last executing test programs: 39.949772068s ago: executing program 0 (id=6876): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0xa, 0x3, 0x87) r5 = socket(0xa, 0x3, 0x87) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@local, 0x40, r7}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a3f00c8", @ANYRES32=r7, @ANYBLOB="0800c90800a2070000141d0200fe5823c4800000000000000000000000fe8ed96dbb15c3bc7b911e10af28b5284ff9ea091a62d4aaf0b1dc066cf00c93573f94f6dbd4e4542ec88079ed17108df664fe00"/93], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) r8 = socket$inet6(0xa, 0x805, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fcdbdf2501000000050004000200000067c2b0321347e2ab99423cf6ebf2e0e8163b6f47b52a3d58ef09acb0322e7e0fd0c4c79bcc84ed90459d7c6749f09884d208412affbdd069adc9584bd82cb21196c12d3223b1758583d6fb5b473d2363de48a372708555df325b12f190ca70684d76953d14ec1703ca14e0b2804394a2bba633d75f817633ad6f8234ece07ed74b2278d6790bd47028650332fa97144fe809e27c4f1ad764f23d906eedc53829a12c9d1007cda435570d9f4751dd36f708139b43d2d19d62"], 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r15, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x30, r15, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={r13, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001180)=@nat={'nat\x00', 0x1b, 0x5, 0x588, 0x368, 0x0, 0xffffffff, 0x158, 0x0, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, &(0x7f0000001100), {[{{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x7, 0x2, 0x0, [0x5, 0xfffd, 0x1, 0x81, 0xfff, 0x7, 0x101, 0x200, 0x866c, 0x5, 0xc9, 0xff, 0x1, 0xba13, 0x9, 0x4], 0x8}}, @common=@inet=@set1={{0x28}, {{0x0, 0x6, 0x7}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x7, "99e959c6d1da17e2ea85cf3470502634b3cbd43e6a7775122eaaf5d6a20e"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x90}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5, @ipv4=@empty, @ipv4=@dev={0xac, 0x14, 0x14, 0x3}, @icmp_id=0x66, @icmp_id=0x64}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffffff, 0x48192e2861dded1b], [0xffffffff, 0xffffffff, 0xffffff00, 0x7fffff80], 'pim6reg1\x00', 'wg0\x00', {}, {}, 0x2e, 0x8, 0x4, 0x5e}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'@\\'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@random="1633b90fcfb5", 0x1}}, @common=@ah={{0x30}, {[0x4d3, 0x4d4], 0x5, 0x6, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x9, @ipv4=@empty, @ipv6=@local, @port=0x4e22, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) getsockopt$bt_hci(r8, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES32=r1, @ANYRESOCT, @ANYRES8=0x0, @ANYRES16, @ANYBLOB="710753e203dfd208efc31f586b329b0e8936f69365cf9a713d3d878d39296052b4e9a408028e30a432885756449a5a8187387d08f8453b4f12b475"], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040) 39.455783756s ago: executing program 3 (id=6881): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000180003000000000000000000000000e4feff000002"], 0xf8}, 0x1, 0x0, 0x0, 0x240008d0}, 0x0) 39.2098758s ago: executing program 3 (id=6882): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0xff00000000000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 39.089467378s ago: executing program 0 (id=6883): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='.b\x00', 0x80, &(0x7f0000000040)={@align=0x3, {0x401, 0x5, 0x0, 0x2}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)}, {[0x7, 0x9, 0x6, 0x1000]}, 0x2, 0x7f, &(0x7f0000000100)=""/127}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x4, 0x6, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x80, 0x7, 0xc}}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x4}, {0x8, 0xb}, {0x9, 0x9}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004810}, 0x44f7d93f7dd2ddc5) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0x30, "0f6700e88fd4f97fd600605248ef89da50d4ce212ee68558e09dc3647f4bc75522940a8a9717cf8176f81f3045a37dac"}, &(0x7f0000000400)=0x38) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000440)={r2, 0x1, 0x322181ecf424f259}, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000480)={{0x3a, @multicast1, 0x4e24, 0x2, 'wrr\x00', 0x1, 0xfffffffe, 0x2d}, {@empty, 0x4e20, 0x3, 0x7fff, 0x1, 0xfa}}, 0x44) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r2, 0x4) (async) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x1, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)="ae8ed3f5cf6945cfbbb02dc0853c498cf090ce49999df1e856c7c3e1d3f17cc5f39d00294d", 0x25}, {&(0x7f0000000600)="1ae60aefdcf474", 0x7}], 0x2}, 0x4000010) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000006c0)={r2, 0x8b49, 0x69}, 0x8) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000700)={0x0, 0x7, 0xd6, 0x19, 0x5, 0x14, 0x5a, 0xf7, 0x0, 0xc, 0x0, 0x6, 0x9, 0x3}, 0xe) (async) sendmmsg(r3, &(0x7f0000002580)=[{{&(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, &(0x7f0000000800)=[{&(0x7f00000007c0)="13ac4ac43582c239ac3969d04a9e82ae87844494ee5052f48f", 0x19}], 0x1, &(0x7f0000000840)=[{0x40, 0x10a, 0xfffffffe, "8d14dff44be875ab5e7a82789c89704b59baf72f0b05d5267c6993873c98ca984be0d21bf52167480e4c4e"}, {0x60, 0x103, 0x4, "4221edea079ef295a3be72c68193ef4b0ae76dec9d3bba1071708cedfdb51af5889c0717c9406b87d62a9b0336377eb7b6453f30c6794f63da896d6c34c3467aafcde49351c5c5ec300cebb653f876"}], 0xa0}}, {{&(0x7f0000000900)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)="f1a32310824d53dfc5773d26dbf34d9365241b6aec6931b38a2552b076f9e3c8aa7cb0c0868879ec5efc08e5db514ba58042b1e4f70f39c200dc5c91dd6c46a3ab5628b7476cb42dd17aa5edc7b0d25a20001f6cd6c9f97d337793a66f2b2c460885e545df1b649b15be6ad4e865c89d1795c6afc3ba33cc66cd4dc16cbcdd41ee3dc5aacfa27bf290045f4a7dcff8d884c5749e41b53abbffb539f1e80d9b79f9329ee19dfadc8d3450c22115a39c44f0db1bff1a4f782ccca3005176aaf6087d111cf24ab21974d5f18ff18937d8faf0108083bb33763d78cf3f7ca594e0d2f2e7ac78", 0xe4}], 0x1, &(0x7f0000000ac0)=[{0x20, 0x11, 0xb, "5b82be60584463c515"}, {0x70, 0x3a, 0x7fff, "3f7689f94f60fdc07abcefde594f7dc380cc21ed450998221181b58741476266fb2fa613c83cd127e94a6ce6816bea4299a8a36f1ba56f91eda8e52bb603862d4eea1e59fdee646af0bb7923c238a7521b2387780d74909f95"}, {0x30, 0x10e, 0x92e, "062681d1ec3e7a28fcb30a5678880b5ffa52973ed03bd964641ca3efbe7acd"}, {0x80, 0x29, 0x81, "27c6008a0c1588d5e4a86b785bc9e605c3eabcb322bad5e3c97d3c634c8261d2c93f13740932e92ea650d6ffc351374a8076747c04bed6fdc8f9919da92c9cec717aff3ce2f1d029fc1555a9389c09c4b4680a15f174b3eee70913c049ced76fb1591273a298fe90dacd2b486c"}, {0x108, 0x14, 0x1, "701350e7f9853c5eb2db70458be57119be2f08a24c894840cfa0c837fac7720edcb55e0a2f803470946e64fa39ca15bdb00785d8af5ad2f96708bd7348ebfcdd1c52ea3c603ef8d3550d13cbfc7016176cca5949626b5b07f6c4b158158c4ff116ee00005afbd5e8b0a3319172c6f3155bb0133b54da56047b954923c74a122765f9ff809ce6132867c104f0cf811c80a30513158db05d673689f4517e3571d8fd5e986a5ae8e068c25ac90f5c58c7e7971f3c9e28783ca7497ef4551491328fb8059742e3305a45ad13c373c934189bbca14cbcf8ce35bb76969d9b570ae4f39cbffea65018b16b6de58dc8a60e9dd7032832d36f"}, {0xd8, 0x10b, 0x4, "9993a24b2b7d2f7d4dfd09c9ac33194607cb61a34170305e374ec25bf400bf5cae918e6f8547e0691b32b74d40727c502ec6e6d20b7e56de89fc1f78bf7cf82b6d0213cd9b56adc0906746887d1aa020561c93dbe38bc03bb94d12fcf2254beeda9838ec478e6b037d18777a399a5defb5ec469413c897ccfdd1fb0f1813deb036ae03538257f94ae8f2237a74dacbd140755017597d8a4b7e19223a27b307296f9bc68c8b220240fcfd23b2176fbdc13b864d439a5c79ef07ea9446078985557b"}], 0x320}}, {{&(0x7f0000000e00)=@ax25={{0x3, @bcast, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e80)="09e4674c4704e4be905b3e0914b3d3cbf960aabb5a73d2864f3763ca2cf390ffa9cc67454778e8f9142f2983d8abccf9e41318c0a882ee534ac6035b49dc46e2f43cdca37e53222f604bd8b19d395c667345f6799a38551c0a1ac06000bc4a279e7740e57f21efdd1ad6eda308e9bf2ab8dc1a51239a2db93d212ff0a9ad95906a6c7ad569c81eee94be5788d79664ad0aa0da39d0d6acd31ee1af75000c6bcc6a4b51", 0xa3}], 0x1}}, {{&(0x7f0000000f80)=@qipcrtr={0x2a, 0x1, 0x1}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)="dd2a", 0x2}, {&(0x7f0000001040)="b097c260d7a8ee935f8c7797765da18b2cee3698ca1f9539f50feef77d0a36c1ae7cc7a4beaed829864d9d9532629faa1c26b9ce7d9ab02b042aeca0018cee2488ac157a419f5b48322760f82392538624d66959f79ca9a91cf9f5fca46c1a4784acbd3e868bd12992ca04a33bdb95e11846c023f3da281fe66b8fbe8420317709853e140b3b84ff7b56fcf102c79b670d3acc8f6278038440f9d472b30f98c5fee630bc812cf82571ec47914ba3c30297e3676f9e934d4fd14aaf9b8f0778b6c6afd51eca8352cc04089881a1e72bc306cd630aefb561f10eaeeb06c8ff6db0f0b258473444f53b7925221939f1de8b", 0xf0}, {&(0x7f0000001140)="f2513b31b23d57cf1b72870481e3f672420d969d750bd032b09dba5af8792eb163", 0x21}, {&(0x7f0000001180)="816f431838d32fabb3881e138287a4b7ce263c9d5afbfa22ae3be7162494749b1ebe9a1634622f349bba3439977fb349b47e8681e6eae97e129efc86e04c8215ac5f8ca5ea43a1ab75c14c8a718366387035a81bf73da0693efa9c1b7b00c1111e6d2d277e9242c6292820d045786fcc16b7ac161631135fbac639b4b60a5a6e2cc38d6565ddc8e88101e515e8960582e7ec8d40d956719ff30408fae3904d2658cf2c47ba63d2f2fa66610f5b009d3d1ab717922884881ca8e0498880ebc46766e5c4b01b", 0xc5}, {&(0x7f0000001280)="f2c661164050d2a99eceb12c3f28f860b989a25091a39ab73b31f3c05a6e56fbf94ccc22de3d78daa9f323d6f10a4fa1da6e", 0x32}, {&(0x7f00000012c0)="01384f7a8f5df3cddd57f77b286ad75ff9109832fc44ade156c1c3690b10f6a9e734ae58a95f0c7407ce18045db0e8239061dfe76f832e143cc39a6a9003166232e0f27d908164abd99cda2fa9615c5d893a157539d7231b47e52dd7", 0x5c}], 0x6, &(0x7f00000013c0)=[{0x28, 0x3a, 0x8bf, "bac141da2ad8eb986b0ac359e032ede24fe1ef4de0299a"}, {0x1010, 0x101, 0x1ff, "f65565a3a153238689f7304e0d586b3f0c8440ae9ee0e189e44571b924a0c246806f6177b822d3d08296f8b30b412684033528bc238646d61649b600262d1e5d94bb70c3e3bce2b5b3e20a5c3f2c93f178b95357ea97a223e04ec1bd5fa0ba5ed2be9cbf292878840bfe315993dcb43cc0718bc8abf3a3bf66f98306688a43a5c9df5305538228de94b5091afd488b74c7155a02a6e0e84a76e1c472b41c64582aeedc70287ecb794666e55a84257fa2395fc2131d3f3f9fa19b41447d60024524f9d055fe4dc33101663394545d5bc4dd8a4ebc84b8520ff74bf398b5f6767a6cf948e7c7691d7f9a9324229dffd1e6d64ec5f6a932823f258914cea71689786e0129dd1957c28b37002132d6e4ecbc00786b12022df90dc92aa3a50f5ae2dcc272bdb0e446fcd9c685afafb3c0bc3d4642817fe4e54a5163c45c22db2c116bfd72023e74d09c5d072aa870c660e2d467ef2a9c86702247937bcb8b5e24417c887e3b3b4377d77c7a52eeb5c2679a9eee1fe5f48f556f33e8def12cbff5eb0f3c5eafa57fc386cb43ee162be6b213c4918d47baeb1832434d89e7fbe15f5fccc59abef8d0570d27736e427dfc566df6fcc5a618a21b3e26e79d62dfa651475ddfb2396b07411630aaf13d1bb3045f5e475d484ae55b41910f595dafbdbe35babdee2381b9c9663366b80f5ca4c6ed2061a1a8a0902676918669ac287f4de8f577372dad652d60967ce9247e5eab2decab4ff3a66d9abb6e64d3db51db374149463b8ee04bd9511555ae577a09073f376cdb12ea3008e695da3ae7c76a750296671f2d19ebeea9a43296b23e71bc1c5f4b260dd27f191cb30027628fd6a214d82acd92cbf0a9f7ab3fc3cad8e4c9644e01c82dd91c2501bcc2ec0b125584ad1b0e50969d176226f1c9e191fd6ee67aef45641bd32cc6999c14faee3c59050fa78001502a76cdcee52658e527277451d88519f2a98f737bee76352ba11db6b43fb59884cf401ba04a2519f7f5bb5b8d08cf6a7be55faa007c292df7a5a5f6a9283e9b629ccc0e3ad54718735bf84933fdcf17f1c962a113dc152a2bc379081e180e3e11d11e5ca0bdf86cc3304dffef22543a4b4aeca5cd0132bd2da2df61f151e57ca4f1f431cbbdd498682fae36fc1ed495f812999de8486048470d718082ab31b5c2d9544e888028ff5c84c73c5cd8e42d15d74c6e2ece2d46645954fa358a607403262a41a453b421593874c35f145195df95f9eab7c0d5e269da32c6a526c0be79112018fec742719bbfd311c2f45e8fd07a8361b489b625036d2a7f51776147a390a3c923a1c7bc6ab59c3cda7797ab9ed69b98156161f1e4434c69f0d956c055352067f0f64064eaee08b855a35f9a8d1325af4e88281745b7eba76ac9677f10faa8e575446b3f59de57b9bb3ab586554db5ff52885f2e1354bb5815f9978e10c22170c9874a57a82719e6ff1bddb456b3ec5d82885b5a4b6a81955dcfd58ea5528b03d577f26fd9e0a63ec038af2ec7894d36c2db16314825eee4f1b90df816b1dbffd04f016fa5ecd35ea0e34cda555300cadf0ee9d427dcd2af32d40f12da7b04ad04abb752c5c20581e6e1d9531b71c0e6af082790723570b50da550e0762a6e4aff0d6f2d5d72e272fe1202d3a8a91a06aed80229380634d5a829138ba9bb692c05e61f6863752a46df9d9e6f1a22a9bf7c23c8294c4157b114054529768f80934354252bcac80db0b7f1a1839a715b2124b3e24b764072b6d463f4f638a4764ba1176aba14b39d6596b02e82523cc042828a3e5a7cb2e467613c3c06b1cc1b84e578e044553bc90c309a138a379f369c5e40bc76f8c6dece26b4b3618397ce8ca7a8a1525006c50e9d2d39507305fc8c7fffa5ea147fd75067ffd411cb9498870b09f38a8c406e22e1c1d1fec17953efdbe6792d331ff5f276ae215eab74afa187d87aad0575dcc1d2870e5a5dc720d2ae3668e5f4a424f7d3cc5d7e4510a38ca484a18fbf216c6cd4e23a48f20fc857935f56b73acff2641e30c7c5adfcf7a287d6d75faeff4391ad8c562962f52998fb332d83c2b7705fd03f12a19545644e1331452261c105b6c6669b24be7079385319378e05fd8fb3d778b01a95bb8a59e966247e0b495134ab32f2c470bc062bd5573c6e273e33efddf8f7d113f506e4e34947a90f19efbedef8e7dbdd4d6430e5466ac588a2a4bae6875b68c0580726939ea4a664007f3372854e4175a8461c15d0bfe7093bad30d804ac4a4a1cea72d0ea3efec86b38938b1c85295f8093ea106a3807df4898841b7950e1c0e2e91d77263d22554d05f40d5462781198d13229e232c518870b3991a715b3ade8cbf649a1a542c69be3e53082fb240792476567bab5e9b5ae055d26e1da51face0e99a695cffca40e2e92476a0a1d18adc7d7b071abff3c80af7665bc9f31a567a22e43b385f346c7395741aa932e13562b14563ac1b857d277125c1646114f2dbb7846c3469400e76f8ec5da4b58c4afc23832eb8f5d85401ef95ebebe9c7fdae90c12f4bfa0e35285128c7b6711f4bcb58207ac7394ea66ca04c424215e6a5de0a8850b72358d96525cac870bf6d91b792bd975ea1be7d7b65397667b87e6ecf4e8347f8ad39ba7a044e00687fe870b5e6dfd0f44bbb1acd299d0c82336f57a057962f1af8e43a954c91f2e038881f67f475d339c35e8331b2ba9c1b6e60fe02479dacb3582ccde96a866caf789b9aa754af5ee8cbac19eec4ae40494c7b89f1a526f5b45422924d0e71ff7e09bca4ebeea7f20c2021b9900a54169c9b692c84e4faf2a1eb075184281fd7417fcf9c6395165ac987a986bbe0c239f28d83fb6e3d098f8ca81d9c33e4bf5975f392018854ed89c7b8164f34c8ebe8d9ff855bc51490f0a4b3e5dc8d1cc86b5e82092a973e43f3f78815753b256529f1dfd56580ac8b44dced455ef1d906a5f49e0cee39634c2bc9978321d492ad45ca2a0b164746392fef3f565380c61868a2bec43ec17c93f70edb212cf967d3cd8d89af48def42b744b854d4a06bb191b7a300835aaaeabfcdb63830e7633a517a96c3e0891d13e501da013567678eb0f8022b8e56fc394999b33fbd7a0e6ead131441a6a41c463534ec5426f9327767692df3474c8a2abda863248ac2a8ec606fd9a17eb46b3511bc42174f208e0ef9a3e1da4e64fb7832e2f037378051d3281327c4e5c4bd82f30bee5f157b50ee8f1fc4306a861c4b8b4ee1802fdf21642dcfe859072fb12ce3a798208f928694f8c9abb8a61c9401baba0987be0c3f378925e78d8835d8b697c532bf4991aaf300e5cd3054826d6103750526a6cd0279a7b170980e895cdcf808519a5fa2ab0f041fb56750739ca64f215c783584326a204526aac62cf829befe10d00497e223f8a4e9cc57aa10f7ee2ad8a2bb9ea42fd5b3150e5e63022ff6320244ce834410c25d7070de5ab5f788cf1dc1d8ecbbfef52c7fe918833e30b9d46d4fe65dbeef7435129c4d0511195579ef9e01f99302408aa0226d4dc5ec1b6d37a6cddf8cc71a64f75b97fefbc869aef12b4b6b4c37cfaf89f1ba73ddd5436764bd15cd29b89e209ce16e5a0fb2717fc5b0fe01c634f323e67cd085d98ca6d0900ba400c6405c0e6bb3a7c61a304ca6a9b3b99037c7fdc2803e80f56b442cd96b7f9f008e3caba122e154c2863d63303fca2a089ece9229bd0de738520559cdf7dfeae518f71106eb91b193d83478738ab58dac306a9da3180a23a1bdacb09a5fb9410750b8200966b8543a11386936806824b6ee34c215a140256273c444bdff2e92d82f0f8e1e94e4f2f498c4ec8faa346118ad186c65fe21d453bd47f57cc582fae44e42892018c2d52f4c7ea1a687801e7ddbfac74cd006293d47c85e0dcdc33e6dab25b9e38b237c183785b9d2a6678d3119de42b127d8e4b511e1ca44af2793b3f9fd2fd2da1847b7ad276ff7a72237233cd7cbb36142858ba044e75ed4ebaa30792e9d20172ec95ab0973409f51bce4dec27b036afea6813fb2bed8fbdf9d4489e306adf9ccfa27c6d9e261d10a3fff1d4b750d36507a611447a49519055467af72ded565928930383de533b4e26be0b4a46c7fa60f3c062bfbbdc1193194713402933485bbe26b8a37766ba221ec6803ed9de0797eeed2cf0a9fd9cf6c9f9ceaaef1a9046f6c392c4763a4ae3a6fb9452d6c0ffb7a26e4ed090cd3d290ad70c27b13821cc4e9571f90c6951f5fa062d4f6e87afcbdfefce590b7cb2778b1801a0d49eb11928b1393436f337b08862e39c80d9cff1e9877f482eb7bc1674ebd241dc3bb22206329aac9ab1e70688144eb1ef29aebbf29c85e866fcdd468e80f513b10cdd4faf4896a5f6bed7fcd6e53d32b9b93e43857b8e47cc046bafc2fa5a15078ba89247e963db64d9debb0964207f6edff4d057428051b1058bda267128aa72d7edb4d461b5c4b6fa0e028e570daeea51d4d32aae6c8f2aaee446f227844ca75533ae08b9da930c6286c44da97eda3debb487dcb392fcd051d239c11f55bde97a00e8ebb0746a54d93d6620d1979d3c18d79d2d2e16971d443129cd8b148c63ddac9068354683490457f2b7b60877c455502bf0ef521eaaa7c90b360156e66f78ed681f190006c241fd1b9b42063563ea40f13e8a24fd79f3f266436191f22b9f6db4e3dd1f4434bd61f0778d98eaad4139d4f759efe1a216766a006d62913b0f41719122e8038a0d835d650b5bf0dafedde478ec8f5f04048c9b3b439063ec9d4462c09db314019eabd33df3143857b8b28077fcfa45a6a888064ebc5e1daf40ba0d170fefa8c1a8adad1149ad0075263930396002faab14cefaacbed13b4c0a69029c855e03c434a3ff144013abfcdd041d161bb406809b1f7f989548ae451c88832958213023ed627539b3f30c0ebde0088efcf5efb3a66992ad9ac9c58a9372003130b1f4eb589258e7d9d65b545e3d9f51cbf502605a977139cbf631aa0db00e52a893ca8564c9e7d2b74030c4760fdc564c0aa9045e37c7146aecf550f43036b5d04e9b37c3d79961d8b468b32a57102232adaf1171e76bc884b44a22cf0e876a6853fc4af40b71702dbcd118eadb2161607bf3803c840f7566ac308e8b170595b121c5533bb415fd1ee0113cbb8f2de93fe6e1cbbdb41fbf0f35f0740adab9b211a895f68eaf111a9c6e4d465efcada99df856a49eef3b2e075c5f0c5375e878d006f9b98311a4dfe9f08af48a4dee7e2bcc2a082fe466fa6f551a36a56f4b0679f719df5f5629e3b915b68e3aece0c5a9aad336aec888e7615d66e4fb71b56a44c0abe9c2a8f7eaba49b3175e669cae9dc0dca2cf9f857f6c257db0870c46582c5e0164e61fe51bb8a5331d5e948dc2e5a5631b579e8a0627752aabc55ffa8ccbb65e8341c55899ac07290d27915e64cb686ce069eda425766418455fbbc04669b6f7b369639e21d0fb799f72fbfe77bc87fda313ff4273c7132c490652fa3b62663e357e5720517b9c101acf7d558fbaaf9ab946a1f8768f100bb1aa70730b09841a9e2dae2cad57fae332added112a1f24aab6cf8af7e7d2ea95d88cf8ecf92a1826328fb54468af7375dea38eed507300afd451e4ce76f4cdd2839ec0e8c3140cdc8b303225a0fa7acd3e925e64701be9ec26866a4e542d6c4f7484804efb5516c7be35cd9d29561d38c1d2bab166c3f6cc0b7bc54b6bbf596bd806103220ca1841046cfb3c59218225ab4a422620c32df9c8465b87b6367eb50a6e2bee6e416c8507dcdd73efa3483e78ccd"}, {0x88, 0x110, 0x80000000, "92bc8028c28f16bf53c572c1d47efbd1b87683fe0d8b3b6b16514bdb9d691802a68750814ea70a860c626cfbd1f9b3f7d8a359e2a947450c6b9d6d456c8b3d71ec044b053226de55e75e90df03d02bf8c33608ba92a5b9b9968b869976b161a21cb24035493a669d3d3eb6dd68dd3a4f4793"}, {0xd0, 0x84, 0x2800000, "f2ba86c275efce9ff6cd8346b15b1c6ac7808999b767d64d72130c8a7dd3c2328f001cb6ada2d7f8f096b52c71798141538f1d22f4f5f1a1e80bf60a6a1e8be12ff46e270106a37b1c65f8efd15c9c3da746ea210b6edf2fee37aab4f4acca221aad4fc7ca00ab9b5926113ef3ad4971901af5253d86a76890b74c761806b4399b60187f59413733b72da32cade5be2e3c1589f1231dd6604ff2622364f84041a379824082c95639ea3cd0fc7031f6560f4c20051bdd44334c6d"}], 0x1190}}], 0x4, 0x400c080) (async, rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002680)={0x2, 0x4, 0x8, 0x8179, 0x1}, &(0x7f00000026c0)=0x10) (rerun: 32) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000002700)={0x5, 0x3c71, 0x200, 0xf1a, 0x401, 0x2, 0xe6e6, 0x1, r2}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002740)={'dummy0\x00', 0x100}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002880)={@map=r0, 0x26, 0x0, 0x21f0, &(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000027c0)=[0x0, 0x0, 0x0], &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000028c0)={@map=r0, r0, 0xb, 0x8, 0xffffffffffffffff, @void, @value=r0, @void, @void, r6}, 0x20) sendto$packet(0xffffffffffffffff, &(0x7f0000002900)="37e5a42b636bc9d9556128ad5abdfa9cc6e7dac3284914be2031d835fc2df3c52f6bf14af12e68a97d81d6b9408c2523ff3c583880bde20fa81120b3004cedb9c121ff553b677102b9db8d8ed34953619110fbe6b78ccdc6ad4c10f30428ca0af1308f7a2b9fc0272ae68493c65e4307205a71f15dde37ef17a8eb7afda43f093aed9cd02b99681938d3af5be2bc492573ffdeb91c172879f9ff8dfe324db79025502371100b652a5655787958d05e28c7482e8fd2792f6c149929880c8d131d258ae4676e247c477d327b4896dae67d2edbc5aa", 0xd4, 0x20000084, 0x0, 0x0) (async) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000002a00)=0xfc, 0x4) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002a40)={r4, 0xa1de64a1}, &(0x7f0000002a80)=0x8) (async, rerun: 32) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000002ac0), &(0x7f0000002b00)=0x8) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f0000002c80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b80)={0x8c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x8c}}, 0x4010) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r9, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x58, r10, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 38.648325317s ago: executing program 3 (id=6887): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x80, r2, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xd202, @remote, 0x1}}}}]}]}, 0x80}}, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000071118400000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x4000005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = socket(0x2, 0x80002, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00'}) (async) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000480)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x1, 0x0, 0xfffffffa}, 0x14}}, 0x0) 38.557956297s ago: executing program 1 (id=6888): socket$kcm(0x29, 0x7, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x64, r6, 0x8, 0x1, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xce}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x5}, {0x16, 0x1}, {0x2}, {0x30, 0x1}, {0x24, 0x1}, {0x2}, {0x16, 0x1}, {0x4}, {0xc}, {0x4, 0x1}]}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="001028bd7000ffdbdd255c0089008fbae3c195e935973b37aa30a766755c68bce4a1cb17de92d43e9f295826f9ce91f1d045cc6aaf0982dedeb5309d1b1229adf43d22a087ecbac2abea06fae1d1c0ef0f27625a763c653a8334f8021fb9d830a6e64389a24e4211982f9f2d59ab59515f2b8416c87ee77451552002beda5f6adbfdeb159851520484f7e06aa4c259c6f6b1d06494c9210306ac6dba68634975b10bfd150ba395359b82495213f2200cf2956ee24035f152a9138f90d434f3f0ee00782fe66043b6262fe27e08fbbbe0ee6654f6e37e91398aeae791b3c3ad74e51606f0adb33723d63db2b7d84f9895559c4870a50742ba053a1cf2b83dd472ddf150ada2018e3c83dbeb8feaba75e3f1d35eee231f4dc7613d98b95a0e7534024da232f73853bf530d935e1e59ce18e90609556b218d1e433c8a47ff85c7bfab05829a218b45e2d01b"], 0x14}, 0x1, 0x0, 0x0, 0x8884}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r9, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x0, 0x6, 0xe0}]}, 0x30}}, 0x0) sendmmsg$inet(r2, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) (async) sendmmsg$inet(r2, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) 38.506812423s ago: executing program 2 (id=6889): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffd, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x270, 0x270, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@rand_addr=0x64010102, @empty, 0xffffffff, 0xffffff00, 'vlan0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x32, 0x1, 0x1}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x5, 0x1, 0x1, 0x8], 0x2}}}, @common=@icmp={{0x28}, {0xf, "7c9c"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x0, 0x1, 0x1, 0x6, 0x5], 0x2, 0x1}, {0xffffffffffffffff, [0x4, 0x3, 0x4, 0x6, 0x2], 0x5, 0x6}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0x0, 0xff, 'bond_slave_1\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x30}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x3, 0x5, 0x0, 0xac2db767afb738b7], 0x6, 0x4}}}, @common=@icmp={{0x28}, {0x0, "2fe2"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0xe1c8e6a8b27fa2c, 0x4, 0x2, 0x0, 0x3], 0x6, 0x1}, {0x2, [0x0, 0x4, 0x0, 0x2, 0x6, 0x6], 0x5}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x74b9, 0x9, 0x2, 0x8, 0x7, 0x8000, 0xffffffff, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYBLOB="ab135d45ce7601eb120472887b56081d842a4e44184e3cbc902db56a2ef612730519c83b7698042666d22644f0b06d0be1f8a002e9a2bf15510debfddbfad33a080a0b7cb75972784d3017bcb5f1a04eb45e010df914f66d0971", @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 38.415211356s ago: executing program 4 (id=6890): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) 38.334024725s ago: executing program 0 (id=6891): r0 = socket$tipc(0x1e, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1f) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x3c, 0x0, 0x4}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r2], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r5, 0x890b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) 38.127026897s ago: executing program 2 (id=6892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0x2, 0x4}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x1b, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.10143402s ago: executing program 1 (id=6893): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x10, 0x2) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000040), 0x4) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x4, 0x1, 0x6, 0x7, 0x9, @broadcast}, 0x10) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) sendmmsg$inet(r0, &(0x7f00000051c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0x4000004) 38.03809974s ago: executing program 4 (id=6894): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@RTM_DELMDB={0x11, 0x55, 0x1}, 0x18}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x99, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) sendmmsg$inet(r1, &(0x7f0000003c80)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003a80)=[{0x0}, {&(0x7f00000001c0)="b265f883e83bc9", 0x7}, {&(0x7f0000000200)="f2edfc862e5fbb298ff94a620ec72b11f747dcb2ca79fad8dd0246de1953a11e1d46eded541cb214f1d2f1c02f8c13e2a010062984caf1738ff7ddd2bb2505ca69bf98fc6b99a58a63bbea1b4214b4a490d1fe035d48267cda1d541f2a6794a75e445588249006715bad0950f99116c08cf524999bc4cf", 0x77}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="1e5b459860c5ea3cc6c9c25c4eec3961252ee765fc4eb409c21ae4d3317547f3e4ca848307374a21c5fcd4063597a526404e68fc6375ab721a2c3a6e9d58d8cd29e9e50100be3a3057b5bd50280c9b77b85d8c20e21752edc8a45273230d6216e083e4c5ca8247efd018496f75bc53c3aa7e87670398fde1eb8caf4f318e71b3f8740379c5755af2081b051535b92eb065d0db506da671874af699a87ea76d0aaa346961f34ab20b6d74ffabb4b457", 0xaf}, {&(0x7f00000019c0)="75350c3df174cbfc720f21be5b18997b9cc5b72202310039f4825cd1c7c0db8efc72d8540dc7f1bed029424f1b2f8c61ceaaf7c96faa5900fda558bdb8467c2d0c5c3eadea6984b66e825619f62820912d4417f4da9a74cae77c2b27ea1642c76dff648bac428641c25eefa79068b83215e1ed0959696b76c64e9e2bb8548203a3348b5f247d385a097c5a87906e99063008d84c8f26068369b070a74c312b09e096ff3c9e9e9700264cd5e620ab07b3eb0c1f65b57a9d7959ed7af7b468a9b84f29fb27cf6a8201e665f9b2a76e456d06ef4951494ac01cd274c38b6df3fedbc4323bce5910e0a9e379790c0092f31fec7909241809e918db4e6ee045ee36dff97315ee40564360858a6bad662713c6776d768871bf0bc0a5ec4c2f98dae1b35a5b8655256e32df456d39e95ad3c47d7aabd35a3eb063c9dcc689c49e762dddc9e4272a509a8c385f36305378f495fc8ed9f95b686c74374bcce5010695608a701be444240c7566162b79fe44f141ae141bb9d0cc7ccf8ca0a279d70ec1d4454e3b750dd6818c23b7bc38ddfc5666f167968d6ffba0a3b25bcb9ab6cd29cf5ef06dcfa10eec74f2bdcad69f8fb22d7abdea581a2071cf0c481a309f6aa4b33ffe0cd21c3abbaf351f802dc860b0cc1f64c14427623d07dbd9b48ee397a86f04a83747ff0f9973ccb84a2d21178dd5152eb2fae020cd33ed0cfa5afcf0c55c7567db4a216d887ea66b9ef9ec67adf1cfdcda5ea19e8f87d1d23883e0b1dfec88216975928d86f5c5ef55511d0be9488724e1a57cefceecd94c50186e53bcc70f2f86184859ea641720b0633c100ffccc6aafff04d7e5bf2a98a20c7605d50a0b329b17eacf3469e6476c8a41199f10fc4f283ee67525466ae873fc40bf20803d20ed6fc697bd3ba0b6e3f295079a22a3ef4605e5b72f8189c80f79f1237984724ea64378d880561234b1e591deeebafca30761a93b83b65c6fe8f2c0b5d1799b792175055ca7b3916a37c2c10823d7c920eb162b86a6317684bdabe51de2b47054ef2168a49b971157343c1f5231ae9f0d8083d726151ddc7d29f27a524296b6ac2dee997eb7cd5a39e1e07ba8f87948828741ff9b0a02d794e695ad55116640f9d7022e0c20916e37cbea2a4ef74df3786bbbbedd4ea3c739b3e1be1009c50cba60afff8ccf78cf53c55d180047dcb48938aa315143023f668e91a92b47eef53f7f9d405a1a4644b40450739e189c8178a92388aadaf50ed3949c231bfa536a57d57e6355a7058cd7225c5714839dfbe8f447ae76fa87176640a7900c3578eb87177055804367e1c0f963f1e5b975124c4701ace54db7a1df1ab3eb263e782b18874b85b6b1e9cc87e8e636b2f67f8db632f241812c335434e40fd082dc68250496f8ecad12c9e932bc9aa73b83d41c06e15f1d09484df2ddf2eb0a4821909f0ddc2292c39b08daa653c8812c80bd54a005470e0a4ec315756a814b205b37775554a37bbb4b402157c1aef55d2131ca023eff646b14fb6b22c6af82d3befbf52ac06aca58511b5b1267d4f84ce61ff3bfb441d0ccc0bc84c9adc24dde5dbd4390d35a18bacfe96ddd5f7bf8561c17cbcf9e213bcfe2ec187d38e401538aa1bdebee3cb10e9fa0e56424b1a70d6382774cfd526d31428151ddef90b014dc93cd82013da098da12a8c8ca7cb8a00801e29a871b473a3f6e0083cd7068c7efc4a8ae6332d1e04e34ff0e6a5bcc8b363bc753566ec1abfd1bd23f8428a5573234a07a26f989ffbcccea372679176aa47f576c097cb01c2f9c92f8abaebe20bff622c3495a389d5f5b82a4c383c9f8031e34a66e865d1579f777c299147d52a61c3776150aa4b5bee02e4d372b8a6ff72458636b802921edc1c4de03a7ccd7129285ba24a7a4ff0225539f5fe502b3815e0876ae9790e0752d988404e1273be39ccb21ad4dbf879a1bf666aa286a4657a53fcad1d3f622bca77d53730dd00abc5d10a2d1cc2d5b615024e4686333f9a17e1a28a6ad19ffb167da9845e2c1b1d2703cd8fcfddf3da911d4173a0891f8f0901d062c338ee39a1a79365973a7ff8ffd406238c7756280842205d4400e8163713d52d2ebdcacd55d0793aa8e77c7dea1939dd1bac469b08af2f49cdc3d29f42e1d95c1d4708487d4332adfb7864ce390076fdc5efcf484105c8b5b9c937796d24269c4f63f8555013a9d57afaa08702f37bbf2f43d0eff467f60a9cfc674d233d26a68578cd0e91214125d08ae66d71d28ef5c582d3cead6f38179aae350ab2e99671942b0ec4df502468a692e2344216be598405a2be84fd4ec4c850ea8f9373cd169bb580e4bb09060e8f648c57dcffa946e4d8f4162ddff3f02696bf23b87604fa136374157cc73ea94eb36f1f496a8da9370056a1a0d79416c3e2ea8d0c62ff119ccca9ffa2edb82da88e6eeb53320f16045ed5ecd08f8d9b252c9c4165acdde837397574f98015bead6949922215c2b8e83f97c4cbac22b44529bda4a56ee90ef3fec06eb0267e2844df019bdc2b01ed2626c4b972f9dfda697588e4dc52b8f8a24983b62849429fbc364833b3f80a69b96d68eb9540fa5f8243ae14338838d2ab4a03b2ad18504894f26f9a873aef963f257499dd34a3a8c747253e62f89326b0c745cd87dce9f2f37cba346cef1e3c152df0f48cf9ac5ca5461324278c8da6cf656d42360116d00cad8b4c430ad52db0d7116ee79fec78c726540ead6326515986e7c0327bb02e6cf407d84c14185f646363a67aa6cd2d0969fb74ffd0d577223507b98b3917d23937912449ce7dc3fd95464baf09586aa44ce3d93f5fef1c45667a9064b5b6be6825d862227fd9fabb1cff8a8737d6abe1dcf35173c4a02d8a883abe32652070e06036d4b872fea8ece7d9518bf1aa2ea1645e1a9dac8dd52614507651166f6704e97e78c8e276356008719c0858a686a0945c7f4799153917842acebc0e7b9336fec1983d6d55548ee1e50c51dc522e1c6791b27c50870cdd477de1dd1fe29f212c056e3ee9e66906700f86c34082a3bc3ae62768937b6d901d83511836cf275745cd1617933bbceaa05551aa2c0bb3dc73eaae8969a16aa68de5a29028c5bcf3ad93c5d12c58ebe42d45953f7a835adca1fecac1d295bc7a632833069f0f73bfeb9e3d9bae3a597cd4f39ca6da0dd03323b7249816e509898e79f154a517d7cf30a4b0d8e896c3e5498ca86058a5ed45274980d82769ed5e2f226c51b5e1155f40fc4ccc017dd72de129eb85d68bf463daed4347b7848b7586e77c4f342f42ad104fb15c9cc29223fbf120f5deb18493a12ae42596cabd7ee57d6b1c1e0743effa367e950a41fd68bf58f67aeec2c0bce4a36707167c59434f409532dff4a70d2df36ded7e3dbd23a1f0f0dbbcfa4c14aa10e1b0e7d298a29a3637d005e03eea046eaa1f62fd34db08f918920286516b055a009e4075e6f6ee52f26a0a6490a64c0e61d978ffe0801b17b2e733d19d0428dbf6ce644309b329fadd62296d86c796d65ba9e00eaada7b67b53ca2fba4b9d31fc5ba1944f9beea17299dcdaa0a7dbe7ffa3f7d4495e0aaed5191312deefe133f4223ff49f04add09bf24208712d15cff95a4f086ce40b1d5ad131ed2ea7f4ac5ec1d9178a01c359ab5249db8b52c04ff3711b58b7210bbd2868597aec38f80e98f013bb907f8ae9c65e6bc9d19aa6c134d53ff8185ca6e7004a2e2c9f920e35baa433537dc75a37d8b5bab6fa330f3c95bd9f5cf59311ca0cc96dcfea60b6b38911a7b4363c1741842073b240f359322d9c4372d429114263e80769c90d33673b63334ac04c905c7b5271da5bd503c9d977df394f4c8ebfab4cecc387108380e8ab26075dd280e0cf4d2c9d2f2b909871ad0a4cd5989c2b0ce2df4cd29b1bdbe3eff255daec86dcc7fec0bca52fa86e92758f5c63f9a043bc145a971868e686cf963d0d7eb23c64d8d8a56ee118c91e9107e7ceb2e1d90724929a78b63b4d027c1783abcf13178f4dc4c128292d61d78519a47eaf5750fc2418f227debe8e339875df6cf04f08abd273bad7f6e042441b267a7ffae5185570cbe8c99e230f3fcfb74cdecefa4fcdac1ba93f8194a1d2017abc11c65cdaf9ef361e79fc37e2e3701136e7144e01898f000b61fabb65b1c853ddd0d675fc2a51e20b8bfb7b0607748709ee49c281e8f425c97ca7c8b09b518b0852204c411fc4293f9de52a1f393a4adea4ce83419712d94b363359efba5ebf8f02d998f28fed8a1cd15e7acd9fb4802b34d7fe3cffa80c40e33b72e1067dda1ec6a28a7b1865e72725d355854978777cedcbd2dfcf6a5dbba4a27c29cca467263c168063b8934b15be3f24a6888a774c1869e58186de462873e42fa8b3bd1a176e5977c993e218f37c74c65e5d3227aef41a9df9c39600f392cfbaa58dd68f4a29cafafedec4e58598c7d81437665b1a1984a8b5b347b3d459f7b4f3089a1ebfb9c3da17a99edd09d7e776400094db92461289b6864b3911a9ccbc86d6558c69ee091f0b2af1e87af89af2cafda1dc0f6e50605ec288bcacdd26a23c3addb480214aefa981332351690eb5fd6b3f84df861a7b831ad57fdf39d1f566b5f7d9a7d438e04e4e6180a93696ea0d79cc0574c53ef1da76b0613c5dc4b8acfa3cf7f2ff5de9409fe8b07509f16eda1c6ab024de1233e7f76ad7c182fad61e5ec057b1cb3a5a928a1b562043b426fd1177ca6e840f96603205bfe845ead0bc173695c421b005108d68be93fb0e000b8ca2af70f25adf539191a2d599ab1c35f1d2c18312eebae0b5d7f0980bfbb5407523149dc9db065fd6b66a5467b190f6a53e4d29cdfb5db0da46e22b8a9544b76f1f1dc98fccdb69656d5f063205484ec61a385a419d6386da9f3d61f0675aef1f4b34f8593e12cade9dabc071d9dd36e6241c5b095368b6ce8e71864b0135e10bf229924e1c99bd569cdc63d3fdb088ffe6fb96a5e2f5747250f3f8dc71b3d9d7c62dc1bb223969dd4e6de1a3f2fc9bd6cca9d64b3a3b1c2b59bbed38d8cabf218145e53bc1ded234c5b22c1dd2a2092ba87203452b5352ab20a975a7ad1a1058a99efc7f4f7bf2a563678c549da4e05cd106cc471c01264ebd229047c0b86f709861c99c1fec05b899a9a1ce6def068866c076137cd6f7b979b8c8a8ee3065ae684eaf4fe5cd8a4b1393953a882482e4dc4a50b3493ebff222cb29948b5719811d8a6593b27ce48e206f550fba3df7748a378b2206966e4b7d61db7af963a680edc92d74de97261cdb92d031aa0de8c6af965dc3543df08fc4234487", 0xea8}, {&(0x7f0000002a40)}], 0x7}}], 0x2, 0x0) 37.852031791s ago: executing program 3 (id=6895): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xffff}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0xff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0xef, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000040)=""/186, &(0x7f0000000100)=0xba) 37.832917895s ago: executing program 2 (id=6896): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x85dc}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x1, @local, 'ip6tnl0\x00'}}, 0x1e) close(0x4) 37.746230701s ago: executing program 1 (id=6897): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0xff7f000000000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 37.714138485s ago: executing program 4 (id=6898): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b00300001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b440400000000002000128008000100736974001400028008000300ffffffff08000c000000000008000400ff7f0000"], 0x3b0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000100)=0x9) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x1bc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0xfffffffd, 0x1, 0xc8, 0x8, 0x4}}, {0xc, 0x2, [0x7, 0x0, 0x80, 0x9]}}, {{0x1c, 0x1, {0x9, 0x2b, 0x4, 0x19, 0x1, 0x7, 0x9, 0x7}}, {0x12, 0x2, [0x5, 0xb, 0x8, 0x9736, 0x0, 0x4, 0x2]}}, {{0x1c, 0x1, {0xf9, 0x6, 0x80, 0x0, 0x1, 0xa9, 0x6f1, 0x4}}, {0xc, 0x2, [0x1, 0x10, 0x3, 0x5]}}, {{0x1c, 0x1, {0x9, 0x1, 0x4, 0x5, 0x1, 0x9, 0x1, 0x3}}, {0xa, 0x2, [0x3, 0x4, 0x20]}}, {{0x1c, 0x1, {0xff, 0x9, 0xeb9, 0x401, 0x2, 0x7fff, 0x5, 0x2}}, {0x8, 0x2, [0x6c62, 0x8001]}}, {{0x1c, 0x1, {0x49, 0x5, 0x8, 0x0, 0x2, 0xc74, 0x2, 0x5}}, {0xe, 0x2, [0x37d, 0x390b, 0x1050, 0x488b, 0xcc1]}}, {{0x1c, 0x1, {0x3, 0x60, 0x7f, 0x3, 0x0, 0x0, 0x96, 0x9}}, {0x16, 0x2, [0x29, 0x4, 0xd4, 0x5, 0x1, 0x5, 0x6, 0x1, 0x1]}}, {{0x1c, 0x1, {0xe, 0x4, 0x5, 0x1, 0x1, 0x7d2, 0x0, 0x9}}, {0x16, 0x2, [0xff80, 0x2, 0x7, 0x9b, 0x9, 0x100, 0x9, 0x7ff, 0x5]}}, {{0x1c, 0x1, {0xf0, 0x10, 0x6, 0x8, 0x2, 0x5, 0xfc, 0xa}}, {0x18, 0x2, [0xfff, 0xf9ad, 0xbd4, 0x5, 0x6, 0x81, 0x98c, 0x3, 0xe4, 0x8]}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 37.560821161s ago: executing program 3 (id=6899): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r2, &(0x7f0000000100)="f7fc9009c114d940aba9fd8f286ba86e94fba19d57f443fb406cc26d724a0550a51d699e0865b1f6ce7c71dfbf36eac7ab50d6dffe5e6e3a552a0d94982fcbe0b1f6eeda068ee1d9e1038158082c5878a6fff9c713ae8458a9ac5003a99ba6ea7f565ac73b85155f73ca", &(0x7f0000000180)=""/4096, 0x4}, 0x20) r3 = accept(r1, &(0x7f00000011c0)=@un=@abs, &(0x7f0000001240)=0x80) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000001280)=0x1, 0x4) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001480)={&(0x7f00000012c0)="78a645476178683b4d40313490f03c4fd5ce1b2a42b1afb6bbf00a38a3ffef490db31b", &(0x7f0000001300)=""/162, &(0x7f00000013c0)="1c5f7a3089f271ea7aafc4b76967975636ae306672cea7644ec2a1aa829a4c778138d56e8baea73ccd6ec0701d057d51138a5acd6478e2354d74b728617dc9033717eb1582093aeb226ce4debfb629d9d5a6a0b0e2f64fe8cf81593709fb23d8c49728", &(0x7f0000001440)="e61b26f49be53fe15ffe", 0x4, r2}, 0x38) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000014c0)={0x7, 0x7, 0x2}, &(0x7f0000001500)=0x28) connect$pppl2tp(r3, &(0x7f0000001540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x3, 0x2, {0xa, 0x4e24, 0xa6, @remote, 0x8}}}, 0x3a) r4 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) ppoll(&(0x7f0000001580)=[{r4}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001600)={r5, r6+60000000}, &(0x7f0000001640)={[0x5]}, 0x8) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001680)={0x1, 0x0, 0x4, 0x60000000000, 0x0, 0xfffffff7}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000016c0)=@int=0x4, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000001700)={0x0, @in6={{0xa, 0x4e20, 0x80, @private1, 0xea66}}, 0xe, 0x7ff, 0x8}, 0x90) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000017c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001800)={'bond0\x00'}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000001840)=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001880)={r2, 0x0, 0x9, 0x10000}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000018c0)={r0, 0x4}, 0x8) recvmmsg$unix(r3, &(0x7f0000005b00)=[{{&(0x7f0000001900), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000001980)=""/111, 0x6f}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/221, 0xdd}, {&(0x7f0000002b00)=""/146, 0x92}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/217, 0xd9}], 0x6, &(0x7f0000003d40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000003e80)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000003f00)=""/255, 0xff}, {&(0x7f0000004000)=""/137, 0x89}, {&(0x7f00000040c0)=""/69, 0x45}, {&(0x7f0000004140)=""/149, 0x95}, {&(0x7f0000004200)=""/153, 0x99}], 0x5, &(0x7f0000004340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004380)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f0000004400)=""/36, 0x24}, {&(0x7f0000004440)=""/60, 0x3c}, {&(0x7f0000004480)=""/89, 0x59}, {&(0x7f0000004500)=""/124, 0x7c}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/111, 0x6f}, {&(0x7f0000005600)=""/245, 0xf5}, {&(0x7f0000005700)=""/188, 0xbc}, {&(0x7f00000057c0)=""/227, 0xe3}, {&(0x7f00000058c0)=""/206, 0xce}], 0xa, &(0x7f0000005a80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x3, 0x2040, &(0x7f0000005bc0)={0x77359400}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r11, 0x84, 0x7a, &(0x7f0000005c00)={r0, 0xffffffffffffffff}, &(0x7f0000005c40)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000005c80)={r0, 0x8a2, 0x400}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000005cc0)={r0, 0x8000}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) connect$rxrpc(r7, &(0x7f0000005d00)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000005d40)={r0, 0x5}, &(0x7f0000005d80)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000005dc0)={r13, @in={{0x2, 0x4e21, @remote}}}, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'wg2\x00'}) 37.506764372s ago: executing program 2 (id=6900): accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, '\x00', {0x1}, 0x100}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, '\x00', {0x1}, 0x100}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/86, &(0x7f0000000180)=0x56) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/167, 0xa7, 0x0, &(0x7f0000000280)=""/61, 0x3d}, &(0x7f0000000300)=0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x114, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x400401c) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@empty, @remote, 0x0}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0xc054) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0xc054) connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x1c) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r8, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={0xffffffffffffffff, r6, 0x25, 0x2, @void}, 0x10) ioctl$NILFS_IOCTL_GET_SUSTAT(r9, 0x80306e85, &(0x7f0000000980)) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000009c0)=0x944, 0x4) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000a00)={0x2, 0x0, @remote}, &(0x7f0000000a40)=0x10) (async) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000a00)={0x2, 0x0, @remote}, &(0x7f0000000a40)=0x10) r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) r11 = accept4$packet(r10, 0x0, &(0x7f0000000b00), 0x80000) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x10, 0x9}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000f40)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000001340)={0x0, 0x4, {0xf, @struct={0x5, 0x4}, r12, 0x388e, 0x5, 0x6, 0x17499a48, 0x1, 0x91, @usage=0x7, 0xfffffff8, 0x4, [0xa, 0x6, 0x5, 0xa96, 0x1, 0x7]}, {0xfffffffffffffffd, @usage=0x2, r13, 0x100, 0x2, 0x4, 0x21, 0x401, 0x1, @usage=0x7, 0x0, 0x2, [0x1, 0xffff, 0x4, 0x2, 0xac, 0x9]}, {0x1, @usage=0x10000, 0x0, 0x6, 0x2, 0xfffffffffffffffd, 0xfff, 0x8, 0x404, @struct={0x8}, 0x4, 0x0, [0xf, 0x8, 0x5, 0x7f, 0xa, 0x7]}, {0x0, 0x5, 0x54}}) r14 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_DEFER_SETUP(r14, 0x112, 0x7, &(0x7f0000001740), &(0x7f0000001780)=0x4) (async) getsockopt$bt_BT_DEFER_SETUP(r14, 0x112, 0x7, &(0x7f0000001740), &(0x7f0000001780)=0x4) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="945621abba38"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="63a87ed8c6dd"}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x20001000) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="945621abba38"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="63a87ed8c6dd"}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x20001000) 37.321951574s ago: executing program 2 (id=6901): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff7f}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff7f}]}, 0x2c}}, 0x0) 37.260461675s ago: executing program 1 (id=6902): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x4, 0x0, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a9d513a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "910d000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0x11c}, 0x1, 0x0, 0x0, 0x180}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, 0x13, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x92, 0x8, "2234050f832baa99e9043eced20b99858f3c82a515f4f1183bca07cb988569ff50c867489c3c333089713341c7e93e7dfe49f3c403e268c861217925cc03bb38fd0affbe135c349c195b051ffd6fc41772fba292343c44a0787e95cfd8993f3587790008ac822f362041ab2593a53d2c96fdeb32cddadad6c80d15895d7e7b592789aa2a89ca40f131a6eebcefb8"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24040080}, 0x40) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x810, r2, 0xfa783000) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x3df) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, &(0x7f0000000100)) 37.146050846s ago: executing program 4 (id=6903): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791204000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0xfffffffd, 0xa}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x43, &(0x7f0000000280)={&(0x7f0000001040)=@getlink={0x28, 0x12, 0x2fa9ccd93d5c0097, 0x70bd3d, 0x0, {0x7}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1d, 0x55}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x43, &(0x7f0000000280)={&(0x7f0000001040)=@getlink={0x28, 0x12, 0x2fa9ccd93d5c0097, 0x70bd3d, 0x0, {0x7}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1d, 0x55}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4048001}, 0x2e840) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x4000) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x4000) 37.094630443s ago: executing program 0 (id=6904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7afb64d3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x80) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8080) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$netlink(0x10, 0x3, 0x7) 36.974846781s ago: executing program 1 (id=6905): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0xfffffffc, 0xf, 0x200, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x401c5820, &(0x7f0000000040)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f0000000040)='\x00\x00\x00\x00', &(0x7f0000000080)=@udp=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b7000000010000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r6], 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000600)={r0, &(0x7f00000004c0)='#\x19-/}\x00', 0x400000, &(0x7f0000000500)={@align=0x1ff, {0x1, 0x9, 0x9, 0x7}}, 0xffff7fff, &(0x7f0000000580), &(0x7f00000005c0)=0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x27, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x77, 0xf9, &(0x7f0000000780)=""/249, 0x40f00, 0x14, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000440)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r4, r6, r7], &(0x7f0000000680)=[{0x1, 0x3, 0x8, 0x6}]}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000340)={r10, @in6={{0xa, 0x4e23, 0x4, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x12, 0xfffffffd, 0x4}, 0x9c) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) connect$bt_l2cap(r8, &(0x7f00000000c0)={0x1f, 0x5650, @any, 0x0, 0x8dab3a9d970a9c01}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 36.922271374s ago: executing program 4 (id=6906): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@multicast2, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) 36.769016062s ago: executing program 2 (id=6907): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, r0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffad}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "bf3018fa172a30a4d4e2941855c26751f6d7cd85053407"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x14, 0x3, "fcdbf12c241ecaa2a6ca316d85bb6256"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbdc}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "8cfab9e7bf1e8420964ced3a8cacfe78726e8a4b6e246f9fa118c25ee136dbb91e16"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "80af9dc314a11f6c6c3b2d57997075f28132e2c67a40f78cac97"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff75}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4800}, 0x40041) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x19c3}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe37f}, {0x6, 0x11, 0x4b3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x8, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4408c) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x18, 0x1406, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x24}}, 0x4040020) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a80)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x9, 0x5, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x700, 0x8, 0x3}}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b80)={'pimreg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x2, 0x4, 0x5a, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x80, 0x3, 0xe0}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xa, 0x7, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}, @remote, 0x8068, 0x20, 0x7, 0x80000001}}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d40)={'veth1_to_hsr\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000dc0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x15c, r9, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001a80)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001080)={0x990, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x28, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf, 0x5, "07e81111f1cac769c165e7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_FEATURES_WANTED={0x12c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[#@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.\'%{,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\%-,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x35c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x43d4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "87f975c1aa11f08633100356d2d9c4281af6f5eb6dc5d882e4d49611b0647c68edbcf537dbb7bea882b29425b1f7c6a44a6ef927285cbf91364b35ea3372a63429e394925d706f1aebe89971e7c261a78e99c4964dc2d5be17264f5f93b567c551956a0811bb89277e85629bdf4e7dfee1394b204a79cb82231ee818f46144be90f930ad0073ea0c2441a1a750b48046dc5440e8dac9a62ccbaefe89c73bc65f7b9a4aab0f5bf9e4bfdaa68b0bdbba21c637979c94e28e5ba5ab898eae0f16b79abfb48de46b971cf940a5cd3577871f9a13f2bf4e10ab29b445e9ee32fd2dacc996f09a90163e56ca44082abc50e0f1c2efbb31939e067015"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')\\/#.{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xef}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '}/\'-}^.@]+&+\x00'}]}, {0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&,\\!#(+#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '}\\\'%/(]/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0x56, 0x5, "b9c2d9f4c97f79b12bd8cda116200a2aa86c52f1229af0f7dc36dbdf61127289d9046931b320c92178ea04d1b9a47fb45938081a4692a4f5b062c7f552f4f4f9794c6f9180c70d4d567932010319ef581a53"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "8cbdc02fd39f930da88af69f48ed5141a02d6afd2dffa55d8d8b19c41f5aafe5b4309ef644762016101f0835394612c5e8f1e6bace373d67e879beb5e6f2849540befb2f5cca5b53de52c212de34d860260998e8caad85d55e215793532a28b994c3460d740a8bd0592687b3ca04d6cf7bde1c0c7bc2c82f146c8c7144a46435bc6a1ff0639bdf22fe047936f9153fc59568fb7847691012dd6ebe400278d28a927525c8"}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x3f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xdd, 0x5, "e7e458b1e0beb88cd8e90d1bdb95c412ae63fffb2665482715145a6765b210abe7327e833a6f4fe94f467011d6ad1f6cb2a7e614e3af2a0cea750295bcb02fb806f6c9ba620c49b304b67811eef46f42339a6190b7cf6bdfb89415038a8401192b88a66f4638c484358ca68fafc65dc5ab9ffdce485a3f2862d1d08b456d29a05c2d444aba4639d18c8e50ea3ea3649786c8910980ab5ea0148f59708f77a4d6864928df1a5d5e5f15a852a4ff3fbdc549557ce9217dd34815abd786852898992a7a21f39f8cd9edc113977557ba57ac4bcdf65090d37b57cf"}, @ETHTOOL_A_BITSET_MASK={0x51, 0x5, "81067fc177b210bb5deae6f677d2d5bb5a231726a28cc0e56008d52fffccb75417232331912bf2719f8d49787cc3c31340bfbc21e46dff3b301b92ca6a7804163ee010d3547b4714e9645a783a"}, @ETHTOOL_A_BITSET_MASK={0x42, 0x5, "23c64d50dc390ed27bb94ee80001ad58902d679d710301b4f57b47e788fd591c16d4e40a799ba426506908ca2b4b2294add41a91d3d5106bb4de25036e06"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x28, 0x5, "bafd93f1c7c1a6afbae398ded99ce75ba25f4634a3d59aed7097eba6b2d59790a9496335"}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "236719196d431e739a6a8047c75c8c144daf328b5881e5a405619e521bc98c8bcbed97a430cdd2718ce6db917394bbf950fe5ed1780c923d518b914fceabb49abd22bf12c05f603b58219ebca8a428986cccd5f42c4eae4e3fe0364f06f3d413600059f33f07e128f9010c090e7e1b5011a7912f508585642157a1d71f2c94b771ed687d7d4c37f65099e9e4438c31cd6a8a18b91bf84e3b10ae59c376a51d17148aa918062f9d0fc6b00b56eb166a5123207d"}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "f6929d975184b2412bfecddcd9ae2290d33a63b8e8e96bd31a9135ae5639686768947489c0120f8cf6f8a4ccdacba11277a1f1ce9125bc78558e0954ed526b19a840ec889ea3e9a9da9b2218ca2b0ad91a04011d24238ab7aeeb1a3399ccc4e3e1a344ccfde832a3fd768f500420e3724dbbde7a7e9a5d17115bc0448dfb17bb472c1563ff220ce38fa2c268ffd42346d236f0f0e23a0e0a4c9964e846a9881b727ffc1bbd4d7b3d6c0b93ba75a32a38605d09981b9eab99e528f18c6982031c998ee6f6d091b3c56962e8db9b52"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "ff84ccf96d02a9a4422d7227453d60d3143f0f75dd9d6e3e237e7b4c17e042fd2f2952cfa0f1a27cf6795fe2cee6e491c8812d04963cf6ceceb3e44e1cba30140bbdea82760c1b4e4d1c4262a51f77498271945c2eb5b971ad98928dc9dbdef9a67a335bce7a1513f5cf461a37bf3c1707ad0a683ffeb3b9872dc4f452b1a4c76d3a5fd8dff3acd8d62e90d769dcb15a211e7dfaea088114106b78077d285d9eb30b01b4d43a0f628d3461333cf0ad431ce6ec424b5e"}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x990}, 0x1, 0x0, 0x0, 0x85}, 0x24000000) (async) r18 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001b40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)={0x15c, r18, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r19}, @NL802154_ATTR_SEC_DEVKEY={0x118, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x94, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcd2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x69591e030152ebfc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x45e8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) 36.753753522s ago: executing program 4 (id=6908): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002c6be212a60960eaed4ee041a91082c42bf97"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x100}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r3, 0x6, 0x3, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) sendto$inet6(r4, 0x0, 0x0, 0x4a69240691b2dc9, &(0x7f00000000c0)={0xa, 0x4e23, 0x405b3, @loopback, 0x8000006}, 0x1c) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000002"], 0x6a) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000004400010029bd70000000feffffff04004880d73bb2d2589cf10c93ad4eb85ae0087633d31081f75271d9f1427a"], 0x18}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000082600010000112233445566778899aabb0800450008610000010203040506070800000c00020040002000080000000c0003000500110004000000000000000000"], 0x58}}, 0x0) (async) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x28) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) 36.678026107s ago: executing program 0 (id=6909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x3]}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x3]}]}, 0x60}}, 0x0) (async) 36.487280466s ago: executing program 1 (id=6910): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/72, 0x48}, {0x0}], 0x2}, 0x8001}], 0x2, 0x31, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x24, &(0x7f0000000440), &(0x7f0000000100)=0x8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 36.486869064s ago: executing program 3 (id=6911): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x434, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x81ca, 0x1, 0x100, 0x2, 0x5, 0x10001, 0x8, 0x1, 0xffff4846, 0x2, 0x81, 0x80000001, 0x3, 0x7, 0x2, 0x0, 0x7, 0x7, 0x7, 0x6, 0x2, 0x4a, 0x5, 0xfffffff8, 0x6, 0x6, 0x0, 0x1ff, 0x4, 0x4, 0x2, 0x80000000, 0x0, 0x200, 0x200, 0xb, 0x80000001, 0x80, 0x3, 0x2, 0x0, 0xf6, 0x6, 0xd, 0x9, 0xb630, 0xc8, 0x8874, 0x2, 0x4, 0x8, 0x1, 0x0, 0x13, 0x5, 0xfff, 0xfffffffe, 0x63b4, 0x7891fba7, 0x8, 0x10001, 0x8000, 0x3f574112, 0x1e33, 0xfffffff7, 0x2f92, 0x0, 0x9, 0x1, 0x6, 0x8, 0x10000, 0x6caf, 0x8, 0x7, 0x2fa0, 0x3, 0x5, 0x5, 0xfffffff7, 0x20be9dc1, 0x2, 0x23a, 0x1, 0xff, 0x287, 0x8e, 0x7f, 0x6, 0x6, 0x7, 0x3, 0xffff8001, 0x4, 0x80, 0x7ff, 0x9, 0x7, 0x6, 0xfffffff9, 0x10000, 0x3, 0x2, 0x3, 0x3, 0xc6, 0x3, 0x5, 0x6, 0xc0be, 0xac, 0x5e1, 0x8, 0xdb, 0x8, 0x2, 0x9, 0x8001, 0x7ff, 0x96d7, 0x8, 0x8, 0x8, 0x800, 0x7, 0x1, 0x9, 0xd, 0xd, 0x8, 0x8, 0x5, 0x7, 0x5, 0x0, 0x8001, 0xe, 0x10, 0x7, 0x10001, 0x6, 0xaa1, 0x42, 0x7, 0x6, 0x4, 0x8001, 0x7, 0x8, 0xa737, 0x9, 0x6, 0x1, 0x0, 0x4, 0xf, 0x19, 0x9, 0x3, 0x961, 0x0, 0x3, 0x0, 0x2bed, 0xd68, 0xfffffffa, 0x9, 0x800, 0x9, 0x101, 0x81, 0xe16, 0x9, 0x8, 0x8, 0x519, 0x0, 0x7, 0x327b, 0x3a7, 0x8, 0x3, 0x1, 0x2, 0x8, 0x401, 0x6, 0x8, 0x6, 0xe, 0x2, 0x5, 0xb25, 0xfff, 0x8000, 0x3cc2762c, 0xd, 0x4, 0xe9aa, 0x5, 0x10000, 0x5, 0x9, 0xf000000, 0x100, 0x7fffffff, 0x0, 0x6, 0xaa, 0x400, 0x2, 0x40, 0x2, 0xfffffff7, 0x7ff, 0xffff8001, 0x5, 0x5, 0x7, 0x8, 0x9, 0x800, 0x6, 0x5, 0x6d, 0x8, 0x3, 0x310ff0dd, 0x289, 0xb8, 0x5, 0x6, 0x8, 0x8001, 0x0, 0xe2d, 0x5, 0x6, 0x7, 0x5, 0x4, 0x10000, 0xc441, 0xecf, 0x7, 0x7, 0x8, 0x4, 0x1000, 0x28, 0x1, 0x6e46, 0x7fff, 0x9, 0xd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000000)=""/49, 0x31) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) 36.289771661s ago: executing program 0 (id=6912): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0xffff000000000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 0s ago: executing program 32 (id=6912): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0xffff000000000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) kernel console output (not intermixed with test programs): netlink: 'syz.2.5959': attribute type 29 has an invalid length. [ 937.373496][T29235] erspan1: entered allmulticast mode [ 937.404295][T29238] syzkaller0: entered promiscuous mode [ 937.404321][T29238] syzkaller0: entered allmulticast mode [ 937.406550][T29238] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 937.697829][T29254] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20004 [ 937.793761][T29264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5969'. [ 937.964233][T29277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5969'. [ 938.714953][T29264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5969'. [ 938.737114][T29276] netlink: 'syz.1.5965': attribute type 5 has an invalid length. [ 938.854607][T29285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5973'. [ 938.855208][T29285] netlink: 632 bytes leftover after parsing attributes in process `syz.3.5973'. [ 938.935368][T29288] erspan2: entered allmulticast mode [ 939.071755][T29302] netlink: 'syz.3.5976': attribute type 1 has an invalid length. [ 939.073389][T29295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5975'. [ 939.074152][T29304] netlink: 'syz.3.5976': attribute type 1 has an invalid length. [ 939.186603][T29311] FAULT_INJECTION: forcing a failure. [ 939.186603][T29311] name failslab, interval 1, probability 0, space 0, times 0 [ 939.186636][T29311] CPU: 1 UID: 0 PID: 29311 Comm: syz.1.5978 Not tainted syzkaller #0 PREEMPT(full) [ 939.186658][T29311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.186670][T29311] Call Trace: [ 939.186678][T29311] [ 939.186686][T29311] dump_stack_lvl+0xe8/0x150 [ 939.186720][T29311] should_fail_ex+0x410/0x560 [ 939.186750][T29311] ? __alloc_skb+0x1db/0x7a0 [ 939.186773][T29311] should_failslab+0xa8/0x100 [ 939.186801][T29311] ? __alloc_skb+0x1db/0x7a0 [ 939.186825][T29311] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 939.186846][T29311] ? __alloc_skb+0x18d/0x7a0 [ 939.186873][T29311] ? __alloc_skb+0x1db/0x7a0 [ 939.186906][T29311] __alloc_skb+0x1db/0x7a0 [ 939.186946][T29311] alloc_skb_with_frags+0xc6/0x760 [ 939.186979][T29311] ? __lock_acquire+0x747/0x2de0 [ 939.187002][T29311] sock_alloc_send_pskb+0x878/0x990 [ 939.187042][T29311] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 939.187080][T29311] tun_get_user+0x99b/0x4450 [ 939.187121][T29311] ? aa_file_perm+0x18b/0x15f0 [ 939.187155][T29311] ? aa_file_perm+0x4ed/0x15f0 [ 939.187181][T29311] ? __pfx_tun_get_user+0x10/0x10 [ 939.187209][T29311] ? __lock_acquire+0x747/0x2de0 [ 939.187232][T29311] ? kstrtoull+0x137/0x1d0 [ 939.187262][T29311] ? ref_tracker_alloc+0x341/0x4b0 [ 939.187288][T29311] ? lock_acquire+0x115/0x350 [ 939.187310][T29311] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 939.187339][T29311] ? lock_acquire+0x115/0x350 [ 939.187361][T29311] ? tun_get+0x1c/0x2f0 [ 939.187390][T29311] ? tun_get+0x1c/0x2f0 [ 939.187414][T29311] ? tun_get+0x1c/0x2f0 [ 939.187441][T29311] tun_chr_write_iter+0x113/0x200 [ 939.187469][T29311] vfs_write+0x612/0xba0 [ 939.187496][T29311] ? __pfx_vfs_write+0x10/0x10 [ 939.187526][T29311] ? __fget_files+0x2a/0x420 [ 939.187566][T29311] ksys_write+0x150/0x270 [ 939.187588][T29311] ? __pfx_ksys_write+0x10/0x10 [ 939.187619][T29311] do_syscall_64+0x166/0x520 [ 939.187640][T29311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.187660][T29311] ? clear_bhb_loop+0x70/0xc0 [ 939.187684][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.187704][T29311] RIP: 0033:0x7fe80ff5e9ce [ 939.187721][T29311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 939.187738][T29311] RSP: 002b:00007fe810f05fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 939.187759][T29311] RAX: ffffffffffffffda RBX: 00007fe810f066c0 RCX: 00007fe80ff5e9ce [ 939.187773][T29311] RDX: 0000000000000fc0 RSI: 0000200000000940 RDI: 00000000000000c8 [ 939.187786][T29311] RBP: 00007fe810f06090 R08: 0000000000000000 R09: 0000000000000000 [ 939.187798][T29311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.187810][T29311] R13: 00007fe810226038 R14: 00007fe810225fa0 R15: 00007ffc2d9453d8 [ 939.187842][T29311] [ 939.298823][T29302] 8021q: adding VLAN 0 to HW filter on device bond12 [ 939.302808][T29309] netlink: 'syz.3.5976': attribute type 5 has an invalid length. [ 939.538061][T29325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5980'. [ 939.598862][T29323] net_ratelimit: 102 callbacks suppressed [ 939.598883][T29323] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 939.621114][T29307] bond12: (slave veth5): Enslaving as an active interface with a down link [ 939.658291][T29314] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 939.665616][T29314] bond12: (slave batadv2): making interface the new active one [ 939.668927][T29314] batadv2: entered promiscuous mode [ 939.673060][T29314] bond12: (slave batadv2): Enslaving as an active interface with an up link [ 939.889222][T29340] netlink: Invalid conntrack timeout [ 939.889254][T29340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.991537][T29343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5987'. [ 940.121447][T29354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5989'. [ 940.296172][T29354] hsr_slave_1 (unregistering): left promiscuous mode [ 940.341407][T29370] netlink: Conntrack attr has 1 unknown bytes [ 940.341444][T29370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.427364][ C0] TC_ACT_REPEAT abuse ? [ 940.427439][ C0] TC_ACT_REPEAT abuse ? [ 940.461889][T29374] FAULT_INJECTION: forcing a failure. [ 940.461889][T29374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 940.461922][T29374] CPU: 0 UID: 0 PID: 29374 Comm: syz.2.5992 Not tainted syzkaller #0 PREEMPT(full) [ 940.461944][T29374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 940.461955][T29374] Call Trace: [ 940.461962][T29374] [ 940.461971][T29374] dump_stack_lvl+0xe8/0x150 [ 940.462004][T29374] should_fail_ex+0x410/0x560 [ 940.462034][T29374] prepare_alloc_pages+0x223/0x600 [ 940.462097][T29374] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 940.462127][T29374] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 940.462156][T29374] ? __pfx_policy_nodemask+0x10/0x10 [ 940.462180][T29374] ? trace_kmalloc+0x2a/0xf0 [ 940.462204][T29374] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 940.462231][T29374] alloc_pages_mpol+0x21e/0x390 [ 940.462265][T29374] alloc_pages_noprof+0xb1/0x2b0 [ 940.462293][T29374] alloc_skb_with_frags+0x264/0x760 [ 940.462333][T29374] sock_alloc_send_pskb+0x878/0x990 [ 940.462371][T29374] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 940.462410][T29374] tun_get_user+0x99b/0x4450 [ 940.462449][T29374] ? aa_file_perm+0x18b/0x15f0 [ 940.462489][T29374] ? aa_file_perm+0x4ed/0x15f0 [ 940.462517][T29374] ? __pfx_tun_get_user+0x10/0x10 [ 940.462543][T29374] ? __lock_acquire+0x747/0x2de0 [ 940.462567][T29374] ? kstrtoull+0x137/0x1d0 [ 940.462598][T29374] ? ref_tracker_alloc+0x341/0x4b0 [ 940.462624][T29374] ? lock_acquire+0x115/0x350 [ 940.462646][T29374] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 940.462675][T29374] ? lock_acquire+0x115/0x350 [ 940.462696][T29374] ? tun_get+0x1c/0x2f0 [ 940.462724][T29374] ? tun_get+0x1c/0x2f0 [ 940.462747][T29374] ? tun_get+0x1c/0x2f0 [ 940.462776][T29374] tun_chr_write_iter+0x113/0x200 [ 940.462804][T29374] vfs_write+0x612/0xba0 [ 940.462831][T29374] ? __pfx_vfs_write+0x10/0x10 [ 940.462859][T29374] ? __fget_files+0x2a/0x420 [ 940.462897][T29374] ksys_write+0x150/0x270 [ 940.462919][T29374] ? __pfx_ksys_write+0x10/0x10 [ 940.462949][T29374] do_syscall_64+0x166/0x520 [ 940.462968][T29374] ? trace_irq_disable+0x3b/0x140 [ 940.462990][T29374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.463010][T29374] ? clear_bhb_loop+0x70/0xc0 [ 940.463034][T29374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.463054][T29374] RIP: 0033:0x7fafa755e9ce [ 940.463072][T29374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 940.463089][T29374] RSP: 002b:00007fafa84fafb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 940.463110][T29374] RAX: ffffffffffffffda RBX: 00007fafa84fb6c0 RCX: 00007fafa755e9ce [ 940.463123][T29374] RDX: 0000000000000fc0 RSI: 0000200000000940 RDI: 00000000000000c8 [ 940.463135][T29374] RBP: 00007fafa84fb090 R08: 0000000000000000 R09: 0000000000000000 [ 940.463147][T29374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.463158][T29374] R13: 00007fafa7826038 R14: 00007fafa7825fa0 R15: 00007ffcced2b1a8 [ 940.463188][T29374] [ 940.464313][T29376] netlink: 'syz.0.5993': attribute type 21 has an invalid length. [ 940.464335][T29376] IPv6: NLM_F_CREATE should be specified when creating new route [ 940.829618][T29392] netlink: 'syz.4.5997': attribute type 11 has an invalid length. [ 940.853488][T29392] netlink: 'syz.4.5997': attribute type 23 has an invalid length. [ 941.181249][T16937] batman_adv: batadv0: Interface deactivated: syz_tun [ 941.268153][T16937] batman_adv: batadv0: Removing interface: syz_tun [ 941.268846][T29404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.324436][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 941.343044][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 941.345366][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 941.360707][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 941.372889][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 941.443566][T29410] batman_adv: batadv0: Adding interface: syzkaller0 [ 941.443590][T29410] batman_adv: batadv0: Interface activated: syzkaller0 [ 941.509633][T29416] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.618679][T29419] gretap1: entered promiscuous mode [ 941.621165][T29419] batman_adv: batadv0: Adding interface: gretap1 [ 941.621183][T29419] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 941.708462][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 941.940550][T29438] 0·: renamed from hsr0 [ 941.963165][T29438] 0·: entered allmulticast mode [ 941.963189][T29438] hsr_slave_0: entered allmulticast mode [ 941.976534][T29438] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 942.244569][T29403] wg0 speed is unknown, defaulting to 1000 [ 942.309019][T29448] __nla_validate_parse: 6 callbacks suppressed [ 942.309039][T29448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6013'. [ 942.309054][T29448] netlink: 'syz.0.6013': attribute type 1 has an invalid length. [ 942.549655][T29457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6016'. [ 943.242189][T29403] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.242733][T29403] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.242881][T29403] bridge_slave_0: entered allmulticast mode [ 943.244723][T29403] bridge_slave_0: entered promiscuous mode [ 943.275101][T29403] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.275260][T29403] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.275408][T29403] bridge_slave_1: entered allmulticast mode [ 943.299982][T29403] bridge_slave_1: entered promiscuous mode [ 943.341153][T29403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.344012][T29403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.405227][T29403] team0: Port device team_slave_0 added [ 943.418913][T29403] team0: Port device team_slave_1 added [ 943.452548][T29492] erspan2: entered allmulticast mode [ 943.466251][T15943] Bluetooth: hci2: command tx timeout [ 943.509530][T29494] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6027'. [ 943.509924][T29403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.509939][T29403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.509963][T29403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.511869][T29403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.511882][T29403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.511907][T29403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.820990][T29403] hsr_slave_0: entered promiscuous mode [ 943.823775][T29403] hsr_slave_1: entered promiscuous mode [ 943.849012][T29497] wg0 speed is unknown, defaulting to 1000 [ 944.150689][T29506] syzkaller0: entered promiscuous mode [ 944.150711][T29506] syzkaller0: entered allmulticast mode [ 944.160154][T29518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6034'. [ 944.621815][T29532] erspan1: entered allmulticast mode [ 944.753252][T29540] veth0: mtu less than device minimum [ 944.945754][T29548] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6044'. [ 944.965286][T29547] netlink: 'syz.3.6043': attribute type 1 has an invalid length. [ 944.981782][T29403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.981818][T29403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.123400][T29559] netlink: 'syz.0.6046': attribute type 2 has an invalid length. [ 945.123708][T29560] netlink: 'syz.0.6046': attribute type 2 has an invalid length. [ 945.124261][T29559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6046'. [ 945.124534][T29559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6046'. [ 945.138960][T29553] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 945.177818][T29553] bond14 (unregistering): Released all slaves [ 945.204719][T29556] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 945.228078][T29556] bond14 (unregistering): Released all slaves [ 945.235047][T29563] netlink: 'syz.0.6046': attribute type 11 has an invalid length. [ 945.235069][T29563] netlink: 'syz.0.6046': attribute type 11 has an invalid length. [ 945.235081][T29563] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6046'. [ 945.346872][T29403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.346894][T29403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.531295][T29403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.531330][T29403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.548247][T15943] Bluetooth: hci2: command tx timeout [ 945.755094][T29575] ip_tables: iptables: counters copy to user failed while replacing table [ 945.861150][T29403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.861186][T29403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.947862][T29577] netlink: 'syz.4.6049': attribute type 1 has an invalid length. [ 946.210903][T29596] erspan1: entered allmulticast mode [ 946.482606][T29607] bond12: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 946.489376][T29607] bond12 (unregistering): Released all slaves [ 946.545516][T29617] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 946.730877][T29403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 946.745567][T29403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.751736][T29403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 946.771640][T29403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.774096][T29403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 946.810663][T29403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.811440][T29631] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6059'. [ 946.811460][T29631] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6059'. [ 946.815464][T29403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 946.830385][T29403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 947.127969][T29403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.171302][T29403] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.302869][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.302973][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.341682][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.341766][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.626731][T15943] Bluetooth: hci2: command tx timeout [ 947.673646][T29672] erspan1: entered allmulticast mode [ 948.071210][ C1] TC_ACT_REPEAT abuse ? [ 948.071279][ C1] TC_ACT_REPEAT abuse ? [ 948.071332][ C1] TC_ACT_REPEAT abuse ? [ 948.071384][ C1] TC_ACT_REPEAT abuse ? [ 948.071436][ C1] TC_ACT_REPEAT abuse ? [ 948.071487][ C1] TC_ACT_REPEAT abuse ? [ 948.071541][ C1] TC_ACT_REPEAT abuse ? [ 948.071592][ C1] TC_ACT_REPEAT abuse ? [ 948.162372][T29700] __nla_validate_parse: 1 callbacks suppressed [ 948.162392][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6070'. [ 948.189012][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6070'. [ 948.219066][T29700] bond12: option xmit_hash_policy: invalid value (64) [ 948.248747][T29700] bond12 (unregistering): Released all slaves [ 948.349600][T29708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6072'. [ 948.383905][T29708] bridge8: entered promiscuous mode [ 948.383928][T29708] bridge8: entered allmulticast mode [ 948.385323][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6072'. [ 948.667698][T29725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6076'. [ 948.694394][T29403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.797160][T29715] bond14: Removing last arp target with arp_interval on [ 948.838371][T29403] veth0_vlan: entered promiscuous mode [ 948.869915][T29731] erspan1: entered allmulticast mode [ 948.911682][T29403] veth1_vlan: entered promiscuous mode [ 949.130040][T29403] veth0_macvtap: entered promiscuous mode [ 949.155393][T29403] veth1_macvtap: entered promiscuous mode [ 949.260432][T29403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.303007][T29403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.322109][T29742] set match dimension is over the limit! [ 949.354600][T29757] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 949.355148][T29757] netlink: 'syz.4.6081': attribute type 1 has an invalid length. [ 949.446499][T29766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6081'. [ 949.498131][T18955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.498425][T18955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.498704][T18955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.499012][T18955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.627382][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6083'. [ 949.651869][T29766] 8021q: adding VLAN 0 to HW filter on device bond11 [ 949.707144][T15943] Bluetooth: hci2: command tx timeout [ 950.001936][T24972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.001957][T24972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.150565][T18956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.150587][T18956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.297642][T29807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6088'. [ 950.334849][T29808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6088'. [ 950.334870][T29808] net_ratelimit: 102 callbacks suppressed [ 950.334882][T29808] openvswitch: netlink: Flow actions attr not present in new flow. [ 950.361567][T29808] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6088'. [ 950.382830][T29815] netlink: 'syz.1.6089': attribute type 1 has an invalid length. [ 950.441183][T29815] 8021q: adding VLAN 0 to HW filter on device bond12 [ 950.780759][T29830] erspan1: entered allmulticast mode [ 950.877568][T24973] batadv2: left promiscuous mode [ 951.021724][T29842] Cannot find set identified by id 0 to match [ 951.240245][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.245175][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 951.267973][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.275625][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.277361][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 951.620632][T29867] nbd: must specify an index to disconnect [ 951.791021][T18208] batman_adv: batadv0: Interface deactivated: syz_tun [ 951.923856][T18208] batman_adv: batadv0: Removing interface: syz_tun [ 952.332825][ T3333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.332861][ T3333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.333488][ T3333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 952.470463][T29890] bond12 (unregistering): Released all slaves [ 952.694543][ T3333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.694579][ T3333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.694606][ T3333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 952.779328][T29855] wg0 speed is unknown, defaulting to 1000 [ 952.861608][ T3333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.861644][ T3333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.863490][ T3333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 953.133488][ C1] TC_ACT_REPEAT abuse ? [ 953.133581][ C1] TC_ACT_REPEAT abuse ? [ 953.133634][ C1] TC_ACT_REPEAT abuse ? [ 953.133686][ C1] TC_ACT_REPEAT abuse ? [ 953.133737][ C1] TC_ACT_REPEAT abuse ? [ 953.133791][ C1] TC_ACT_REPEAT abuse ? [ 953.133842][ C1] TC_ACT_REPEAT abuse ? [ 953.133893][ C1] TC_ACT_REPEAT abuse ? [ 953.133942][ C1] TC_ACT_REPEAT abuse ? [ 953.387611][ T5619] Bluetooth: hci5: command tx timeout [ 953.765646][T29954] syzkaller1: entered promiscuous mode [ 953.765668][T29954] syzkaller1: entered allmulticast mode [ 954.013661][T29975] erspan2: entered allmulticast mode [ 954.124517][T29977] __nla_validate_parse: 4 callbacks suppressed [ 954.124537][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6119'. [ 954.204752][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6120'. [ 954.227654][T29978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6119'. [ 954.244643][ T3333] dvmrp0: left allmulticast mode [ 954.244784][ T3333] dvmrp8: left allmulticast mode [ 954.244885][ T3333] pimreg3: left allmulticast mode [ 954.521088][ T3333] batman_adv: batadv0: Removing interface: gretap1 [ 954.554016][ T3333] bond2 (unregistering): (slave geneve2): Releasing active interface [ 954.619442][ T3333] bond5 (unregistering): (slave bridge2): Releasing active interface [ 954.669438][ T3333] bond0 (unregistering): Released all slaves [ 954.673628][ T3333] bond1 (unregistering): Released all slaves [ 954.705978][ T3333] bond2 (unregistering): Released all slaves [ 954.724079][ T3333] bond3 (unregistering): Released all slaves [ 954.743348][ T3333] bond4 (unregistering): Released all slaves [ 954.763744][ T3333] bond5 (unregistering): Released all slaves [ 954.778110][ T3333] bond6 (unregistering): Released all slaves [ 954.785976][ T3333] bond7 (unregistering): Released all slaves [ 954.812018][ T3333] bond8 (unregistering): Released all slaves [ 954.829646][ T3333] bond9 (unregistering): Released all slaves [ 954.848504][ T3333] bond10 (unregistering): Released all slaves [ 954.858170][ T3333] bond11 (unregistering): Released all slaves [ 954.874600][ T3333] bond12 (unregistering): (slave veth5): Releasing active interface [ 954.874629][ T3333] batadv2: entered promiscuous mode [ 954.891860][ T3333] bond12 (unregistering): (slave batadv2): Releasing active interface [ 954.891887][ T3333] batadv2: left promiscuous mode [ 954.893673][ T3333] bond12 (unregistering): Released all slaves [ 954.911238][ T3333] bond13 (unregistering): Released all slaves [ 954.925432][ T3333] bond14 (unregistering): Released all slaves [ 955.054954][T29855] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.055051][T29855] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.055208][T29855] bridge_slave_0: entered allmulticast mode [ 955.069859][T29855] bridge_slave_0: entered promiscuous mode [ 955.097234][T29855] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.097326][T29855] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.097500][T29855] bridge_slave_1: entered allmulticast mode [ 955.104638][T29855] bridge_slave_1: entered promiscuous mode [ 955.224302][ T3333] tipc: Disabling bearer [ 955.225338][ T3333] tipc: Left network mode [ 955.270347][T29855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.273454][T29855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.371397][T29855] team0: Port device team_slave_0 added [ 955.374194][T29855] team0: Port device team_slave_1 added [ 955.458951][T29855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.458969][T29855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.458995][T29855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.460856][T29855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.460870][T29855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.460895][T29855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.469155][ T5619] Bluetooth: hci5: command tx timeout [ 955.639348][T29855] hsr_slave_0: entered promiscuous mode [ 955.640337][T29855] hsr_slave_1: entered promiscuous mode [ 955.641008][T29855] debugfs: 'hsr0' already exists in 'hsr' [ 955.641027][T29855] Cannot create hsr debugfs directory [ 955.972492][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 956.313520][ T3333] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 956.313543][ T3333] batman_adv: batadv0: Removing interface: syzkaller0 [ 956.355498][ T3333] veth1_macvtap: left promiscuous mode [ 956.355585][ T3333] veth1_vlan: left promiscuous mode [ 956.355611][ T3333] veth0_vlan: left promiscuous mode [ 956.846568][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 957.269802][ T3333] IPVS: stop unused estimator thread 0... [ 957.399558][T29855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 957.404125][T29855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 957.405152][T29855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 957.408705][T29855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.409535][T29855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 957.451141][T29855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.452321][T29855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 957.462981][T29855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 957.548138][ T5619] Bluetooth: hci5: command tx timeout [ 957.599906][T29855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.620377][T29855] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.630054][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.630152][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.642806][T24973] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.642892][T24973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.138440][T29855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.168396][T29855] veth0_vlan: entered promiscuous mode [ 958.173742][T29855] veth1_vlan: entered promiscuous mode [ 958.210504][T29855] veth0_macvtap: entered promiscuous mode [ 958.213383][T29855] veth1_macvtap: entered promiscuous mode [ 958.237512][T29855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.245533][T29855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.278661][T18955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.279074][T24973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.279139][T24973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.279196][T24973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.372343][ T3333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.372364][ T3333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.409250][ T3333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.409263][ T3333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.628389][ T5619] Bluetooth: hci5: command tx timeout [ 966.545894][T30085] netlink: 'syz.1.6122': attribute type 4 has an invalid length. [ 966.558204][T30085] netlink: 'syz.1.6122': attribute type 4 has an invalid length. [ 966.566994][T30086] xt_TCPMSS: Only works on TCP SYN packets [ 966.585722][T30085] veth1_macvtap: entered promiscuous mode [ 966.668084][ C0] net_ratelimit: 89 callbacks suppressed [ 966.668105][ C0] TC_ACT_REPEAT abuse ? [ 966.668165][ C0] TC_ACT_REPEAT abuse ? [ 966.668218][ C0] TC_ACT_REPEAT abuse ? [ 966.668270][ C0] TC_ACT_REPEAT abuse ? [ 966.668315][ C0] TC_ACT_REPEAT abuse ? [ 966.668368][ C0] TC_ACT_REPEAT abuse ? [ 966.668442][ C0] TC_ACT_REPEAT abuse ? [ 966.668494][ C0] TC_ACT_REPEAT abuse ? [ 966.668546][ C0] TC_ACT_REPEAT abuse ? [ 966.668602][ C0] TC_ACT_REPEAT abuse ? [ 966.752645][T30097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6126'. [ 966.765944][T30098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6126'. [ 967.071396][T30116] erspan2: entered allmulticast mode [ 967.244342][T30122] netlink: 'syz.3.6135': attribute type 11 has an invalid length. [ 967.244364][T30122] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6135'. [ 967.403641][T30143] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 967.412669][T30146] netlink: 'syz.1.6139': attribute type 1 has an invalid length. [ 967.501888][T30146] bond13: entered promiscuous mode [ 967.502265][T30146] 8021q: adding VLAN 0 to HW filter on device bond13 [ 967.505414][T30144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6139'. [ 967.537414][T30144] bond13: entered allmulticast mode [ 967.584993][T30146] bond13: (slave bridge3): making interface the new active one [ 967.585018][T30146] bridge3: entered promiscuous mode [ 967.585190][T30146] bridge3: entered allmulticast mode [ 967.612218][T30146] bond13: (slave bridge3): Enslaving as an active interface with an up link [ 967.655387][T30150] syzkaller0: entered promiscuous mode [ 967.655411][T30150] syzkaller0: entered allmulticast mode [ 967.735154][T30129] netlink: 'syz.0.6136': attribute type 12 has an invalid length. [ 968.031488][T30169] erspan2: entered allmulticast mode [ 968.355856][T30191] syzkaller0: entered promiscuous mode [ 968.355881][T30191] syzkaller0: entered allmulticast mode [ 968.793878][T30220] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6161'. [ 968.794409][T30220] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6161'. [ 968.807935][T30225] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6161'. [ 968.815103][T30220] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6161'. [ 968.981321][T30230] erspan2: entered allmulticast mode [ 969.265296][T30251] xt_TCPMSS: Only works on TCP SYN packets [ 969.340090][T30257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 969.340120][T30257] IPv6: NLM_F_CREATE should be set when creating new route [ 969.370509][T30257] dvmrp0: entered allmulticast mode [ 969.424637][T30261] netlink: 'syz.1.6171': attribute type 2 has an invalid length. [ 969.424661][T30261] netlink: 'syz.1.6171': attribute type 11 has an invalid length. [ 969.424676][T30261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6171'. [ 969.532893][T30263] syzkaller0: entered promiscuous mode [ 969.532916][T30263] syzkaller0: entered allmulticast mode [ 969.552360][T30271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6173'. [ 969.567976][T30272] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 969.742490][T30280] veth2: entered promiscuous mode [ 969.742512][T30280] veth2: entered allmulticast mode [ 984.262598][T30307] __nla_validate_parse: 54 callbacks suppressed [ 984.262618][T30307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6178'. [ 984.262637][T30307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6178'. [ 984.263264][T30307] net_ratelimit: 88 callbacks suppressed [ 984.263278][T30307] TC_ACT_REPEAT abuse ? [ 984.645209][T30354] erspan1: entered allmulticast mode [ 984.738278][T30357] syzkaller0: entered promiscuous mode [ 984.738301][T30357] syzkaller0: entered allmulticast mode [ 987.219995][T30311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.415537][T30373] netlink: 'syz.4.6191': attribute type 2 has an invalid length. [ 987.415560][T30373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6191'. [ 987.492728][T30376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6190'. [ 987.492756][T30376] netlink: 'syz.3.6190': attribute type 3 has an invalid length. [ 987.521588][T30373] : entered promiscuous mode [ 987.764077][T30393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6196'. [ 987.764185][T30393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6196'. [ 987.772378][T30396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'. [ 989.892749][T30395] erspan1: entered allmulticast mode [ 990.033487][T30401] ipt_REJECT: TCP_RESET invalid for non-tcp [ 990.151567][T30414] bond14: option resend_igmp: invalid value (32767) [ 990.151591][T30414] bond14: option resend_igmp: allowed values 0 - 255 [ 990.154733][T30414] bond14 (unregistering): Released all slaves [ 990.237513][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6206'. [ 990.297447][T30436] netlink: 'syz.3.6206': attribute type 11 has an invalid length. [ 990.297469][T30436] netlink: 'syz.3.6206': attribute type 11 has an invalid length. [ 990.297483][T30436] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6206'. [ 990.390691][T30425] bond14: option resend_igmp: invalid value (32767) [ 990.390716][T30425] bond14: option resend_igmp: allowed values 0 - 255 [ 990.425721][T30425] bond14 (unregistering): Released all slaves [ 990.515501][T30436] netlink: 81 bytes leftover after parsing attributes in process `syz.3.6206'. [ 991.184261][T30484] ip_tables: iptables: counters copy to user failed while replacing table [ 991.199690][T30483] erspan2: entered allmulticast mode [ 991.267635][T30489] sch_tbf: burst 674 is lower than device syzkaller0 mtu (1514) ! [ 991.268175][T30489] syzkaller0: entered promiscuous mode [ 991.268194][T30489] syzkaller0: entered allmulticast mode [ 991.368362][T30493] veth1_to_bond: entered allmulticast mode [ 991.370389][T30491] veth1_to_bond: left allmulticast mode [ 991.521139][T30504] netlink: 'syz.1.6221': attribute type 8 has an invalid length. [ 991.521161][T30504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6221'. [ 991.533050][T30504] veth1_to_team: entered promiscuous mode [ 991.536474][T30504] gretap0: entered promiscuous mode [ 991.537734][T30504] bond_slave_1: entered promiscuous mode [ 991.537920][T30504] bond_slave_1: left promiscuous mode [ 991.547478][T30504] veth1_to_team: left promiscuous mode [ 991.552189][T30504] gretap0: left promiscuous mode [ 991.714712][T30513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6224'. [ 991.744969][T30511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6223'. [ 992.043343][T15943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 992.069260][T15943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 992.072476][T15943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 992.075457][T15943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 992.100469][T15943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 992.910234][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.921583][T30519] wg0 speed is unknown, defaulting to 1000 [ 993.381396][T30519] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.381503][T30519] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.381578][T30519] bridge_slave_0: entered allmulticast mode [ 993.382601][T30519] bridge_slave_0: entered promiscuous mode [ 993.389448][T30519] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.389545][T30519] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.389668][T30519] bridge_slave_1: entered allmulticast mode [ 993.391595][T30519] bridge_slave_1: entered promiscuous mode [ 993.433184][T30519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.441338][T30519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.472045][T30519] team0: Port device team_slave_0 added [ 993.473860][T30519] team0: Port device team_slave_1 added [ 993.499148][T30519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.499164][T30519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.499191][T30519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.500540][T30519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.500554][T30519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.500580][T30519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.582195][T30519] hsr_slave_0: entered promiscuous mode [ 993.584780][T30519] hsr_slave_1: entered promiscuous mode [ 993.588117][T30519] debugfs: 'hsr0' already exists in 'hsr' [ 993.588137][T30519] Cannot create hsr debugfs directory [ 993.751512][T30519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.751534][T30519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.839938][T30519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.839960][T30519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.923047][T30519] bond0: (slave netdevsim1): Releasing backup interface [ 993.927525][T30519] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 993.930573][T30519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.930606][T30519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.187280][ T5619] Bluetooth: hci3: command tx timeout [ 995.164712][T30526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.175157][T30577] netlink: 'syz.3.6237': attribute type 12 has an invalid length. [ 995.345454][ T5619] Bluetooth: hci2: ACL packet for unknown connection handle 3484 [ 995.362775][T30519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 995.387251][T30519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 995.400693][T30591] erspan1: entered allmulticast mode [ 995.425368][T30519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 995.441741][T30519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 995.442619][T30519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 995.463682][T30519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 995.475923][T30519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 995.495889][T30519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 995.696544][T30519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.723291][ T51] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 995.724262][ T51] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 995.761701][T30519] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.780649][T18943] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.780739][T18943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.804766][T24965] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.804858][T24965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.870492][T30621] C: entered promiscuous mode [ 995.870845][T30621] tunl0: entered promiscuous mode [ 995.871240][T30621] gre0: entered promiscuous mode [ 995.886219][T30621] erspan0: entered promiscuous mode [ 995.886534][T30621] ip_vti0: entered promiscuous mode [ 995.979425][T30625] openvswitch: netlink: Multiple metadata blocks provided [ 996.075843][T30628] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 996.097293][T30633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6254'. [ 996.123084][T30631] erspan2: entered allmulticast mode [ 996.135842][ T31] audit: type=1804 audit(1791477852.995:3): pid=30630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6252" name="/newroot/591/cgroup.controllers" dev="tmpfs" ino=3029 res=1 errno=0 [ 996.163033][ T31] audit: type=1800 audit(1791477852.995:4): pid=30630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6252" name="cgroup.controllers" dev="tmpfs" ino=3029 res=0 errno=0 [ 996.266729][ T5619] Bluetooth: hci3: command tx timeout [ 996.573009][T30656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6261'. [ 996.619260][T30663] netlink: 'syz.2.6263': attribute type 1 has an invalid length. [ 996.623519][T30665] sctp: [Deprecated]: syz.4.6264 (pid 30665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 996.623519][T30665] Use struct sctp_sack_info instead [ 996.630387][T30665] x_tables: duplicate underflow at hook 2 [ 996.731051][T30663] openvswitch: netlink: IP tunnel dst address not specified [ 996.731087][T30663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.849425][T30681] netlink: 'syz.0.6266': attribute type 1 has an invalid length. [ 996.852253][T30681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6266'. [ 996.852276][T30681] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6266'. [ 996.852333][T30681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6266'. [ 996.854481][T30681] netlink: 'syz.0.6266': attribute type 11 has an invalid length. [ 996.854500][T30681] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6266'. [ 997.418801][T30519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.433530][T30709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6275'. [ 997.517678][T30716] netlink: 'syz.2.6277': attribute type 1 has an invalid length. [ 997.555242][T30716] ipvlan2: entered allmulticast mode [ 997.555266][T30716] veth43: entered allmulticast mode [ 997.633011][T30519] veth0_vlan: entered promiscuous mode [ 997.658706][T30519] veth1_vlan: entered promiscuous mode [ 997.727616][T30519] veth0_macvtap: entered promiscuous mode [ 997.733780][T30519] veth1_macvtap: entered promiscuous mode [ 997.772231][T30519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.801532][T30519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.860320][T24965] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.860668][T24965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.860704][T24965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.860753][T24965] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.873469][T30728] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6279'. [ 998.022282][ T3333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.022309][ T3333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.153488][T18956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.153511][T18956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.349492][ T5619] Bluetooth: hci3: command tx timeout [ 998.454089][T30743] syzkaller0: entered promiscuous mode [ 998.454114][T30743] syzkaller0: entered allmulticast mode [ 998.693775][T30750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6288'. [ 998.693809][T30750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6288'. [ 998.945179][T15943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 998.957972][T15943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 998.959283][T15943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 998.961142][T15943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 998.978912][T15943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 999.243908][T30772] gtp2: entered promiscuous mode [ 999.243934][T30772] gtp2: entered allmulticast mode [ 999.463106][T30787] syzkaller0: entered promiscuous mode [ 999.463131][T30787] syzkaller0: entered allmulticast mode [ 999.565394][T24972] bond0: (slave bond_slave_0): interface is now down [ 999.565427][T24972] bond0: (slave bond_slave_1): interface is now down [ 999.594754][T24972] bond0: now running without any active interface! [ 999.745639][T30758] wg0 speed is unknown, defaulting to 1000 [ 999.889148][T30802] veth1_macvtap: mtu less than device minimum [ 999.941800][T30804] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1000.358214][T30824] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 1000.358246][T30824] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ [ 1000.426692][T15943] Bluetooth: hci3: command tx timeout [ 1000.447062][T30828] syzkaller0: entered promiscuous mode [ 1000.447087][T30828] syzkaller0: entered allmulticast mode [ 1000.964486][T30758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.965235][T30758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.965365][T30758] bridge_slave_0: entered allmulticast mode [ 1000.975919][T30758] bridge_slave_0: entered promiscuous mode [ 1000.983645][T30758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.983811][T30758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.984719][T30758] bridge_slave_1: entered allmulticast mode [ 1000.992394][T30758] bridge_slave_1: entered promiscuous mode [ 1001.066226][T15943] Bluetooth: hci1: command tx timeout [ 1001.087884][T30758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.097884][T30758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.158606][T30758] team0: Port device team_slave_0 added [ 1001.167768][T30758] team0: Port device team_slave_1 added [ 1001.311835][T30758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.311855][T30758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.311881][T30758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.324718][T30758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.325728][T30758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.325774][T30758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.471258][T30861] __nla_validate_parse: 5 callbacks suppressed [ 1001.471279][T30861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6319'. [ 1001.502022][T30859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1001.517831][T30758] hsr_slave_0: entered promiscuous mode [ 1001.519650][T30758] hsr_slave_1: entered promiscuous mode [ 1001.520350][T30758] debugfs: 'hsr0' already exists in 'hsr' [ 1001.520369][T30758] Cannot create hsr debugfs directory [ 1001.573307][T30859] hsr_slave_1 (unregistering): left promiscuous mode [ 1001.600379][T30870] gre0: entered promiscuous mode [ 1001.732545][T30864] syzkaller0: entered promiscuous mode [ 1001.732569][T30864] syzkaller0: entered allmulticast mode [ 1001.835902][T30883] xt_hashlimit: size too large, truncated to 1048576 [ 1001.913764][T30885] xt_hashlimit: size too large, truncated to 1048576 [ 1002.027745][T30890] erspan1: entered allmulticast mode [ 1002.094662][T30892] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1002.114297][T15943] Bluetooth: hci2: unexpected event 0x03 length: 0 < 11 [ 1002.515935][T30758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.718090][T30758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.850704][T30758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.931253][T30758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.158251][T15943] Bluetooth: hci1: command tx timeout [ 1003.396346][T30932] erspan1: entered allmulticast mode [ 1003.425573][T30933] syzkaller0: entered promiscuous mode [ 1003.425596][T30933] syzkaller0: entered allmulticast mode [ 1003.539946][ C0] TC_ACT_REPEAT abuse ? [ 1003.739821][T30758] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1003.750017][T30758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1003.753653][T30758] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1003.799828][T30758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.808953][T30758] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1003.842875][T30758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1003.867343][T30944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1003.869806][T30758] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1003.915165][T30758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.165111][T30935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6338'. [ 1004.299682][T30758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.329567][T30974] erspan1: entered allmulticast mode [ 1004.501416][T30758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.533428][T24965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.533521][T24965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.563321][T18956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.563432][T18956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.584962][T30979] syzkaller0: entered promiscuous mode [ 1004.584987][T30979] syzkaller0: entered allmulticast mode [ 1004.615266][T30983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6353'. [ 1004.615294][T30983] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6353'. [ 1005.017286][T31004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6358'. [ 1005.241163][T15943] Bluetooth: hci1: command tx timeout [ 1005.353479][T31020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6363'. [ 1005.415808][T31024] erspan2: entered allmulticast mode [ 1005.610733][T31034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6369'. [ 1005.610758][T31034] openvswitch: netlink: Flow key attr not present in new flow. [ 1005.643759][T31037] bond0: Error: Cannot enslave bond to itself. [ 1005.737746][T31044] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6370'. [ 1005.753497][T30758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.214978][T31075] erspan1: entered allmulticast mode [ 1006.401328][T31088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6382'. [ 1006.403029][T30758] veth0_vlan: entered promiscuous mode [ 1006.439400][T30758] veth1_vlan: entered promiscuous mode [ 1006.535031][T30758] veth0_macvtap: entered promiscuous mode [ 1006.558048][T30758] veth1_macvtap: entered promiscuous mode [ 1006.623234][T30758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.650677][T30758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.672159][T31095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6384'. [ 1006.686576][ T3333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.688383][T24973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.688421][T24973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.688453][T24973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.956893][T31104] ip_tables: iptables: counters copy to user failed while replacing table [ 1007.306728][T15943] Bluetooth: hci1: command tx timeout [ 1007.543381][T31120] erspan1: entered allmulticast mode [ 1007.617047][T31130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6394'. [ 1007.702494][T24965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.702517][T24965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.738211][T31133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6393'. [ 1007.802761][T24965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.802783][T24965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.875938][T31140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1007.929533][T31149] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6287'. [ 1008.204870][T31154] tipc: Enabling of bearer rejected, failed to enable media [ 1008.264537][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1008.300806][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1008.302091][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1008.303036][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1008.303656][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1008.863376][ T3333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.863412][ T3333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.034978][T31172] erspan1: entered allmulticast mode [ 1009.240008][ T3333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.240045][ T3333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.333194][T31203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6413'. [ 1009.422030][ T3333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.422065][ T3333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.558955][T31216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.602345][ T3333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.602382][ T3333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.655135][T31155] wg0 speed is unknown, defaulting to 1000 [ 1010.075061][T31229] netlink: 'syz.1.6419': attribute type 1 has an invalid length. [ 1010.075084][T31229] netlink: 'syz.1.6419': attribute type 3 has an invalid length. [ 1010.075097][T31229] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6419'. [ 1010.078712][T31237] erspan1: entered allmulticast mode [ 1010.079617][T31237] batman_adv: batadv0: Adding interface: erspan1 [ 1010.079633][T31237] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 1010.428225][T15943] Bluetooth: hci4: command tx timeout [ 1010.512965][T31265] netlink: 'syz.2.6423': attribute type 1 has an invalid length. [ 1010.656377][T31271] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1011.198368][T31295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 1011.364158][ T3333] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1011.422302][ T3333] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1011.422330][ T3333] bridge4 (unregistering): left promiscuous mode [ 1011.452081][ T3333] bond1 (unregistering): Released all slaves [ 1011.471042][ T3333] bond2 (unregistering): Released all slaves [ 1011.490517][ T3333] bond0 (unregistering): Released all slaves [ 1011.517778][ T3333] bond3 (unregistering): Released all slaves [ 1011.525506][ T3333] bond4 (unregistering): Released all slaves [ 1011.546518][ T3333] bond5 (unregistering): Released all slaves [ 1011.555751][ T3333] bond6 (unregistering): Released all slaves [ 1011.595202][ T3333] bond7 (unregistering): Released all slaves [ 1011.612734][ T3333] bond8 (unregistering): Released all slaves [ 1011.628679][ T3333] bond9 (unregistering): Released all slaves [ 1011.644862][ T3333] bond10 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 1011.663386][ T3333] bond10 (unregistering): Released all slaves [ 1011.678002][ T3333] bond11 (unregistering): Released all slaves [ 1011.711507][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1011.919114][T31301] erspan1: entered allmulticast mode [ 1011.970781][ T3333] ovs0: left promiscuous mode [ 1012.023660][T31311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6435'. [ 1012.023690][T31311] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6435'. [ 1012.024690][T31305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6432'. [ 1012.078537][T31312] netlink: 'syz.4.6435': attribute type 1 has an invalid length. [ 1012.078575][T31312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.279388][T31314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1012.390754][T31322] netlink: zone id is out of range [ 1012.390845][T31322] netlink: set zone limit has 4 unknown bytes [ 1012.509292][T15943] Bluetooth: hci4: command tx timeout [ 1012.601520][T31322] bond0: option ad_select: unable to set because the bond device is up [ 1013.629071][T15943] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1013.629157][T15943] Bluetooth: hci1: Injecting HCI hardware error event [ 1013.633677][ T5619] Bluetooth: hci1: hardware error 0x00 [ 1013.773881][T31155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.773995][T31155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.774156][T31155] bridge_slave_0: entered allmulticast mode [ 1013.809911][T31155] bridge_slave_0: entered promiscuous mode [ 1013.910383][T31155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.910568][T31155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.910731][T31155] bridge_slave_1: entered allmulticast mode [ 1013.938790][T31155] bridge_slave_1: entered promiscuous mode [ 1013.992747][T31365] syzkaller1: entered promiscuous mode [ 1013.992771][T31365] syzkaller1: entered allmulticast mode [ 1014.010735][T31155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.111596][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1014.223937][T31155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.307925][T31432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6450'. [ 1014.316599][T31433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6450'. [ 1014.420119][T31419] syzkaller0: entered promiscuous mode [ 1014.420143][T31419] syzkaller0: entered allmulticast mode [ 1014.586897][T15943] Bluetooth: hci4: command tx timeout [ 1014.611689][T31432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1014.635158][T31436] ipvlan2: entered allmulticast mode [ 1014.635180][T31436] bond1: entered allmulticast mode [ 1015.884111][ T5619] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1016.670202][ T5619] Bluetooth: hci4: command tx timeout [ 1017.358770][ T3333] hsr_slave_0: left promiscuous mode [ 1017.359236][ T3333] hsr_slave_1: left promiscuous mode [ 1017.359878][ T3333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.359891][ T3333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.362029][ T3333] veth1_vlan: left promiscuous mode [ 1017.538957][ T3333] team0 (unregistering): Port device vlan0 removed [ 1017.667806][ T3333] team_slave_1 (unregistering): left promiscuous mode [ 1017.668461][ T3333] team0 (unregistering): Port device team_slave_1 removed [ 1017.674675][ T3333] team_slave_0 (unregistering): left promiscuous mode [ 1017.675352][ T3333] team0 (unregistering): Port device team_slave_0 removed [ 1017.842173][T31155] team0: Port device team_slave_0 added [ 1017.862126][T31433] ipvlan2: entered allmulticast mode [ 1017.937981][T31458] vlan0: entered promiscuous mode [ 1017.938003][T31458] hsr0: entered promiscuous mode [ 1017.938323][T31458] vlan0: entered allmulticast mode [ 1017.938340][T31458] hsr0: entered allmulticast mode [ 1017.938352][T31458] hsr_slave_0: entered allmulticast mode [ 1017.938367][T31458] hsr_slave_1: entered allmulticast mode [ 1017.957494][T31155] team0: Port device team_slave_1 added [ 1018.100053][T31155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.100071][T31155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.100901][T31155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.105262][T31155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.105277][T31155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.105302][T31155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.256515][T31155] hsr_slave_0: entered promiscuous mode [ 1018.257509][T31155] hsr_slave_1: entered promiscuous mode [ 1018.258222][T31155] debugfs: 'hsr0' already exists in 'hsr' [ 1018.258242][T31155] Cannot create hsr debugfs directory [ 1018.627664][ T3333] IPVS: stop unused estimator thread 0... [ 1018.915449][T31499] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6463'. [ 1019.110420][T31507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6464'. [ 1019.288828][T31514] netlink: Unknown conntrack attr (type=205, max=9) [ 1019.654985][T31535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6470'. [ 1019.655007][T31535] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1019.981297][T31155] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1020.034902][T31155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1020.035678][T31155] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1020.063885][T31155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1020.064617][T31155] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1020.090613][T31155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1020.098945][T31155] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1020.118149][T31155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1020.149739][T31557] x_tables: duplicate underflow at hook 4 [ 1020.154340][T31567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6479'. [ 1020.354767][T31155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.381383][T31577] erspan1: entered allmulticast mode [ 1020.390736][T31579] x_tables: duplicate underflow at hook 3 [ 1020.450621][T31155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.472143][T24965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.472241][T24965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.492344][T24965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.492448][T24965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.729833][T31593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6486'. [ 1021.084697][T31613] netlink: 'syz.1.6490': attribute type 4 has an invalid length. [ 1021.084722][T31613] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6490'. [ 1021.682576][T31653] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6500'. [ 1021.792742][T31653] openvswitch: netlink: Flow actions attr not present in new flow. [ 1022.120492][T31666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6502'. [ 1022.185274][T31155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.271830][T31672] block nbd3: NBD_DISCONNECT [ 1022.271927][T31672] block nbd3: Send disconnect failed -32 [ 1022.271947][T31672] block nbd3: shutting down sockets [ 1022.363159][T31155] veth0_vlan: entered promiscuous mode [ 1022.379348][T31155] veth1_vlan: entered promiscuous mode [ 1022.415196][T31155] veth0_macvtap: entered promiscuous mode [ 1022.588542][T31687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6507'. [ 1022.653970][T31691] netlink: 'syz.3.6508': attribute type 21 has an invalid length. [ 1022.712608][T31696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6508'. [ 1023.083143][ T7543] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1023.250851][ T7543] bond5 (unregistering): (slave bridge4): Releasing active interface [ 1023.250875][ T7543] bond5 (unregistering): (slave bridge4): the permanent HWaddr of slave - 12:b8:40:52:43:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1023.283526][ T7543] bond5 (unregistering): (slave bridge5): Releasing active interface [ 1023.329916][ T7543] bond8 (unregistering): (slave bridge0): Releasing active interface [ 1023.422038][ T7543] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.423246][ T7543] .` (unregistering): Released all slaves [ 1023.437745][ T7543] bond1 (unregistering): Released all slaves [ 1023.455884][ T7543] bond2 (unregistering): Released all slaves [ 1023.484918][ T7543] bond3 (unregistering): Released all slaves [ 1023.506487][ T7543] bond4 (unregistering): Released all slaves [ 1023.528594][ T7543] bond5 (unregistering): Released all slaves [ 1023.542025][ T7543] bond6 (unregistering): Released all slaves [ 1023.575689][ T7543] bond7 (unregistering): Released all slaves [ 1023.593248][ T7543] bond0 (unregistering): Released all slaves [ 1023.609641][ T7543] bond8 (unregistering): Released all slaves [ 1023.621755][ T7543] bond9 (unregistering): Released all slaves [ 1023.654624][ T7543] bond10 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1023.655399][ T7543] bond10 (unregistering): Released all slaves [ 1023.668534][ T7543] bond11 (unregistering): Released all slaves [ 1023.704715][T31683] ip6gre1: entered promiscuous mode [ 1023.704730][T31683] ip6gre1: entered allmulticast mode [ 1023.709764][T31696] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1023.746703][T31155] veth1_macvtap: entered promiscuous mode [ 1023.848142][T31155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.870263][T31155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.938611][ T7543] : left promiscuous mode [ 1024.112736][T18943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.127768][T18945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.130379][T24973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.168074][ T7548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.211671][T31736] netlink: 'syz.3.6513': attribute type 28 has an invalid length. [ 1024.211695][T31736] netlink: 'syz.3.6513': attribute type 3 has an invalid length. [ 1024.211711][T31736] __nla_validate_parse: 2 callbacks suppressed [ 1024.211724][T31736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6513'. [ 1024.297817][T31739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6514'. [ 1024.475808][T18955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.475830][T18955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.625720][T18955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.625742][T18955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.775328][T31753] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1024.875977][T31753] bond1 (unregistering): Released all slaves [ 1025.008555][T31757] vlan2: entered promiscuous mode [ 1025.008579][T31757] hsr0: entered promiscuous mode [ 1025.008796][T31757] vlan2: entered allmulticast mode [ 1025.008811][T31757] hsr0: entered allmulticast mode [ 1025.008823][T31757] hsr_slave_0: entered allmulticast mode [ 1025.159233][T31764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6520'. [ 1025.204871][T31769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1025.223819][T31761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6518'. [ 1025.554469][T31777] erspan1: entered allmulticast mode [ 1025.695633][ T7543] veth1_to_team: left promiscuous mode [ 1025.731805][ T7543] hsr_slave_0: left promiscuous mode [ 1025.734525][T31794] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6525'. [ 1025.734795][ T7543] hsr_slave_1: left promiscuous mode [ 1025.781285][T31799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6526'. [ 1025.794774][T31799] netlink: 'syz.4.6526': attribute type 3 has an invalid length. [ 1025.794795][T31799] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6526'. [ 1025.842759][T31808] netlink: 542 bytes leftover after parsing attributes in process `syz.1.6527'. [ 1026.215193][T31781] tunl0: entered promiscuous mode [ 1026.227804][T31781] netlink: 'syz.0.6523': attribute type 4 has an invalid length. [ 1026.227826][T31781] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6523'. [ 1026.261310][T31780] bond2 (unregistering): Released all slaves [ 1026.288208][T31791] syzkaller0: entered promiscuous mode [ 1026.288231][T31791] syzkaller0: entered allmulticast mode [ 1026.838446][ T7543] IPVS: stop unused estimator thread 0... [ 1027.029296][T31887] erspan1: entered allmulticast mode [ 1027.254983][T31890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.267371][T31890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.354061][T31897] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1027.354150][T31898] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1027.549842][T31912] netlink: 'syz.1.6545': attribute type 3 has an invalid length. [ 1027.584764][T31907] netlink: 'syz.4.6547': attribute type 3 has an invalid length. [ 1027.584787][T31907] netlink: 'syz.4.6547': attribute type 1 has an invalid length. [ 1027.584804][T31907] NCSI netlink: No device for ifindex 813332851 [ 1027.618028][T31907] vlan2: entered promiscuous mode [ 1027.618052][T31907] gretap0: entered promiscuous mode [ 1027.669844][T31916] erspan1: entered allmulticast mode [ 1027.750603][T31914] syzkaller0: entered promiscuous mode [ 1027.750626][T31914] syzkaller0: entered allmulticast mode [ 1027.769328][ T31] audit: type=1800 audit(1791477884.615:5): pid=31925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6552" name="memory.events" dev="tmpfs" ino=358 res=0 errno=0 [ 1027.769377][ T31] audit: type=1800 audit(1791477884.625:6): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6552" name="memory.events" dev="tmpfs" ino=358 res=0 errno=0 [ 1027.955120][T31935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1027.955140][T31935] IPv6: NLM_F_CREATE should be set when creating new route [ 1028.340707][T31959] bridge_slave_0: left allmulticast mode [ 1028.340732][T31959] bridge_slave_0: left promiscuous mode [ 1028.340933][T31959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.406921][T31959] bridge_slave_1: left allmulticast mode [ 1028.406946][T31959] bridge_slave_1: left promiscuous mode [ 1028.407140][T31959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.462541][T31959] bond0: (slave bond_slave_0): Releasing backup interface [ 1028.499872][T31948] netlink: 'syz.0.6556': attribute type 16 has an invalid length. [ 1028.503379][T31959] bond0: (slave bond_slave_1): Releasing backup interface [ 1028.530829][T31959] team0: Port device team_slave_0 removed [ 1028.548596][T31959] team0: Port device team_slave_1 removed [ 1028.549427][T31959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.549448][T31959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.551224][T31959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.551244][T31959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.553404][T31959] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1028.553523][T31960] tipc: Started in network mode [ 1028.553547][T31960] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1028.553721][T31960] tipc: Enabled bearer , priority 0 [ 1028.619533][T31956] team0: Port device xfrm0 added [ 1028.645557][T31968] erspan1: entered allmulticast mode [ 1028.729368][T31948] veth0_macvtap: entered allmulticast mode [ 1029.246502][T32011] __nla_validate_parse: 12 callbacks suppressed [ 1029.246521][T32011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6572'. [ 1029.295600][T32012] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6573'. [ 1029.480776][T32023] erspan1: entered allmulticast mode [ 1029.676498][ T5748] tipc: Node number set to 11578026 [ 1029.686353][T32042] xt_hashlimit: size too large, truncated to 1048576 [ 1029.686372][T32042] xt_hashlimit: max too large, truncated to 1048576 [ 1029.686645][T32042] xt_hashlimit: invalid rate [ 1029.687063][T32042] IPVS: set_ctl: invalid protocol: 43 172.20.20.51:20002 [ 1029.738230][T32039] veth0: entered promiscuous mode [ 1029.835660][T32045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6585'. [ 1029.859769][T32048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6585'. [ 1029.864695][T32036] veth0: left promiscuous mode [ 1030.159605][T32060] wg0 speed is unknown, defaulting to 1000 [ 1030.480025][T32078] erspan1: entered allmulticast mode [ 1030.655251][T32082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6593'. [ 1030.741117][T32085] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1030.822267][T32060] wg0 speed is unknown, defaulting to 1000 [ 1030.970825][T32092] syzkaller0: entered promiscuous mode [ 1030.970849][T32092] syzkaller0: entered allmulticast mode [ 1031.028007][T32100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6594'. [ 1031.061056][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6597'. [ 1031.350561][T32123] IPVS: set_ctl: invalid protocol: 58 172.20.20.39:20001 [ 1031.494612][T32128] netlink: 'syz.3.6603': attribute type 3 has an invalid length. [ 1031.655535][T32133] rdma_op ffff88804f218a38 conn xmit_rdma 0000000000000000 [ 1031.655743][T32132] rdma_op ffff88802bd20238 conn xmit_rdma 0000000000000000 [ 1031.722131][T32139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1031.806295][T32140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1031.831713][T32140] gretap1: entered promiscuous mode [ 1031.831729][T32140] gretap1: entered allmulticast mode [ 1031.925250][T32145] netlink: 'syz.4.6607': attribute type 1 has an invalid length. [ 1031.925272][T32145] netlink: 'syz.4.6607': attribute type 1 has an invalid length. [ 1031.925280][T32145] netlink: 'syz.4.6607': attribute type 1 has an invalid length. [ 1032.127131][T32150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1032.191500][T32150] sit1: entered promiscuous mode [ 1032.191526][T32150] sit1: entered allmulticast mode [ 1032.329116][T32164] veth1_macvtap: left promiscuous mode [ 1032.630743][T32171] 8021q: VLANs not supported on ip_vti0 [ 1032.664306][T32171] netlink: 'syz.3.6614': attribute type 3 has an invalid length. [ 1032.848430][T32180] x_tables: duplicate underflow at hook 2 [ 1033.392187][T32211] TC_ACT_REPEAT abuse ? [ 1033.436127][T18956] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.001989][T32243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1034.382435][T32262] tipc: Started in network mode [ 1034.382491][T32262] tipc: Node identity a233bcc19d4d, cluster identity 4711 [ 1034.382645][T32262] tipc: Enabled bearer , priority 0 [ 1034.441804][T32268] __nla_validate_parse: 10 callbacks suppressed [ 1034.441827][T32268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6635'. [ 1034.443840][T32269] xt_hashlimit: size too large, truncated to 1048576 [ 1034.495654][T32272] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.6632'. [ 1034.518241][T32262] syzkaller0: entered promiscuous mode [ 1034.519212][T32262] syzkaller0: entered allmulticast mode [ 1034.520082][T32262] tipc: Resetting bearer [ 1034.523621][T32272] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1034.536891][T32272] 0ªX¹¦Dö»: entered allmulticast mode [ 1034.785156][T32261] tipc: Resetting bearer [ 1035.014025][T32317] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1037.537348][T32261] tipc: Disabling bearer [ 1037.540639][T32321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6638'. [ 1037.547395][T19920] tipc: Node number set to 1065270465 [ 1037.640870][T32328] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6641'. [ 1037.644369][T32330] netlink: 'syz.2.6641': attribute type 4 has an invalid length. [ 1037.644389][T32330] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6641'. [ 1037.647576][T32328] unsupported nlmsg_type 40 [ 1037.652259][T32330] .`: renamed from bond0 (while UP) [ 1037.734741][T32280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1037.825475][T32337] netlink: 'syz.2.6643': attribute type 1 has an invalid length. [ 1038.010361][T32347] tipc: Failed to remove unknown binding: 66,1,1/1065270465:2927730849/2927730851 [ 1038.014429][T32347] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1038.014936][T32347] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1038.015103][T32347] veth1_to_bridge: entered allmulticast mode [ 1038.018024][T32347] veth1_to_bridge: entered promiscuous mode [ 1038.018885][T32347] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1038.022263][T32347] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1038.022358][T32347] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1038.224704][T32360] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1038.240134][T32361] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1038.301276][T32361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1038.301304][T32361] netlink: 'syz.0.6652': attribute type 3 has an invalid length. [ 1038.329510][T32366] bond1: option all_slaves_active: invalid value (179) [ 1038.364626][T32366] bond1 (unregistering): Released all slaves [ 1038.614650][T32380] ip_tables: iptables: counters copy to user failed while replacing table [ 1038.638522][T32376] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6655'. [ 1038.790574][T32394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6660'. [ 1038.909632][T32404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1039.104972][T32416] netlink: 'syz.2.6667': attribute type 2 has an invalid length. [ 1039.285856][T32426] netlink: 'syz.2.6670': attribute type 10 has an invalid length. [ 1039.309176][T32426] geneve2: entered promiscuous mode [ 1039.309201][T32426] geneve2: entered allmulticast mode [ 1039.331164][T32426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.375443][T32429] netlink: 'syz.3.6671': attribute type 1 has an invalid length. [ 1039.431955][T32429] bond1: entered promiscuous mode [ 1039.432489][T32429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1039.461808][T32432] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1039.492731][T32429] macvtap1: entered allmulticast mode [ 1039.520874][T32429] macvtap2: entered allmulticast mode [ 1039.617428][T32439] netlink: 'syz.3.6676': attribute type 1 has an invalid length. [ 1039.649829][T32441] x_tables: unsorted entry at hook 3 [ 1039.771695][T32449] __nla_validate_parse: 2 callbacks suppressed [ 1039.771715][T32449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6676'. [ 1039.774564][T32446] bond2: (slave veth0_to_bond): making interface the new active one [ 1039.814335][T32446] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1039.882798][T32449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1039.883732][T32453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1039.896325][T32455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.953100][T32453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1039.953482][T32453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1039.954127][T32453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1039.954301][T32453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1040.175662][T32468] Cannot find add_set index 4 as target [ 1040.454968][T32486] netlink: 'syz.0.6686': attribute type 23 has an invalid length. [ 1040.539431][T32490] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1040.565476][T32493] netlink: 'syz.1.6689': attribute type 1 has an invalid length. [ 1040.569440][T32492] netlink: 'syz.1.6689': attribute type 1 has an invalid length. [ 1040.773224][T32496] xt_NETMAP: bad MAP_IPS. [ 1040.973374][T32518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1041.062015][T32531] erspan1: entered allmulticast mode [ 1041.158979][T32537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6700'. [ 1041.195757][T32540] xt_l2tp: unknown flags: 43 [ 1041.241973][T32543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1041.243600][T32543] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1041.322368][T32548] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6704'. [ 1041.659253][T32567] erspan1: entered allmulticast mode [ 1041.817599][T32578] netlink: zone id is out of range [ 1041.817615][T32578] netlink: zone id is out of range [ 1041.817623][T32578] netlink: zone id is out of range [ 1041.817632][T32578] netlink: zone id is out of range [ 1041.817640][T32578] netlink: zone id is out of range [ 1041.867169][T32579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.867384][T32579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.972029][T32587] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1041.988337][T32587] bond3 (unregistering): Released all slaves [ 1042.603770][T32628] erspan1: entered allmulticast mode [ 1042.781498][T32640] syzkaller0: entered promiscuous mode [ 1042.781524][T32640] syzkaller0: entered allmulticast mode [ 1042.805420][T32640] syz_tun: entered promiscuous mode [ 1042.817437][T32640] syz_tun: left promiscuous mode [ 1043.189702][T32662] validate_nla: 2 callbacks suppressed [ 1043.189724][T32662] netlink: 'syz.0.6732': attribute type 1 has an invalid length. [ 1043.640389][T32685] xt_policy: output policy not valid in PREROUTING and INPUT [ 1043.918864][T32693] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1044.058918][T32696] erspan1: entered allmulticast mode [ 1044.360498][T32717] netlink: 'syz.4.6743': attribute type 1 has an invalid length. [ 1044.385127][T32717] bond2: entered promiscuous mode [ 1044.385187][T32717] bond2: entered allmulticast mode [ 1044.385616][T32717] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1047.084872][T32698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1047.280229][T32749] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 1047.282272][T32747] netlink: 'syz.4.6749': attribute type 12 has an invalid length. [ 1047.284435][T32748] __nla_validate_parse: 40 callbacks suppressed [ 1047.284453][T32748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6748'. [ 1047.340109][T32748] net_ratelimit: 4 callbacks suppressed [ 1047.340129][T32748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1047.371398][T32753] erspan1: entered allmulticast mode [ 1047.584731][ T302] xt_hashlimit: size too large, truncated to 1048576 [ 1047.724350][ T310] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6754'. [ 1047.844325][ T316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6754'. [ 1047.929476][ T316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1047.971778][ T325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6758'. [ 1047.973452][ T326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6758'. [ 1048.161676][ T324] wg0 speed is unknown, defaulting to 1000 [ 1048.262116][ T336] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6760'. [ 1048.262281][ T338] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6760'. [ 1048.283723][T31879] tipc: Resetting bearer [ 1048.705105][ T359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6767'. [ 1048.721065][ T5619] block nbd3: Receive control failed (result -32) [ 1048.794392][ T361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6768'. [ 1048.803214][ T363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6769'. [ 1048.993342][ T376] netlink: 'syz.2.6772': attribute type 10 has an invalid length. [ 1049.108996][ T376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.144222][ T378] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1049.144296][ T378] gretap2: entered promiscuous mode [ 1049.144312][ T378] gretap2: entered allmulticast mode [ 1049.689808][ T411] erspan1: entered allmulticast mode [ 1050.517628][ T467] netlink: 'syz.4.6790': attribute type 11 has an invalid length. [ 1051.078542][ T501] netlink: 'syz.0.6796': attribute type 1 has an invalid length. [ 1051.173610][ T501] bond1: entered promiscuous mode [ 1051.174011][ T501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.826334][ T501] ipvlan2: entered allmulticast mode [ 1051.826359][ T501] bond1: entered allmulticast mode [ 1051.971449][ T512] vlan4: entered promiscuous mode [ 1051.971473][ T512] hsr0: entered promiscuous mode [ 1051.972389][ T512] vlan4: entered allmulticast mode [ 1051.972420][ T512] hsr0: entered allmulticast mode [ 1051.972434][ T512] hsr_slave_0: entered allmulticast mode [ 1051.972450][ T512] hsr_slave_1: entered allmulticast mode [ 1052.101372][ T523] sit0: entered promiscuous mode [ 1052.159354][ T523] netlink: 'syz.3.6802': attribute type 1 has an invalid length. [ 1052.298706][ T530] hsr0: entered allmulticast mode [ 1052.298725][ T530] hsr_slave_0: entered allmulticast mode [ 1052.298736][ T530] hsr_slave_1: entered allmulticast mode [ 1052.299526][ T530] __nla_validate_parse: 8 callbacks suppressed [ 1052.299542][ T530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6803'. [ 1052.315524][ T530] hsr_slave_0: left promiscuous mode [ 1052.322778][ T530] hsr_slave_1: left promiscuous mode [ 1052.353269][ T530] hsr0 (unregistering): left allmulticast mode [ 1052.485288][ T540] erspan1: entered allmulticast mode [ 1052.614221][ T555] x_tables: duplicate underflow at hook 1 [ 1052.635489][ T545] veth3: entered allmulticast mode [ 1052.708843][ T550] veth5: entered allmulticast mode [ 1052.717406][ T553] netlink: 'syz.2.6814': attribute type 1 has an invalid length. [ 1052.717426][ T553] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1052.717442][ T553] netlink: 'syz.2.6814': attribute type 2 has an invalid length. [ 1052.894355][ T572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6818'. [ 1052.894488][ T572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.002818][ T572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.116537][ T581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1053.116569][ T581] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1053.117606][ T582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1053.117629][ T582] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1053.243381][ T590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6823'. [ 1053.292830][ T584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6824'. [ 1053.435353][ T605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6830'. [ 1053.451864][ T608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6829'. [ 1053.482120][ T605] bond3: entered promiscuous mode [ 1053.482145][ T605] bond3: entered allmulticast mode [ 1053.510475][ T612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6830'. [ 1054.059272][ T636] erspan1: entered allmulticast mode [ 1054.270070][ T646] netlink: 'syz.2.6839': attribute type 17 has an invalid length. [ 1054.365608][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.440956][ T661] netlink: 'syz.4.6844': attribute type 3 has an invalid length. [ 1054.643438][ T663] tipc: Enabled bearer , priority 10 [ 1054.930759][ T687] erspan1: entered allmulticast mode [ 1055.297933][ T710] netlink: 'syz.0.6857': attribute type 5 has an invalid length. [ 1055.422940][ T713] netlink: 'syz.0.6857': attribute type 5 has an invalid length. [ 1055.607572][ T724] bond2 (unregistering): Released all slaves [ 1056.044229][ T726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1056.102095][ T754] erspan1: entered allmulticast mode [ 1056.606603][ T768] sit0: entered promiscuous mode [ 1056.633014][ T768] netlink: 'syz.1.6872': attribute type 1 has an invalid length. [ 1057.480818][ T795] __nla_validate_parse: 10 callbacks suppressed [ 1057.480838][ T795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6876'. [ 1057.855917][ T803] erspan1: entered allmulticast mode [ 1058.273032][ T818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1058.627950][ T823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6888'. [ 1059.345110][ T852] erspan1: entered allmulticast mode [ 1059.419041][ T855] netlink: 872 bytes leftover after parsing attributes in process `syz.4.6898'. [ 1060.231605][ T881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6905'. [ 1060.252859][ T881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6905'. [ 1060.253203][ T881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6905'. [ 1060.253485][ T881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6905'. [ 1060.500206][ T887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6908'. [ 1060.715443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.715893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.716469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.716884][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.717381][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.717839][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.718261][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.718716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.719129][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.187491][ C0] sched: DL replenish lagged too much [ 1063.276410][ C1] net_ratelimit: 9909 callbacks suppressed [ 1063.276433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.276627][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.276870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.276982][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.277305][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.277725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1063.277743][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.278186][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.278620][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.278957][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.894385][T31159] Bluetooth: hci2: command 0x0406 tx timeout [ 1068.286360][ C1] net_ratelimit: 20456 callbacks suppressed [ 1068.286384][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.286581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.286743][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.286946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.287100][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.287320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1068.287463][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.287851][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.288211][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.288572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.296148][ C1] net_ratelimit: 22779 callbacks suppressed [ 1073.296169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.296326][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1073.296520][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.296874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.297217][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.297590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.297599][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.297956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.297961][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.298324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.306405][ C0] net_ratelimit: 21602 callbacks suppressed [ 1078.306429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.306453][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.306824][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.306837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.307198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1078.307264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.307600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1078.307636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.308060][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.308432][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.316235][ C0] net_ratelimit: 22037 callbacks suppressed [ 1083.316258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1083.316314][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.316665][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.316708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1083.317026][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.317428][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.317777][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.318136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.318174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.318484][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.611996][T31159] Bluetooth: hci4: link tx timeout [ 1084.612017][T31159] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1084.740154][T31159] Bluetooth: hci4: link tx timeout [ 1084.740175][T31159] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.864818][T31159] Bluetooth: hci4: command 0x0406 tx timeout [ 1088.326212][ C1] net_ratelimit: 21519 callbacks suppressed [ 1088.326236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.326279][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1088.326656][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.327030][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.327400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.327590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.327776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.328030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.328146][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.328406][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1089.004255][ T891] syzkaller1: entered promiscuous mode [ 1093.336226][ C1] net_ratelimit: 21738 callbacks suppressed [ 1093.336249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.336590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.336868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.336934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.337250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.337464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.337607][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1093.337807][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.337952][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1093.338155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.346230][ C1] net_ratelimit: 21747 callbacks suppressed [ 1098.346254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.346380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.346685][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.346738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.347066][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.347078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1098.347443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1098.347447][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.347831][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.348208][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.356068][ C1] net_ratelimit: 22357 callbacks suppressed [ 1103.356091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.356215][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1103.356473][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.356844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.357215][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.357563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.357594][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.357951][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.357971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.358334][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1108.366146][ C0] net_ratelimit: 21731 callbacks suppressed [ 1108.366169][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.366247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.366560][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.366680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.367041][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.367358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1108.367408][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.367753][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1108.367779][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.368155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.376075][ C1] net_ratelimit: 21551 callbacks suppressed [ 1113.376098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.376266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1113.376438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.376670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1113.376778][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.377124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.377462][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.377799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.377962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.378236][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.017868][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.386161][ C1] net_ratelimit: 21228 callbacks suppressed [ 1118.386183][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.386541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.386880][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.387229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.387552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.387568][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.387906][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.387976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.388258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.388353][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1123.396092][ C0] net_ratelimit: 19585 callbacks suppressed [ 1123.396116][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1123.396247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.396641][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.397057][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.397428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.397816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.398320][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.398371][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.398705][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.398764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.406112][ C1] net_ratelimit: 19388 callbacks suppressed [ 1128.406126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1128.406135][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.406550][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.406975][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.407359][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.407733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.408115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.408201][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.408497][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.408602][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.416024][ C1] net_ratelimit: 20221 callbacks suppressed [ 1133.416047][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.416423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.416498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1133.416799][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.416873][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.417181][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.417249][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.417554][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.417648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.417933][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.426220][ C1] net_ratelimit: 21317 callbacks suppressed [ 1138.426222][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1138.426243][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.426591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.426931][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.427271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.427617][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.427961][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.428300][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.428464][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1138.428645][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.436096][ C0] net_ratelimit: 21448 callbacks suppressed [ 1143.436118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1143.436280][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.436513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1143.436660][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.437033][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.438074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.438533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.438726][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1143.438944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.439155][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.445999][ C1] net_ratelimit: 21394 callbacks suppressed [ 1148.446022][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.446475][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.446918][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.447367][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.447803][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.448247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.448452][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1148.448693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.448844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.449135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.456033][ C1] net_ratelimit: 21788 callbacks suppressed [ 1153.456055][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.456099][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.456431][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.456507][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.456866][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.457224][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1153.457584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.457652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1153.457989][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.458019][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1158.466107][ C1] net_ratelimit: 21625 callbacks suppressed [ 1158.466130][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.466550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.466665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1158.466976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.467340][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.467341][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.467718][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.467746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.468105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.468126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.476200][ C1] net_ratelimit: 21982 callbacks suppressed [ 1163.476222][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.476260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1163.476609][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.476642][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1163.477007][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.477382][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.477769][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.478146][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.478527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.478711][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1168.486268][ C1] net_ratelimit: 21709 callbacks suppressed [ 1168.486291][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.486708][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.487077][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ca:ff:6d:95:e5:a4, vlan:0) [ 1168.487113][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.487476][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.487525][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.487852][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.487939][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.488241][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.488349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.895952][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1170.027885][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P885/1:b..l [ 1170.035721][ C0] rcu: (detected by 0, t=10515 jiffies, g=171297, q=2664 ncpus=2) [ 1170.043635][ C0] task:syz.2.6907 state:R running task stack:24968 pid:885 tgid:883 ppid:29403 task_flags:0x400140 flags:0x00080003 [ 1170.057134][ C0] Call Trace: [ 1170.060420][ C0] [ 1170.063363][ C0] __schedule+0x17db/0x58f0 [ 1170.067893][ C0] ? __lock_acquire+0x747/0x2de0 [ 1170.072856][ C0] ? __lock_acquire+0x747/0x2de0 [ 1170.077816][ C0] ? __pfx___schedule+0x10/0x10 [ 1170.082690][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1170.087736][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1170.093125][ C0] preempt_schedule_common+0x7f/0xd0 [ 1170.098431][ C0] ? nl80211_netlink_notify+0x722/0x860 [ 1170.104107][ C0] preempt_schedule_thunk+0x16/0x40 [ 1170.109325][ C0] __local_bh_enable_ip+0xe9/0x140 [ 1170.114452][ C0] nl80211_netlink_notify+0x722/0x860 [ 1170.119846][ C0] ? nl80211_netlink_notify+0x75/0x860 [ 1170.125324][ C0] notifier_call_chain+0x1a5/0x3d0 [ 1170.130486][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 1170.136218][ C0] netlink_release+0x11fb/0x1a80 [ 1170.141263][ C0] ? netlink_release+0x106/0x1a80 [ 1170.146300][ C0] ? __pfx_netlink_release+0x10/0x10 [ 1170.151594][ C0] ? down_write+0x16b/0x200 [ 1170.156113][ C0] ? __pfx_down_write+0x10/0x10 [ 1170.160986][ C0] __sock_release+0xa0/0x1f0 [ 1170.165592][ C0] ? __pfx_sock_close+0x10/0x10 [ 1170.170453][ C0] sock_close+0x1c/0x30 [ 1170.174621][ C0] __fput+0x418/0xa50 [ 1170.178628][ C0] task_work_run+0x1d9/0x270 [ 1170.183234][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1170.188368][ C0] get_signal+0x1181/0x12c0 [ 1170.192910][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1170.198511][ C0] ? __pfx_task_work_add+0x10/0x10 [ 1170.203633][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1170.209800][ C0] ? sock_ioctl+0x57a/0x7e0 [ 1170.214354][ C0] ? __fput_deferred+0x222/0x390 [ 1170.219315][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1170.224724][ C0] ? rcu_is_watching+0x16/0xb0 [ 1170.229508][ C0] do_syscall_64+0x328/0x520 [ 1170.234107][ C0] ? trace_irq_disable+0x3b/0x140 [ 1170.239141][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.245216][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1170.249909][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.255816][ C0] RIP: 0033:0x7fc5ad39e199 [ 1170.260243][ C0] RSP: 002b:00007fc5ae28f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1170.268666][ C0] RAX: ffffffffffffffed RBX: 00007fc5ad625fa0 RCX: 00007fc5ad39e199 [ 1170.276647][ C0] RDX: 0000200000001b40 RSI: 0000000000008933 RDI: 0000000000000007 [ 1170.284631][ C0] RBP: 00007fc5ad435888 R08: 0000000000000000 R09: 0000000000000000 [ 1170.292610][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.300595][ C0] R13: 00007fc5ad626038 R14: 00007fc5ad625fa0 R15: 00007ffe8e90f918 [ 1170.308591][ C0] [ 1170.311603][ C0] rcu: rcu_preempt kthread starved for 1710 jiffies! g171297 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1170.322609][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1170.332585][ C0] rcu: RCU grace-period kthread stack dump: [ 1170.338473][ C0] task:rcu_preempt state:R running task stack:26944 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1170.351971][ C0] Call Trace: [ 1170.355256][ C0] [ 1170.358196][ C0] __schedule+0x17db/0x58f0 [ 1170.362723][ C0] ? __lock_acquire+0x747/0x2de0 [ 1170.367684][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1170.372819][ C0] ? __pfx___schedule+0x10/0x10 [ 1170.377687][ C0] ? lock_acquire+0x115/0x350 [ 1170.382391][ C0] ? schedule+0x90/0x2b0 [ 1170.386654][ C0] schedule+0x164/0x2b0 [ 1170.390826][ C0] schedule_timeout+0x152/0x2c0 [ 1170.395692][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1170.401075][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1170.406374][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1170.412195][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1170.417762][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1170.422637][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1170.428802][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1170.434090][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1170.439312][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1170.445145][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1170.449755][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1170.454964][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1170.459920][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1170.464968][ C0] kthread+0x38b/0x480 [ 1170.469041][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1170.474245][ C0] ? __pfx_kthread+0x10/0x10 [ 1170.478847][ C0] ret_from_fork+0x514/0xb70 [ 1170.483448][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1170.488571][ C0] ? __switch_to+0xc89/0x1420 [ 1170.493267][ C0] ? __pfx_kthread+0x10/0x10 [ 1170.497871][ C0] ret_from_fork_asm+0x1a/0x30 [ 1170.502665][ C0] [ 1170.505683][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1170.512011][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1170.517289][ C1] NMI backtrace for cpu 1 [ 1170.517307][ C1] CPU: 1 UID: 0 PID: 5602 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1170.517329][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1170.517340][ C1] RIP: 0010:check_preemption_disabled+0x6/0xd0 [ 1170.517368][ C1] Code: c7 c6 60 d7 6d 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <65> 8b 05 1b bd ad 08 65 48 8b 0d eb bc ad 08 85 c9 74 0c 5b 41 5e [ 1170.517385][ C1] RSP: 0018:ffffc90000a17a38 EFLAGS: 00000202 [ 1170.517402][ C1] RAX: 0000000000000001 RBX: ffffffff8ac1b252 RCX: ffff8880797e3e80 [ 1170.517417][ C1] RDX: 000000004dbb4af1 RSI: ffffffff8c6dd760 RDI: ffffffff8c6dd720 [ 1170.517431][ C1] RBP: 1ffff92000142f6c R08: ffffffff8177f1df R09: 0000000000000000 [ 1170.517444][ C1] R10: ffffc90000a17b78 R11: ffffffff81b2a310 R12: dffffc0000000000 [ 1170.517459][ C1] R13: ffffffff8177f1df R14: ffffc90000a17b28 R15: 1ffff92000142f65 [ 1170.517473][ C1] FS: 000055555f785540(0000) GS:ffff888123bc1000(0000) knlGS:0000000000000000 [ 1170.517489][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1170.517503][ C1] CR2: 000055c1286aa4b0 CR3: 0000000074ebc000 CR4: 00000000003526f0 [ 1170.517520][ C1] Call Trace: [ 1170.517527][ C1] [ 1170.517535][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1170.517634][ C1] rcu_is_watching+0x16/0xb0 [ 1170.517657][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1170.517681][ C1] unwind_next_frame+0xbe/0x2550 [ 1170.517711][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1170.517735][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1170.517758][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1170.517779][ C1] arch_stack_walk+0x11b/0x150 [ 1170.517813][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1170.517839][ C1] stack_trace_save+0xa9/0x100 [ 1170.517858][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1170.517880][ C1] ? __lock_acquire+0x747/0x2de0 [ 1170.517902][ C1] kasan_save_track+0x3e/0x80 [ 1170.517925][ C1] ? kasan_save_track+0x3e/0x80 [ 1170.517945][ C1] ? kasan_save_free_info+0x40/0x50 [ 1170.517961][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1170.517981][ C1] ? kmem_cache_free+0x182/0x650 [ 1170.518002][ C1] ? skb_release_head_state+0x274/0x370 [ 1170.518029][ C1] ? __kfree_skb+0x24/0x210 [ 1170.518053][ C1] ? ip6_mc_input+0x878/0xc80 [ 1170.518074][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 1170.518094][ C1] ? nf_hook_slow+0xc5/0x220 [ 1170.518143][ C1] ? NF_HOOK+0x21f/0x3c0 [ 1170.518161][ C1] ? netif_receive_skb+0x278/0xbf0 [ 1170.518182][ C1] ? NF_HOOK+0xa4/0x3a0 [ 1170.518258][ C1] ? br_handle_frame_finish+0x1136/0x1950 [ 1170.518279][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 1170.518299][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1170.518322][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1170.518367][ C1] ? skb_release_head_state+0x274/0x370 [ 1170.518393][ C1] kasan_save_free_info+0x40/0x50 [ 1170.518410][ C1] __kasan_slab_free+0x5c/0x80 [ 1170.518433][ C1] kmem_cache_free+0x182/0x650 [ 1170.518453][ C1] ? __skb_ext_put+0x221/0x2f0 [ 1170.518483][ C1] skb_release_head_state+0x274/0x370 [ 1170.518512][ C1] __kfree_skb+0x24/0x210 [ 1170.518539][ C1] ip6_mc_input+0x878/0xc80 [ 1170.518561][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 1170.518585][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1170.518604][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1170.518623][ C1] ip_sabotage_in+0x1e1/0x270 [ 1170.518644][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1170.518667][ C1] nf_hook_slow+0xc5/0x220 [ 1170.518692][ C1] NF_HOOK+0x21f/0x3c0 [ 1170.518712][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1170.518730][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1170.518748][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1170.518765][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 1170.518785][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1170.518813][ C1] ? netif_receive_skb+0x102/0xbf0 [ 1170.518836][ C1] netif_receive_skb+0x278/0xbf0 [ 1170.518857][ C1] ? lock_acquire+0x115/0x350 [ 1170.518879][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 1170.518903][ C1] ? br_netif_receive_skb+0x126/0x190 [ 1170.518927][ C1] NF_HOOK+0xa4/0x3a0 [ 1170.518947][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1170.518969][ C1] ? NF_HOOK+0xfa/0x3a0 [ 1170.518989][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1170.519011][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1170.519036][ C1] ? br_pass_frame_up+0x275/0x420 [ 1170.519059][ C1] br_handle_frame_finish+0x1136/0x1950 [ 1170.519088][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1170.519111][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 1170.519186][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1170.519212][ C1] ? nf_hook_slow+0x176/0x220 [ 1170.519237][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1170.519259][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1170.519280][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1170.519335][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1170.519358][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1170.519381][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1170.519403][ C1] ? lock_acquire+0x115/0x350 [ 1170.519426][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1170.519450][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1170.519476][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1170.519500][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1170.519524][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1170.519549][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1170.519573][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 1170.519599][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1170.519620][ C1] br_handle_frame+0x1329/0x1600 [ 1170.519649][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1170.519672][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1170.519693][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1170.519714][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1170.519736][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1170.519756][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 1170.519791][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1170.519820][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1170.519840][ C1] ? NF_HOOK+0x336/0x3c0 [ 1170.519869][ C1] ? process_backlog+0x3de/0x18b0 [ 1170.519892][ C1] ? process_backlog+0x3de/0x18b0 [ 1170.519919][ C1] process_backlog+0x727/0x18b0 [ 1170.519945][ C1] ? process_backlog+0x3de/0x18b0 [ 1170.519977][ C1] __napi_poll+0xaa/0x330 [ 1170.520001][ C1] net_rx_action+0x61d/0xf50 [ 1170.520032][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1170.520066][ C1] ? lapic_next_event+0x11/0x20 [ 1170.520091][ C1] handle_softirqs+0x226/0x860 [ 1170.520117][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1170.520145][ C1] __irq_exit_rcu+0xcb/0x220 [ 1170.520169][ C1] irq_exit_rcu+0x9/0x30 [ 1170.520192][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1170.520220][ C1] [ 1170.520227][ C1] [ 1170.520234][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1170.520255][ C1] RIP: 0010:deref_stack_reg+0x0/0x220 [ 1170.520303][ C1] Code: ff ff 48 89 4c 24 18 e8 1e a6 c0 00 48 8b 4c 24 18 e9 f2 fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 89 d3 49 89 f0 49 89 [ 1170.520319][ C1] RSP: 0018:ffffc900039e76f8 EFLAGS: 00000287 [ 1170.520337][ C1] RAX: fffffffffffffff0 RBX: ffffffff92223bda RCX: 0000000000000000 [ 1170.520350][ C1] RDX: ffffc900039e77e8 RSI: ffffc900039e7d50 RDI: ffffc900039e77a8 [ 1170.520365][ C1] RBP: 1ffffffff244477b R08: ffffc900039e7d50 R09: 0000000000000000 [ 1170.520378][ C1] R10: ffffc900039e77f8 R11: fffff5200073cf01 R12: dffffc0000000000 [ 1170.520392][ C1] R13: ffffffff92223bdb R14: ffffc900039e77a8 R15: ffffc900039e77f0 [ 1170.520417][ C1] unwind_next_frame+0x19bd/0x2550 [ 1170.520441][ C1] ? alloc_file_clone+0x57/0xe0 [ 1170.520466][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1170.520488][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1170.520508][ C1] arch_stack_walk+0x11b/0x150 [ 1170.520532][ C1] ? create_pipe_files+0x3c0/0x7c0 [ 1170.520556][ C1] stack_trace_save+0xa9/0x100 [ 1170.520575][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1170.520600][ C1] save_stack+0x122/0x230 [ 1170.520623][ C1] ? __pfx_save_stack+0x10/0x10 [ 1170.520644][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 1170.520663][ C1] ? __slab_free+0x274/0x2c0 [ 1170.520682][ C1] ? qlist_free_all+0x99/0x100 [ 1170.520701][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1170.520721][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 1170.520742][ C1] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1170.520760][ C1] ? security_file_alloc+0x34/0x310 [ 1170.520828][ C1] ? init_file+0x90/0x2b0 [ 1170.520850][ C1] ? alloc_empty_file+0x74/0x1d0 [ 1170.520873][ C1] ? alloc_file_clone+0x57/0xe0 [ 1170.520899][ C1] ? page_ext_put+0x97/0xc0 [ 1170.520923][ C1] __reset_page_owner+0x71/0x1f0 [ 1170.520947][ C1] __free_frozen_pages+0xc93/0xd90 [ 1170.520972][ C1] __slab_free+0x274/0x2c0 [ 1170.520996][ C1] ? qlist_free_all+0x8e/0x100 [ 1170.521018][ C1] qlist_free_all+0x99/0x100 [ 1170.521038][ C1] ? security_file_alloc+0x34/0x310 [ 1170.521056][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1170.521075][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1170.521098][ C1] __kasan_slab_alloc+0x22/0x80 [ 1170.521121][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1170.521140][ C1] ? security_file_alloc+0x34/0x310 [ 1170.521159][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1170.521178][ C1] ? security_file_alloc+0x34/0x310 [ 1170.521201][ C1] security_file_alloc+0x34/0x310 [ 1170.521222][ C1] init_file+0x90/0x2b0 [ 1170.521246][ C1] alloc_empty_file+0x74/0x1d0 [ 1170.521271][ C1] alloc_file_clone+0x57/0xe0 [ 1170.521296][ C1] create_pipe_files+0x3c0/0x7c0 [ 1170.521320][ C1] __do_pipe_flags+0x46/0x1f0 [ 1170.521343][ C1] do_pipe2+0xaa/0x190 [ 1170.521365][ C1] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1170.521429][ C1] ? __pfx_do_pipe2+0x10/0x10 [ 1170.521453][ C1] ? rcu_is_watching+0x16/0xb0 [ 1170.521481][ C1] __x64_sys_pipe2+0x5a/0x70 [ 1170.521503][ C1] do_syscall_64+0x166/0x520 [ 1170.521522][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.521541][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1170.521562][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.521580][ C1] RIP: 0033:0x7f318b79d1c9 [ 1170.521597][ C1] Code: 38 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 eb aa e8 ea 34 00 00 66 2e 0f 1f 84 00 00 00 00 00 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 07 c3 66 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff [ 1170.521613][ C1] RSP: 002b:00007ffef14d5118 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1170.521632][ C1] RAX: ffffffffffffffda RBX: 000055555f799ea0 RCX: 00007f318b79d1c9 [ 1170.521646][ C1] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00007ffef14d5138 [ 1170.521658][ C1] RBP: 00007ffef14d5700 R08: 00007f318b9f4e20 R09: 0000000000000000 [ 1170.521671][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef14d5540 [ 1170.521684][ C1] R13: 000055555f79bb38 R14: 000055555f79e380 R15: 00007ffef14d5280 [ 1170.521707][ C1]