5c, r10, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x5c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000f00)={&(0x7f0000000180), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x98, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1b3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x11}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xeebf}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000007}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000) syz_emit_ethernet(0x13ac, &(0x7f0000000f40)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "36539a", 0x1376, 0x2f, 0x1, @remote, @remote, {[@dstopts={0x5e, 0x5, '\x00', [@ra={0x5, 0x2, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @fragment={0x62, 0x0, 0x0, 0x1, 0x0, 0x4, 0x66}, @srh={0x8, 0x12, 0x4, 0x9, 0xa5, 0x40, 0x1, [@private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @dev={0xfe, 0x80, '\x00', 0x1a}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @empty]}, @fragment={0x2f, 0x0, 0x0, 0x1, 0x0, 0x16, 0x65}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb7, 0x2, [], "636a96aa2f4de4a99cd7ef00f0b36572ec5e74738cd7c12b199b47fdc9204ed0ac728e167bc376b2ea4ff66ed039f2be892c2ac42a8a120402b9a1e5890ab77606e635a8d09d72ca955eff94b2a88c31aecf84fc672545dc274adb77dc2dd4187b10afe7c7a35612de396bb12fd041a4e9e9e7979e4174e334bb5ae711dcc3d1d09e64553d2ad27e2d2d091cc76419410ac5453dc65d16242684e0af53419c82651eec548b858ba0adc1af1d65354b2e252506cd947fef"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x4], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x8629, 0x7fff], "de459be052066c8167903091e5417f32e447365eb91c15393ed28d651ea8515e68f3d72442f6911f919e4df8a11392d609976218c355e1af244384052e8eeda4984881bc4abd70d33497bf7e003a46d33d025ebc81b217b8d2c9d3db6157d271a39fe52d7e13d6bbc4cac0334513a3481481f08fb7b78935461ecb7ea56ee7ae39ffcec249090901b35792a4f7dabdfb851d2d32c29462be08cd1390755d0cc1f5e9a6b988c4680e813dff8e7dadd7947dda57fa0a9cb8a2975a1163d2abda531d00ac9153"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x2, 0x3, 0x0, 0x1, 0x1, 0xb}, 0x1, {0x269}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x3, 0x6, 0x5}, 0x2, {0x10001, 0x5, 0x2, 0x2, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x1, "823186eef5249905073c1327e30faa0cc21f36c58407edc770a48db562840f50382a470da46dfbfa9d6d96f0b33dc7dbbed704473a8b7609580f7bc85b029320b2f947221230d4b33850191441715c40a18d9af7c3cad490dd5ac7e370f0e4fc82b3d8a46ae2abbf58bf16459d9fc2b356648f21b76228da18accdcdb6020a06775eb92570dbe59989548f334a920254b0094a95bb865593f1e8d4849213afa17898ee17439c45ac7f8c924d997268436bb70b4f5c87a7e6d3aa1ad3d97bf005f6f5f6df74fd80e05b07debede82173c"}}}}}}}, 0x0) 54.628275211s ago: executing program 4 (id=3063): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000200)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x11, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xc, 0x2, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x24040000) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r1], 0xc4}}, 0x0) 54.330021118s ago: executing program 4 (id=3066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000bc0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000c00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0xe, 0x4, &(0x7f0000000e40)=ANY=[], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3d}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ec0)={@map=r3, r4, 0x5}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xe, 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='GPL\x00', 0x4, 0xc3, &(0x7f0000001140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x8, 0x10, &(0x7f0000001280)={0x0, 0xfffffffd}, 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0f00000004000000040000001200008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001340)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r6, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r3}, &(0x7f0000001480), &(0x7f00000014c0)=r2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001640)={'syztnl0\x00', &(0x7f00000015c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xf9, 0x81, 0x22, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x20, 0x5, 0x7fffffff}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@enum={0xb, 0x6, 0x0, 0x6, 0x4, [{0x10}, {0xe, 0xf}, {0xe, 0xfffffff9}, {0x10, 0x80}, {0xf, 0x7}, {0x2, 0x8}]}, @const={0x8}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @restrict={0x5, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30, 0x5f, 0x61, 0x2e]}}, &(0x7f0000001700)=""/227, 0x7e, 0xe3, 0x0, 0x1, 0x10000}, 0x28) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000019c0)='GPL\x00'}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000001a00)={r9}, 0x8) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a40)={0xffffffffffffffff}) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r12, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r12, 0x0, 0x4, 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001a80)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x2a, &(0x7f0000001ac0)=r13, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x41, '\x00', r8, 0x17, r10, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x4, 0x1, 0x6}, 0x10, 0x18b99, r9, 0x1, &(0x7f0000000440)=[r0, r10, 0xffffffffffffffff, r13, r7, r6, r3, r13, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x4, 0xa, 0x9}], 0x10, 0x81}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 53.838710409s ago: executing program 4 (id=3070): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=r0], 0x40}}, 0xc001) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = socket(0x40000000015, 0x5, 0x0) sendmsg(r4, &(0x7f0000000500)={&(0x7f0000000540)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, 0x0}, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100001002bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4dd20200041fff07000003006e657464657673696d3000000000000014001680100001800c000300010400004dce0000"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x268, 0x0, 0x5, 0x601, 0x0, 0x0, {0x2}, [{{0x254, 0x1, {{}, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}]}, 0x268}}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, &(0x7f0000000c00), {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r7, &(0x7f0000000c40)=@in={0x2, 0x1f90, @loopback}, 0x10) (async) listen(r7, 0x5) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000cc0)={0x2, 0x1f90, @loopback}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000d00)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x3, 0x928}) (async) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c008000", @ANYRES16=r11, @ANYBLOB="100026bd7000fedbdf25770000000500ee001b0000000500ee00030000000800ef00000000000800ef00000000000500ee0081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x108accc119bc8478) (async) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x7, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}}) 53.192742375s ago: executing program 4 (id=3074): syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1cc, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6d}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf3, 0xc5, "0fabaa51f6a4a2a0c8a98d9b41218ef93f8aadac4640d2fcb1601db0f07d779508f42a6d7ba5a35ddaa2dcb444e3e77fb7c07fcf70f564200fde5ae94a823fead973b150ebe32315caa3af1675fbbfeaf88cdd939c7f23c68c26e717d6756eafbda75f75b891da3ebb8088410158247bddc9dac4ddfc35335faafa2d217856be973aaae31371cb567b8e91a7f6ff42fd1e09f7b6d703b41c3797687e42e1fb572c4dfaeecd41b2646b9b868416978d1fcdfdae024ee0b590b91b7b1eaee7144a2bd9b6e1b29ce74b2d2f8bd2e1e9a7f875ee6ff0bb9031397a1f22d9af2a3f4f0afe34e74ffe994546060493589cef"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x4f, 0xc5, "1276b479b8891db5e17d40984daa0a38bdb15c223d193e428dbbbeb612535b387d5dd59f5406533baf0ac2bdfa7eebf0d4df360bef45f21e03e0dc4f0cab7741e4c25424c72e38b3afd215"}, @NL80211_ATTR_VENDOR_DATA={0x3c, 0xc5, "3c05146377b5b48dd3cc7dc39de74e309008cf093196bcb9643d61dbbf0134084ef75fbe3ddb4ac2464f8810ca89e68c2059734df7d0416d"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fffffff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8021}, 0x40004d4) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000500), &(0x7f0000000540)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000b40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000640)={0x4b4, r5, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x4040, 0x8000, 0x4, 0x4, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfbff, 0x7, 0xb, 0x5, 0x4, 0x2, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xff26, 0x7, 0x9, 0x4, 0x3, 0xd7, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x1b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x4, 0x24, 0x2, 0x32, 0x6, 0x24, 0x36, 0x30, 0x5, 0x1b, 0x1b, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x4}, {0x2, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x7}, {0x1, 0x9}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x5}, {0x0, 0xa}, {0x4, 0x2}, {0x5, 0x9}, {0x6, 0x7}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x3, 0x4}, {0x1, 0x5}, {0x5, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x5, 0xa}, {0x6, 0x1}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x9}, {}, {0x4, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x6}, {0x0, 0x15}, {0x3, 0x1d}, {0x6, 0x4}, {0x1}, {0x4, 0x1}, {0x2, 0xa}, {0x5, 0x6}, {0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x7}, {0x6}, {0x1, 0xa}, {0x6, 0x6}, {0x5, 0x1}, {0x6, 0x7}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x6c, 0x7ff, 0x0, 0x5, 0x9, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x0, 0x5, 0x0, 0xf99, 0x4, 0x4]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0xa}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0x2}, {0x5, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x5, 0x1}, {0x3, 0x2}, {0x5, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x7}, {0x7, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x1}, {0x2, 0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x6}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0xc, 0x24, 0x5, 0x12, 0x2, 0x12, 0x6, 0xb, 0x183411f8b8e16f60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7fff, 0x3, 0x100, 0xac48, 0x7ff, 0x9, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x5, 0x401, 0x0, 0x3, 0x2, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x6}, {0x0, 0x9}, {0x4, 0x5}, {0x6, 0x6}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0xa}, {0x3, 0x8}, {0x1}, {0x4, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0x8}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0x6}, {0x4}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x0, 0x1b, 0x2, 0x16, 0x6, 0x60, 0xb, 0x1f, 0x12, 0x2, 0x36, 0xc, 0xc, 0x48, 0x30, 0x1b, 0x24, 0x30, 0x6, 0x12, 0x60, 0x6c, 0xc, 0x4, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8, 0xa9cb, 0x5, 0x9, 0x0, 0xf000, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40, 0x6, 0x7, 0xc759, 0x81, 0x86, 0x20]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x99, 0x6, 0x9, 0x100, 0x10, 0x4, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x22, 0x60, 0x9, 0x12, 0x9, 0xc, 0x30, 0x1, 0x4, 0x6c, 0x24, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x200, 0xfe2f, 0x5, 0xf, 0xffff, 0x40]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x46e, 0xe1, 0x800, 0xffff, 0x5, 0xc, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x365a1884adab79b2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x151dcaadf79fadfb}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x2}, {}, {0x4, 0xa}, {0x7, 0x5}, {0x4}, {0x3, 0x5}, {0x4, 0x4}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x5}, {0x1, 0x3}, {0x7, 0x1}, {0x4, 0x7}, {}, {0x7}, {0x1, 0x1}, {0x6, 0x9}, {0x7, 0x3}, {0x2}, {0x4, 0x5}, {0x3, 0x2}, {0x3, 0x5}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x4294, 0x2, 0x8001, 0x7ff, 0x9, 0x10, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x2, 0x1, 0x18, 0xc, 0x12, 0x2, 0x8, 0x6, 0x6, 0x9, 0x24, 0x24, 0x75, 0x24, 0xc, 0xb, 0x12, 0x9, 0x4a]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x2, 0x80, 0x4, 0x8000, 0x9, 0x8, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x6, 0x9, 0x8, 0x9, 0x3, 0x82]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0xa}, {0x2, 0x6}, {0x5, 0x8}, {0x4, 0x5}, {0x3, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x1, 0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x6}, {0x3, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x9}, {}, {0x1, 0x3}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x1}, {0x5, 0xa}, {0x4, 0x2}, {0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x3}, {0x4, 0x4}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0x1}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0xa}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x2}, {0x2, 0xd}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0x8}, {0x4, 0x1}, {0x3}, {0x0, 0x5}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x6, 0x3}, {0x1, 0xa}, {0x7}, {0x3, 0x9}, {0x6}, {0x6}, {0x3, 0x7}, {0x2, 0x1}, {0x2, 0x4}, {0x3, 0x9}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0xa}, {0x2, 0x6}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8dc, 0xa42, 0x7, 0x8, 0x8, 0x1ff, 0x13e0, 0x683]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x4, 0x5, 0x2, 0x2, 0x9, 0x81]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {}, {0x0, 0x8}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x3}, {0x3, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x6}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0xa}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0x7}, {0x5, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x6}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x2}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x4}, {0x3, 0x3}, {0x7, 0x9}, {0x3, 0x9}, {0x7, 0xa}, {}, {0x4, 0x5}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x2, 0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4}, {0x4, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0xa}, {0x6, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x5, 0xc, 0x4, 0x48, 0x1b, 0xc, 0x18, 0x2, 0x30, 0x9, 0xb417aa70914422e7, 0x16, 0x48, 0x36, 0x1b, 0x1, 0xc, 0x60, 0x6c]}]}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x400c480}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r7, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44881) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r3) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f0000000f00)={0x22c, r10, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c25}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ee4bfba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x44001}, 0x10) socket$inet(0x2, 0xa, 0x9) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000011c0)={'syz_tun\x00', {0x2, 0x4e23, @empty}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x120, r8, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x7b}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x2}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x228}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x147}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x9b, 0xbe, "95f556400c72a384257cfc850334f534cea2e9572e2bace178a716eb37774abdcb834f30f8cbb29e1d108e54eb4fd444a11485032e9cc5dbcc7b356c7c513a5bdc9fd09091946dad735663fec557bfe6e23498c2b6865d3d28c75893c92dbe87e7092ec21e688397bf50b2b2674b8ddcee5cf4b7fc59a81c2c54c405cd44908b1844d81fa591dd0323c4be713eba5c6ae4874cf9562277"}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}]}, 0x120}}, 0x40080) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001400)=0x1ff, 0x4) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001480), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x38, r12, 0x311, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc33}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000016c0)={r4, 0x58, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x20, 0x10, &(0x7f0000001740)=@raw=[@generic={0x4, 0xe, 0x2, 0xfb5e}, @ldst={0x0, 0x3, 0x6, 0x1, 0x2, 0x30, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x0, 0x8, 0xa, 0xa, 0xfffffffffffffffc, 0x4}], &(0x7f00000017c0)='syzkaller\x00', 0x2, 0x71, &(0x7f0000001800)=""/113, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001880)={0x3, 0x3, 0x26, 0xdbb}, 0x10, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@bloom_filter={0x1e, 0xffff, 0x5, 0x1, 0x2000, r4, 0x2, '\x00', 0x0, r4, 0x3, 0x0, 0x5, 0xf}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000001580)=@raw=[@alu={0x7, 0x0, 0xd, 0x7, 0x7, 0x2, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0xc, 0x4, 0x5, 0xfffffffffffffffc, 0x1}, @alu={0x7, 0x1, 0x3, 0xb, 0x9, 0x14, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x9, 0x3, 0x1, 0x1, 0xfffffffffffffff0}], &(0x7f00000015c0)='syzkaller\x00', 0x3, 0x3c, &(0x7f0000001600)=""/60, 0x0, 0x2c, '\x00', r13, 0x19, r3, 0x8, &(0x7f0000001700)={0xffff026e, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x205e7, r14, 0x7, &(0x7f0000001a00)=[r3, 0x1, r15, r3, r4, r3, r3, r4, r4], &(0x7f0000001a40)=[{0x2, 0x1, 0x10, 0x1}, {0x1, 0x2, 0x10, 0xb}, {0x2, 0x4, 0xf, 0x2}, {0x5, 0x3, 0xf, 0x1}, {0x2, 0x3, 0x3, 0x8}, {0x1, 0x4, 0x2, 0x6}, {0x3, 0x4, 0x4, 0x5}], 0x10, 0x21}, 0x94) 52.167737378s ago: executing program 0 (id=3079): ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, &(0x7f0000000180)="6bb91b683ae81375d47e029ce772ba389611818f927b967cb9ef437a2a76a65d5b2bcabef4129b55766e8cc90fecee96dfb685d7cc") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xb}, {0xffff, 0xffff}, {0x3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000340), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005050000000001801400020073797a5f74756e00000000000000000005000200fc000000080009000200000077068bf5ad"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000) 51.359589967s ago: executing program 1 (id=3081): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x36a2f}]}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x94ccb9658fa59929, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000900)=0x714, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000940)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xb3}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) readv(r5, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/92, 0x5c}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1d, &(0x7f0000000300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x1, 0xf, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x25f}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xb2, &(0x7f0000000580)=""/178, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xc, 0x4977, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r2], &(0x7f0000000700)=[{0x2, 0x1, 0x9, 0x4}, {0x1, 0x2, 0x7, 0x5}, {0x3, 0x4, 0xa, 0x6}, {0x5, 0x4, 0x9, 0xa}, {0x4, 0x4, 0x4, 0xb}, {0x5, 0x3, 0x6, 0x5}]}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="020a000902"], 0x10}}, 0x8000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000840)=r6, 0x4) 51.335759057s ago: executing program 4 (id=3082): r0 = socket$inet_smc(0x2b, 0x1, 0x0) pwritev(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000)="8ac08018b890bab2a6ccc706b4a6d6c9e55129fb9b7bae48b1821853992c03eee02d6ec944259ffd1447e663cecdf2c93020a8396e10032cbb3081d53ba2ea8a8a05cfbe04bdf65e7b4f2f6f9d93ae3416680005", 0x54}, {&(0x7f0000001080)="30cebe2eca87edc9a2210ea7c182d75a1347a6933bf5370c438f773e3e03a65e3d4d65ebe1cfcf1db3934cf391e278bbfc9d846e9f6ac65de9a5a2e2116daf28ac77adc67b9630ffb068da62a90e25e6a8f7c6a377c1178c119bb6870d7f8db46f5c003ba0ad63b7ad07a5a72b26492c1757e4905a85c90d64ad4e94e889df77b0be7331f285857aaae9a05cebe5eab62ca48ddb2b64601c9de6641ed2c5f3a817b6a8c0ad8d", 0xa6}, {&(0x7f0000001200)="8aae4e75ff2f2c83815b383496b8a48d9e48abbccaa0e90627492fb3d207574d2a4f6122256bb383e3dc25fa02793939579af22bd3ef771c82fd8f76592a714f6f664f7ac62def0c809f2b2a8d4302ceaf2e0c73846cd01749ff6eb0545127ab79af2242257028725d804040", 0x3a}], 0x4, 0x56a8, 0xec) unshare(0x60000600) 51.069392071s ago: executing program 0 (id=3083): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000800)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f00000001c0)="2a637c1b8b3894", 0x7}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a21000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a0103000000000000000001001efdce52000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c000100636f756e746572008004028014000000100001000000000000000000"], 0xe4}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x3, 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000800)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f00000001c0)="2a637c1b8b3894", 0x7}], 0x2) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a21000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a0103000000000000000001001efdce52000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c000100636f756e746572008004028014000000100001000000000000000000"], 0xe4}}, 0x0) (async) 50.913646147s ago: executing program 2 (id=3084): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1, &(0x7f0000000400)=@raw=[@generic={0xd, 0xf, 0x2, 0x400, 0x4}], &(0x7f0000000440)='GPL\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000240)={0xa, 0x4e24, 0x14, @mcast2}, 0x1c) sendfile(r1, r0, 0x0, 0xf03a0005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 50.146737365s ago: executing program 1 (id=3085): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x178, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'syz_tun\x00', {0x8000000000000001}}}}, {{@ip={@remote, @multicast1, 0xffffff00, 0xff, 'pim6reg0\x00', 'nr0\x00', {0xff}, {}, 0x84, 0x3, 0x60}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "1190", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x2}}, @common=@icmp={{0x28}, {0x3, '8^'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)={0x84, 0x34, '\x00', [@generic={0x5, 0xfd, "8d1d0d0d91a82fb83b0c5f617b25761869a129406bc24e15001602cf2aadaf75bb9522a471801d6844850e4a3f7793729b1f4c746ab08719548860ea0594a4b9c9db9240aaed5b37336cfaea25c5d821714a5bdef495d5c61f1b83831ccb3dbf5108154dc39c9fe833d19c95fcb9c0e66819d8a01902a5c00e147e3b189ff6859b2d1e9d3c46da7f833aa7bc3b178090ea09b248de75f7698a1ae8c16c4e52a5d00b035100ee6553183605e1ab09cb131938cd2915b576df57c416fd0a3b4cf8eb108b895e46864f684e9445d452e81c714eac00a3df47f86291a9ebcd2424ac65502d7225dcbf6987783bef1aa90cd24f8a7cb647ba683560e1f30198"}, @generic={0x40, 0x97, "c3eaf880c37bb64d2b66b964008a73ee699f7ec3450178f8d140d4ddc4e3a8d6a61db29675a113adf64e25e88a99a8c423c0b7db42b5be59ead139abf35ea4ad49e208b3dcdf149c4993003deaf4679b21a271b49fd668ecdfc66776106dc513bc52a3f582b2910afb430bcaeed716eb12547f29c995c2fe518366b9061cd51f550c633f3536e0bc9a4f6a90dd840262c2acd8250489b3"}, @enc_lim, @jumbo={0xc2, 0x4, 0x89}]}, 0x1b0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000580)={0x1}, 0x4) ioctl$sock_ifreq(r0, 0x8937, &(0x7f00000005c0)={'geneve0\x00', @ifru_addrs=@llc={0x1a, 0x303, 0x3, 0x80, 0x10, 0xc, @broadcast}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000900)={'syztnl2\x00', r1, 0x8000, 0x20, 0xd, 0x9, {{0x30, 0x4, 0x3, 0x7, 0xc0, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010102, @empty, {[@ssrr={0x89, 0x27, 0x3d, [@local, @rand_addr=0x64010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @multicast1, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x17, 0xb2, [@private=0xa010101, @empty, @multicast2, @rand_addr=0x64010101, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xf6, 0x1, 0x2, [{@private=0xa010101, 0x1}, {@rand_addr=0x64010100, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x50, 0x1, 0x7, [{@remote, 0x7ff}, {@loopback, 0x2}, {@broadcast, 0x2}, {@multicast1, 0xd0}, {@local, 0xd}, {@multicast2, 0x5}]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x69, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @loopback, @broadcast, @multicast1, @loopback]}]}}}}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x400000, 0x0) syz_extract_tcp_res(&(0x7f0000000a80)={0x41424344, 0x41424344}, 0x2606e1e0, 0x7) write$tun(r3, &(0x7f0000000ac0)={@void, @void, @mpls={[{0xf3349}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x800}, {0x1000}, {0xac7}, {0x48, 0x0, 0x1}, {0x6}, {0x3}], @ipv4=@tcp={{0x28, 0x4, 0x2, 0x9, 0x1dd, 0x65, 0x0, 0x5, 0x6, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0x4, "3612"}, {0x1, 0xe, "01b7c796bb86c9da68f9bef6"}, {0x2, 0x2}, {0x2, 0xa, "b78a699708d21709"}]}, @timestamp_addr={0x44, 0x14, 0xf3, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x44}, 0xffff45b4}, {@loopback, 0x4}]}, @noop, @ssrr={0x89, 0xb, 0xe3, [@empty, @loopback]}, @cipso={0x86, 0xb, 0x3, [{0x5, 0x3, "ce"}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x25, 0x3, 0xe, [{@loopback, 0x8}, {@multicast2}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x2}, {@multicast1, 0x5}]}, @generic={0x88, 0x7, "f3e35ffd27"}]}}, {{0x4e21, 0x4e24, r4, 0x41424344, 0x1, 0x0, 0x1a, 0x80, 0xf800, 0x0, 0x5, {[@window={0x3, 0x3, 0xb}, @sack={0x5, 0x1a, [0x2b3, 0x9, 0x5, 0xa, 0x4, 0x9]}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x8}, @generic={0x5, 0x7, "fdb5c8a6e9"}, @generic={0xfe, 0x6, "0bbbac79"}, @window={0x3, 0x3, 0xb}, @generic={0xfe, 0xc, "7c2ebdb30ead008ac9fe"}, @md5sig={0x13, 0x12, "508be45fd7e557ec07f5e0762bfd3893"}]}}, {"b8b94b43626cf7b3470a19e821c1e9c75f2c314a99661b20e909b1a2829af5b482f536ae927052c549fed344050d7c49496e8ccca898a9bdb443cd1d6218a22e598610fb6de53dcf52675ace36bf3b9c1717dd4cd326f5324331a6c86290d684707af1e4027c129bfb757f37efc6bf22574921fbc81fdbd870aaf8b1f8b6293348b23fc5277c1eaafd92054910a0b04de87176f59ee67da95d4c1f3782508fa1e79513093d008dac33793f9e582ce6a58785fe0adedec5b6567b5601d0e1d162d1d5874aeb6bda51d4bd587249d29e26432a074039"}}}}}, 0x205) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r6, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000f80)={&(0x7f0000000e40), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x78, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = accept4(r7, &(0x7f0000000fc0)=@caif=@dbg, &(0x7f0000001040)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001080)={0x2, 0x8a, "3194eb5117c93f8f81102553abdd7a8a60745cd32fe32b7241c937b7cd5545abe2ab0ca4f3c1536d8bcd49916d7d1c33e9a6b0923475d95ab31fe638b7075c751c5ff7c9ee81ad2a1d790b21af8f2f49ac9c3d3cfaa62df7e78584ee1825ace2182152fd5acbaa60e295381e6a9623abaa8b326b2817eaf2229e708ef26f6512640f447fd69c524d6d5d"}, &(0x7f0000001140)=0x92) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000001180)={r10, 0x7ff, 0x3, [0x80, 0xfffd, 0xf32e]}, 0xe) write$tun(r5, &(0x7f00000011c0)={@void, @val={0x3, 0x4, 0x5, 0x5, 0x38, 0x1}, @mpls={[{0x7}, {0x10, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xe}, {0x7ff, 0x0, 0x1}, {0x7}, {0x5, 0x0, 0x1}], @generic="0a33ac5fcac07eb40496058158970f5490ccc027df18718c71cc3166bf835e0b4e0dab5ba81c9d804d5ec15240cc723f529812a3598c2499c25837d8bb8236e5968e5b9b8d7367b7bbf81389ff7b93698068f911d79697a79008edf81ff639aeb38036282295c3dc69bc65e1d0f1453b9204744df776f857b82389a56554d32d18891d3df286f398e9f04abff092d7d8478689a624467511f92e26e798ca13c17538ba1b82d8d849f1b8513cbbeb7b0a24ee080c00dfa50c3640d402c4170999192f2228"}}, 0xf2) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001340)={0x820, r11, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1c000000}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+@\\##%\\]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'ttl\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@\x18{\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'ttl\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x46}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7cc}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':,}/{!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "a80d98167a4431613162e1970d4367318c82a66580644d10a1a76479d28a26a020b4085a65ebbc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "93f41a8c9ce73bb8a33c673a4599d2bdb887d18da0c1999da1728052112fcd2b44e28ccf904ef34b5b5e6127"}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x480, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "adc7b29ec5f006fd980cb4ef7ca1ca3863b7b0198bfc39c476829e9225a4f62ace3b5df744a4abc3fe6da55f5e86ba35697b6949cde75fa786bb65b5dffa6127483ab7718800a801bdd996d6d481c89de777ea8b670f466162549f3cdf71f6bac55d2c5ab4d8ac932e71ba9e6bc4c9a1a552fec16a1787e4503a5f6412f3467195d0a0b65221b3a1cea8879a3f6d01b8c235f0070236df330baef5dfaf7fdf47a76de9258a4d9301a1b03e3b0ebed9e35bbf1e52b86144e765a5085f74e511ed2c3530e59f716ebdeca7fb1012a7fe6efb2cf29e6f6df50ad13812a8"}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "5f9aa5073eb73317684a389cd72fe559ccd4750b767d619cd0f205fff921638100eb4eeeadcded45cc6828c1341aba27cec11182289bc3a01e6c035fd1c4e34a117acf4500d453e9d682e1e303a4bb9e1aabec89e715b73b95f00422846901671afcb43f6239a8809b4ee9bdb4b261c9ed34edf33e03c759f2bcabf802a6dce15838ba69d39cfbbe2b72f645a2b9894bba99ea91454d9705a9c3f733f1f8b8501fab99a9b605ba5e60393857f3a6670d25489b1b9f109f43c0403f966e23549b2ea57834376ed825bfdea3a2add725687e03e49bdaf6d57c"}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "05362fd2efca19a5646e6b54fe148c314a52920253cce83d7e6882ffda1fdbfa9b22d5003785e73a3b3269758a27a71c15e164e2410a87a20444b80fafb16e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd37}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'q!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'icmp\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe13b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xc9:,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d08000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8654}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'icmp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\xff\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x13#\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'ttl\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe5, 0x5, "fc0e341e9849c5f46e81795e925d5760004b4f3abd2a0c9d31d6abd52cd07a2ba93f0145536347ce01ed28421867990474199fc620c573d1af9d448a94de3d8add8031a45277cb0dadd57ce91c200343143b094a8c319a6a62f3e562a10947097a475f4e191575e6793adf7dbb143472c1f06ec712b159a0f8eb313fad65a7de17efe0a627ae5efa62819c32d6a535bedb8d4f41ebd4cb76ad4aade11ab0ac46516be8ee667084639a70b6e718f97bf9827ba6a5f9fbd027826835b6d46b64b538209c9ad19bb06102898c9c717dd400356b2995973a0831ddd084f3217de67afe"}]}, @ETHTOOL_A_DEBUG_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x820}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000001c40)) getsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000001c80), &(0x7f0000001cc0)=0x10) ioctl$OCFS2_IOC_RESVSP64(r3, 0x4030582a, &(0x7f0000001d00)={0x1, 0x2, 0x4, 0x7, 0x5, 0x5}) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r13, &(0x7f0000001d80)="41b636bc386e8380a9c9a0130fa92e1bcafc2c75c9ca30c10e8f70426ebd5850de7193a5147635f55d7a83651a88d52bc5d4", 0x32) ioctl$NILFS_IOCTL_GET_BDESCS(r12, 0xc0186e87, &(0x7f0000001e40)={&(0x7f0000001dc0)=[{0x5, 0xd, 0x4, 0x1, 0x4}, {0xffffffffffff02ba, 0x0, 0x6a33a9ed, 0xffffffffffffffff, 0x9}, {0x0, 0x5, 0x6, 0x5, 0x6}], 0x3, 0x28, 0xa524, 0x7215785}) 49.939424199s ago: executing program 2 (id=3086): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=@framed, 0x0}, 0x94) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x21, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4e8, 0xffffffff, 0xffffffff, 0x4e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x1}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x4}, {0x4, 0x4, 0x1}, 0xf4, 0x7}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000880)=0x3ff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, 0x0, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x2040800) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r9, 0x400448c9, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) r11 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r11, &(0x7f0000000040), 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x1, 0x8000) 49.791811958s ago: executing program 0 (id=3087): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x37, 0x1, 0x7fffc, 0x4, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 49.722036717s ago: executing program 1 (id=3088): r0 = syz_init_net_socket$x25(0x9, 0x2, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendto$inet6(r2, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r4, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) 49.590548935s ago: executing program 2 (id=3089): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) 49.379746597s ago: executing program 1 (id=3090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000ac0)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0xe) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)={0x7, 'ipvlan1\x00', {0x5}, 0x8001}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c80)={'wg1\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r4, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000e80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x2, 0x1e, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd71, 0x0, 0x0, 0x0, 0x5ba8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x61}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa698}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @ldst={0x3, 0x2, 0x4, 0x3, 0x0, 0x20, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @generic={0xf, 0xe, 0x5, 0x6, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0xa1600, 0x1c, '\x00', r5, @fallback=0x19, r6, 0x8, &(0x7f0000000d40)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0xc, 0x50, 0x7}, 0x10, r7, r4, 0x1, &(0x7f00000010c0)=[r3, r3], &(0x7f0000001100)=[{0x3, 0x3, 0xb}], 0x10, 0x9}, 0x94) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x400, 0x470bd2d, 0x25dfdbf7, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488d1}, 0x20000090) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e8020000", @ANYRES16=r1, @ANYBLOB="00022dbd7000fddbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="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"/716], 0x2e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 49.201816323s ago: executing program 0 (id=3091): syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="9b4307000001", @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x6227, 0x401, 0xf392, 0x3, 0x8}}}}}, 0x0) 49.181727126s ago: executing program 2 (id=3092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x88, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1401000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000000000000000f4001a800600000002000000e80005802400018008000100010007000800020000000000080003000000000008000400", @ANYRES32, @ANYBLOB="2800038008000100010000000a000200aabbccddeeff00000800030000000000080004000100000050000480080001000100000008000200010000000800030001000000340004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800088008000100010000000a0002000180c2000030000008000300000000000800040064000000080005000000000005000600000000000800070000000000050008"], 0x114}}, 0x0) 48.983442363s ago: executing program 0 (id=3093): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0xa4, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x39, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x52, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) listen(r0, 0xfff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f7c7ced72c81ee29023f2a"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdef5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x90) 48.980429164s ago: executing program 1 (id=3094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x146, &(0x7f0000000480)={@remote, @multicast, @void, {@ipv4={0x800, @dccp={{0x35, 0x4, 0x2, 0x3d, 0x138, 0x66, 0x0, 0x80, 0x21, 0x0, @empty, @loopback, {[@rr={0x7, 0xf, 0x2d, [@remote, @remote, @empty]}, @timestamp_addr={0x44, 0x34, 0x9c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x5}, {@rand_addr=0x64010100, 0x6}, {@multicast1, 0x9}, {@rand_addr=0x64010101, 0x40000000}, {@loopback}, {@multicast2, 0x7f}]}, @timestamp={0x44, 0x20, 0x80, 0x0, 0x3, [0x10001, 0x5, 0x7, 0x0, 0x3, 0x600000, 0x101]}, @timestamp={0x44, 0x1c, 0x41, 0x0, 0x7, [0x60, 0x49, 0x7fdb, 0xac2, 0x8, 0x0]}, @generic={0x44, 0x11, "f76ff72948bcb233f9f4db01b5a2be"}, @cipso={0x86, 0x1b, 0x1, [{0x2, 0xa, "a4caf66c9afc6779"}, {0x0, 0xb, "d6895378d425cd88cb"}]}, @ssrr={0x89, 0x13, 0x13, [@remote, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, @broadcast]}]}}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x4, 0x0, 0x0, 0x7, 0x2, '_l_', 0x5, "6afc41"}, "62e25b40eb0c6ef1f6ef5fea5d8fcbe2a49fa3273f01ad696c6921ef8cb40fdab0e23abe91bc7425ec2df7e34b3a88d8d701973150528cc134e680fbecbc91dba4774e4f2de56e5993c6b3f274ee6f3f8da93fa8"}}}}}, &(0x7f0000000600)={0x1, 0x4, [0x8b8, 0x8c0, 0xb15, 0xa06]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) close(0x3) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 48.737010345s ago: executing program 2 (id=3095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES16=r0, @ANYBLOB="fcdd"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 48.343447299s ago: executing program 0 (id=3096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r5, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r6}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 48.341687577s ago: executing program 2 (id=3097): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x1}, 0x18) syz_emit_ethernet(0x15b, &(0x7f0000000680)={@multicast, @broadcast, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x121, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[], @dest_unreach={0x1, 0x2, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @routing={0x0, 0x4, 0x1, 0x8, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}]}], "7bf354a4d44f873e5bb87588aa8f6a52ad0f246d91360a893281e8ea0092fbcbd4c4781858379c7335ab0082290ea9243099b51ae8d51d7f272fcfd86ab3bf27c465028577b65725a1f8237ef87c2ec0dbc1451b1213ee875312f2427be1b94f42f082b25dca7bb1bd5771fd9f2e6b731a5b03bdc4f1dd8b0d6ddd34b26b0d8a33007f68cc06c5e0d9073b27ccb76470c496b15d13e4ce6f296b2805675f4501edb0e8a86ba051d4f62a1fe504bc4e68b5877a0dd218fb23bc6df3b12250a471d1"}}}}}}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000015) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x1, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xacb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x8040) 48.240725561s ago: executing program 4 (id=3098): socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) pipe(&(0x7f0000000180)) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = socket(0x2d, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) (async) listen(r5, 0x0) (async, rerun: 64) syz_emit_ethernet(0x56, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x96, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500600601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200"], 0x0) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async, rerun: 32) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000780)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'macvtap0\x00'}) 45.042680612s ago: executing program 1 (id=3099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r6, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000027020000140000000031000000bf0900000000000055090100000000009500000000000000bf91000000000000b702e3ffffff0000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0x10, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x8) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000008c0)={0x1d, r9, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000900)=0x1, 0x4) sendmmsg(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r8, &(0x7f0000000a00)={0x1d, r9, 0x1, {0x1, 0xff, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xffff, 0xe}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 0s ago: executing program 32 (id=3096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r5, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r6}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) kernel console output (not intermixed with test programs): Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.635656][T12279] Call Trace: [ 277.635660][T12279] [ 277.635665][T12279] dump_stack_lvl+0xe8/0x150 [ 277.635685][T12279] should_fail_ex+0x410/0x560 [ 277.635703][T12279] _copy_from_user+0x2d/0xb0 [ 277.635719][T12279] ___sys_sendmsg+0x1c6/0x360 [ 277.635734][T12279] ? __lock_acquire+0x747/0x2de0 [ 277.635749][T12279] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.635801][T12279] ? __fget_files+0x3a2/0x420 [ 277.635820][T12279] ? __fget_files+0x2a/0x420 [ 277.635846][T12279] __x64_sys_sendmsg+0x1b1/0x290 [ 277.635867][T12279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.635915][T12279] do_syscall_64+0x166/0x520 [ 277.635933][T12279] ? trace_irq_disable+0x3b/0x140 [ 277.635946][T12279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.635957][T12279] ? clear_bhb_loop+0x70/0xc0 [ 277.635970][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.635980][T12279] RIP: 0033:0x7f420199f559 [ 277.635990][T12279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.635999][T12279] RSP: 002b:00007f42027cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.636011][T12279] RAX: ffffffffffffffda RBX: 00007f4201c25fa0 RCX: 00007f420199f559 [ 277.636018][T12279] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 277.636025][T12279] RBP: 00007f42027cd090 R08: 0000000000000000 R09: 0000000000000000 [ 277.636031][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.636037][T12279] R13: 00007f4201c26038 R14: 00007f4201c25fa0 R15: 00007fff1f233298 [ 277.636053][T12279] [ 277.694473][T12281] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 277.869427][T12285] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 277.929828][T12289] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 278.000816][T12297] netlink: 'syz.3.1797': attribute type 21 has an invalid length. [ 278.825196][T12355] netlink: 'syz.3.1811': attribute type 5 has an invalid length. [ 278.949194][T12359] Cannot find add_set index 0 as target [ 279.109248][T12363] netlink: 'syz.2.1814': attribute type 11 has an invalid length. [ 279.132789][T12366] netlink: 'syz.3.1815': attribute type 3 has an invalid length. [ 279.433026][T12388] smc: smcd device lo applied user defined pnetid SYZ0 [ 280.328429][ T51] net_ratelimit: 112 callbacks suppressed [ 280.328452][ T51] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 280.328473][ T51] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 280.438973][ T1043] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 280.439002][ T1043] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 280.549482][ T62] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 280.568537][ T62] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 280.588089][ T62] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 280.608619][ T12] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 280.629873][ T62] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 280.637407][T12409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.667870][ T1043] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 280.740908][T12415] __nla_validate_parse: 3 callbacks suppressed [ 280.740930][T12415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1833'. [ 280.987700][T12436] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 281.028679][T12436] bond8: entered promiscuous mode [ 281.029101][T12436] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.032296][T12436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1837'. [ 281.069803][T12436] bond8: (slave bridge4): making interface the new active one [ 281.069828][T12436] bridge4: entered promiscuous mode [ 281.070822][T12436] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 281.271595][T12446] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1841'. [ 281.486758][T12449] syzkaller1: entered promiscuous mode [ 281.486779][T12449] syzkaller1: entered allmulticast mode [ 281.569701][T12455] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1846'. [ 281.589007][T12458] FAULT_INJECTION: forcing a failure. [ 281.589007][T12458] name failslab, interval 1, probability 0, space 0, times 0 [ 281.589037][T12458] CPU: 0 UID: 0 PID: 12458 Comm: syz.2.1845 Not tainted syzkaller #0 PREEMPT(full) [ 281.589056][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 281.589068][T12458] Call Trace: [ 281.589075][T12458] [ 281.589083][T12458] dump_stack_lvl+0xe8/0x150 [ 281.589114][T12458] should_fail_ex+0x410/0x560 [ 281.589145][T12458] should_failslab+0xa8/0x100 [ 281.589170][T12458] ? skb_clone+0x212/0x3a0 [ 281.589188][T12458] kmem_cache_alloc_noprof+0x9c/0x600 [ 281.589213][T12458] ? skb_clone+0x212/0x3a0 [ 281.589247][T12458] skb_clone+0x212/0x3a0 [ 281.589262][T12458] ? nfnetlink_rcv+0x4b0/0x28c0 [ 281.589286][T12458] nfnetlink_rcv+0x4de/0x28c0 [ 281.589336][T12458] ? __resched_curr+0x3b0/0x6a0 [ 281.589364][T12458] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 281.589406][T12458] ? do_raw_spin_unlock+0xf5/0x200 [ 281.589450][T12458] ? rcu_preempt_deferred_qs_irqrestore+0x303/0xb90 [ 281.589470][T12458] ? lockdep_hardirqs_on+0x7b/0x110 [ 281.589493][T12458] ? rcu_is_watching+0x16/0xb0 [ 281.589516][T12458] ? trace_irq_disable+0x3b/0x140 [ 281.589540][T12458] ? rcu_read_unlock_special+0x33/0x440 [ 281.589567][T12458] netlink_unicast+0x8ef/0xa80 [ 281.589604][T12458] netlink_sendmsg+0x7f0/0xb20 [ 281.589637][T12458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.589663][T12458] ? aa_sock_msg_perm+0x144/0x210 [ 281.589690][T12458] ? apparmor_socket_sendmsg+0x98/0x360 [ 281.589712][T12458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.589731][T12458] sock_sendmsg_nosec+0x14e/0x190 [ 281.589757][T12458] ____sys_sendmsg+0x54e/0x850 [ 281.589790][T12458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.589827][T12458] ? import_iovec+0x73/0xa0 [ 281.589856][T12458] ___sys_sendmsg+0x2a5/0x360 [ 281.589880][T12458] ? __lock_acquire+0x747/0x2de0 [ 281.589905][T12458] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.589970][T12458] ? __fget_files+0x3a2/0x420 [ 281.589989][T12458] ? __fget_files+0x2a/0x420 [ 281.590017][T12458] __x64_sys_sendmsg+0x1b1/0x290 [ 281.590038][T12458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.590087][T12458] do_syscall_64+0x166/0x520 [ 281.590104][T12458] ? trace_irq_disable+0x3b/0x140 [ 281.590123][T12458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.590142][T12458] ? clear_bhb_loop+0x70/0xc0 [ 281.590165][T12458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.590183][T12458] RIP: 0033:0x7f466d99f559 [ 281.590200][T12458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.590223][T12458] RSP: 002b:00007f466e93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.590242][T12458] RAX: ffffffffffffffda RBX: 00007f466dc25fa0 RCX: 00007f466d99f559 [ 281.590255][T12458] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 281.590267][T12458] RBP: 00007f466e93f090 R08: 0000000000000000 R09: 0000000000000000 [ 281.590278][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.590289][T12458] R13: 00007f466dc26038 R14: 00007f466dc25fa0 R15: 00007ffc8e5455f8 [ 281.590321][T12458] [ 281.886950][T12466] bridge5: entered promiscuous mode [ 281.889073][T12466] bridge5: entered allmulticast mode [ 282.127526][T12486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1855'. [ 282.464495][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 282.464518][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'. [ 282.464541][T12505] netlink: 'syz.2.1857': attribute type 6 has an invalid length. [ 282.521644][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 282.521672][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'. [ 282.521698][T12505] netlink: 'syz.2.1857': attribute type 6 has an invalid length. [ 282.539161][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'. [ 282.567862][ T42] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 282.568421][ T42] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 282.568521][ T42] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 282.568600][ T42] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 282.748372][T12526] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 283.024748][T12548] netlink: 'syz.2.1871': attribute type 1 has an invalid length. [ 283.106505][ T5633] block nbd296: Receive control failed (result -32) [ 283.364253][T12572] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 283.437343][T12576] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 283.437370][T12576] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 283.693854][T12595] syzkaller0: entered promiscuous mode [ 283.693877][T12595] syzkaller0: entered allmulticast mode [ 283.820239][T12600] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 283.882280][T12609] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 283.982730][T12614] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 284.154319][ T5633] Bluetooth: hci2: unexpected cc 0x2040 length: 2 > 1 [ 284.154377][ T5633] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 284.619894][T12653] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 285.092385][T12687] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 285.100005][T12688] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 285.127379][T12683] tipc: Resetting bearer [ 285.225488][T12683] team0: Mode changed to "loadbalance" [ 285.242501][T12683] vlan0: entered promiscuous mode [ 285.257360][T12701] FAULT_INJECTION: forcing a failure. [ 285.257360][T12701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.257391][T12701] CPU: 0 UID: 0 PID: 12701 Comm: syz.1.1918 Not tainted syzkaller #0 PREEMPT(full) [ 285.257411][T12701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 285.257422][T12701] Call Trace: [ 285.257429][T12701] [ 285.257438][T12701] dump_stack_lvl+0xe8/0x150 [ 285.257470][T12701] should_fail_ex+0x410/0x560 [ 285.257502][T12701] _copy_to_user+0x31/0xb0 [ 285.257531][T12701] simple_read_from_buffer+0xe1/0x170 [ 285.257558][T12701] proc_fail_nth_read+0x1bb/0x230 [ 285.257591][T12701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.257617][T12701] ? rw_verify_area+0x24a/0x4c0 [ 285.257638][T12701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.257661][T12701] vfs_read+0x213/0xa80 [ 285.257688][T12701] ? __pfx___mutex_lock+0x10/0x10 [ 285.257709][T12701] ? __pfx_vfs_read+0x10/0x10 [ 285.257732][T12701] ? __fget_files+0x2a/0x420 [ 285.257751][T12701] ? __fget_files+0x3a2/0x420 [ 285.257769][T12701] ? __fget_files+0x2a/0x420 [ 285.257793][T12701] ? fdget+0x1ac/0x250 [ 285.257821][T12701] ksys_read+0x150/0x270 [ 285.257845][T12701] ? __pfx_ksys_read+0x10/0x10 [ 285.257880][T12701] do_syscall_64+0x166/0x520 [ 285.257898][T12701] ? trace_irq_disable+0x3b/0x140 [ 285.257919][T12701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.257938][T12701] ? clear_bhb_loop+0x70/0xc0 [ 285.257968][T12701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.257986][T12701] RIP: 0033:0x7f1873f5fd8e [ 285.258004][T12701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 285.258019][T12701] RSP: 002b:00007f1874db9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.258040][T12701] RAX: ffffffffffffffda RBX: 00007f1874dba6c0 RCX: 00007f1873f5fd8e [ 285.258053][T12701] RDX: 000000000000000f RSI: 00007f1874dba0a0 RDI: 0000000000000004 [ 285.258065][T12701] RBP: 00007f1874dba090 R08: 0000000000000000 R09: 0000000000000000 [ 285.258076][T12701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.258086][T12701] R13: 00007f1874226038 R14: 00007f1874225fa0 R15: 00007ffe3bf4a278 [ 285.258119][T12701] [ 285.272733][T12683] team0: Port device vlan0 added [ 285.398347][ T42] net_ratelimit: 135 callbacks suppressed [ 285.398366][ T42] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 285.417784][ T42] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 285.438317][ T12] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 285.458356][ T12] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 285.483535][ T1169] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 285.483564][ T1169] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 285.589680][ T42] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 285.589711][ T42] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 285.700640][ T1169] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 285.700672][ T1169] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 285.763661][T12712] x_tables: duplicate underflow at hook 2 [ 285.782907][T12720] __nla_validate_parse: 8 callbacks suppressed [ 285.782929][T12720] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1927'. [ 285.783045][T12720] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 285.800857][T12720] 0ªX¹¦Dö»: entered allmulticast mode [ 285.825662][T12720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1927'. [ 285.825687][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'. [ 285.825700][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 285.922024][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 286.012849][T12734] xt_NETMAP: bad MAP_IPS. [ 286.176594][T12748] netlink: 'syz.0.1936': attribute type 1 has an invalid length. [ 286.235132][T12748] 8021q: adding VLAN 0 to HW filter on device bond18 [ 286.500836][T12768] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1940'. [ 286.645317][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 286.694815][T12781] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 286.994153][T12793] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1946'. [ 287.100113][T12799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1949'. [ 287.242927][ T5633] Bluetooth: hci2: ACL packet too small [ 287.244546][T12803] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1951'. [ 287.273384][T12804] bond19: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 287.276435][T12804] bond19 (unregistering): Released all slaves [ 287.626167][T12818] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 287.708342][T12821] tc_dump_action: action bad kind [ 288.175415][T12855] TCP: TCP_TX_DELAY enabled [ 288.323083][T12853] veth1_to_bond: entered allmulticast mode [ 288.371024][T12865] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 288.452139][T12851] veth1_to_bond: left allmulticast mode [ 288.532471][T12883] xt_hl: Unknown TTL match mode: 255 [ 288.580281][T12888] xt_nfacct: accounting object `' does not exist [ 288.737548][T12896] vlan2: entered promiscuous mode [ 288.737572][T12896] hsr0: entered promiscuous mode [ 288.737851][T12896] vlan2: entered allmulticast mode [ 288.755523][T12896] hsr_slave_0: left promiscuous mode [ 288.756441][T12896] hsr_slave_1: left promiscuous mode [ 288.849615][T12906] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 288.849641][T12906] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 288.941427][T12898] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 289.336978][T12898] 0ªX¹¦Dö»: entered allmulticast mode [ 289.445678][T12929] wireguard: wg2: Could not create IPv4 socket [ 289.542468][T12937] Cannot find add_set index 34 as target [ 289.755731][T12946] tipc: Started in network mode [ 289.755761][T12946] tipc: Node identity fa70bddfc9a8, cluster identity 4711 [ 289.756318][T12946] tipc: Enabled bearer , priority 0 [ 290.014131][T12961] can: request_module (can-proto-4) failed. [ 290.133827][T12973] veth0: entered promiscuous mode [ 290.136327][T12972] veth0: left promiscuous mode [ 290.410192][T12987] netlink: 'syz.2.2005': attribute type 5 has an invalid length. [ 290.425170][T12995] bond0: option ad_select: unable to set because the bond device is up [ 290.426345][T12996] syzkaller0: Caught tx_queue_len zero misconfig [ 290.429289][T12981] net_ratelimit: 124 callbacks suppressed [ 290.429305][T12981] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 290.458304][ T147] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 290.458332][ T147] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 290.543000][T13003] ip_tables: iptables: counters copy to user failed while replacing table [ 290.557757][ T147] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 290.557783][ T147] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 290.627335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.628290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.642865][T13003] gretap0: entered promiscuous mode [ 290.643880][T13003] batman_adv: batadv0: Adding interface: gretap0 [ 290.643893][T13003] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.643921][T13003] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 290.665731][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.670315][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.712690][T13017] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 290.723715][T13017] netlink: 'syz.0.2012': attribute type 21 has an invalid length. [ 290.743301][T13017] netlink: 'syz.0.2012': attribute type 21 has an invalid length. [ 290.879030][ T5740] tipc: Node number set to 869842399 [ 290.945466][T13019] __nla_validate_parse: 22 callbacks suppressed [ 290.945485][T13019] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2013'. [ 290.948658][T13019] macvlan0: entered promiscuous mode [ 290.952447][T13019] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2013'. [ 291.380000][T13054] netlink: 'syz.4.2025': attribute type 1 has an invalid length. [ 291.404297][T13058] bond19: option packets_per_slave: invalid value (18446744073709551615) [ 291.404322][T13058] bond19: option packets_per_slave: allowed values 0 - 65535 [ 291.441373][T13058] bond19 (unregistering): Released all slaves [ 291.501216][T13054] 8021q: adding VLAN 0 to HW filter on device bond9 [ 291.541911][T13072] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 291.568828][T13070] bond9: (slave geneve2): making interface the new active one [ 291.574736][T13070] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 291.606708][T13066] syzkaller0: entered promiscuous mode [ 291.606731][T13066] syzkaller0: entered allmulticast mode [ 291.624009][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2026'. [ 291.627063][T13072] bond0: (slave bond_slave_1): Releasing backup interface [ 291.647254][T13072] bond_slave_1: left allmulticast mode [ 291.724720][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 292.064505][T13098] Cannot find add_set index 65532 as target [ 292.200152][T13111] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 292.260685][T13114] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2037'. [ 292.716433][T13135] netlink: 'syz.4.2044': attribute type 1 has an invalid length. [ 293.054821][T13151] netlink: 'syz.4.2049': attribute type 1 has an invalid length. [ 293.399331][T13163] syzkaller0: entered promiscuous mode [ 293.399353][T13163] syzkaller0: entered allmulticast mode [ 293.423439][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 293.423460][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2052'. [ 293.560513][T13183] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2057'. [ 293.654481][T13188] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 293.758171][T13194] netlink: 'syz.2.2062': attribute type 1 has an invalid length. [ 293.760897][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'. [ 294.429942][T13203] netlink: 'syz.2.2068': attribute type 21 has an invalid length. [ 294.429965][T13203] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2068'. [ 294.430036][T13203] netlink: 'syz.2.2068': attribute type 5 has an invalid length. [ 294.534233][T13211] geneve0: entered allmulticast mode [ 294.623570][T13219] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 294.717546][T13228] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 294.720629][T13223] ipt_REJECT: TCP_RESET invalid for non-tcp [ 294.797904][T13235] syzkaller1: entered promiscuous mode [ 294.797927][T13235] syzkaller1: entered allmulticast mode [ 295.046944][T13245] netlink: 'syz.4.2081': attribute type 1 has an invalid length. [ 295.060862][T13245] netlink: 'syz.4.2081': attribute type 3 has an invalid length. [ 295.130368][T13255] 0·: renamed from hsr0 [ 295.149608][T13255] 0·: entered allmulticast mode [ 295.149631][T13255] hsr_slave_0: entered allmulticast mode [ 295.149646][T13255] hsr_slave_1: entered allmulticast mode [ 295.288146][ T5633] Bluetooth: hci2: connection err: -111 [ 295.310136][T13263] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 295.518374][T12981] net_ratelimit: 172 callbacks suppressed [ 295.518395][T12981] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 295.518416][T12981] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 295.631139][ T8831] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 295.631169][ T8831] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 295.738922][T12981] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 295.738951][T12981] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 295.797898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.798054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.799464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.837854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.001299][T13303] syzkaller1: entered promiscuous mode [ 296.001320][T13303] syzkaller1: entered allmulticast mode [ 296.042289][T13307] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 296.067347][T13304] trusted_key: syz.4.2097 sent an empty control message without MSG_MORE. [ 296.119454][T13309] netlink: 'syz.1.2099': attribute type 2 has an invalid length. [ 296.446171][T13337] netlink: 'syz.0.2106': attribute type 2 has an invalid length. [ 296.476189][T13336] __nla_validate_parse: 12 callbacks suppressed [ 296.476211][T13336] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2107'. [ 296.702547][T13356] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2113'. [ 296.798394][T13361] syzkaller0: entered promiscuous mode [ 296.798415][T13361] syzkaller0: entered allmulticast mode [ 296.907529][T12981] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.019028][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2118'. [ 297.076215][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2119'. [ 297.076746][T13380] macvlan0: left promiscuous mode [ 297.095618][T13380] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 297.095640][T13380] netlink: 'syz.3.2119': attribute type 2 has an invalid length. [ 297.225117][T13390] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 297.555455][T13416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2128'. [ 297.568208][T13416] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2128'. [ 297.635202][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2128'. [ 297.663391][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 297.663414][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 297.663593][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 298.656870][T13485] xt_nat: multiple ranges no longer supported [ 298.856403][T13502] netlink: 'syz.3.2144': attribute type 1 has an invalid length. [ 298.950426][T13497] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.342046][T13531] veth1_to_hsr: entered allmulticast mode [ 299.346655][T13525] x_tables: ip_tables: osf match: only valid for protocol 6 [ 299.491012][T13533] netlink: 'syz.1.2155': attribute type 21 has an invalid length. [ 299.493502][T13533] syzkaller1: entered promiscuous mode [ 299.493520][T13533] syzkaller1: entered allmulticast mode [ 299.707219][T13551] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 299.990173][T13563] can: request_module (can-proto-0) failed. [ 300.024167][T13566] bond10: (slave bridge8): making interface the new active one [ 300.041727][T13566] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 300.189623][T13572] x_tables: duplicate underflow at hook 2 [ 300.246472][T13572] syzkaller1: entered promiscuous mode [ 300.246495][T13572] syzkaller1: entered allmulticast mode [ 300.627742][ T147] net_ratelimit: 128 callbacks suppressed [ 300.627763][ T147] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 300.627784][ T147] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 300.753196][ T51] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 300.768401][ T51] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 300.788249][T12981] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 300.788634][T12981] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 300.815950][ T51] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 300.828508][ T1155] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 300.838088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.838253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.846469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.175421][T13612] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 301.215065][T13612] bond5 (unregistering): Released all slaves [ 301.512286][T13629] __nla_validate_parse: 20 callbacks suppressed [ 301.512305][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'. [ 301.594779][T13637] netlink: 'syz.4.2175': attribute type 21 has an invalid length. [ 301.594804][T13637] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.594894][T13637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.594905][T13637] IPv6: NLM_F_CREATE should be set when creating new route [ 301.594954][T13637] IPv6: NLM_F_CREATE should be set when creating new route [ 301.594978][T13637] IPv6: NLM_F_CREATE should be set when creating new route [ 301.840616][T13650] x_tables: duplicate underflow at hook 3 [ 301.986785][T13656] netlink: 'syz.2.2186': attribute type 7 has an invalid length. [ 301.986806][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 301.986840][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 302.036115][T13659] netlink: 'syz.0.2185': attribute type 1 has an invalid length. [ 302.113121][T13659] 8021q: adding VLAN 0 to HW filter on device bond20 [ 302.856220][T13725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2197'. [ 302.937415][T13723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2198'. [ 302.937442][T13723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2198'. [ 302.992318][T13731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2200'. [ 302.995677][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 303.016319][T13733] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 303.030058][T13735] xt_limit: Overflow, try lower: 536871034/0 [ 303.061693][T13735] xt_limit: Overflow, try lower: 536871034/0 [ 303.369211][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 303.581670][T13764] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2210'. [ 304.613112][T13837] tipc: Resetting bearer [ 304.636679][T13837] tipc: Resetting bearer [ 305.234629][T13852] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 305.234655][T13852] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 305.253691][T13876] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 305.430881][T13887] bridge0: port 3(syz_tun) entered blocking state [ 305.431639][T13887] bridge0: port 3(syz_tun) entered disabled state [ 305.431809][T13887] syz_tun: entered allmulticast mode [ 305.443091][T13887] syz_tun: entered promiscuous mode [ 305.445454][T13887] bridge0: port 3(syz_tun) entered blocking state [ 305.445565][T13887] bridge0: port 3(syz_tun) entered forwarding state [ 305.609540][T13893] x_tables: duplicate underflow at hook 1 [ 305.692975][ T51] net_ratelimit: 138 callbacks suppressed [ 305.692999][ T51] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 305.693021][ T51] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 305.737477][T13903] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 305.797830][ T51] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 305.797859][ T51] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 305.877791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.877943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.880409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.907840][ T147] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 305.931532][ T1043] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 305.950742][ T1043] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 305.955861][T13921] netlink: 'syz.3.2249': attribute type 4 has an invalid length. [ 306.014215][T13918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.031927][T13921] .`: renamed from bond0 [ 306.072084][T13917] bridge30: entered promiscuous mode [ 306.518606][T13961] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 306.555304][T13962] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 306.555413][T13962] syzkaller1: linktype set to 823 [ 306.573787][T13964] __nla_validate_parse: 10 callbacks suppressed [ 306.573806][T13964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2258'. [ 306.808389][T13977] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 306.808415][T13977] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 307.003875][T13985] bond0: option ad_select: unable to set because the bond device is up [ 307.249583][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2269'. [ 307.286630][T13995] syzkaller1: left promiscuous mode [ 307.286651][T13995] syzkaller1: left allmulticast mode [ 307.420397][T14003] syzkaller1: entered promiscuous mode [ 307.420423][T14003] syzkaller1: entered allmulticast mode [ 307.427773][T14003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2270'. [ 307.520377][T14003] 8021q: VLANs not supported on ipvlan0 [ 308.050951][T14033] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2282'. [ 308.073209][T14030] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 308.073245][T14030] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 308.073270][T14030] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.073294][T14030] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 308.272962][T14045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2284'. [ 308.286952][T14045] Bluetooth: MGMT ver 1.23 [ 308.531642][T14061] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 308.577065][T14048] Cannot find add_set index 2 as target [ 308.615220][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2292'. [ 308.644526][T14072] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2292'. [ 308.644952][T14072] bridge30: entered promiscuous mode [ 308.717982][T14080] x_tables: duplicate underflow at hook 2 [ 309.367968][ T5292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.708100][ T1128] net_ratelimit: 119 callbacks suppressed [ 310.708130][ T1128] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 310.708151][ T1128] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 310.818441][ T1128] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 310.818472][ T1128] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 310.917848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.917950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.918182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.935947][T12981] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 310.935975][T12981] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 310.997809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.357095][T14051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.475062][T14114] ieee802154 phy1 wpan1: encryption failed: -90 [ 311.476160][T14114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2301'. [ 311.544324][T14117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2303'. [ 311.605246][ T5627] Bluetooth: hci2: unexpected event for opcode 0x203d [ 311.605845][ T5627] Bluetooth: hci2: unexpected event for opcode 0x203d [ 311.629220][T14124] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 311.671177][T14128] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2303'. [ 311.833094][T14141] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2305'. [ 311.887257][T14125] can: request_module (can-proto-3) failed. [ 311.888484][ T7465] IPVS: ip_vs_send_async error -22 [ 312.053948][T14125] can: request_module (can-proto-3) failed. [ 312.062491][T14164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2308'. [ 312.062526][T14164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2308'. [ 312.080301][T14164] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 312.080325][T14164] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 312.224424][T14125] can: request_module (can-proto-3) failed. [ 312.430962][T14125] can: request_module (can-proto-3) failed. [ 312.556234][T14224] 8021q: VLANs not supported on syzkaller1 [ 312.557395][T14224] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2313'. [ 312.604026][T14224] 8021q: VLANs not supported on syzkaller1 [ 312.618651][T14224] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2313'. [ 312.637299][T14125] can: request_module (can-proto-3) failed. [ 312.786408][T14125] can: request_module (can-proto-3) failed. [ 312.854297][T14125] can: request_module (can-proto-3) failed. [ 312.890154][T14125] can: request_module (can-proto-3) failed. [ 312.923247][T14127] workqueue: Failed to create a rescuer kthread for wq "nfc22_nci_rx_wq": -EINTR [ 313.045985][T14257] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 313.208171][T14261] netlink: 'syz.3.2318': attribute type 2 has an invalid length. [ 313.395963][T14269] netlink: 'syz.3.2321': attribute type 9 has an invalid length. [ 313.512385][T14266] netlink: 'syz.2.2320': attribute type 4 has an invalid length. [ 313.520993][ T29] audit: type=1107 audit(1793039498.916:3): pid=14274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 313.555069][ T29] audit: type=1107 audit(1793039498.946:4): pid=14274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 313.592074][T14280] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 313.592100][T14280] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2324'. [ 313.888635][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 313.970985][T14286] netlink: 'syz.4.2326': attribute type 10 has an invalid length. [ 313.971460][T14286] bridge0: port 3(syz_tun) entered disabled state [ 313.971730][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.972313][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.046077][T14286] bridge0: port 3(syz_tun) entered blocking state [ 314.046203][T14286] bridge0: port 3(syz_tun) entered forwarding state [ 314.046519][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.046659][T14286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.047031][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.047171][T14286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.106872][T14286] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 314.154418][T14292] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 314.203022][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2329'. [ 314.261434][T14301] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 314.341024][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2331'. [ 314.348893][T14301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.420214][T14301] netlink: 'syz.2.2331': attribute type 2 has an invalid length. [ 314.886912][T14335] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 315.705688][T14371] tipc: Enabling of bearer rejected, failed to enable media [ 315.717907][ T147] net_ratelimit: 120 callbacks suppressed [ 315.717927][ T147] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 315.717948][ T147] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 315.734852][T14367] netlink: 'syz.1.2354': attribute type 1 has an invalid length. [ 315.837298][ T147] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 315.837327][ T147] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 315.937744][T12981] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 315.937772][T12981] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 315.963008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.963099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.963743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.037749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.192597][T14393] tipc: Enabling of bearer rejected, failed to enable media [ 316.193130][T14393] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 316.193317][T14393] syzkaller0: left promiscuous mode [ 316.193333][T14393] syzkaller0: left allmulticast mode [ 316.841863][T14430] __nla_validate_parse: 5 callbacks suppressed [ 316.841882][T14430] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2373'. [ 316.841895][T14430] tc_dump_action: action bad kind [ 316.988707][T14436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2375'. [ 317.059834][T14434] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2374'. [ 317.070807][T14432] xt_hashlimit: size too large, truncated to 1048576 [ 317.079461][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.414476][T14459] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 317.758755][T14482] netlink: 'syz.0.2386': attribute type 1 has an invalid length. [ 317.789146][T14482] 8021q: adding VLAN 0 to HW filter on device bond21 [ 317.795163][T14482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2386'. [ 318.085299][T14502] veth3: entered allmulticast mode [ 318.101277][T14512] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 318.308890][T14520] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 318.313828][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 318.440774][T14530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2397'. [ 318.619494][T14545] netlink: 344 bytes leftover after parsing attributes in process `syz.1.2401'. [ 318.633815][T14540] macsec1: entered promiscuous mode [ 318.652217][T14545] xt_policy: too many policy elements [ 318.739365][T14556] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 3, id = 0 [ 318.798650][T14537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2399'. [ 318.798715][T14537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2399'. [ 319.521236][T14610] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002 [ 319.844947][T14644] netlink: 'syz.4.2428': attribute type 15 has an invalid length. [ 319.845329][T14639] netlink: 'syz.1.2430': attribute type 3 has an invalid length. [ 319.845348][T14639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2430'. [ 320.044268][T14654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 320.104641][T14658] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 320.105575][T14655] bond5: (slave veth1_to_bridge): Releasing active interface [ 320.165210][T14655] team0: Port device team_slave_0 removed [ 320.188807][T14655] team0: Port device team_slave_1 removed [ 320.189784][T14655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.189806][T14655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.193476][T14655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.193498][T14655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.266522][T14655] bond0: (slave ip6gretap1): Releasing active interface [ 320.299869][T14655] bond4: (slave bridge0): Releasing backup interface [ 320.299895][T14655] bridge0: left allmulticast mode [ 320.326053][T14655] batman_adv: batadv0: Removing interface: gretap0 [ 320.566949][T14680] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 320.704658][T14690] ebt_limit: overflow, try lower: 4278190080/255 [ 320.963148][T14704] tipc: Trying to set illegal importance in message [ 320.998002][ C0] net_ratelimit: 101 callbacks suppressed [ 320.998021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.998115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.999937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.077858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.077959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.078124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.078211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.078371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.078456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.078663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.193650][T14714] netlink: 'syz.1.2458': attribute type 1 has an invalid length. [ 321.197303][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.197325][T14714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.201357][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.201377][T14714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.432273][T14729] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 321.440852][T14729] nbd: must specify an index to disconnect [ 321.815969][T14763] syz_tun: entered allmulticast mode [ 321.868778][T14758] syz_tun: left allmulticast mode [ 322.025962][T14778] __nla_validate_parse: 10 callbacks suppressed [ 322.025983][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 322.092863][T14780] xt_MASQUERADE: bad rangesize 2147483646 [ 322.198354][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.313009][T14787] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2478'. [ 322.433915][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'. [ 322.539376][T14804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2481'. [ 322.602128][T14776] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2473'. [ 322.643524][T14811] netlink: 'syz.1.2484': attribute type 17 has an invalid length. [ 322.643546][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2484'. [ 322.643572][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2484'. [ 322.671781][T14811] gretap0: entered promiscuous mode [ 322.684660][T14811] gretap0: left promiscuous mode [ 322.733713][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2485'. [ 322.734815][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2485'. [ 322.801099][T14816] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 322.868190][T14816] veth5: entered allmulticast mode [ 323.160666][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'. [ 323.342019][T14830] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 323.786052][T14868] syzkaller1: entered promiscuous mode [ 323.786075][T14868] syzkaller1: entered allmulticast mode [ 323.801795][T14869] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 324.006695][T14873] netlink: 'syz.0.2500': attribute type 1 has an invalid length. [ 324.196213][T14876] tipc: Resetting bearer [ 324.335780][T14876] tipc: Disabling bearer [ 324.404155][T14879] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 324.408554][ T1128] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.408601][ T1128] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.408633][ T1128] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.408665][ T1128] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.657564][T14897] veth8: entered promiscuous mode [ 324.662543][T14897] veth8: entered allmulticast mode [ 324.815382][T14903] veth8: entered promiscuous mode [ 324.815403][T14903] veth8: entered allmulticast mode [ 325.176882][ T5627] Bluetooth: hci2: unexpected event 0x03 length: 0 < 11 [ 325.176902][T14955] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 325.468389][ T147] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.469370][ T147] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.469438][ T147] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.469468][ T147] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.870813][T14989] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 326.037794][ C0] net_ratelimit: 9 callbacks suppressed [ 326.037839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.038021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.040349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.040757][T15004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 326.117880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.117936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.118030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.118316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.118455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.118723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.809591][T15043] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 326.817161][T15037] wireguard0: entered promiscuous mode [ 326.855259][T15045] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.035888][T15054] __nla_validate_parse: 13 callbacks suppressed [ 327.035910][T15054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2539'. [ 327.068910][T15054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2539'. [ 327.233183][T15061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2541'. [ 327.345922][T15072] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2545'. [ 327.345946][T15072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2545'. [ 327.503923][T15078] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 327.822580][ T147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 327.875766][T15103] netlink: 'syz.1.2554': attribute type 1 has an invalid length. [ 327.948049][T15104] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2554'. [ 327.951910][T15103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 328.159215][T15118] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2556'. [ 328.876179][T15152] 0ªX¹¦Dö»: left allmulticast mode [ 328.925875][T15157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2566'. [ 329.045694][T15152] veth0_to_bond: left allmulticast mode [ 329.085207][T15173] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2570'. [ 329.292518][T15152] bond0: left allmulticast mode [ 329.324473][T15152] vlan5: left allmulticast mode [ 329.324502][T15152] bond4: left allmulticast mode [ 329.346565][T15152] gretap0: left promiscuous mode [ 329.350999][T15166] tipc: Enabled bearer , priority 0 [ 329.358375][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 329.358406][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 329.358430][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.358451][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 329.370412][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 329.370443][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 329.370464][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.370485][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 329.370609][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 329.370632][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 329.370653][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.370674][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 329.573104][T15196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2576'. [ 329.898147][T15215] netlink: 'syz.0.2578': attribute type 17 has an invalid length. [ 329.988236][T15224] SET target dimension over the limit! [ 330.030271][T15220] bridge0: port 3(syz_tun) entered disabled state [ 330.046243][T15220] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.046442][T15220] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.463491][T15218] tipc: Enabled bearer , priority 10 [ 330.467865][ T1043] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.467974][ T1043] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.468008][ T1043] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.468040][ T1043] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.520514][T15226] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 330.860757][T15264] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 330.861338][T15264] team0: Device ipvlan2 is already an upper device of the team interface [ 331.086453][ C0] net_ratelimit: 10 callbacks suppressed [ 331.086478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.088547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.091814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.094915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.162127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.167083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.170951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.177691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.179709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.185923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.482494][T15305] netlink: 'syz.0.2598': attribute type 3 has an invalid length. [ 331.482553][T15306] netlink: 'syz.0.2598': attribute type 3 has an invalid length. [ 331.578311][T15189] tipc: Node number set to 2886997039 [ 331.712910][ T147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 331.747245][T15319] netlink: 'syz.0.2603': attribute type 29 has an invalid length. [ 332.207811][T15340] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 332.389793][T15347] __nla_validate_parse: 11 callbacks suppressed [ 332.389812][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 332.956110][T15386] netlink: 'syz.0.2623': attribute type 1 has an invalid length. [ 332.957309][T15386] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2623'. [ 332.979609][T15386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2623'. [ 333.055046][T15394] veth1_to_hsr: entered allmulticast mode [ 333.340541][T15407] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2627'. [ 333.705691][T15421] bridge0: port 4(31ªî{X¹¦) entered blocking state [ 333.705817][T15421] bridge0: port 4(31ªî{X¹¦) entered disabled state [ 333.709672][T15421] 1ªî{X¹¦: entered promiscuous mode [ 333.855278][T15431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2638'. [ 333.885519][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2639'. [ 334.072468][T15445] wireguard1: entered promiscuous mode [ 334.266452][T15457] vlan6: entered promiscuous mode [ 334.266475][T15457] bridge0: entered promiscuous mode [ 334.266697][T15457] vlan6: entered allmulticast mode [ 334.266712][T15457] bridge0: entered allmulticast mode [ 334.490522][T15475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2654'. [ 334.540943][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2654'. [ 334.587787][T15468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2652'. [ 334.946141][T15502] netlink: 'syz.2.2661': attribute type 11 has an invalid length. [ 335.476538][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 335.746102][T15555] netlink: 'syz.2.2666': attribute type 5 has an invalid length. [ 335.984409][T15562] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 335.984437][T15562] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 336.117762][ C0] net_ratelimit: 12 callbacks suppressed [ 336.117783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.117881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.118226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.119482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.125838][T15572] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 336.197825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.198427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.257915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.266484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.267844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.268016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.490135][T15661] __nla_validate_parse: 8 callbacks suppressed [ 337.490154][T15661] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2693'. [ 338.605316][T15728] xt_MASQUERADE: bad rangesize 2147483646 [ 338.607489][T15728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2701'. [ 338.697929][T15733] x_tables: duplicate underflow at hook 2 [ 338.723590][T15737] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 338.797892][T15739] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2706'. [ 339.048148][T15764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2710'. [ 339.265975][T15776] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.2714'. [ 339.275151][T15776] syzkaller1: entered promiscuous mode [ 339.275172][T15776] syzkaller1: entered allmulticast mode [ 339.354035][T15780] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2718'. [ 339.394597][T15784] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2716'. [ 339.453457][T15785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2717'. [ 339.520626][T15793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2720'. [ 339.632627][T15800] syzkaller0: left promiscuous mode [ 339.632650][T15800] syzkaller0: left allmulticast mode [ 339.808807][T15814] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 339.869906][T15816] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2728'. [ 339.989370][T15820] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 339.989448][T15820] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 340.605206][T15861] netlink: 'syz.2.2742': attribute type 25 has an invalid length. [ 340.615131][T15861] netlink: 'syz.2.2742': attribute type 25 has an invalid length. [ 340.651549][T15873] syzkaller0: entered promiscuous mode [ 340.651571][T15873] syzkaller0: entered allmulticast mode [ 340.782092][T15881] Cannot find add_set index 4 as target [ 341.040704][T15897] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 341.157944][ C0] net_ratelimit: 8 callbacks suppressed [ 341.157965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.158122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.158942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.237929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.238251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.319834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.320049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.327884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.328058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.328269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.537083][T15931] netlink: 'syz.3.2762': attribute type 2 has an invalid length. [ 341.643918][T15943] netlink: 'syz.2.2765': attribute type 1 has an invalid length. [ 341.788711][T15946] bridge2: entered promiscuous mode [ 341.795431][T15946] bond9: (slave bridge2): making interface the new active one [ 341.810930][T15946] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 342.600359][T16006] __nla_validate_parse: 11 callbacks suppressed [ 342.600380][T16006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2782'. [ 342.690581][T16008] sit0: entered promiscuous mode [ 342.696031][T16015] --map-set only usable from mangle table [ 342.767304][T16008] netlink: 'syz.3.2784': attribute type 1 has an invalid length. [ 342.767327][T16008] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2784'. [ 342.793476][T16015] geneve3: entered allmulticast mode [ 342.801769][T16015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2786'. [ 342.896812][T16022] netlink: 'syz.4.2788': attribute type 4 has an invalid length. [ 343.075732][T16027] bridge_slave_0: left allmulticast mode [ 343.075760][T16027] bridge_slave_0: left promiscuous mode [ 343.075976][T16027] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.124447][T16027] bridge_slave_1: left allmulticast mode [ 343.124471][T16027] bridge_slave_1: left promiscuous mode [ 343.124661][T16027] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.164653][T16027] .`: (slave bond_slave_0): Releasing backup interface [ 343.183490][T16027] .`: (slave bond_slave_1): Releasing backup interface [ 343.239669][T16027] team0: Port device team_slave_0 removed [ 343.281825][T16027] team0: Port device team_slave_1 removed [ 343.348152][T16021] infiniband syz0: set down [ 343.348222][ T24] syz0: Port: 1 Link DOWN [ 343.348275][T16021] infiniband syz0: added bond_slave_1 [ 343.390633][T16021] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 343.390669][T16021] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 343.390703][T16021] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 343.423093][T16021] RDS/IB: syz0: added [ 343.423161][T16021] smc: adding ib device syz0 with port count 1 [ 343.423181][T16021] smc: ib device syz0 port 1 has no pnetid [ 343.611682][T16050] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2794'. [ 343.612047][T16050] 0ªX¹¦Dö»: entered promiscuous mode [ 343.614021][T16050] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2794'. [ 343.614298][T16050] 0ªî{X¹¦: renamed from 00ªX¹¦Dö» [ 343.627000][T16050] 0ªî{X¹¦: left promiscuous mode [ 343.627020][T16050] 0ªî{X¹¦: entered allmulticast mode [ 343.709847][T16053] netlink: 'syz.4.2795': attribute type 10 has an invalid length. [ 344.019155][T16064] xt_hashlimit: size too large, truncated to 1048576 [ 344.154247][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2802'. [ 344.627394][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'. [ 344.653594][T16096] 8021q: VLANs not supported on ip_vti0 [ 344.851292][T16102] bridge3: entered allmulticast mode [ 345.128649][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2812'. [ 345.217805][T16116] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2813'. [ 345.217985][T16116] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2813'. [ 345.527104][T16132] netlink: 'syz.4.2819': attribute type 1 has an invalid length. [ 345.527257][T16132] netlink: 'syz.4.2819': attribute type 1 has an invalid length. [ 345.882318][ T5627] block nbd0: Receive control failed (result -107) [ 346.207823][ C0] net_ratelimit: 10 callbacks suppressed [ 346.207919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.208112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.209256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.278738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.279993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.357996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.358151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.358173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.358416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.358514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.636453][T16277] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 347.745386][T16288] netlink: 'syz.1.2857': attribute type 1 has an invalid length. [ 347.745407][T16288] __nla_validate_parse: 74 callbacks suppressed [ 347.745443][T16288] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2857'. [ 347.769503][T16279] bond22: option min_links: invalid value (18446744073709551614) [ 347.769526][T16279] bond22: option min_links: allowed values 0 - 2147483647 [ 347.774779][T16279] bond22 (unregistering): Released all slaves [ 347.913911][T16279] bond22: option min_links: invalid value (18446744073709551614) [ 347.913934][T16279] bond22: option min_links: allowed values 0 - 2147483647 [ 347.934912][T16279] bond22 (unregistering): Released all slaves [ 348.080229][T16279] bond22: option min_links: invalid value (18446744073709551614) [ 348.080245][T16279] bond22: option min_links: allowed values 0 - 2147483647 [ 348.084326][T16279] bond22 (unregistering): Released all slaves [ 348.134012][T16301] syzkaller0: entered promiscuous mode [ 348.134032][T16301] syzkaller0: entered allmulticast mode [ 348.147877][T13871] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.147917][T13871] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.147948][T13871] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.169873][T16304] tun0: tun_chr_ioctl cmd 1074025675 [ 348.169894][T16304] tun0: persist disabled [ 348.276852][T16279] bond22: option min_links: invalid value (18446744073709551614) [ 348.276869][T16279] bond22: option min_links: allowed values 0 - 2147483647 [ 348.301106][T16279] bond22 (unregistering): Released all slaves [ 348.315302][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315344][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315369][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315395][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315418][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315439][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315461][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315486][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315506][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315528][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315549][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315569][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315590][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315612][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315632][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315653][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315674][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315696][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315718][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315740][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315762][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315783][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315805][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315826][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315848][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315870][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315892][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315912][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315933][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315954][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315976][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.315997][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316017][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316038][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316060][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316082][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316103][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316125][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316146][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316167][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316190][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316211][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316232][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316253][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316276][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316298][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316321][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316364][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316386][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316405][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316426][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316449][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316471][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316493][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316516][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316538][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316560][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316580][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316601][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316623][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316645][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316666][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316688][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316710][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.316731][T16311] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 348.811940][T16323] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 348.858056][T16330] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2872'. [ 348.879895][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2867'. [ 348.894858][ T5627] block nbd1: Receive control failed (result -107) [ 349.179497][T16354] netlink: 'syz.0.2876': attribute type 19 has an invalid length. [ 349.278452][T16355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2875'. [ 349.322501][T16355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2875'. [ 349.626468][T16382] sctp: [Deprecated]: syz.3.2883 (pid 16382) Use of int in max_burst socket option deprecated. [ 349.626468][T16382] Use struct sctp_assoc_value instead [ 349.919631][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2888'. [ 349.942781][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'. [ 349.990413][T16406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2890'. [ 350.007012][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'. [ 350.087438][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2888'. [ 350.347465][T16430] netlink: 'syz.3.2897': attribute type 29 has an invalid length. [ 350.401882][T16432] bridge9: entered promiscuous mode [ 350.402258][T16432] bridge9: entered allmulticast mode [ 350.500156][T16436] netlink: 'syz.3.2899': attribute type 2 has an invalid length. [ 350.500177][T16436] netlink: 'syz.3.2899': attribute type 11 has an invalid length. [ 350.502456][T16433] bond8: Invalid ad_actor_system MAC address. [ 350.502474][T16433] bond8: option ad_actor_system: invalid value (1) [ 350.503820][T16433] bond8 (unregistering): Released all slaves [ 350.795701][T16455] netlink: 'syz.3.2905': attribute type 1 has an invalid length. [ 350.795730][T16455] nbd: nbd296 already in use [ 350.878451][T16463] bridge0: left allmulticast mode [ 350.920841][T16463] v: renamed from vlan1 (while UP) [ 351.166360][T16477] veth0: entered promiscuous mode [ 351.237946][ C0] net_ratelimit: 11 callbacks suppressed [ 351.237967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.238131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.238712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.292439][T16475] veth0: left promiscuous mode [ 351.319266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.320528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.367977][T16491] ip_tables: iptables: counters copy to user failed while replacing table [ 351.397837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.397991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.398118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.398215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.595820][T16501] bridge7: entered promiscuous mode [ 351.595879][T16501] bridge7: entered allmulticast mode [ 351.922914][T16523] netlink: 'syz.0.2925': attribute type 2 has an invalid length. [ 351.932081][T16523] !;: entered promiscuous mode [ 352.020347][T16527] tap0: tun_chr_ioctl cmd 1074025676 [ 352.020371][T16527] tap0: owner set to 0 [ 352.252214][T16550] xt_recent: Unsupported userspace flags (000000b1) [ 352.279072][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 352.703638][T16590] syzkaller0: left promiscuous mode [ 352.703658][T16590] syzkaller0: left allmulticast mode [ 352.975300][T16603] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 352.977196][T16603] geneve0: entered promiscuous mode [ 353.130456][T16612] __nla_validate_parse: 12 callbacks suppressed [ 353.130477][T16612] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2951'. [ 353.200588][T16619] netlink: 'syz.0.2953': attribute type 5 has an invalid length. [ 353.284375][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'. [ 353.284398][T16625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2954'. [ 353.401447][T16630] tipc: Enabling of bearer rejected, failed to enable media [ 353.511624][T16635] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2959'. [ 353.854564][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2965'. [ 353.854922][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2965'. [ 354.151896][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.154206][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.156280][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.172318][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.186481][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.385009][T16679] netlink: 'syz.2.2970': attribute type 1 has an invalid length. [ 354.386450][T16680] netlink: 'syz.2.2970': attribute type 1 has an invalid length. [ 355.043440][T16666] rxe_eth0 speed is unknown, defaulting to 1000 [ 355.204438][T16716] syzkaller0: entered promiscuous mode [ 355.204460][T16716] syzkaller0: entered allmulticast mode [ 355.240244][T16715] netlink: 'syz.2.2976': attribute type 11 has an invalid length. [ 355.584978][T16684] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 355.585002][T16684] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 355.663332][T16750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2983'. [ 355.859928][T16684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.859951][T16684] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 355.963324][T16684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 355.963351][T16684] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 356.200527][ T5633] Bluetooth: hci5: command tx timeout [ 356.214679][T16774] netlink: 'syz.2.2988': attribute type 1 has an invalid length. [ 356.215834][T16774] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.233522][T16776] netlink: 'syz.2.2988': attribute type 1 has an invalid length. [ 356.239688][T16778] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.278036][ C0] net_ratelimit: 7 callbacks suppressed [ 356.278055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.278185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.278882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.338743][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2989'. [ 356.357858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.359592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.438072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.438361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.438496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.438756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.438887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.641352][T16684] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 356.641376][T16684] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 356.714819][T16801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2992'. [ 357.332063][T16831] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2996'. [ 357.621748][T16666] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.621857][T16666] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.622007][T16666] bridge_slave_0: entered allmulticast mode [ 357.636442][T16666] bridge_slave_0: entered promiscuous mode [ 357.644994][T16666] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.652059][T16666] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.652202][T16666] bridge_slave_1: entered allmulticast mode [ 357.664016][T16666] bridge_slave_1: entered promiscuous mode [ 357.715980][T16854] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 357.772718][T16666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.776286][T16666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.830420][T16666] team0: Port device team_slave_0 added [ 357.836389][T16666] team0: Port device team_slave_1 added [ 357.924959][T16666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.924978][T16666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.925039][T16666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.940011][T16666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.940027][T16666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.940052][T16666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.047495][T16666] hsr_slave_0: entered promiscuous mode [ 358.054231][T16666] hsr_slave_1: entered promiscuous mode [ 358.054958][T16666] debugfs: 'hsr0' already exists in 'hsr' [ 358.054978][T16666] Cannot create hsr debugfs directory [ 358.312027][T16666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.486338][T16666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.612923][T16666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.761308][T16897] __nla_validate_parse: 1 callbacks suppressed [ 358.761328][T16897] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3006'. [ 359.186958][T16666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.198655][T16666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.199640][T16666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.205821][T16666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.241921][T16666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.245817][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3011'. [ 359.245839][T16915] block nbd2: Unsupported socket: should be TCP or UNIX. [ 359.269248][T16666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.270669][T16666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.292859][T16666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.424984][T16666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.454883][T16666] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.471742][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.471846][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.503755][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.503870][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.876030][T16956] syz_tun: left allmulticast mode [ 359.876056][T16956] syz_tun: left promiscuous mode [ 359.876291][T16956] bridge0: port 3(syz_tun) entered disabled state [ 360.240443][T16977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3024'. [ 360.244389][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3022'. [ 360.274617][T16975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3024'. [ 360.372682][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3024'. [ 360.876062][T16666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.026090][T17014] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 361.136127][T17016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3033'. [ 361.317964][ C0] net_ratelimit: 7 callbacks suppressed [ 361.318024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.318180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.318466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.398108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.398889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.477969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.478109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.478290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.478311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.478417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.202607][T17014] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 363.351816][T16666] veth0_vlan: entered promiscuous mode [ 363.400541][T16666] veth1_vlan: entered promiscuous mode [ 363.484451][T16666] veth0_macvtap: entered promiscuous mode [ 363.514201][T16666] veth1_macvtap: entered promiscuous mode [ 363.614537][T16666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.637128][T16666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.694321][T17019] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20000 [ 363.728781][ T1043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.729436][ T1043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.729467][ T1043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.729493][ T1043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.749381][T17037] xt_socket: unknown flags 0x4 [ 363.829067][ T8831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.829086][ T8831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.892827][ T8831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.892848][ T8831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.137865][T17058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3042'. [ 364.388798][T17062] bond12 (unregistering): Released all slaves [ 364.581316][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.586515][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.597319][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.614923][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.615755][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.684995][T17078] bridge0: port 3(veth1_to_bridge) entered blocking state [ 364.685091][T17078] bridge0: port 3(veth1_to_bridge) entered disabled state [ 364.685291][T17078] veth1_to_bridge: entered allmulticast mode [ 364.722593][T17078] veth1_to_bridge: entered promiscuous mode [ 364.724246][T17078] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.724768][T17078] bridge0: port 3(veth1_to_bridge) entered blocking state [ 364.724914][T17078] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 364.726353][T17081] sctp: [Deprecated]: syz.4.3050 (pid 17081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.726353][T17081] Use struct sctp_sack_info instead [ 364.767349][T17063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.954450][T17091] netlink: 'syz.1.3049': attribute type 1 has an invalid length. [ 366.327668][ C0] net_ratelimit: 3513 callbacks suppressed [ 366.327690][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.328035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 366.328422][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.328801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.329168][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 366.329521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.329865][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.330283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 366.330607][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.330954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.332537][T17073] rxe_eth0 speed is unknown, defaulting to 1000 [ 366.678517][ T5633] Bluetooth: hci4: command tx timeout [ 367.160656][T17160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3070'. [ 367.875385][T17184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3077'. [ 368.099442][T17195] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3076'. [ 368.116624][T17195] ipvlan0: entered promiscuous mode [ 368.116647][T17195] ipvlan0: entered allmulticast mode [ 368.116659][T17195] veth0_vlan: entered allmulticast mode [ 368.758641][ T5633] Bluetooth: hci4: command tx timeout [ 368.787343][T17211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3079'. [ 369.223009][T17073] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.223386][T17073] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.223521][T17073] bridge_slave_0: entered allmulticast mode [ 369.227051][T17073] bridge_slave_0: entered promiscuous mode [ 369.265700][T17073] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.265807][T17073] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.265964][T17073] bridge_slave_1: entered allmulticast mode [ 369.295163][T17073] bridge_slave_1: entered promiscuous mode [ 369.454736][T17073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.484864][T17073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.630584][T17073] team0: Port device team_slave_0 added [ 369.655467][T17073] team0: Port device team_slave_1 added [ 369.783404][T17220] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.784938][T17073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.784953][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.786160][T17073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.850434][T17073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.850449][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.850474][T17073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.918302][T17223] xt_hashlimit: size too large, truncated to 1048576 [ 369.975790][T17226] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.3083'. [ 369.999108][T17226] 0ªX¹¦Dö»: renamed from gretap0 [ 370.018999][T17225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3084'. [ 370.019036][T17225] netlink: 'syz.2.3084': attribute type 7 has an invalid length. [ 370.019049][T17225] netlink: 'syz.2.3084': attribute type 8 has an invalid length. [ 370.019060][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'. [ 370.023344][T17226] 0ªX¹¦Dö»: entered allmulticast mode [ 370.082410][T17227] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3083'. [ 370.157399][T17231] xt_hashlimit: size too large, truncated to 1048576 [ 370.180081][T17226] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3083'. [ 370.249572][T17233] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.3083'. [ 370.632378][T17073] hsr_slave_0: entered promiscuous mode [ 370.634419][T17073] hsr_slave_1: entered promiscuous mode [ 370.654063][T17073] debugfs: 'hsr0' already exists in 'hsr' [ 370.654086][T17073] Cannot create hsr debugfs directory [ 370.666614][T17233] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 370.838928][ T5633] Bluetooth: hci4: command tx timeout [ 371.161843][T17245] netlink: 'syz.1.3088': attribute type 4 has an invalid length. [ 371.337884][ C0] net_ratelimit: 8911 callbacks suppressed [ 371.337905][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 371.339708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.340110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.340489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.340904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.341339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 371.342670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.343044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.343425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.343812][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.169280][T17073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.169315][T17073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.028010][ T5633] Bluetooth: hci4: command tx timeout [ 376.347609][ C1] net_ratelimit: 17365 callbacks suppressed [ 376.347632][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 376.347793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.348033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 376.348195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 376.348583][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.349003][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.349096][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 376.349416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 376.349483][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 376.349859][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 378.227591][ C1] sched: DL replenish lagged too much [ 378.683906][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.357958][ C0] net_ratelimit: 20064 callbacks suppressed [ 381.357981][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 381.357990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 381.358385][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 381.358400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.358798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 381.358828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.359196][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 381.359254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 381.359586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 381.359978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 386.367775][ C0] net_ratelimit: 20086 callbacks suppressed [ 386.367779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 386.367799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 386.368207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.368210][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 386.368598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 386.368644][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.369115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 386.369211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 386.369533][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 386.370669][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 391.377953][ C1] net_ratelimit: 20176 callbacks suppressed [ 391.377976][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 391.378369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 391.378469][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.378766][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 391.378861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 391.379154][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 391.379260][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.379658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.379688][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 391.380069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 396.387688][ C1] net_ratelimit: 20337 callbacks suppressed [ 396.387711][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 396.388127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 396.388584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 396.388991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.388978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 396.389389][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 396.389402][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 396.389760][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 396.389836][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.390153][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 401.397823][ C1] net_ratelimit: 19473 callbacks suppressed [ 401.397848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 401.397953][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.398284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 401.398383][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.398703][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 401.398807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.399115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 401.399237][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.399526][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 401.399943][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 406.407968][ C1] net_ratelimit: 19306 callbacks suppressed [ 406.407991][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 406.408253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.408452][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 406.408641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.408900][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 406.409040][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.409359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 406.409433][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.409813][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 406.409826][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.417812][ C1] net_ratelimit: 19685 callbacks suppressed [ 411.417835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 411.418219][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 411.418592][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 411.418965][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 411.419411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.419799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.420040][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 411.420239][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.420462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 411.420667][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.427604][ C1] net_ratelimit: 19771 callbacks suppressed [ 416.427604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.427626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 416.428027][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.428053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 416.428415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.428437][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 416.428794][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 416.428826][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 416.429173][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.429208][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 421.437760][ C1] net_ratelimit: 20099 callbacks suppressed [ 421.437790][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 421.438174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 421.438611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 421.438812][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.439000][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 421.439224][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 421.439380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 421.439681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.439762][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 421.440109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.447621][ C1] net_ratelimit: 19512 callbacks suppressed [ 426.447643][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 426.448056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 426.448269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 426.448475][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 426.448738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.448886][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 426.449236][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.449304][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 426.449722][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 426.449724][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 431.457721][ C0] net_ratelimit: 19522 callbacks suppressed [ 431.457736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 431.457744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 431.458120][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 431.458153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.458513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 431.458558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.458895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 431.459085][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.459265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 431.459563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 436.467927][ C1] net_ratelimit: 20009 callbacks suppressed [ 436.467949][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 436.468343][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 436.468778][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 436.469168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 436.469420][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.469548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 436.469931][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 436.470321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 436.470703][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 436.470807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 440.192717][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.477684][ C0] net_ratelimit: 19618 callbacks suppressed [ 441.477708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.477850][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 441.478186][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.478231][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 441.478617][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 441.478635][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.478996][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 441.479052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.479375][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 441.479757][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 446.487850][ C1] net_ratelimit: 19710 callbacks suppressed [ 446.487874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 446.488269][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 446.488819][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.489519][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 446.489903][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 446.490240][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 446.490292][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 446.490658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.490724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 446.491097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.497603][ C1] net_ratelimit: 19520 callbacks suppressed [ 451.497627][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 451.498007][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 451.498233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 451.498394][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 451.498615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.498771][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 451.499024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.499157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 451.499420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.499793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.507654][ C0] net_ratelimit: 19980 callbacks suppressed [ 456.507678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.508051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.508289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 456.508515][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 456.508701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 456.508886][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.509107][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 456.509546][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 456.509955][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 456.510351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 461.517573][ C1] net_ratelimit: 19655 callbacks suppressed [ 461.517597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 461.517977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 461.518356][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 461.518736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 461.519116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 461.519516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 461.519656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.519893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 461.520278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 461.520657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 466.527605][ C1] net_ratelimit: 19568 callbacks suppressed [ 466.527630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 466.528021][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 466.528438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 466.528830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 466.529227][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 466.529476][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.529633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 466.530057][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 466.530592][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 466.530991][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 471.537802][ C1] net_ratelimit: 19537 callbacks suppressed [ 471.537831][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 471.537952][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.538242][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 471.538669][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 471.539086][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 471.539359][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 471.539496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 471.539769][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.539911][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 471.540196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.547762][ C1] net_ratelimit: 19495 callbacks suppressed [ 476.547786][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 476.547831][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.548201][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 476.548246][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.548621][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 476.548651][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 476.549097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.549685][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 476.550100][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 476.550520][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 477.787530][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 477.854228][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17275/1:b..l.. [ 477.863514][ C0] rcu: (detected by 0, t=10509 jiffies, g=65409, q=2693 ncpus=2) [ 477.871346][ C0] task:syz.4.3098 state:R running task stack:26096 pid:17275 tgid:17269 ppid:5630 task_flags:0x400140 flags:0x00080000 [ 477.884890][ C0] Call Trace: [ 477.888256][ C0] [ 477.891261][ C0] __schedule+0x17dd/0x5820 [ 477.896012][ C0] ? __update_page_owner_handle+0x512/0x580 [ 477.902070][ C0] ? __pfx___schedule+0x10/0x10 [ 477.906951][ C0] ? __lock_acquire+0x747/0x2de0 [ 477.911987][ C0] preempt_schedule_irq+0x4b/0x90 [ 477.917049][ C0] irqentry_exit+0x14f/0x9b0 [ 477.921650][ C0] ? trace_irq_disable+0x3b/0x140 [ 477.926744][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 477.932787][ C0] RIP: 0010:lock_release+0x93/0x3c0 [ 477.938088][ C0] Code: 0f 85 17 02 00 00 65 4c 8b 3d 91 a4 f7 12 41 83 bf a4 0b 00 00 00 0f 85 01 02 00 00 49 81 3e a0 04 5d 95 0f 84 f4 01 00 00 9c <5b> fa 48 c7 c7 9c 1f 4a 8e e8 7f b9 50 0a 65 ff 05 10 ec f7 12 c7 [ 477.957723][ C0] RSP: 0018:ffffc9000525f330 EFLAGS: 00000206 [ 477.963895][ C0] RAX: 0000000000000000 RBX: ffffc9000525f458 RCX: 8000000000000001 [ 477.971891][ C0] RDX: ffffc9000525f401 RSI: ffffffff8c6e1760 RDI: ffffffff8c6e1720 [ 477.979888][ C0] RBP: 1ffffffff2444101 R08: ffffc9000525f870 R09: 0000000000000000 [ 477.987877][ C0] R10: ffffc9000525f498 R11: fffff52000a4be95 R12: ffffc90005258000 [ 477.995862][ C0] R13: ffffffff8178699f R14: ffffffff8fd59ca0 R15: ffff888085fd9f40 [ 478.003855][ C0] ? unwind_next_frame+0x8f/0x2550 [ 478.009053][ C0] ? deref_stack_reg+0x18e/0x220 [ 478.014016][ C0] ? unwind_next_frame+0x8f/0x2550 [ 478.019150][ C0] unwind_next_frame+0x1baa/0x2550 [ 478.024300][ C0] ? __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 478.030933][ C0] ? unwind_next_frame+0x8f/0x2550 [ 478.036074][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 478.042271][ C0] arch_stack_walk+0x11b/0x150 [ 478.047089][ C0] ? krealloc_node_align_noprof+0x19a/0x390 [ 478.053030][ C0] stack_trace_save+0xa9/0x100 [ 478.057818][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 478.063216][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 478.068895][ C0] ? __page_table_check_ptes_set+0x6f/0x340 [ 478.074843][ C0] kasan_save_track+0x3e/0x80 [ 478.079558][ C0] ? kasan_save_track+0x3e/0x80 [ 478.084426][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 478.089212][ C0] ? __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 478.095887][ C0] __kasan_kmalloc+0x93/0xb0 [ 478.100499][ C0] __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 478.106933][ C0] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 478.113538][ C0] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 478.119367][ C0] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 478.125199][ C0] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 478.131030][ C0] krealloc_node_align_noprof+0x19a/0x390 [ 478.136776][ C0] ? bpf_lsm_capable+0x9/0x20 [ 478.141512][ C0] ? security_capable+0x7e/0x2c0 [ 478.146582][ C0] kvrealloc_node_align_noprof+0x7b/0xf0 [ 478.152254][ C0] bpf_iarray_realloc+0x34/0xa0 [ 478.157130][ C0] bpf_check+0x148b/0x2ef0 [ 478.161623][ C0] ? __pfx_bpf_check+0x10/0x10 [ 478.166417][ C0] ? bpf_obj_name_cpy+0x194/0x1e0 [ 478.171460][ C0] bpf_prog_load+0x14d1/0x1c20 [ 478.176269][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 478.181699][ C0] __sys_bpf+0xd0d/0xd90 [ 478.185977][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 478.190768][ C0] ? do_futex+0x3e7/0x4e0 [ 478.195160][ C0] ? rcu_is_watching+0x16/0xb0 [ 478.199994][ C0] __x64_sys_bpf+0xba/0xd0 [ 478.204440][ C0] do_syscall_64+0x166/0x520 [ 478.209050][ C0] ? trace_irq_disable+0x3b/0x140 [ 478.214094][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.220186][ C0] ? clear_bhb_loop+0x70/0xc0 [ 478.224890][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.230804][ C0] RIP: 0033:0x7f4c4b19f559 [ 478.235240][ C0] RSP: 002b:00007f4c4bff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.243680][ C0] RAX: ffffffffffffffda RBX: 00007f4c4b426450 RCX: 00007f4c4b19f559 [ 478.251687][ C0] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 478.259680][ C0] RBP: 00007f4c4b236b20 R08: 0000000000000000 R09: 0000000000000000 [ 478.267676][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.275673][ C0] R13: 00007f4c4b4264e8 R14: 00007f4c4b426450 R15: 00007ffdd7550238 [ 478.283695][ C0] [ 481.557853][ C1] net_ratelimit: 19236 callbacks suppressed [ 481.557876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 481.558266][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 481.558687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 481.559077][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 481.559105][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.559495][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 481.559879][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 481.560264][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 481.560523][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 481.560643][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 486.567675][ C0] net_ratelimit: 19439 callbacks suppressed [ 486.567697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.567912][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 486.568099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.568342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 486.568503][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.568762][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 486.569176][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 486.569590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 486.570004][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0) [ 486.570422][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:24:5c:de:3f:5c, vlan:0)