last executing test programs: 4.52056949s ago: executing program 0 (id=4327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @private}, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x230, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff, 0xffffffff, 'veth0_to_team\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0xc008d5e241df0aeb, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x6}}, @common=@addrtype={{0x30}, {0x800, 0x21}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3ff, 0x8, 0x6, 0x2, 0x7fff, 0x0, 0xd12cc2f8, 0xfffffffb]}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0xff], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x0, 0xff000000, 0xffffff00, 0xffffffff], 0x4e20, 0x4e22, 0x4e20, 0x4e24, 0x460, 0x3, 0xde74, 0x1ff, 0x4}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xc, '(_'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x45, 0x0, [0x3b, 0x2b, 0x1c, 0x29, 0x16, 0x1c, 0x15, 0x25, 0x3a, 0x10, 0x7, 0x0, 0x10, 0x38, 0x21, 0x2c], 0x1, 0xe, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 4.32081593s ago: executing program 0 (id=4330): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000cc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xc3, 0x1, 0x4}]}}}], 0x18}}], 0x1, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000800400000100010000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="319a62af68fbbea116eb9812c5bb90d147544d604357676f6142c40a2db52c68c91d7d1bcaa1d49b9818a034921258fa961f7724d7c68b5983ab629e142d31fe47dd8be9af581bc85b388ce93a63d03acecc2db3817f263d75adadd1915a2bde862c02ebb7f9e22f681f8c4f589a1d5aab9559821edd909f9b891f6b15c8eae50e0563ec48eba977845239b8a791f1a8349625c1336cc8b23deaf72a17bddae9a377b701e12ee1ce82e3d61330ce4b1a"], 0x48}}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000080)=0xe, &(0x7f0000000200)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x400000000000c2f9) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000004000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c001a80180002801400018008000800020000000800030001000000"], 0x44}}, 0x0) 3.127496467s ago: executing program 0 (id=4342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xa, 0x3, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xd, 0x3f, 0x1}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000500)=[{0x5, 0x1, 0xb, 0x4}, {0x2, 0x3, 0x5, 0xa}, {0x5, 0x5, 0xf, 0xc442242b300e788d}, {0x0, 0x5, 0xe, 0x7}, {0x5, 0x5, 0x7, 0x4}, {0x3, 0x5, 0xa, 0xc}, {0x1, 0x4, 0xe, 0x2}, {0x0, 0x3, 0xa, 0x4}], 0x10, 0xfffffff9}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x16) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7}, 0x18) 2.454233329s ago: executing program 4 (id=4349): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) unshare(0x26020480) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0), 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x884) 2.155606751s ago: executing program 0 (id=4353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x2, @void}, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08000100270000002700"], 0xfd6c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 1.909071213s ago: executing program 3 (id=4355): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)=':^\x00', 0x220000, &(0x7f00000000c0)={@align=0xed, {0x2, 0x24, 0xffffffff, 0x2}}, 0x86, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x80000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d3000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xf7fced255fd3bcee, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="fec247f36598"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) 1.867428036s ago: executing program 4 (id=4356): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ID={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x201}, 0x1c}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) (rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 1.675789916s ago: executing program 3 (id=4359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r3, 0x1, 0x70b92a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe27, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x200c0850) 1.63995028s ago: executing program 4 (id=4360): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0xf70}, {{0x0, 0x0, &(0x7f0000000200), 0x1000000000000041}, 0x2}], 0x2, 0x10021, 0x0) 1.436122511s ago: executing program 0 (id=4361): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, @none, 0x7}, 0xa) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) close(0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x9, 0xfffffffffffffffd, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.435763824s ago: executing program 1 (id=4362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f00070100000000fcdbdf25047c0000040000000c00018008000f"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.423077149s ago: executing program 4 (id=4363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x470, 0x330, 0x330, 0xfeffffff, 0x210, 0x168, 0x3d8, 0x3d8, 0xffffffff, 0x3d8, 0x3d8, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0xffff, 0x4, 'fsm\x00', "4bdc538f9ae880e35b233a5054051fac7c48fad267a886bdd52c5311a0122135782b421f6801fac1b17c2d8b50d658ccc23b0c0eab050b763553df9fae0e874f2fa29ba34e9cfc3f1b49aac5c2c53dce1911f5ba9c6fb0933d27c58f7e221238894c1ae260485b2fcd3309e738a633b4ed5200fa716c6cb097497a3219e44626", 0x34, 0x3, {0x1}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @rand_addr=0x64010102, @multicast2, @gre_key=0xc, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0xab0d, @gre_key=0xba47}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x1}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @remote, @multicast2, @gre_key=0x70, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000940)=""/4096, &(0x7f0000001940)=0x1000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="45d7e15f3bffa4fda03223a07752fb5142f1aad3d088e2bb71", @ANYRES32=r0], 0x98}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4000) 1.336099512s ago: executing program 3 (id=4364): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000280)="fd9c066798e3b76e583bee9eef9cfee1fb9dc2e1eaf006baad031034599f346ec06145a3a70df27092b595d6e6c0de7adcd9c1e54bbe75318de253e7065735a9e99a", 0x94}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) read$alg(r5, &(0x7f0000000040)=""/136, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b40900000000000061111000000000008510000002000000850000005000000095000000000000009500000000000000752791631222a4b4dbffcb3e429313c626d8575b733278661f13493d24a9e56d000045361df4f2d2d4f8c2f01b4ebc5e56040b1134ecdb1e1f38ce94b48a6e6325a3c0fa265afb4cfef8a901af313b77f13a966aeb27ccb654fac79ae10600000075fa8341a6875728e9a45938c338b7a958249211eb70d5d978eff738aa6be2d07fedb69c65b63dd665e66a92dec0189df1c319c72478e432b17c45bec66c923fb483a6d4e050bfaa8f8f85364f849802fa2c3b80975e8753560000f0c313d9c19ebc37219f14fbcdd539b9b96af3000000000000a5ba432868c94d89a587a608d4a2775463f6ac50a87677ff52cdc32c5ca6b15a0f7dd116bf074bdf18f78df0a7ea01bf1b70dc492fb776d382e53f33275334ab9055204cf808192fe7965d545adc3025140be6c4ce9c53a78654d285020c3ed1802e4905bdaf45b00ca255fc9720af279d003823d909e0028d0e54b3bbab4040064c8075fb861c0957378d1aa25363fe4e6ee692dbc22d130f06b86ea597aa9147723879c8f36b42109343d97e02186e240d1c455ab6e5bdd818e196a93467649726cd2c134ede56f61c9b8da92eee2a520a1de4078d326bb41cf0e5e83f9354fabeb8f726aa631253e5cb18e2268a4c530df35d2e40646363b84d6e3cc37809dc3dc91b1747d982b00d04f69400"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) 1.272841168s ago: executing program 2 (id=4365): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000365000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0xc055) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) mmap(&(0x7f0000365000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0xc055) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) (async) socket$netlink(0x10, 0x3, 0x0) (async) 1.219017654s ago: executing program 4 (id=4366): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000804) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.110546357s ago: executing program 1 (id=4367): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d00000000000000000000000105000000030000000000000000000003000000000100000002"], 0x0, 0x4e}, 0x20) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000001040), 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000284ca68ace64c08dc000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007013732f775be876b85520c79568dd5230000feffffffb7020000080003000000000000ff1bbf9f4162b8c2d6eb7c8cfe390a8b850000001700000095000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @empty, @multicast2}, &(0x7f00000000c0)=0xc) 948.160122ms ago: executing program 1 (id=4368): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000800)={'c', ' *:* ', 'rwm\x00'}, 0xa) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000380)='\xd1\xfe\b#A(\x1f-,\x00', 0x80800, &(0x7f00000000c0)={@align=0xd, {0x3, 0x8000, 0x5, 0xfffffffffffffffa}}, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r4, 0x4f}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x80, 0x4) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet6(r2, &(0x7f0000000680)={0xa, 0x4e22, 0xdad0, @mcast1, 0x3}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x520, 0xa8, 0xa8, 0xffffffff, 0x178, 0x368, 0x488, 0x488, 0xffffffff, 0x488, 0x488, 0x5, &(0x7f0000000600), {[{{@ip={@loopback, @rand_addr=0x64010100, 0x0, 0xffffff, 'wlan0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x88, 0x1, 0x4}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @local, @private=0xa010102, @icmp_id=0x67, @gre_key=0x4}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x6d5a438cec259626, "449b"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1b, @rand_addr=0x64010102, @private=0xa010101, @gre_key=0x7, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xc8, 0x1f0, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0x74d, 0x1, 0x1}}, @common=@unspec=@state={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x401, 'system_u:object_r:lirc_device_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x44}, @loopback, 0xffffffff, 0xff000000, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x8, 0x4, 0x8}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x1, 0x0, 0x6, 0x1, 0x4], 0x3}}}, @common=@icmp={{0x28}, {0x12, "d2c7", 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x6, @ipv4=@remote, @ipv6=@loopback, @port=0x4e21, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000000002ec00000900020073797a32000000000900010073797a300000000048000480440001800b000100657874686472000034000280080007400000000005000200000000000800033100000000080006400000000108"], 0x9c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x6, &(0x7f00000003c0)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0xcc}], &(0x7f0000000400)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41100, 0x2, '\x00', r8, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0xd, 0x6c2, 0xffffffff}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000004c0)=[{0x3, 0x2, 0xb, 0x6}, {0x2, 0x4, 0x1, 0x6}, {0x4, 0x4, 0x7, 0x3}, {0x4, 0x5, 0xc, 0xa}, {0x4, 0x5, 0x2, 0xb}, {0x3, 0x5, 0x10, 0xb}, {0x2, 0x1, 0xa, 0x2}], 0x10, 0xfffffff0}, 0x94) 948.051957ms ago: executing program 2 (id=4369): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 939.622919ms ago: executing program 3 (id=4370): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) (async) ppoll(&(0x7f00000000c0)=[{r0, 0xc481}], 0x1, 0x0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 772.241873ms ago: executing program 2 (id=4371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000050000000030a01020000000000000000010000000900010073797a30000000001c0008800c00024000000000000004000c000140000000000000000408000a40000000040900030073797a30000000002c000000030a01040000000000000000010000010900010073797a30000000000900030073797a304675ad03e0463eb9c7f3182b59adcdbb362f55d65524777764ea88a5c2b8ded86b0f17de53643c9a7e247dbf9fb9118647d6798cd611a3251f93bbe95d4d275cc76ddd64c40162d0141a1f05f64259d493c5db5fa735bfb5f2b168affcd50c5494d7223c4bad18f298ac8af7f18ba8925bf59263bc5986a7355075506eaf7a6c4d092b187db7f8d0b56d3a6ee8936d9ea047ffc7474489d03ae72b4f98d471e46a51b9bc9e06ebbec4cc5335fae2269618a2a54acea19cc1b3462766e49e8303ae44a80a306b6f0c8aa917"], 0xbadc}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 724.445804ms ago: executing program 1 (id=4372): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)={0x3, {{0x2, 0x0, @multicast1}}, 0x1}, 0x90) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x28, 0x10e}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x19, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0x3, 0x5, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xede02b24b5d33219}}}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7d}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x1410, 0x2, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x814) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x8502}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}]}, 0x50}}, 0x8000084) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x210, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e19, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4}, {0x40, 0xf9, 0x8}], 0x2, 0x3}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 716.56605ms ago: executing program 4 (id=4373): unshare(0x64000600) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1802}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/15, 0xf}], 0x1, 0x0, 0x9) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 689.762114ms ago: executing program 3 (id=4374): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000005bf645498fb446a99026d76791e4de", @ANYRES16=r0, @ANYBLOB="0305ff00ffdd02008a7547f5dff3c9430900baf40000"], 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) sendto$inet6(r0, &(0x7f0000000180)="0de7e66a5357f76cb597deda38dbed1691d03ced4bd70b5903ff904f83f19d204751671909d8f74d7fc303e48588035ec4e48c8618095ee55dbe7d7b6e2847c348626410ff3383e9fe92c328f2b765b3ba3c89c992962f253975229e95e3246f95acb2ec4ebcb2c3209abfc2085e830f43e9f1deda248ce3c25d1e9bd44053840be549288982d435e6b0ed83b35fc56840bb89dfb2a50f069ab1a30d92a810c12372aec61f2b001dca6fca14d660df", 0xaf, 0x44004, &(0x7f0000000380)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b4003a00003f00"/16, @ANYRES16=0x0, @ANYBLOB="00042abd7000070000001b000000070021006161000008009a00010000000800010010000000050092006200000004002280070021006262000008009a00020000006c0022801c00008008000400ff0f0000080001003d00000008000500ff01000014000080080001000010000008000200000400000c00008008000700070000002c00008008000600050000000800060001000080080002000300000008000700010000000800050001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x24048010}, 0x20000001) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 520.375521ms ago: executing program 2 (id=4375): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "f3d9c0e25f703f40dae1a86da65a98b3"}) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0x4, 0x9}, 0x10) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0x4, 0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 496.388009ms ago: executing program 3 (id=4376): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x5b, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x40000003, 0xc3, &(0x7f000000cf3d)=""/195, 0x1f00, 0x28, '\x00', 0x0, @fallback=0xd}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$tun(r1, 0x0, 0xb6) write$cgroup_subtree(r1, 0x0, 0xfe33) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fddbdf25410000000e0001006e657464657673696d0000000f0002006e657403657673696d3000000d0087006c325f64726f707300000000"], 0x44}, 0x1, 0x0, 0x0, 0x40008}, 0x4080) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) 273.415965ms ago: executing program 1 (id=4377): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20048018) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r7 = socket$netlink(0x10, 0x3, 0x12) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x6a06}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x22}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r12, 0x0, 0xb, &(0x7f0000000040)=""/202, &(0x7f0000000400)=0xca) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13], 0x3c}}, 0x0) 181.006587ms ago: executing program 2 (id=4378): unshare(0x22020400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x2) 102.633505ms ago: executing program 2 (id=4379): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @empty}}, 0x7}, &(0x7f0000000200)=0x90) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket(0x10, 0x803, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x0, 0x30, 0xffffffff80000001, 0x6c8490e4]}, &(0x7f00000002c0)=0x78) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000b00", @ANYRES32=r10, @ANYBLOB="06007018f9f500ffb796f48ee5e5fbc4f25b194308bfc11587918040c8b5ec0b97502b26bb80b0aa93b284bf60c53a37d2a85187df06e8b0"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r8, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000300), 0x4) getsockopt(r12, 0x111, 0x6, 0x0, &(0x7f0000000080)) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$nl_route(0x10, 0x3, 0x0) 66.949769ms ago: executing program 0 (id=4380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = epoll_create1(0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001400)={0xe0000017}) epoll_wait(r8, &(0x7f0000001940)=[{}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 0s ago: executing program 1 (id=4381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x38, r2, 0x307, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x29, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@generic={0xc, 0x2, 0x3, 0x400, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x97b, 0x8e, &(0x7f0000000780)=""/142, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x5, 0x53b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000900)=[{0x1, 0x4, 0x1, 0x9}, {0x4, 0x1, 0xb, 0x3}, {0x4, 0x2, 0xb}, {0x1, 0x1, 0x9, 0x4}, {0x3, 0x4, 0xb, 0x4}], 0x10, 0x6c}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='\x00', 0x0, 0x8, r4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="0097f185cac0d22fc300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r6, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x25, 0x101, 0x70bd27, 0x25dfdbfc, {0x1a}, [@typed={0x4, 0x167, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) preadv(r8, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0x9, 0x6c8) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r11, &(0x7f0000000340), 0x12) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r12, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x40, 0x8}, 0xc) kernel console output (not intermixed with test programs): erface batadv_slave_1 (retrying later): interface not active [ 402.389327][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 402.539063][T17200] netlink: 'syz.3.3019': attribute type 1 has an invalid length. [ 402.602453][T16904] hsr_slave_0: entered promiscuous mode [ 402.629090][T16904] hsr_slave_1: entered promiscuous mode [ 402.651718][T16904] debugfs: 'hsr0' already exists in 'hsr' [ 402.659838][T16904] Cannot create hsr debugfs directory [ 402.734050][T17200] 8021q: adding VLAN 0 to HW filter on device bond10 [ 402.851098][T17205] 8021q: adding VLAN 0 to HW filter on device bond10 [ 402.881262][T17205] bond10: (slave gre1): The slave device specified does not support setting the MAC address [ 402.920705][T17205] bond10: (slave gre1): Error -95 calling set_mac_address [ 403.043043][T17210] gretap3: entered promiscuous mode [ 403.065439][T17210] bond10: (slave gretap3): making interface the new active one [ 403.086343][T17210] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 403.161712][T17205] macvlan3: entered promiscuous mode [ 403.169357][T17205] macvlan3: entered allmulticast mode [ 403.176954][T17205] bond10: entered promiscuous mode [ 403.183207][T17205] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 403.197794][T17205] bond10: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 403.220561][T17205] bond10: left promiscuous mode [ 403.490716][T17247] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 403.712143][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 403.724510][T17254] bridge_slave_0: left allmulticast mode [ 403.733075][T17254] bridge_slave_0: left promiscuous mode [ 403.746633][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.775940][ T5637] Bluetooth: hci1: command tx timeout [ 403.834097][T17254] bridge_slave_1: left allmulticast mode [ 403.851558][T17254] bridge_slave_1: left promiscuous mode [ 403.877201][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.893417][T17254] bond5: (slave veth0_to_bond): Releasing backup interface [ 403.911526][T17254] team0: Port device team_slave_0 removed [ 403.931330][T17254] team0: Port device team_slave_1 removed [ 403.944719][T17254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.954141][T17254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.965106][T17254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.124417][T17283] netlink: 'syz.3.3034': attribute type 2 has an invalid length. [ 404.142688][T17273] 8021q: adding VLAN 0 to HW filter on device bond12 [ 404.296288][T17287] netlink: 'syz.1.3037': attribute type 1 has an invalid length. [ 404.413019][T17287] 8021q: adding VLAN 0 to HW filter on device bond13 [ 404.573795][T17306] netlink: 'syz.0.3041': attribute type 1 has an invalid length. [ 404.811694][T17315] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 404.847124][T17318] IPVS: set_ctl: invalid protocol: 29 172.30.0.5:20003 [ 404.862738][T17318] IPVS: set_ctl: invalid protocol: 29 172.30.0.5:20003 [ 405.175274][T17345] openvswitch: netlink: IP tunnel dst address not specified [ 405.195784][T17347] __nla_validate_parse: 5 callbacks suppressed [ 405.195800][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3050'. [ 405.507611][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3055'. [ 405.792259][T17374] syzkaller0: entered promiscuous mode [ 405.804633][T17374] syzkaller0: entered allmulticast mode [ 405.829021][T16904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.865026][T16904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.918039][T16904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.930364][T16904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.938489][T16904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.957420][T16904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.970315][T16904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.034116][T16904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.132050][T17392] netlink: 'syz.1.3061': attribute type 27 has an invalid length. [ 406.168652][T17392] netlink: 'syz.1.3061': attribute type 4 has an invalid length. [ 406.199402][T17392] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3061'. [ 406.227831][T17405] SET target dimension over the limit! [ 406.257681][T17404] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 406.842801][T17421] bond14: Unable to set down delay as MII monitoring is disabled [ 406.853939][T17421] bond14 (unregistering): Released all slaves [ 407.061201][T16904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.135099][T16904] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.227373][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.234573][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.289644][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.296866][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.313894][T17461] netlink: 'syz.4.3073': attribute type 13 has an invalid length. [ 407.389639][T17467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3073'. [ 407.433321][T17461] netlink: 'syz.4.3073': attribute type 58 has an invalid length. [ 407.472379][T17470] netlink: 'syz.1.3074': attribute type 10 has an invalid length. [ 407.488830][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'. [ 407.538259][T17461] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3073'. [ 407.552932][T17470] team0: Port device dummy0 added [ 407.607053][T17461] netlink: 'syz.4.3073': attribute type 13 has an invalid length. [ 407.631215][T17461] netlink: 'syz.4.3073': attribute type 58 has an invalid length. [ 407.660725][T17461] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3073'. [ 407.708446][T17461] netlink: 'syz.4.3073': attribute type 13 has an invalid length. [ 407.710414][T17470] netlink: 'syz.1.3074': attribute type 10 has an invalid length. [ 407.744259][T17461] netlink: 'syz.4.3073': attribute type 58 has an invalid length. [ 407.784274][T17461] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3073'. [ 407.818435][T17470] team0: Port device dummy0 removed [ 407.847503][T17461] netlink: 'syz.4.3073': attribute type 13 has an invalid length. [ 407.861760][T17461] netlink: 'syz.4.3073': attribute type 58 has an invalid length. [ 407.862601][T17487] netlink: 'syz.0.3076': attribute type 10 has an invalid length. [ 407.888295][T17461] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3073'. [ 407.909313][T17461] netlink: 'syz.4.3073': attribute type 13 has an invalid length. [ 407.941228][T17490] netlink: 'syz.0.3076': attribute type 4 has an invalid length. [ 407.943689][T17461] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3073'. [ 407.959251][T17487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.971861][T17487] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 408.118241][T17490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.137853][T17490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.150169][T17490] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 408.161393][T17490] bond0 (unregistering): Released all slaves [ 408.758240][T16904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.861768][T17533] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 408.937826][T16904] veth0_vlan: entered promiscuous mode [ 409.002574][T16904] veth1_vlan: entered promiscuous mode [ 409.163324][T16904] veth0_macvtap: entered promiscuous mode [ 409.224934][T16904] veth1_macvtap: entered promiscuous mode [ 409.354419][T16904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.437892][T16904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.481945][T17469] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.524197][T17469] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.553834][T17469] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.573603][T17469] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.745932][T17577] syzkaller0: entered promiscuous mode [ 409.753194][T17577] syzkaller0: entered allmulticast mode [ 411.145871][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 411.154035][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 411.791219][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.798475][ C0] bridge0: topology change detected, propagating [ 411.805809][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.813032][ C0] bridge0: topology change detected, propagating [ 412.541965][T17627] syzkaller0: entered promiscuous mode [ 412.559062][T17627] syzkaller0: entered allmulticast mode [ 412.566345][T17631] __nla_validate_parse: 4 callbacks suppressed [ 412.566359][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 412.608742][T17631] veth7: entered promiscuous mode [ 412.613890][T17631] veth7: entered allmulticast mode [ 412.621018][T17636] validate_nla: 3 callbacks suppressed [ 412.621034][T17636] netlink: 'syz.3.3103': attribute type 58 has an invalid length. [ 412.634600][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.643254][T17636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3103'. [ 412.652956][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.809486][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.841136][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.957361][T17645] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3106'. [ 413.211555][T17659] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 413.728482][T16905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.753312][T16905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.764213][T17691] tipc: Enabling of bearer rejected, failed to enable media [ 413.782753][T16905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.794618][T16905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.802787][T16905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.978608][T17698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3118'. [ 414.559859][T17729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'. [ 414.780885][T17469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.794757][T17742] netlink: 'syz.3.3127': attribute type 1 has an invalid length. [ 414.814432][T17469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.948270][T17742] 8021q: adding VLAN 0 to HW filter on device bond11 [ 415.027331][T17751] bond11: (slave geneve4): making interface the new active one [ 415.081692][T17751] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 415.146560][T17762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3129'. [ 415.303658][T17469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.337742][T17469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.372924][T17775] netlink: 'syz.3.3131': attribute type 10 has an invalid length. [ 415.438983][ T3315] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 415.467380][ T3315] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 415.542109][T17778] bond0 (unregistering): Released all slaves [ 415.629910][ T3315] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 415.791269][T17469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.849893][T17469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.865847][T16905] Bluetooth: hci4: command tx timeout [ 415.893330][T17687] lo speed is unknown, defaulting to 1000 [ 416.055459][T17687] xfrm0 speed is unknown, defaulting to 1000 [ 416.165399][T17804] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 416.209583][T17804] bond0: option packets_per_slave: allowed values 0 - 65535 [ 416.251581][T17804] bond0 (unregistering): Released all slaves [ 416.389964][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3140'. [ 416.467301][T17469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.500660][T17469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.536503][T17816] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3136'. [ 416.547456][T17816] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3136'. [ 416.560226][T17816] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 416.694140][T17687] lo speed is unknown, defaulting to 1000 [ 416.959208][T17853] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 417.004594][T17853] openvswitch: netlink: Actions may not be safe on all matching packets [ 417.496019][T17878] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3149'. [ 417.590112][T17469] bridge_slave_1: left promiscuous mode [ 417.602006][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.617577][T17469] bridge_slave_0: left allmulticast mode [ 417.633795][T17469] bridge_slave_0: left promiscuous mode [ 417.640319][T17469] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.722131][T17469] pim6reg: left allmulticast mode [ 417.752102][T17469] batman_adv: batadv0: Interface deactivated: gretap1 [ 417.783499][T17469] batman_adv: batadv0: Interface deactivated: gretap2 [ 417.936343][T16905] Bluetooth: hci4: command tx timeout [ 418.174390][T17469] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 418.373637][ T12] smc: removing ib device syz1 [ 418.446493][ T12] smbdirect: ib_dev[syz1] removed [ 418.553749][T17469] batman_adv: batadv0: Removing interface: gretap1 [ 418.640314][T17469] batman_adv: batadv0: Removing interface: gretap2 [ 418.827365][T17469] team0: Port device geneve1 removed [ 419.026986][T17469] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 419.246897][T17469]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.271972][T17469]  (unregistering): (slave veth0_to_bond): Releasing backup interface [ 419.303153][T17469]  (unregistering): Released all slaves [ 419.336417][T17469] bond1 (unregistering): Released all slaves [ 419.402974][T17469] bond2 (unregistering): Released all slaves [ 419.481009][T17469] bond3 (unregistering): Released all slaves [ 419.542292][T17469] bond4 (unregistering): Released all slaves [ 419.574736][T17469] bond5 (unregistering): Released all slaves [ 419.612763][T17469] bond6 (unregistering): Released all slaves [ 419.694067][T17469] bond7 (unregistering): Released all slaves [ 419.762334][T17469] bond8 (unregistering): Released all slaves [ 419.793877][T17469] bond9 (unregistering): Released all slaves [ 419.849940][T17469] bond0 (unregistering): Released all slaves [ 419.897686][T17469] bond10 (unregistering): Released all slaves [ 419.950302][T17469] bond11 (unregistering): Released all slaves [ 420.022091][T16905] Bluetooth: hci4: command tx timeout [ 420.139032][T17878] bond14: Unable to set up delay as MII monitoring is disabled [ 420.151069][T17878] bond14 (unregistering): Released all slaves [ 420.289554][T17871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.340626][ T5825] xfrm0 speed is unknown, defaulting to 1000 [ 420.349294][ T5825] syz1: Port: 1 Link DOWN [ 420.847727][T17961] vlan0: Caught tx_queue_len zero misconfig [ 420.898393][T17957] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3157'. [ 420.989245][T17973] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3160'. [ 421.030454][T17974] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3160'. [ 421.146811][T17469] tipc: Disabling bearer [ 421.157367][T17469] tipc: Left network mode [ 421.256841][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3162'. [ 421.310285][T17687] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.317896][T17687] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.325201][T17687] bridge_slave_0: entered allmulticast mode [ 421.333973][T17687] bridge_slave_0: entered promiscuous mode [ 421.346519][T17687] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.359272][T17687] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.370493][T17687] bridge_slave_1: entered allmulticast mode [ 421.382258][T17687] bridge_slave_1: entered promiscuous mode [ 421.483237][T18002] xt_TCPMSS: Only works on TCP SYN packets [ 421.521752][T17469] IPVS: stopping backup sync thread 10307 ... [ 421.919064][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 421.993202][T17687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.041727][T17687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.097946][T16905] Bluetooth: hci4: command tx timeout [ 422.139849][T18023] xt_TPROXY: Can be used only with -p tcp or -p udp [ 422.208465][T18020] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 422.391138][T17687] team0: Port device team_slave_0 added [ 422.504480][T17687] team0: Port device team_slave_1 added [ 422.693844][T18039] IPv6: NLM_F_CREATE should be specified when creating new route [ 422.724604][T18041] netlink: 'syz.3.3174': attribute type 1 has an invalid length. [ 422.758476][T18041] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3174'. [ 422.785729][T18041] netlink: 'syz.3.3174': attribute type 1 has an invalid length. [ 422.838085][T17687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.852285][T17687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.894114][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 422.945202][T17687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.000298][T18053] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3176'. [ 423.019044][T17687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.037334][T17687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.133197][T17687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.492331][T17687] hsr_slave_0: entered promiscuous mode [ 423.530233][T17687] hsr_slave_1: entered promiscuous mode [ 423.549064][T17687] debugfs: 'hsr0' already exists in 'hsr' [ 423.563037][T17687] Cannot create hsr debugfs directory [ 423.784032][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 423.984280][T18095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3188'. [ 424.112160][T17469] hsr_slave_0: left promiscuous mode [ 424.161853][T17469] hsr_slave_1: left promiscuous mode [ 424.178159][T17469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.192894][T17469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.217332][T17469] veth1_macvtap: left promiscuous mode [ 424.229754][T17469] veth0_macvtap: left promiscuous mode [ 424.241232][T17469] veth1_vlan: left promiscuous mode [ 424.253130][T17469] veth0_vlan: left promiscuous mode [ 424.843238][T17469] team0 (unregistering): Port device team_slave_1 removed [ 424.857637][T17469] team0 (unregistering): Port device team_slave_0 removed [ 424.975085][T17195] smbdirect: ib_dev[syś2] removed [ 425.008702][T18099] pim6reg: entered allmulticast mode [ 425.032956][ T5627] lo speed is unknown, defaulting to 1000 [ 425.033188][T18101] netlink: 'syz.0.3190': attribute type 22 has an invalid length. [ 425.058363][ T5627] infiniband syś2: ib_query_port failed (-19) [ 425.080380][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'. [ 425.234408][T18101] netlink: 'syz.0.3190': attribute type 22 has an invalid length. [ 425.243636][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'. [ 425.275096][T17195] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.294810][T18122] bridge10: entered promiscuous mode [ 425.302725][T18122] bridge10: entered allmulticast mode [ 425.384388][T17195] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.427103][T17195] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.464917][T17195] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.852692][T17469] IPVS: stop unused estimator thread 0... [ 426.230712][T18159] __nla_validate_parse: 3 callbacks suppressed [ 426.230731][T18159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3202'. [ 426.489327][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3206'. [ 426.923133][T18195] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3213'. [ 427.214699][T17687] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 427.246487][T17687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.265234][T17687] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.288557][T17687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.317750][T17687] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 427.367529][T17687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.393230][T17687] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 427.436704][T17687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.520452][T18213] tipc: Started in network mode [ 427.547803][T18213] tipc: Node identity 96578fb25344, cluster identity 4711 [ 427.562731][T18229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3220'. [ 427.570587][T18213] tipc: Enabled bearer , priority 0 [ 427.659994][T18225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3219'. [ 427.694520][T18230] syzkaller1: entered promiscuous mode [ 427.702027][T18230] syzkaller1: entered allmulticast mode [ 427.711577][T18219] syzkaller0: entered promiscuous mode [ 427.725428][T18229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'. [ 427.738186][T18219] syzkaller0: entered allmulticast mode [ 427.786665][T18213] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 427.860756][T18225] netlink: 'syz.3.3219': attribute type 4 has an invalid length. [ 427.933179][T18234] team0: Device gtp2 is up. Set it down before adding it as a team port [ 428.009977][T18241] tipc: Resetting bearer [ 428.090858][T18212] tipc: Resetting bearer [ 428.151935][T18212] tipc: Disabling bearer [ 428.193433][T18255] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3223'. [ 428.334718][T18255] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 428.410486][T18255] syzkaller0: entered promiscuous mode [ 428.433199][T18255] syzkaller0: entered allmulticast mode [ 428.572029][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'. [ 428.689780][T17687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.767722][T17687] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.803306][T18282] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 428.812852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.820053][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.864914][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.872132][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.883170][T18283] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 429.250410][T18308] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 429.252230][T18311] netlink: 'syz.1.3234': attribute type 21 has an invalid length. [ 429.281240][T18312] netlink: 'syz.0.3233': attribute type 21 has an invalid length. [ 429.324799][T18311] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3234'. [ 429.393111][T18311] netlink: 'syz.1.3234': attribute type 5 has an invalid length. [ 429.403241][T18321] xt_TCPMSS: Only works on TCP SYN packets [ 429.427350][T18311] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3234'. [ 429.719627][T18329] bond0: entered promiscuous mode [ 429.757332][T18329] netlink: 'syz.0.3238': attribute type 12 has an invalid length. [ 429.777049][T18329] netlink: 'syz.0.3238': attribute type 5 has an invalid length. [ 429.822054][T18337] ip6tnl1: entered allmulticast mode [ 430.575187][T18382] bond1: option lp_interval: invalid value (0) [ 430.581720][T18382] bond1: option lp_interval: allowed values 1 - 2147483647 [ 430.593137][T18382] bond1 (unregistering): Released all slaves [ 430.716784][T18388] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 430.754318][T18388] bond0 (unregistering): Released all slaves [ 430.928701][T17687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.963733][T18409] netlink: 'syz.1.3252': attribute type 11 has an invalid length. [ 431.364645][ T30] audit: type=1804 audit(1782823108.114:14): pid=18428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3258" name="/newroot/89/cgroup.controllers" dev="tmpfs" ino=469 res=1 errno=0 [ 431.430791][T18431] __nla_validate_parse: 5 callbacks suppressed [ 431.430807][T18431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'. [ 431.437337][ T30] audit: type=1800 audit(1782823108.114:15): pid=18428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3258" name="cgroup.controllers" dev="tmpfs" ino=469 res=0 errno=0 [ 431.460995][T18431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'. [ 431.587475][T18436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3260'. [ 431.613944][T17687] veth0_vlan: entered promiscuous mode [ 431.659850][T17687] veth1_vlan: entered promiscuous mode [ 431.732342][T17687] veth0_macvtap: entered promiscuous mode [ 431.775302][T17687] veth1_macvtap: entered promiscuous mode [ 431.821914][T17687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.848012][T17687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.893595][ T965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.914803][ T965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.963930][ T965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.968629][T18451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3265'. [ 431.995997][ T965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.017771][T18451] unsupported nlmsg_type 40 [ 432.048749][T18451] netlink: 'syz.3.3265': attribute type 13 has an invalid length. [ 432.293153][T18464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3267'. [ 432.319831][T18462] netlink: 'syz.1.3267': attribute type 11 has an invalid length. [ 432.379131][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.389552][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.513163][T17195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.562992][T17195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.001225][T18494] ’’’’’’: renamed from virt_wifi0 [ 433.332200][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 433.352813][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.361425][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 433.377402][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 433.389644][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 433.501096][T18503] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.817423][T18521] netlink: 'syz.4.3281': attribute type 10 has an invalid length. [ 433.863667][T18521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.939292][T18521] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 434.198613][T18544] syzkaller0: entered promiscuous mode [ 434.209002][T18544] syzkaller0: entered allmulticast mode [ 434.377283][T18504] lo speed is unknown, defaulting to 1000 [ 434.571160][T18556] netlink: 'syz.4.3291': attribute type 1 has an invalid length. [ 434.593851][T18557] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3291'. [ 435.024332][T18504] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.043550][T18504] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.061789][T18504] bridge_slave_0: entered allmulticast mode [ 435.073635][T18504] bridge_slave_0: entered promiscuous mode [ 435.083193][T18504] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.091531][T18504] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.100092][T18504] bridge_slave_1: entered allmulticast mode [ 435.108787][T18504] bridge_slave_1: entered promiscuous mode [ 435.237307][T18504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.259406][T18504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.284416][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3299'. [ 435.455301][T18504] team0: Port device team_slave_0 added [ 435.462670][ T5637] Bluetooth: hci3: command tx timeout [ 435.504989][T18504] team0: Port device team_slave_1 added [ 435.712922][T18504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.735097][T18504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.792220][T18504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.841742][T18504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.869664][T18504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.955123][T18504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.008132][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 436.099260][T18637] netlink: 'syz.2.3312': attribute type 1 has an invalid length. [ 436.115108][T18637] netlink: 'syz.2.3312': attribute type 2 has an invalid length. [ 436.134940][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 436.166917][T18504] hsr_slave_0: entered promiscuous mode [ 436.173640][T18504] hsr_slave_1: entered promiscuous mode [ 436.200742][T18504] debugfs: 'hsr0' already exists in 'hsr' [ 436.222792][T18504] Cannot create hsr debugfs directory [ 436.479724][T18657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'. [ 436.600285][T18667] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 436.612065][T18666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3320'. [ 436.643310][T18666] netlink: 'syz.0.3320': attribute type 1 has an invalid length. [ 436.663152][T18666] netlink: 'syz.0.3320': attribute type 1 has an invalid length. [ 436.696685][T18666] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3320'. [ 437.017974][T18504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.073343][T18504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.183938][T18683] ip6gretap1: entered promiscuous mode [ 437.208761][T18683] ip6gretap1: entered allmulticast mode [ 437.348826][T18504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.377729][T18504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.535768][ T5637] Bluetooth: hci3: command tx timeout [ 437.682116][T18504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.705088][T18716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3332'. [ 437.715959][T18504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.769049][T18715] netlink: 'syz.2.3331': attribute type 10 has an invalid length. [ 437.777916][T18715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.785355][T18715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.809841][T18715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.828951][T18715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.124139][T18728] tipc: Started in network mode [ 438.129746][T18728] tipc: Node identity e0000001, cluster identity 4711 [ 438.136730][T18728] tipc: Enabling of bearer rejected, failed to enable media [ 438.161497][T18504] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.190493][T18504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.253112][T18504] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.273605][T18504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.620928][ T5637] Bluetooth: hci3: command tx timeout [ 439.951103][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.743675][T18504] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.753408][T18504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.761392][T18504] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 440.772133][T18504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.779769][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 440.798600][T18749] vcan1: entered promiscuous mode [ 440.814015][T18749] vcan1: entered allmulticast mode [ 441.130408][T18504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.153135][T18772] batadv_slave_0: entered promiscuous mode [ 441.258069][T18504] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.287010][T18778] batadv_slave_0: left promiscuous mode [ 441.315205][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.322399][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.388300][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.395482][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.597117][T18797] netlink: 'syz.4.3356': attribute type 1 has an invalid length. [ 441.687685][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 441.707069][ T5637] Bluetooth: hci3: command tx timeout [ 441.903709][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3360'. [ 441.951089][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 442.386489][T18504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.475298][T18843] macvlan1: entered allmulticast mode [ 442.524782][T18846] netlink: 'syz.1.3368': attribute type 1 has an invalid length. [ 442.541479][T18850] netlink: 'syz.4.3369': attribute type 1 has an invalid length. [ 442.566554][T18850] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3369'. [ 442.572781][T18846] 8021q: adding VLAN 0 to HW filter on device bond14 [ 442.617183][T18846] bond9: (slave veth0_to_bond): Releasing backup interface [ 442.640360][T18846] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 442.677414][T18846] macvlan2: entered promiscuous mode [ 442.682881][T18846] macvlan2: entered allmulticast mode [ 442.689573][T18846] bond14: entered promiscuous mode [ 442.695283][T18846] veth0_to_bond: entered promiscuous mode [ 442.702443][T18846] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 442.713104][T18846] bond14: left promiscuous mode [ 442.718036][T18846] veth0_to_bond: left promiscuous mode [ 442.863058][T18504] veth0_vlan: entered promiscuous mode [ 442.870010][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'. [ 442.952280][T18864] tipc: Enabling of bearer rejected, failed to enable media [ 443.003859][T18862] netlink: 'syz.0.3372': attribute type 1 has an invalid length. [ 443.017830][T18864] tipc: Enabling of bearer rejected, failed to enable media [ 443.060176][T18865] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3372'. [ 443.092978][T18862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.138788][T18504] veth1_vlan: entered promiscuous mode [ 443.264432][T18504] veth0_macvtap: entered promiscuous mode [ 443.309913][T18880] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.317659][T18504] veth1_macvtap: entered promiscuous mode [ 443.373207][T18504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.399311][T18880] x_tables: duplicate underflow at hook 3 [ 443.424028][T18884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3377'. [ 443.442995][T18504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.494510][T17198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.521107][T17198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.567114][T17198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.592098][T17198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.850904][T18901] tipc: Enabled bearer , priority 0 [ 443.882716][T18901] syzkaller0: entered promiscuous mode [ 443.898599][T18901] syzkaller0: entered allmulticast mode [ 443.916485][T17469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.929218][T17469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.938727][T18901] sch_tbf: burst 255 is lower than device lo mtu (65550) ! [ 443.954545][T18901] tipc: Resetting bearer [ 443.964717][T18899] tipc: Resetting bearer [ 444.033427][T18899] tipc: Disabling bearer [ 444.088496][T18909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3385'. [ 444.102388][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.112688][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.251005][T18916] IPVS: length: 24 != 3790872 [ 444.395339][T18919] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3273'. [ 444.574290][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3388'. [ 444.606516][T18922] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 444.701329][T18922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.871773][T16905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.896037][T16905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.909370][T16905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.918342][T16905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.929577][T16905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 445.843536][T18983] syzkaller0: entered promiscuous mode [ 445.866423][T18983] syzkaller0: entered allmulticast mode [ 445.937151][T18933] lo speed is unknown, defaulting to 1000 [ 446.060826][T18993] syzkaller1: entered promiscuous mode [ 446.073412][T18993] syzkaller1: entered allmulticast mode [ 446.205295][T19003] veth1_macvtap: left promiscuous mode [ 446.226438][T19003] macsec0: entered promiscuous mode [ 446.299725][T19009] x_tables: duplicate underflow at hook 2 [ 446.347016][T19003] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 446.697563][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 446.977229][ T5637] Bluetooth: hci0: command tx timeout [ 447.026132][T18933] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.034901][T18933] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.043292][T18933] bridge_slave_0: entered allmulticast mode [ 447.051118][T18933] bridge_slave_0: entered promiscuous mode [ 447.060551][T18933] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.075805][T18933] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.083360][T18933] bridge_slave_1: entered allmulticast mode [ 447.091936][T18933] bridge_slave_1: entered promiscuous mode [ 447.174491][T18933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.187498][T18933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.230844][T18933] team0: Port device team_slave_0 added [ 447.239577][T18933] team0: Port device team_slave_1 added [ 447.285004][T18933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.292494][T18933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.321169][T18933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.341034][T18933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.348759][T18933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.375338][T18933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.446227][T18933] hsr_slave_0: entered promiscuous mode [ 447.453123][T18933] hsr_slave_1: entered promiscuous mode [ 447.460144][T18933] debugfs: 'hsr0' already exists in 'hsr' [ 447.467054][T18933] Cannot create hsr debugfs directory [ 447.628475][T18933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.696694][T18933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.779992][T18933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.868043][T18933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.055738][ T5637] Bluetooth: hci0: command tx timeout [ 449.471180][T19017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.489637][T18933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.555396][T18933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.598507][T18933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.637089][T18933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.657662][T18933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.698571][T18933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.717434][T18933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 449.727909][T18933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.839217][T19078] Unsupported ieee802154 address type: 0 [ 450.013508][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3427'. [ 450.049175][T18933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.087240][T19095] netlink: 'syz.3.3430': attribute type 1 has an invalid length. [ 450.095145][T19095] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3430'. [ 450.107279][T19095] netlink: 'syz.3.3430': attribute type 1 has an invalid length. [ 450.139755][T18933] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.152870][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.160109][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.213091][T19099] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3428'. [ 450.227478][T17198] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.234648][T17198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.688895][T19119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3433'. [ 451.137290][ T5637] Bluetooth: hci0: command tx timeout [ 451.142630][T19136] tipc: Enabled bearer , priority 0 [ 451.190856][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3440'. [ 451.220503][T19136] syzkaller0: entered promiscuous mode [ 451.226127][T19136] syzkaller0: entered allmulticast mode [ 451.233167][T19136] tipc: Resetting bearer [ 451.272371][ T12] tipc: Resetting bearer [ 451.289383][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 451.309915][T19150] netlink: 460 bytes leftover after parsing attributes in process `syz.0.3441'. [ 451.399403][T19133] tipc: Resetting bearer [ 453.215730][ T5637] Bluetooth: hci0: command tx timeout [ 453.379867][T19133] tipc: Disabling bearer [ 453.392561][ T7241] tipc: Node number set to 3306393522 [ 453.419678][T18933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.628673][T18933] veth0_vlan: entered promiscuous mode [ 453.660594][T18933] veth1_vlan: entered promiscuous mode [ 453.740043][T19180] block nbd0: not configured, cannot reconfigure [ 453.757392][T18933] veth0_macvtap: entered promiscuous mode [ 453.808653][T18933] veth1_macvtap: entered promiscuous mode [ 453.880549][T18933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.917070][T18933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.055358][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.082991][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.108329][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.156788][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.260060][T19207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3460'. [ 454.370175][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.407690][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.507492][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.530880][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.711104][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3390'. [ 454.893074][T19239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3468'. [ 455.022478][T19250] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3471'. [ 455.032823][T19250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3471'. [ 455.046090][T19250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3471'. [ 455.077163][T19250] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 455.121828][T19255] syzkaller0: entered promiscuous mode [ 455.133481][T19255] syzkaller0: entered allmulticast mode [ 455.326168][T19265] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3473'. [ 455.473855][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 455.501706][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 455.918240][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3484'. [ 455.937842][T19300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3485'. [ 455.945923][T19298] netlink: 'syz.4.3484': attribute type 3 has an invalid length. [ 456.283761][T19321] netlink: 'syz.0.3490': attribute type 1 has an invalid length. [ 456.351159][T19316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3488'. [ 456.373578][T19316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3488'. [ 456.445474][T19335] openvswitch: netlink: IP tunnel dst address not specified [ 457.195059][T19374] tipc: Started in network mode [ 457.210804][T19374] tipc: Node identity a648873819c4, cluster identity 4711 [ 457.234453][T19374] tipc: Enabled bearer , priority 0 [ 457.259720][T19381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.287528][T19370] tipc: Disabling bearer [ 457.314273][T19378] syzkaller0: entered promiscuous mode [ 457.320671][T19378] syzkaller0: entered allmulticast mode [ 457.501468][T19390] xt_CT: No such helper "snmp_trap" [ 458.114191][T19378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.155105][T19423] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 458.512613][T19434] netlink: 'syz.4.3525': attribute type 1 has an invalid length. [ 458.582750][T19434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.677589][T19434] bond2: (slave ip6gretap1): making interface the new active one [ 458.708816][T19434] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 458.983188][T19463] Cannot find del_set index 0 as target [ 459.254904][T19474] veth5: entered promiscuous mode [ 459.534221][T19493] bridge_slave_0: invalid flags given to default FDB implementation [ 460.009426][T19524] Cannot find set identified by id 0 to match [ 460.537969][T19552] __nla_validate_parse: 11 callbacks suppressed [ 460.537987][T19552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3559'. [ 460.966876][T19574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.053808][T19587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3566'. [ 461.194601][T19594] sctp: [Deprecated]: syz.0.3570 (pid 19594) Use of int in max_burst socket option. [ 461.194601][T19594] Use struct sctp_assoc_value instead [ 461.264853][T19578] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.272571][T19578] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.423473][T19578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.439082][T19578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.458750][T19608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.835082][T17196] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.859240][T17196] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.886542][T19633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.897140][T17196] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.915982][T17196] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.028158][T19621] syzkaller0: entered promiscuous mode [ 462.036874][T19621] syzkaller0: entered allmulticast mode [ 462.284686][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3584'. [ 462.621681][ T7243] IPVS: starting estimator thread 0... [ 462.735797][T19671] IPVS: using max 41 ests per chain, 98400 per kthread [ 464.399682][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3590'. [ 464.498146][T19676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3591'. [ 464.527046][T19676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3591'. [ 464.571412][T19683] netlink: 'syz.1.3592': attribute type 11 has an invalid length. [ 464.627439][T19683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3592'. [ 464.692899][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3595'. [ 464.735957][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3595'. [ 465.029785][T19703] xt_CT: No such helper "snmp" [ 465.194781][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3602'. [ 465.374214][T19727] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 465.404397][T19734] netlink: 'syz.3.3607': attribute type 1 has an invalid length. [ 465.504128][T19734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.554612][T19744] netlink: 9024 bytes leftover after parsing attributes in process `syz.0.3609'. [ 465.614696][T19744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.675137][ T5637] block nbd0: Receive control failed (result -32) [ 465.841844][T19755] batadv_slave_1: entered promiscuous mode [ 465.885499][T19753] batadv_slave_1: left promiscuous mode [ 466.537552][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3616'. [ 466.847446][T19787] netlink: 'syz.1.3621': attribute type 12 has an invalid length. [ 466.902860][T19787] netlink: 'syz.1.3621': attribute type 29 has an invalid length. [ 466.950592][T19787] netlink: 'syz.1.3621': attribute type 2 has an invalid length. [ 466.994331][T19787] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3621'. [ 467.242294][T19818] netlink: 'syz.0.3625': attribute type 1 has an invalid length. [ 467.277161][T19820] netlink: 'syz.1.3628': attribute type 4 has an invalid length. [ 467.332572][T19818] bond2: entered promiscuous mode [ 467.339676][T19818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.570698][T19829] lo speed is unknown, defaulting to 1000 [ 467.579610][ T5637] block nbd1: Receive control failed (result -32) [ 467.586420][T19833] lo speed is unknown, defaulting to 1000 [ 467.690488][T19848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3635'. [ 467.792438][T19853] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3637'. [ 467.928220][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 467.992164][T19861] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3639'. [ 468.212060][T19870] netlink: 'syz.1.3642': attribute type 10 has an invalid length. [ 468.243093][T19870] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.251991][T19870] bond0: (slave team0): Enslaving as an active interface with an up link [ 468.465101][T19889] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 468.474098][T19889] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 468.513582][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3647'. [ 468.963314][T19897] syzkaller0: entered promiscuous mode [ 468.971170][T19897] syzkaller0: entered allmulticast mode [ 468.988512][T19922] netlink: 'syz.3.3655': attribute type 17 has an invalid length. [ 469.012913][T19916] syzkaller0: entered promiscuous mode [ 469.034574][T19916] syzkaller0: entered allmulticast mode [ 469.083971][T19916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3654'. [ 469.093926][T19916] ip_vti0: entered promiscuous mode [ 469.168831][T19931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3659'. [ 469.252634][T19932] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 471.770366][T19947] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 472.020316][T19977] __nla_validate_parse: 3 callbacks suppressed [ 472.020336][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'. [ 472.104119][T19980] Bluetooth: MGMT ver 1.23 [ 472.285280][T19991] validate_nla: 2 callbacks suppressed [ 472.285298][T19991] netlink: 'syz.4.3673': attribute type 23 has an invalid length. [ 472.336722][T19995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3675'. [ 472.386464][T19995] xt_CONNSECMARK: invalid mode: 0 [ 472.560146][T20008] team0: Device xfrm0 is of different type [ 472.720693][T20019] ’’’’’’: renamed from vlan1 [ 472.791361][T20021] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 472.805320][T20021] bond3 (unregistering): Released all slaves [ 473.048743][T20034] bridge0: port 3(veth1_to_bridge) entered blocking state [ 473.084911][T20034] bridge0: port 3(veth1_to_bridge) entered disabled state [ 473.109386][T20034] veth1_to_bridge: entered allmulticast mode [ 473.134691][T20034] veth1_to_bridge: entered promiscuous mode [ 473.331178][T20059] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3692'. [ 473.466915][T20071] syzkaller0: entered promiscuous mode [ 473.472547][T20071] syzkaller0: entered allmulticast mode [ 473.513443][T20074] xt_l2tp: wrong L2TP version: 0 [ 475.998145][T20034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.201742][T20081] netlink: 'syz.3.3698': attribute type 2 has an invalid length. [ 476.235523][T20081] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3698'. [ 476.405423][T20081] lo speed is unknown, defaulting to 1000 [ 476.604767][T20102] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3704'. [ 476.643264][T20103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3704'. [ 476.665892][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3704'. [ 477.270702][T20138] netlink: 'syz.1.3716': attribute type 12 has an invalid length. [ 477.288413][T20138] netlink: 'syz.1.3716': attribute type 29 has an invalid length. [ 477.308458][T20138] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3716'. [ 477.372641][T20138] netlink: 'syz.1.3716': attribute type 3 has an invalid length. [ 477.401932][T20138] netlink: 'syz.1.3716': attribute type 2 has an invalid length. [ 477.412634][T20138] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3716'. [ 477.413650][T20148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3716'. [ 477.429088][T20151] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3720'. [ 477.758975][T20165] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 477.854631][T20162] syzkaller0: entered promiscuous mode [ 477.865373][T20162] syzkaller0: entered allmulticast mode [ 478.212822][T20189] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 478.393632][T20198] netlink: 'syz.0.3732': attribute type 1 has an invalid length. [ 478.449241][T20198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.699995][T20215] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3736'. [ 478.706798][T20216] netlink: zone id is out of range [ 478.749893][T20216] netlink: zone id is out of range [ 478.784505][T20216] netlink: zone id is out of range [ 478.803210][T20216] netlink: zone id is out of range [ 478.838372][ T5637] block nbd2: Receive control failed (result -32) [ 478.940962][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3739'. [ 479.221032][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'. [ 479.266249][T20243] vlan2: entered allmulticast mode [ 479.301560][T20243] bond0: entered allmulticast mode [ 479.331080][T20243] bond_slave_0: entered allmulticast mode [ 479.356652][T20243] bond_slave_1: entered allmulticast mode [ 479.372640][T20243] batadv0: entered allmulticast mode [ 479.388647][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 479.570921][T20270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3745'. [ 479.615414][T20270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3745'. [ 479.701130][T20270] geneve2: entered promiscuous mode [ 479.720430][T20283] sctp: [Deprecated]: syz.2.3747 (pid 20283) Use of int in maxseg socket option. [ 479.720430][T20283] Use struct sctp_assoc_value instead [ 479.772877][T20282] syzkaller1: entered promiscuous mode [ 479.791674][T20282] syzkaller1: entered allmulticast mode [ 479.817237][T20281] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 480.005183][T20297] netlink: 'syz.0.3752': attribute type 1 has an invalid length. [ 480.194049][T20302] bond4: (slave geneve2): making interface the new active one [ 480.206943][T20302] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 480.241187][ T81] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 480.267206][ T81] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 480.280796][T17469] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 480.321020][T17469] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 480.791541][T20334] netlink: 'syz.3.3765': attribute type 10 has an invalid length. [ 480.845944][T20344] netlink: 'syz.3.3765': attribute type 10 has an invalid length. [ 480.880451][T20334] team0: Port device dummy0 added [ 480.974337][T20344] team0: Port device dummy0 removed [ 481.001119][T20351] veth0: entered promiscuous mode [ 481.009367][T20351] veth0: left promiscuous mode [ 481.443279][T20389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.450592][T20389] IPv6: NLM_F_CREATE should be set when creating new route [ 481.457898][T20389] IPv6: NLM_F_CREATE should be set when creating new route [ 482.026822][T20407] syzkaller0: entered promiscuous mode [ 482.032541][T20407] syzkaller0: entered allmulticast mode [ 482.253518][T20428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.510789][T20442] Cannot find del_set index 0 as target [ 485.045347][T20455] __nla_validate_parse: 13 callbacks suppressed [ 485.045374][T20455] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3798'. [ 485.264595][T20477] netlink: 'syz.0.3805': attribute type 1 has an invalid length. [ 485.446445][T20488] netlink: 'syz.3.3809': attribute type 1 has an invalid length. [ 485.457703][T20490] netlink: 'syz.3.3809': attribute type 1 has an invalid length. [ 485.468687][T20482] bond5: (slave geneve3): making interface the new active one [ 485.487731][T20482] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 485.496586][T20486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3805'. [ 485.593064][T17196] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 485.605915][T17196] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 485.622409][T20486] 8021q: adding VLAN 0 to HW filter on device bond5 [ 485.651522][ T35] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 485.671611][ T35] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 485.801216][T20504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3811'. [ 485.820566][T20504] tipc: Invalid UDP bearer configuration [ 485.820625][T20504] tipc: Enabling of bearer rejected, failed to enable media [ 485.863981][T20499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.878694][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3811'. [ 485.890823][T20499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3811'. [ 486.472528][T17196] tipc: Subscription rejected, illegal request [ 486.516672][T20535] netlink: 'syz.0.3822': attribute type 1 has an invalid length. [ 486.570665][T20535] bond6: entered promiscuous mode [ 486.576471][T20535] 8021q: adding VLAN 0 to HW filter on device bond6 [ 486.592469][T20535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3822'. [ 486.610595][T20535] bond6: entered allmulticast mode [ 486.685027][T20535] bond6: (slave bridge1): making interface the new active one [ 486.743433][T20550] netlink: 'syz.1.3825': attribute type 1 has an invalid length. [ 486.743456][T20535] bridge1: entered promiscuous mode [ 486.743633][T20535] bridge1: entered allmulticast mode [ 486.766989][T20535] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 486.848396][T20544] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 486.899800][T20554] xt_hashlimit: size too large, truncated to 1048576 [ 486.938406][T20550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3825'. [ 486.968308][T20544] veth3: entered promiscuous mode [ 486.983777][T20544] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 487.000322][T17196] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 487.022335][T20550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.040813][T20560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3829'. [ 487.063457][T20560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3829'. [ 487.146407][ T965] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 487.445317][T20581] netlink: 'syz.4.3835': attribute type 49 has an invalid length. [ 487.453715][T20580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3836'. [ 490.443241][T20606] bond0: entered promiscuous mode [ 490.457223][T20606] bond_slave_0: entered promiscuous mode [ 490.470651][T20606] bond_slave_1: entered promiscuous mode [ 490.501111][T20606] team0: entered promiscuous mode [ 490.529399][T20606] team_slave_0: entered promiscuous mode [ 490.541943][T20606] team_slave_1: entered promiscuous mode [ 490.574186][T20620] netlink: 'syz.4.3845': attribute type 1 has an invalid length. [ 490.614840][T20606] batadv0: entered promiscuous mode [ 490.645497][T20606] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 490.670207][T20606] bond0: left promiscuous mode [ 490.682371][T20606] bond_slave_0: left promiscuous mode [ 490.695131][T20606] bond_slave_1: left promiscuous mode [ 490.709236][T20606] team0: left promiscuous mode [ 490.726656][T20606] team_slave_0: left promiscuous mode [ 490.743208][T20606] team_slave_1: left promiscuous mode [ 490.763069][T20606] batadv0: left promiscuous mode [ 490.827477][T20634] __nla_validate_parse: 1 callbacks suppressed [ 490.827497][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 490.848515][T20620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.896837][T20624] bond3: (slave veth0_to_bond): making interface the new active one [ 490.928038][T20624] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 491.129395][T20618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.154890][T20618] bond3: (slave bond4): Enslaving as an active interface with a down link [ 491.185266][T20650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'. [ 491.258395][T20650] team0: entered promiscuous mode [ 491.301957][T20650] team_slave_0: entered promiscuous mode [ 491.316592][T20650] team_slave_1: entered promiscuous mode [ 491.341564][T20650] team0: left promiscuous mode [ 491.355383][T20650] team_slave_0: left promiscuous mode [ 491.383194][T20650] team_slave_1: left promiscuous mode [ 491.440851][T20664] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 491.547434][T20662] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 491.598676][T20662] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 491.607974][T20675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3858'. [ 491.628813][T20662] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 491.969219][T20700] openvswitch: netlink: Message has 4 unknown bytes. [ 491.979163][T20702] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.985665][T20694] bond2: Removing last arp target with arp_interval on [ 492.039774][T20700] vlan0: entered allmulticast mode [ 492.045445][T20700] bond0: entered allmulticast mode [ 492.070001][T20705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3867'. [ 492.332919][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3871'. [ 492.367797][T20721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3871'. [ 492.823111][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 492.867578][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 492.877575][T20759] Cannot find add_set index 2 as target [ 492.908909][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 493.035202][T20765] bond7: option all_slaves_active: invalid value (222) [ 493.050795][T20765] bond7 (unregistering): Released all slaves [ 493.337343][ T30] audit: type=1804 audit(1782823170.094:16): pid=20772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3881" name="/newroot/98/cgroup.controllers" dev="tmpfs" ino=523 res=1 errno=0 [ 493.393783][ T30] audit: type=1800 audit(1782823170.094:17): pid=20772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3881" name="cgroup.controllers" dev="tmpfs" ino=523 res=0 errno=0 [ 493.497868][T20786] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 493.577365][T20786] syzkaller0: entered promiscuous mode [ 493.592931][T20786] syzkaller0: entered allmulticast mode [ 493.655781][T20786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3885'. [ 494.031137][T20816] ipt_REJECT: ECHOREPLY no longer supported. [ 494.215473][T20829] netlink: 'syz.0.3900': attribute type 32 has an invalid length. [ 494.350107][T20829] bond7: Setting coupled_control to off (0) [ 494.570845][T20856] netlink: 'syz.0.3905': attribute type 7 has an invalid length. [ 494.582398][T20856] netlink: 'syz.0.3905': attribute type 7 has an invalid length. [ 494.788652][T20865] veth1_macvtap: left promiscuous mode [ 495.079559][T20882] bond8: entered promiscuous mode [ 495.886484][T20946] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20003 [ 495.997574][T20952] __nla_validate_parse: 14 callbacks suppressed [ 495.997598][T20952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3931'. [ 496.040712][T20959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3932'. [ 496.110531][T20964] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3935'. [ 496.130748][T20964] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.218569][T20966] netlink: 'syz.0.3936': attribute type 1 has an invalid length. [ 496.250285][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3936'. [ 496.328458][T20976] netlink: 'syz.4.3939': attribute type 1 has an invalid length. [ 496.388762][T20980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3939'. [ 496.463360][T20976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 496.509575][T20980] bond5: entered promiscuous mode [ 496.628272][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3944'. [ 496.659274][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3946'. [ 496.681741][T20996] veth1_vlan: left promiscuous mode [ 496.689531][T20998] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 496.719232][T20996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3946'. [ 497.132591][T21022] netlink: 'syz.2.3955': attribute type 10 has an invalid length. [ 497.219492][T21022] team0: Port device dummy0 added [ 497.419176][T21037] bridge_slave_1: left allmulticast mode [ 497.427962][T21037] bridge_slave_1: left promiscuous mode [ 497.440448][T21037] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.562064][T21037] bridge_slave_0: left allmulticast mode [ 497.568855][T21037] bridge_slave_0: left promiscuous mode [ 497.579901][T21037] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.877337][T21064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3967'. [ 497.931590][T21069] netlink: 'syz.2.3969': attribute type 14 has an invalid length. [ 497.951491][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3969'. [ 498.033940][T13361] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.034037][T21069] netlink: 'syz.2.3969': attribute type 14 has an invalid length. [ 498.043391][T13361] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.069178][T21066] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 498.079650][T13361] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.108522][T13361] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.371658][T21087] SET target dimension over the limit! [ 498.383465][T21087] openvswitch: netlink: EtherType 0 is less than min 600 [ 498.863066][T21102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.864922][T21110] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 499.290346][T21138] netlink: 'syz.4.3985': attribute type 3 has an invalid length. [ 499.579085][T21143] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 499.984940][T21157] netlink: 'syz.1.3991': attribute type 2 has an invalid length. [ 500.066833][T21158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.208459][T21157] : entered promiscuous mode [ 500.541415][ T5737] IPVS: starting estimator thread 0... [ 500.666656][T21180] IPVS: using max 30 ests per chain, 72000 per kthread [ 500.694124][T21187] 8021q: VLANs not supported on wg0 [ 501.289231][T17469] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.321672][T17469] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.359294][T17469] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 501.378975][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.425387][T17469] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 501.429209][T21224] netlink: 'syz.3.4015': attribute type 2 has an invalid length. [ 501.469401][T21227] __nla_validate_parse: 9 callbacks suppressed [ 501.469418][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4014'. [ 501.550867][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4014'. [ 501.628163][T21224] bond2: entered promiscuous mode [ 501.648701][T21224] bond2: entered allmulticast mode [ 501.654766][T21224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 501.682526][T21227] syz_tun: entered allmulticast mode [ 501.937142][T21258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4027'. [ 502.004857][T21260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4027'. [ 502.035474][T21259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4027'. [ 502.058402][T21267] syz_tun: entered allmulticast mode [ 502.274634][T21272] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4030'. [ 502.288398][T21272] 8021q: VLANs not supported on sit0 [ 502.405128][T21279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4034'. [ 502.684734][T21297] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4036'. [ 502.779634][T21297] 0·: renamed from hsr0 (while UP) [ 502.830269][T21297] 0·: entered allmulticast mode [ 502.867314][T21297] hsr_slave_0: entered allmulticast mode [ 502.923053][T21297] hsr_slave_1: entered allmulticast mode [ 502.945176][T21297] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 503.053750][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 503.055240][T21312] netlink: zone id is out of range [ 503.153654][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4045'. [ 503.327115][T21326] netlink: 'syz.1.4048': attribute type 21 has an invalid length. [ 503.352942][T21326] netlink: 'syz.1.4048': attribute type 6 has an invalid length. [ 503.456308][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 503.697086][T21348] bridge0: port 4(syz_tun) entered blocking state [ 503.744572][T21348] bridge0: port 4(syz_tun) entered disabled state [ 503.765280][T21348] syz_tun: entered allmulticast mode [ 503.807379][T21348] syz_tun: entered promiscuous mode [ 503.911349][ T5737] IPVS: starting estimator thread 0... [ 503.920110][T21362] IPVS: dh: FWM 3 0x00000003 - no destination available [ 504.026439][T21363] IPVS: using max 31 ests per chain, 74400 per kthread [ 504.300067][T16905] block nbd3: Receive control failed (result -32) [ 504.737746][T21414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.348640][T21454] netlink: 'syz.2.4088': attribute type 21 has an invalid length. [ 505.374579][T21454] netlink: 'syz.2.4088': attribute type 5 has an invalid length. [ 505.403713][ T30] audit: type=1804 audit(1782823182.154:18): pid=21457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4086" name="/newroot/281/cgroup.controllers" dev="tmpfs" ino=1450 res=1 errno=0 [ 505.482244][ T30] audit: type=1800 audit(1782823182.154:19): pid=21457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4086" name="cgroup.controllers" dev="tmpfs" ino=1450 res=0 errno=0 [ 505.724418][T21474] vlan3: entered promiscuous mode [ 505.744813][T21474] bridge0: entered promiscuous mode [ 506.025170][T21500] SET target dimension over the limit! [ 506.607766][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880692c6000: rx timeout, send abort [ 506.709917][T21537] __nla_validate_parse: 13 callbacks suppressed [ 506.709936][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'. [ 507.107885][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880289b4c00: rx timeout, send abort [ 507.116308][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880692c6000: abort rx timeout. Force session deactivation [ 507.202935][T21571] IPv6: NLM_F_CREATE should be specified when creating new route [ 507.212604][T21571] IPVS: set_ctl: invalid protocol: 43 172.30.1.3:20002 [ 507.253663][T21576] tipc: Can't bind to reserved service type 0 [ 507.316835][T21576] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4113'. [ 507.373063][T21580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4114'. [ 507.553608][T21589] netlink: 'syz.1.4117': attribute type 1 has an invalid length. [ 507.575870][T21595] tunl0: entered promiscuous mode [ 507.588469][T21595] netlink: 'syz.2.4119': attribute type 4 has an invalid length. [ 507.603303][T21595] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4119'. [ 507.612644][T21589] netlink: 'syz.1.4117': attribute type 1 has an invalid length. [ 507.617358][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880289b4c00: abort rx timeout. Force session deactivation [ 507.682806][T21599] netlink: 'syz.2.4121': attribute type 1 has an invalid length. [ 507.691027][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4121'. [ 507.700870][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4121'. [ 507.751197][T21603] geneve2: entered promiscuous mode [ 507.847241][ T29] IPVS: starting estimator thread 0... [ 507.852892][T21605] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 507.863184][T21605] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 507.956321][T21606] IPVS: using max 32 ests per chain, 76800 per kthread [ 508.043716][T21619] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4127'. [ 508.053707][T21619] xt_policy: neither incoming nor outgoing policy selected [ 508.099689][T21618] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 508.414423][T21630] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 508.424447][T21630] bond3: option packets_per_slave: allowed values 0 - 65535 [ 508.442532][T21630] bond3 (unregistering): Released all slaves [ 509.691384][T21538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.055267][T21654] syzkaller1: entered promiscuous mode [ 510.089800][T21654] syzkaller1: entered allmulticast mode [ 510.149488][T21656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4136'. [ 510.262516][T21662] xt_hashlimit: size too large, truncated to 1048576 [ 510.402313][T21672] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4140'. [ 510.487750][T21677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4144'. [ 510.520508][T21677] netlink: 'syz.2.4144': attribute type 30 has an invalid length. [ 510.709455][T21692] netlink: 'syz.1.4148': attribute type 29 has an invalid length. [ 511.028049][T21702] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.037263][T21702] bond0: (slave bond3): Enslaving as an active interface with an up link [ 511.364833][T21737] netlink: 'syz.1.4160': attribute type 1 has an invalid length. [ 511.392675][T21737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 511.399995][T21737] IPv6: NLM_F_CREATE should be set when creating new route [ 511.407287][T21737] IPv6: NLM_F_CREATE should be set when creating new route [ 511.478971][T21742] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.549743][T21748] IPv6: NLM_F_CREATE should be specified when creating new route [ 511.892241][T21762] syzkaller0: entered promiscuous mode [ 511.912831][T21762] syzkaller0: entered allmulticast mode [ 512.003983][T21768] Bluetooth: MGMT ver 1.23 [ 512.033351][T21768] __nla_validate_parse: 2 callbacks suppressed [ 512.033368][T21768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4171'. [ 512.753799][T21804] netlink: 'syz.4.4181': attribute type 3 has an invalid length. [ 512.870074][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4184'. [ 512.874165][T21811] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 512.980864][T21816] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4185'. [ 513.132054][T21823] Bluetooth: MGMT ver 1.23 [ 513.170859][T21823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4188'. [ 513.210150][T21823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4188'. [ 513.232877][T21827] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.4189'. [ 513.289159][T21823] gretap1: entered promiscuous mode [ 513.302688][T21823] gretap1: entered allmulticast mode [ 513.312318][T21829] macvlan0: entered promiscuous mode [ 513.534408][T21847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4193'. [ 513.834642][T21865] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4198'. [ 513.867633][T21865] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4198'. [ 513.902900][T21869] batadv_slave_1: entered promiscuous mode [ 513.909290][T21870] netlink: 'syz.1.4198': attribute type 1 has an invalid length. [ 513.948821][T21866] batadv_slave_1: left promiscuous mode [ 513.970199][T21870] netlink: 'syz.1.4198': attribute type 1 has an invalid length. [ 514.004858][T21872] syzkaller0: entered promiscuous mode [ 514.015886][T21870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4198'. [ 514.025923][T21872] syzkaller0: entered allmulticast mode [ 514.273700][T21887] netlink: 'syz.1.4206': attribute type 1 has an invalid length. [ 514.612173][T21901] macvtap1: entered promiscuous mode [ 514.643500][T21901] macvtap1: entered allmulticast mode [ 514.650207][T21906] sctp: [Deprecated]: syz.4.4211 (pid 21906) Use of int in max_burst socket option. [ 514.650207][T21906] Use struct sctp_assoc_value instead [ 514.669707][T21901] veth1_vlan: entered allmulticast mode [ 514.732649][T21904] macvtap2: entered promiscuous mode [ 514.750456][T21904] macvtap2: entered allmulticast mode [ 514.951821][T21927] openvswitch: netlink: Missing valid actions attribute. [ 514.961709][T21927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.972334][T21927] veth1_to_bond: entered allmulticast mode [ 515.193885][T21938] netlink: 'syz.0.4220': attribute type 1 has an invalid length. [ 515.212220][T21940] syzkaller0: entered promiscuous mode [ 515.218154][T21940] syzkaller0: entered allmulticast mode [ 515.249786][T21938] 8021q: adding VLAN 0 to HW filter on device bond10 [ 515.263753][T21940] tipc: Started in network mode [ 515.269590][T21940] tipc: Node identity , cluster identity 4711 [ 515.276507][T21940] tipc: Failed to obtain node identity [ 515.282933][T21940] tipc: Enabling of bearer rejected, failed to enable media [ 515.309025][T21942] bond10: (slave gretap1): making interface the new active one [ 515.317969][T21942] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 515.467527][T21946] netlink: 'syz.2.4222': attribute type 1 has an invalid length. [ 515.499612][T21946] netlink: 'syz.2.4222': attribute type 1 has an invalid length. [ 515.508030][T21946] netlink: 'syz.2.4222': attribute type 1 has an invalid length. [ 515.536814][T21946] netlink: 'syz.2.4222': attribute type 1 has an invalid length. [ 515.780405][T21926] veth1_to_bond: left allmulticast mode [ 515.788282][T21967] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 516.162655][T21979] veth1_macvtap: left promiscuous mode [ 516.174304][T21979] macsec0: entered promiscuous mode [ 516.244080][T21988] debugfs: '1łą^!' already exists in 'ieee80211' [ 516.503887][T21999] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 516.953899][T22016] bridge0: entered allmulticast mode [ 517.138568][T22023] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 517.162817][T22023] bond2 (unregistering): Released all slaves [ 517.278740][T22035] __nla_validate_parse: 11 callbacks suppressed [ 517.278758][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4246'. [ 517.432768][T22028] syzkaller0: entered promiscuous mode [ 517.463652][T22028] syzkaller0: entered allmulticast mode [ 517.491503][T22035] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 517.521073][T22035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.531482][T22035] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4246'. [ 518.079389][T22057] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 518.818780][T16905] Bluetooth: hci1: command 0x0406 tx timeout [ 521.035059][T22081] netlink: 'syz.3.4256': attribute type 1 has an invalid length. [ 521.037971][T22080] netlink: 'syz.2.4253': attribute type 2 has an invalid length. [ 521.056377][T22079] netlink: 'syz.3.4256': attribute type 1 has an invalid length. [ 522.031272][T22123] syzkaller0: entered promiscuous mode [ 522.038186][T22122] xt_hashlimit: size too large, truncated to 1048576 [ 522.040283][T22123] syzkaller0: entered allmulticast mode [ 522.361387][T22134] pim6reg: entered allmulticast mode [ 522.429619][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4270'. [ 523.040761][T22164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4277'. [ 523.060168][T22168] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4278'. [ 523.480394][T22183] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4283'. [ 523.537271][T22183] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4283'. [ 523.584899][T22187] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 523.684233][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4283'. [ 523.708151][T22198] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4289'. [ 523.770351][T22189] "syz.1.4287" (22189) uses obsolete ecb(arc4) skcipher [ 523.800396][T22200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4289'. [ 524.174022][T22218] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4294'. [ 524.300193][T22227] netlink: 'syz.3.4296': attribute type 1 has an invalid length. [ 524.344939][T22225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4293'. [ 524.384627][T22227] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 524.637147][T22235] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 524.705507][T22243] bond11: entered promiscuous mode [ 524.730017][T22243] bridge4: entered promiscuous mode [ 524.754732][T22243] bond11: entered allmulticast mode [ 524.786472][T22243] bridge4: entered allmulticast mode [ 524.810393][T22243] 8021q: adding VLAN 0 to HW filter on device bond11 [ 525.089489][T22259] netlink: 'syz.3.4303': attribute type 1 has an invalid length. [ 525.134798][T22260] netlink: 'syz.3.4303': attribute type 1 has an invalid length. [ 525.233453][T22259] 8021q: adding VLAN 0 to HW filter on device bond5 [ 525.269619][T22255] lo speed is unknown, defaulting to 1000 [ 525.309767][T22263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 525.319434][T22263] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 525.340137][T22263] bond5: (slave gre1): Error -95 calling set_mac_address [ 525.502022][T22270] geneve3: entered promiscuous mode [ 525.735731][T22283] syzkaller0: entered promiscuous mode [ 525.741970][T22283] syzkaller0: entered allmulticast mode [ 527.136674][T22217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.627133][T22313] __nla_validate_parse: 5 callbacks suppressed [ 527.627151][T22313] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4318'. [ 527.722658][T22317] syzkaller1: entered promiscuous mode [ 527.756235][T22317] syzkaller1: entered allmulticast mode [ 527.970293][T22328] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 527.977564][T22329] openvswitch: netlink: Key type 112 is out of range max 32 [ 527.991745][T22328] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 528.371594][T22347] x_tables: duplicate underflow at hook 2 [ 528.600847][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4329'. [ 528.749887][T22362] tipc: Enabled bearer , priority 0 [ 528.763069][T22363] syzkaller0: entered promiscuous mode [ 528.777255][T22363] syzkaller0: entered allmulticast mode [ 528.802845][T22362] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 528.872647][T22362] tipc: Resetting bearer [ 528.922814][T22360] tipc: Resetting bearer [ 528.978947][T22360] tipc: Disabling bearer [ 529.272800][T22371] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4334'. [ 529.287375][T22373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4335'. [ 529.499633][T22379] Cannot find add_set index 0 as target [ 529.767047][T22390] syzkaller1: left promiscuous mode [ 529.790598][T22390] syzkaller1: left allmulticast mode [ 529.840997][T22390] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4340'. [ 529.944576][T22390] team0: Port device dummy0 removed [ 530.050200][T22403] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4345'. [ 530.057939][T22404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4345'. [ 530.185081][T22403] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 530.618188][T22423] bond6: entered promiscuous mode [ 530.669402][T22431] netlink: 'syz.1.4351': attribute type 1 has an invalid length. [ 530.680529][T22431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.681286][T22424] macvlan3: entered promiscuous mode [ 530.698300][T22424] macvlan3: entered allmulticast mode [ 530.708069][T22424] bond6: (slave macvlan3): Opening slave failed [ 530.818926][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 530.926101][T22438] C: renamed from lo [ 530.953204][T22438] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 531.233737][T22459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4359'. [ 531.283063][T22459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4359'. [ 531.564777][T22470] netlink: 'syz.1.4362': attribute type 1 has an invalid length. [ 531.580294][T22470] netlink: 'syz.1.4362': attribute type 2 has an invalid length. [ 531.598967][T22478] nbd: illegal input index -8454144 [ 531.791103][T22481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.799166][T22481] IPv6: NLM_F_CREATE should be set when creating new route [ 532.456882][T22504] lo speed is unknown, defaulting to 1000 [ 532.570969][T22522] netlink: 'syz.1.4377': attribute type 1 has an invalid length. [ 532.653591][T22512] netlink: 'syz.4.4373': attribute type 16 has an invalid length. [ 532.674075][T22522] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 532.698094][T22512] netlink: 'syz.4.4373': attribute type 17 has an invalid length. [ 532.761413][T22512] bridge0: port 4(syz_tun) entered blocking state [ 532.768060][T22512] bridge0: port 4(syz_tun) entered forwarding state [ 532.904899][T22512] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.912361][T22512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.961968][T22512] 0·: left allmulticast mode [ 532.969340][T22512] hsr_slave_0: left allmulticast mode [ 532.974832][T22512] hsr_slave_1: left allmulticast mode [ 532.986845][T22512] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 533.008242][T17197] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.015463][T17197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.030136][T17197] bridge0: port 3(veth1_to_bridge) entered blocking state [ 533.037453][T17197] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 533.045348][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1a:eb:10:42:85:37, vlan:0) [ 533.059490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.071934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.084451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.097014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.109517][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.122155][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.134635][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.147181][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.710485][T16905] Bluetooth: hci0: command 0x0405 tx timeout [ 537.995656][ C1] net_ratelimit: 16320 callbacks suppressed [ 537.995688][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.995938][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.002925][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.014129][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.014670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.028482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.038939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.039405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.039923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.053090][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.517839][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 543.005757][ C0] net_ratelimit: 16964 callbacks suppressed [ 543.005777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.005897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.012208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.012616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.025968][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.036628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.037070][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.037492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.051250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.061535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.015699][ C0] net_ratelimit: 16110 callbacks suppressed [ 548.015721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.015720][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.016579][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.022147][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.022605][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.036431][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.046527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.046971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.047415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.061368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.025840][ C0] net_ratelimit: 16327 callbacks suppressed [ 553.025860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.026112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.032222][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.032649][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.046577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.056880][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.057400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.057819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.071977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.081916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 554.015568][ C0] sched: DL replenish lagged too much [ 558.035539][ C0] net_ratelimit: 17170 callbacks suppressed [ 558.035561][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.035824][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.042012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.042589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.056212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.066476][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.066934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.067354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.081014][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.091449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.012080][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.046111][ C1] net_ratelimit: 17396 callbacks suppressed [ 563.046143][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.046301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.053424][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.065817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.079308][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.089978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.090835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.103944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.115311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.116191][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.055562][ C0] net_ratelimit: 12216 callbacks suppressed [ 568.055583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.055658][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.062452][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.076049][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.086928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.087795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.100860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.111732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.112541][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.125718][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.068447][ C0] net_ratelimit: 12515 callbacks suppressed [ 573.068468][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.068472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.069227][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.075957][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.089168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.100015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.100844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.114235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.125066][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.125906][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.075976][ C1] net_ratelimit: 12579 callbacks suppressed [ 578.076016][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.076294][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.083007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.094804][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.095688][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.108959][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.119769][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.120567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.133854][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.144729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.085630][ C1] net_ratelimit: 12590 callbacks suppressed [ 583.085630][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.085659][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.092440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.106166][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.116899][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.117690][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.130959][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.141850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.143260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.155895][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.095650][ C0] net_ratelimit: 11927 callbacks suppressed [ 588.095670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.095802][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.102454][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.115929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.127078][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.127890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.141254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.152063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.152862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.166209][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.105757][ C1] net_ratelimit: 12183 callbacks suppressed [ 593.105790][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.105891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.112970][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.124528][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.125436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.138624][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.149421][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.150204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.163333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.174271][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.115712][ C1] net_ratelimit: 12531 callbacks suppressed [ 598.115757][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.116254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.123003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.134570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.135374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.148757][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.159526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.160364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.173535][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.184420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.125591][ C1] net_ratelimit: 12587 callbacks suppressed [ 603.125624][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.126051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.132860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.144391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.145200][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.158611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.170500][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.183561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.194427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.195242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.135780][ C0] net_ratelimit: 12415 callbacks suppressed [ 608.135801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.136099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.142594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.155947][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.167137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.167993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.181198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.192075][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.192891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.205782][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.145698][ C1] net_ratelimit: 12560 callbacks suppressed [ 613.145731][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.145825][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.153003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.164516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.165326][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.178656][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.190083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.203635][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.214372][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.215237][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.155847][ C1] net_ratelimit: 12571 callbacks suppressed [ 618.155881][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.156081][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.163310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.174621][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.175477][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.188837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.199598][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.200407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.213528][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.224662][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.166162][ C0] net_ratelimit: 11831 callbacks suppressed [ 623.166182][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.166210][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.172995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.186547][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.197541][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.198445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.211991][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.222668][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.223516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.236500][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.972505][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.175690][ C1] net_ratelimit: 12355 callbacks suppressed [ 628.175733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.175805][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.182979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.194498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.195317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.208581][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.219467][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.220272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.233155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.245082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.185673][ C0] net_ratelimit: 11972 callbacks suppressed [ 633.185694][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.185897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.192474][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.206035][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.216984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.217801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.231462][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.242089][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.242875][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.255944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.195609][ C1] net_ratelimit: 11960 callbacks suppressed [ 638.195642][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.195931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.202750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.214420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.215276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.228632][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.239711][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.240625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.254050][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.264782][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.205575][ C0] net_ratelimit: 11223 callbacks suppressed [ 643.205596][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.206088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.212387][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.226075][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.236974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.237787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.250811][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.261735][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.262529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.275632][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.615496][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 647.622470][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22528/1:b..l [ 647.631006][ C0] rcu: (detected by 0, t=10503 jiffies, g=106085, q=1627 ncpus=2) [ 647.638957][ C0] task:syz.2.4379 state:R running task stack:25640 pid:22528 tgid:22528 ppid:16904 task_flags:0x400040 flags:0x00080002 [ 647.653832][ C0] Call Trace: [ 647.657136][ C0] [ 647.660090][ C0] __schedule+0x17d9/0x56c0 [ 647.664629][ C0] ? __lock_acquire+0x683/0x2cf0 [ 647.669591][ C0] ? __lock_acquire+0x683/0x2cf0 [ 647.674547][ C0] ? __pfx___schedule+0x10/0x10 [ 647.679442][ C0] preempt_schedule_irq+0x4d/0xa0 [ 647.684500][ C0] irqentry_exit+0x14f/0x8f0 [ 647.689112][ C0] ? trace_irq_disable+0x3b/0x140 [ 647.694164][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 647.700160][ C0] RIP: 0010:__local_bh_enable_ip+0xd8/0x130 [ 647.706077][ C0] Code: 8b e8 6c e4 2b 0a 65 66 8b 05 7c b1 b7 11 66 85 c0 75 32 bf 01 00 00 00 e8 85 f0 0b 00 e8 e0 be 46 00 fb 65 8b 05 58 b1 b7 11 <85> c0 75 05 e8 1f 80 ab ff 5b 41 5e c3 cc cc cc cc cc 90 0f 0b 90 [ 647.725692][ C0] RSP: 0018:ffffc90004c87ad0 EFLAGS: 00000206 [ 647.731773][ C0] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000046 [ 647.739751][ C0] RDX: 0000000000000007 RSI: ffffffff8dfe026e RDI: ffffffff8c2a9f80 [ 647.747738][ C0] RBP: ffff888069400ee0 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 647.755718][ C0] R10: dffffc0000000000 R11: fffffbfff2065a5f R12: 1ffff92000990f99 [ 647.763703][ C0] R13: ffff888054e10e10 R14: ffffffff8b0b2adb R15: 0000000000000000 [ 647.771694][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 647.777291][ C0] nl80211_netlink_notify+0x46b/0x840 [ 647.782686][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 647.788175][ C0] notifier_call_chain+0x1a5/0x3d0 [ 647.793311][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 647.799060][ C0] netlink_release+0x11f8/0x1a80 [ 647.804023][ C0] ? netlink_release+0x106/0x1a80 [ 647.809065][ C0] ? __pfx_netlink_release+0x10/0x10 [ 647.814375][ C0] ? down_write+0x16d/0x200 [ 647.818898][ C0] ? __pfx_down_write+0x10/0x10 [ 647.823782][ C0] sock_close+0xad/0x220 [ 647.828047][ C0] ? __pfx_sock_close+0x10/0x10 [ 647.832920][ C0] __fput+0x418/0xa50 [ 647.836920][ C0] task_work_run+0x1d9/0x270 [ 647.841621][ C0] ? __pfx_task_work_run+0x10/0x10 [ 647.846777][ C0] exit_to_user_mode_loop+0x1fa/0x730 [ 647.852178][ C0] ? rcu_is_watching+0x15/0xb0 [ 647.857929][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.864020][ C0] do_syscall_64+0x353/0x580 [ 647.868639][ C0] ? clear_bhb_loop+0x40/0x90 [ 647.873349][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.879264][ C0] RIP: 0033:0x7f2a9019ce59 [ 647.883709][ C0] RSP: 002b:00007fffe32fa5f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 647.892321][ C0] RAX: 0000000000000000 RBX: 00007f2a90417da0 RCX: 00007f2a9019ce59 [ 647.900321][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 647.908323][ C0] RBP: 00007f2a90417da0 R08: 0000000000000006 R09: 0000000000000000 [ 647.916322][ C0] R10: 00007f2a90417cb0 R11: 0000000000000246 R12: 000000000008241b [ 647.924319][ C0] R13: 00007f2a9041609c R14: 000000000008221a R15: 00007f2a90416090 [ 647.932324][ C0] [ 647.935352][ C0] rcu: rcu_preempt kthread starved for 1762 jiffies! g106085 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 647.946639][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 647.956615][ C0] rcu: RCU grace-period kthread stack dump: [ 647.962509][ C0] task:rcu_preempt state:R running task stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 647.976019][ C0] Call Trace: [ 647.979306][ C0] [ 647.982246][ C0] __schedule+0x17d9/0x56c0 [ 647.986768][ C0] ? __lock_acquire+0x683/0x2cf0 [ 647.991737][ C0] ? __pfx___schedule+0x10/0x10 [ 647.996607][ C0] ? schedule+0x90/0x2b0 [ 648.000875][ C0] schedule+0x164/0x2b0 [ 648.005049][ C0] schedule_timeout+0x152/0x2c0 [ 648.009913][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 648.015310][ C0] ? __pfx_process_timeout+0x10/0x10 [ 648.020638][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 648.026558][ C0] ? prepare_to_swait_event+0x322/0x350 [ 648.032141][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 648.037031][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 648.043213][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 648.048525][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 648.053766][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 648.059603][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 648.064212][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 648.069430][ C0] ? __kthread_parkme+0x71/0x1f0 [ 648.074388][ C0] ? __kthread_parkme+0x196/0x1f0 [ 648.079444][ C0] kthread+0x388/0x470 [ 648.083615][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 648.088829][ C0] ? __pfx_kthread+0x10/0x10 [ 648.093432][ C0] ret_from_fork+0x514/0xb70 [ 648.098037][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 648.103166][ C0] ? __switch_to+0xc89/0x1420 [ 648.107866][ C0] ? __pfx_kthread+0x10/0x10 [ 648.112472][ C0] ret_from_fork_asm+0x1a/0x30 [ 648.117271][ C0] [ 648.120293][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 648.126625][ C0] Sending NMI from CPU 0 to CPUs 1: [ 648.131848][ C1] NMI backtrace for cpu 1 [ 648.131863][ C1] CPU: 1 UID: 0 PID: 21180 Comm: ipvs-e:14:0 Not tainted syzkaller #0 PREEMPT(full) [ 648.131882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 648.131898][ C1] RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20 [ 648.131923][ C1] Code: b6 99 b3 0a e9 81 06 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 31 05 00 00 48 89 c4 48 89 e7 e8 c6 98 b3 0a e9 61 06 00 00 90 0f 1e fa 0f 01 ca fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 [ 648.131937][ C1] RSP: 0018:ffffc90000a08248 EFLAGS: 00000056 [ 648.131951][ C1] RAX: ffffffff8a604f01 RBX: 0000000000000000 RCX: ffffffff8a60500a [ 648.131963][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9032d2f0 [ 648.131974][ C1] RBP: ffffc90000a08450 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 648.131986][ C1] R10: dffffc0000000000 R11: fffffbfff2065a5f R12: 0000000000000001 [ 648.131997][ C1] R13: ffff88807c540e58 R14: fffffbfff2065a5f R15: 1ffffffff2065a5e [ 648.132010][ C1] FS: 0000000000000000(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 648.132023][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.132034][ C1] CR2: 00007f2c2be160a0 CR3: 000000007f938000 CR4: 00000000003526f0 [ 648.132048][ C1] Call Trace: [ 648.132054][ C1] [ 648.132059][ C1] RIP: 0010:kasan_check_range+0x1c8/0x2c0 [ 648.132078][ C1] Code: 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 0f 85 a1 00 [ 648.132091][ C1] RSP: 0018:ffffc90000a08278 EFLAGS: 00000256 [ 648.132107][ C1] trace_fib6_table_lookup+0x5a/0x1f0 [ 648.132130][ C1] fib6_table_lookup+0xa8f/0xae0 [ 648.132159][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 648.132183][ C1] ip6_pol_route+0x229/0x14d0 [ 648.132200][ C1] ? ip6_pol_route+0x163/0x14d0 [ 648.132220][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 648.132240][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 648.132261][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 648.132281][ C1] fib6_rule_action+0x9d7/0xc00 [ 648.132300][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 648.132317][ C1] ? lock_acquire+0x106/0x350 [ 648.132333][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 648.132354][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 648.132377][ C1] ? fib6_rule_match+0x799/0xa80 [ 648.132394][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 648.132412][ C1] fib_rules_lookup+0x770/0xeb0 [ 648.132432][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 648.132453][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 648.132471][ C1] ? l3mdev_update_flow+0x26/0x610 [ 648.132489][ C1] ? l3mdev_update_flow+0x4ad/0x610 [ 648.132507][ C1] fib6_rule_lookup+0x1a0/0x730 [ 648.132524][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 648.132543][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 648.132562][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 648.132583][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 648.132606][ C1] ip6_route_input+0x78d/0xb20 [ 648.132628][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 648.132652][ C1] ? nf_nat_ipv6_in+0x200/0x2c0 [ 648.132672][ C1] ? lock_acquire+0x106/0x350 [ 648.132690][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 648.132715][ C1] ip6_rcv_finish+0x141/0x280 [ 648.132740][ C1] NF_HOOK+0x336/0x3c0 [ 648.132763][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 648.132785][ C1] ? NF_HOOK+0x9e/0x3c0 [ 648.132806][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 648.132830][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 648.132859][ C1] process_backlog+0x774/0x1860 [ 648.132890][ C1] ? process_backlog+0x3c3/0x1860 [ 648.132920][ C1] __napi_poll+0xaa/0x330 [ 648.132942][ C1] net_rx_action+0x61d/0xf50 [ 648.132972][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 648.132993][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 648.133025][ C1] ? net_tx_action+0xbff/0xc30 [ 648.133050][ C1] handle_softirqs+0x225/0x840 [ 648.133075][ C1] ? __irq_exit_rcu+0xca/0x220 [ 648.133100][ C1] __irq_exit_rcu+0xca/0x220 [ 648.133123][ C1] irq_exit_rcu+0x9/0x30 [ 648.133144][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 648.133167][ C1] [ 648.133172][ C1] [ 648.133178][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 648.133195][ C1] RIP: 0010:schedule+0x0/0x2b0 [ 648.133216][ C1] Code: 06 20 7f f6 4d 89 37 48 8b 44 24 30 4c 89 38 e9 ff e8 ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 49 bd 00 00 00 00 00 fc [ 648.133230][ C1] RSP: 0018:ffffc9000330fa78 EFLAGS: 00000286 [ 648.133243][ C1] RAX: 0000000000000000 RBX: 0000000100008753 RCX: 0000000000000000 [ 648.133253][ C1] RDX: 0000000000000000 RSI: ffffffff8dfe026e RDI: 00000000ffffffff [ 648.133265][ C1] RBP: ffffc9000330fb70 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 648.133277][ C1] R10: dffffc0000000000 R11: fffffbfff2065a5f R12: 1ffff92000661f50 [ 648.133289][ C1] R13: ffffc9000330faa0 R14: 1ffffffff1cc1e50 R15: dffffc0000000000 [ 648.133310][ C1] schedule_timeout+0x152/0x2c0 [ 648.133329][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 648.133349][ C1] ? __pfx_process_timeout+0x10/0x10 [ 648.133380][ C1] ip_vs_estimation_kthread+0x29a6/0x38f0 [ 648.133402][ C1] ? ip_vs_estimation_kthread+0x27f1/0x38f0 [ 648.133439][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 648.133467][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 648.133489][ C1] ? __kthread_parkme+0x71/0x1f0 [ 648.133513][ C1] ? __kthread_parkme+0x196/0x1f0 [ 648.133540][ C1] kthread+0x388/0x470 [ 648.133556][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 648.133576][ C1] ? __pfx_kthread+0x10/0x10 [ 648.133594][ C1] ret_from_fork+0x514/0xb70 [ 648.133612][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 648.133629][ C1] ? __switch_to+0xc89/0x1420 [ 648.133654][ C1] ? __pfx_kthread+0x10/0x10 [ 648.133671][ C1] ret_from_fork_asm+0x1a/0x30 [ 648.133699][ C1] [ 648.215691][ C1] net_ratelimit: 11260 callbacks suppressed [ 648.215719][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.222851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.232268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.240519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.248572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.255943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.260096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.262732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.269097][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.288345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.225952][ C0] net_ratelimit: 10798 callbacks suppressed [ 653.225972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.226183][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.232729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.246366][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.257522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.258367][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.272009][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.282637][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.283481][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.296647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)