last executing test programs: 19m34.369888756s ago: executing program 1 (id=5681): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x12) syz_emit_ethernet(0xa7, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100100086dd6000a8bc006d0600fc00000000000006000000ffffffff01fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000090780000fe04f989c6ad29fffa6369166d6cdfac9c10818150039937e482f87f4aebc3780622dfa976d798eea3727ce98e56a4d032561dfd4c2b1c15b2fbc6d6edfdb106e94c0f5fe41b1eaed80e8ad54ee4b902037acebefeae1f6680"], 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae64beb16577531055c3000000000000000000000000dcce97605c", 0x28, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r12, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendto$packet(r11, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae64beb16577531055c3000000000000000000000000dcce97605c", 0x28, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r12, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 19m33.745716841s ago: executing program 1 (id=5687): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) read(r1, &(0x7f00000003c0)=""/132, 0x84) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000069000000000000000000950000000009f9000073797a300000000073b18ed3820fd581e8c8f865479438a615653a3601a1d9fedf19870753c87a0a33b68f3e326c410364cfd3a26746a43ab1c3facb74ca1b5688223b223a7b42383cb436a42e6e407505735047802756d652aeb92b4c94738a77f67ad1b5131f9d3edbde79d9d71534680641e77560313371c629e5e8929547a8386bb240a4c8574de1810e0066f4330f9735d932c81dc18a1da652fa92ced33759c66245f0d03b8a"], 0x20}}, 0x0) 19m33.409540624s ago: executing program 1 (id=5692): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x609, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88aeabd5, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001600010a"], 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x609, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88aeabd5, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001600010a"], 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) (async) 19m32.842738073s ago: executing program 1 (id=5697): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x8, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ringbuf_query, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], &(0x7f0000000180)='GPL\x00', 0xe7e, 0xd1, &(0x7f0000000380)=""/209, 0x41100, 0x6e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xd, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x38}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x10000, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, r3, 0x25, 0x3, @val=@tracing={r4, 0x48a}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x15, 0x14, &(0x7f0000001240)=@raw=[@call={0x85, 0x0, 0x0, 0xd0}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @generic={0xfe, 0x8, 0x5, 0xad, 0x7}, @map_fd={0x18, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], &(0x7f0000001300)='GPL\x00', 0x8, 0x92, &(0x7f0000001340)=""/146, 0x40f00, 0x1, '\x00', r6, @fallback=0x21, r7, 0x8, &(0x7f0000001400)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x3, 0x9, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f00000015c0)=[r8, r9, 0x1], &(0x7f0000001600)=[{0x1, 0x2, 0x8, 0x4}, {0x5, 0x1, 0x1}], 0x10, 0x5}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) r12 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r12, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180000005a00010400000040000000000800008004"], 0x18}], 0x1}, 0x0) close(r12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES64=r10], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$kcm(0x29, 0x7, 0x0) 19m32.384428105s ago: executing program 1 (id=5699): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00840000000004000c001a8004000580"], 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r3) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x260, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b510c04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b9f2fda}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4625e997}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e3fdbaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x91cd784}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe4573d1}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd8, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f767291}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x257c6244}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x652d9ee1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x569255ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39e0ea6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4de2480}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f29f45e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6033807a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37e216ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cc1aae9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e7736df}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a76c928}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e551302}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x178ed8bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3742a8b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b78e795}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31526199}]}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r10, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r10}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) r12 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}}}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r14], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 19m32.074348392s ago: executing program 1 (id=5702): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x40100) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c000000000b0000000000050001000000007702000040000000000800034000004000"/44], 0x2c}}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x15, 0x5e]}, &(0x7f00000000c0)=0x44) 19m16.618582159s ago: executing program 32 (id=5702): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x40100) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c000000000b0000000000050001000000007702000040000000000800034000004000"/44], 0x2c}}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x15, 0x5e]}, &(0x7f00000000c0)=0x44) 1m15.073569924s ago: executing program 2 (id=12998): syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWSET={0x188, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x148, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_BASE={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x65}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xb2}]}}}, {0x48, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}, @NFT_MSG_DELOBJ={0x12c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "6d2f6fc345205e02481d8b85be83e909911d2c0bbde8"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xb6, 0x8, "9ebeb118610316a723bff18a3250fbdd9cbb798dc62e885e3c7f94214f196b1b1b1b5cd2db422ec87a84c69cb22dd08d4fe3ed90bfbe1af144a301bb7c4c2e7d9a7752488a4c351e7b617dc3a6d5a74d1bd27a586596dca2ff317574c9946932d0a322a966db0d50f75297ae7b0d8a4071a7e0c0ff423921dc6157811d1969741b0c26164dfad9d11363504f2f3bcd06a1ab8401be5030c0f6190bc6f424cca3cbaeaf973787d3f7fb9466df70616447e659"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x78, 0x0, 0xa, 0x500, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x15, 0x6, "924630669c566a18f500e01fc408263bb7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x368}, 0x1, 0x0, 0x0, 0x40000c5}, 0x41) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0xe, 0x4) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="2000011642f8e09e8c64adb3cf8ad342e43abd210b94fd6d7895aa725cf1efc489cdad375e3dfdd152d1fa476fa82fa5e46ee94b3444160e5cbf3395af1b8f1a25eeb31fad3732c44d080f3d293c6e128ee78c7463990fa18ac9dec2efcaf0a0170b64f9c7a0f86f54029ec9814843b34b884e9c7fd846e6330b78ddd82a47709dcd55609c4686bfe41544df190b620ef5c4ed9e36a06347219abe24d1dc18cbaee5ef1519e0c87da804bb0be88e47895d15673b962956b7f9f06cda859e5cb3378f1bbd1d"], 0x38}}, 0x40004010) 1m14.33176314s ago: executing program 3 (id=13005): r0 = socket(0x10, 0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x45, &(0x7f00000008c0), 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x10, 0x0, 0x4, 0x20, 0x0, 0x0, 0x5, 0x6}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}]}, 0x34}, 0x1, 0xba01, 0x0, 0x4}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1m13.279408529s ago: executing program 3 (id=13011): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x4}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000000c0)={0x5e, @loopback, 0x4e21, 0x0, 'lc\x00', 0x22, 0x0, 0x1b}, 0x2c) sendto$l2tp(r7, &(0x7f0000000340)="e6b45528ee731fbb911517f767a543ebcedacc973d30deda8e58fddee2c8fec0c810853e23c0c6dda4f0f33cf92ec1bec1ad261d61714e40e45a5e0d1d7f770f1c1e021d25ce9493cbf3edb1f79c261dad1fe81b9faf113d33d265c5a5dcdb4ed6a507d6025f1bb475272db3c65a539ff35f74111d2bbe8bc6e7e746951f2eb15bbed1a630b6f1e0701b7de0812f8f6237ddf3c7e96ce3752e8fbd341ca8b4390fb3f48c5231f5a572f73e83f09f8d0506374515c06ea132e8b96219c472d3ed90d79d771cfb", 0xc6, 0x20000000, &(0x7f0000000440)={0x2, 0x0, @multicast2, 0x3}, 0x10) setsockopt$inet6_int(r6, 0x29, 0x3a, 0x0, 0x0) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="fd7df6251a43", @ANYBLOB="3af0f6fb9c1a03fef221fa3474c87f77749c9abb25ee1822362ecab81921e719ef589fb57591f9f62c5c22e42eeccda298eb308e38e07d96e0ecc7e88050dd62480331d8caa4b3d5043161a634fe9d04db6d97ac3bdf93c75145603c61797dd02253f7a733dcf6d986e716ac748363fb76ff95aa1823f9ed831c195aff7ed5082b9a15d28b46e8a1838b66f61556ab836271fb162504eaf49da29abd79e8a54f78f2227e8bac44fccf5d2227b1059f0643dec7f6c379c3b7d30c01b21ac3adb785"], 0xfdef) 1m13.164078625s ago: executing program 0 (id=13012): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x102, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0xffffffff, 0x193, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x61}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000881}, 0x20000000) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m12.644542302s ago: executing program 2 (id=13014): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x4, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@mpls_getnetconf={0x2c, 0x52, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1000}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1m10.945789085s ago: executing program 0 (id=13016): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r1], 0x48}}, 0x0) 1m9.683491923s ago: executing program 0 (id=13019): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x709d2b, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xe}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m9.354151929s ago: executing program 2 (id=13020): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x400c4c5}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x3}}]}]}]}, 0x48}}, 0x0) 1m9.054943982s ago: executing program 3 (id=13021): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r0, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff}, 0x94) (async) 1m8.979279626s ago: executing program 5 (id=13022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, 0x0, 0x2000800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x4000020) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000280)={r2, &(0x7f00000000c0)='aead\x00', 0x2000, &(0x7f0000000100)={@align=0xc3, {0x0, 0xa, 0xfffffff8, 0x1}}, 0x10000, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xfffffffb}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @private, @multicast1}, &(0x7f0000000480)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000880)={&(0x7f0000000840)=""/62, 0x3e}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000640)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e1}, [@alu={0x7, 0x1, 0x0, 0xa, 0x7, 0xfffffffffffffff0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @generic={0x0, 0x8, 0x5, 0x8001, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x1, 0xb, 0x4, 0xb, 0xffffffffffffffff, 0x10}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x18, &(0x7f0000000380)=""/24, 0x41100, 0x18, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=[r5, 0xffffffffffffffff, r7, r8], &(0x7f00000005c0)=[{0x3, 0x1, 0x7, 0x8}, {0x5, 0x2, 0x6, 0xc}, {0x4, 0x4, 0xb, 0x4}, {0x1, 0x5, 0x9, 0x1}, {0x4, 0x1, 0x10, 0x3}, {0x2, 0x1, 0x10, 0x3}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x4}, 0x94) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, 0x0, 0x8880) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000021c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000005002500030000000a0001007770616e3100"/42], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 1m8.495985184s ago: executing program 0 (id=13023): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r4, r6, 0x25, 0x4, @val=@iter={0x0}}, 0x20) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 1m8.495451157s ago: executing program 2 (id=13024): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x6}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000900)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000010800014000000001080003401900000008000240000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x2f, 0x65, 0xdd, 0x9, 0x28, @empty, @mcast1, 0x7, 0x1, 0x10001, 0x7}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000140)=0x8, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xf}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0xda}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x4}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000884) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfffa, 0xc}, {0xffe3, 0xfff1}, {0x5, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040099}, 0x880) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x6}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000900)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) (async) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000010800014000000001080003401900000008000240000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x2f, 0x65, 0xdd, 0x9, 0x28, @empty, @mcast1, 0x7, 0x1, 0x10001, 0x7}}) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000140)=0x8, 0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xf}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0xda}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x4}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000884) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfffa, 0xc}, {0xffe3, 0xfff1}, {0x5, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040099}, 0x880) (async) 1m8.430366742s ago: executing program 3 (id=13025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x22}}}}, [@NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xffff, 0xfffd, 0x800, 0x10, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x9, 0x9, 0x5, 0x30, 0x9, 0x2, 0x9, 0x4, 0x5, 0xc, 0x2, 0x27]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0x6}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x2}, {}, {0x7, 0x2}, {0x6, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x7, 0x7}, {}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x3}, {0x6, 0x8}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x5}, {0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x2, 0xa}, {0x3, 0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x2}, {0x2, 0x7}, {0x0, 0xa}, {0x3}, {0x3, 0x6}]}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000300)}, 0x20) sendfile(r6, r6, &(0x7f0000000040)=0x8001, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x4) 1m8.38698988s ago: executing program 4 (id=13026): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000500)={0x3, 'team_slave_1\x00', {0x6}, 0x5}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000800)={0x364, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80, @private2, 0xc6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbe4}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7e}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5a}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe2, 0x3, "2b5655b2434d07c8cdb5d8e63508135e0d6e7a3e6f05755df66db262e964736c90cfc90854337da662348d72698bcc1ecc8bca63d67e2330fb5fa623804f5122dc5fc8a4829f1b94787c1f4a2092a48e819bc8269001ade17db96a80f07a73cbdf22195234b67aed924c4748223aaf4c86835299e290cfa982cb84da34fdb430f522f31f20bfe383c09cb7eca4b85f0024b30d908d644698f5073e49d109f19dd467a7d21497c5a82c21fc268f39a46caf91bbb8df3819132e7cd23eed075c2fab5f48a0699a7cc609378cc712a367d8d76d3acc9e5909823b745ec1c875"}, @TIPC_NLA_NODE_ID={0x3f, 0x3, "68c5f605637d503f11a1188b7bdc9225a558b25360364dda0ec17050773b8087a1c0579010d6a05c31056b3f662cd586ff8283546a1c0e5be35443"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc00}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xce, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0xe63}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100000000140012001100b6acd7b8f7f0a0ae0985910c337841ff3f023cfce69c54b4ad33941bb7f47c3458185b3b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c00)={0x27c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x289}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x657c6273}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x76}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6491}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xab5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x11a8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x14}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x109}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x82}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3252}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfe3}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x40800}, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r1, r3, 0x2, 0x0, 0x3}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0xf0b, 0x170bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x0) 1m8.199063264s ago: executing program 5 (id=13027): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000002271122500000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m7.716052544s ago: executing program 3 (id=13028): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) 1m7.659667042s ago: executing program 5 (id=13029): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000080)={0xa4, 0x36, 0x10, 0x70bd2a, 0x9, "", [@generic="23e82caf521c2151ccd7a53432b55953901b5abacdedf96c1121c0c43175469db1b02efcfa236dfaa0ad1fa543e9998e2b656b8fcd2d15ce003a80eb191cb46b07ec6b0c6567f59f4cc37022a11a13e6700bad1e07c0fc39eb8230f78a8e86a3d8f992f4a68c7ae9fe53bfc0272e1ad49e6b6798350253c9c80b3068db529d3c61387e8459302fcab8154cfd8c7a99cec017"]}, 0xa4}], 0x1, 0x0, 0x0, 0x40050}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r0, 0x90d, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x1ffe000, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1m6.376564277s ago: executing program 4 (id=13030): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m6.299232716s ago: executing program 0 (id=13031): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)={0x124, r3, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000002400)=@newtfilter={0xd94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xc}, {0xc}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0xd30, 0x2, [@TCA_FLOW_EMATCHES={0x214, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x482}}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0xfffd}, {0x3, 0x7f, 0x6, 0x78}}}, @TCF_EM_IPT={0xd0, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xa}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x6e, 0x5, "35eefda0ef53c54bf41f1c6ee73a4b415723b1773de54ec5cc812dbbbe3f57630b8dd4c754e4221c9ebac622dcabb9a43c59f75bddbb92cac5ee39328f7349870941e9676d8f5012de1619fa3c13d77578ad97cb0b6d6e0619e06bf2a5362052540ecef5160d3c26cba8"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}]}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x7}, {0x7, 0x6, 0x0, "7328c25fed48"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x7}, {0x0, 0x3e, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x9c, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x200}, "841b74426d659b04da6fe4021d875dd3b6ae347e4398611f5015f0b9373ec402a059217825cc75f70ce5cf92778cc5d823bae71176b102c59636074a706160ffea875a4c892dd8b0f784f06282db3250ddebba84ada9e4b0b93aba11b32fab29f8e747de92e7601a164b789770e3dc19b483c26f605749ce7cd91946752cb65f2e558cb0e0089f98c2b364787f6e3d97"}}, @TCF_EM_CONTAINER={0x20, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x1}, "406290f77e464c42558cc697db1655108d72"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf9f5, 0x8, 0x5}, {0x4, 0x3, 0x2}}}]}]}, @TCA_FLOW_ACT={0xb18, 0x9, 0x0, 0x1, [@m_ife={0xe0, 0x7, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x85}]}, {0xaf, 0x6, "dcd0f0faea7f690f916018d6358b25ad0d2d2b8d2a22ac90367d6314bc0de76e5298e552cdb63c15c3d80cae3c450aea28def057a977c84bf412b8f79e4c3a75bd866964eb7d2b6fd02cbb50e920cd1a2d73ee02712ff89bd20ad6f295e330f1115e6b89f015f9eec56875995126b77d22d94d5ec5c8ff35533e89923d030373b93210a252e8482af443c5e26f7ce91fccf54de0edfd8daa23022073035b957cd91903c1d0fd8b168d189f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x14c, 0x15, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000000, 0x6, 0x2, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb41, 0x44d9088c, 0x2, 0x5, 0x6}, 0x0, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x4bfa, 0x10000000, 0x6, 0x7d}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe7e, 0x6, 0x2, 0x2, 0x10}, 0x1, r5}}]}, {0x9f, 0x6, "c1bbbf5a7a6c26af6994d71d596ae1209678975e15374d5a374a192ea9654495aaacf854363b56ef92f011c20a4989b85fb35e7102727fd92642aed36575c84598dcb03dfbf0fad01edef1f3444e5f2e4888804d778cb95f70182079aa77e5946d0cd531c95417ddf82b44bf9516591d0e4ee118ad50cd7e1afbd5eaf2856316c13c1ca778d28b93a6fbe8cfac109a086a2abdbb970cd41b243365"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0x19, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}]}, {0x9d, 0x6, "45ad89a4262ea275bd4865e8bbdbd304fcadeee781867adc3bf818b25854ff93dc4decb29506291fb1725085fe424ac111df8a9aac910e9cac58071649b18a07db79efe7ba3a9939675ca14dda72d72169760b1a2a9af6e85ca5c8eee72f849081220548bfa0bd04594dab6aae9b804391f14cd20b848519851ebe5116e1f47a5373f978e2011680a727988f20ce8b81232d48a34b407fed84"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x150, 0x18, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0xfffffffe, 0x8, 0x100, 0x2}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x1, 0xd, 0xe}, 0xd}}]}, {0xe5, 0x6, "cf86f1c34cc3b0feb8f8f96a141345e08c3436d65400d9e3d2cfbd083a29dfe6262d99a99b220345200a3f0f3c7c3153f8aada0937afea33817bf062535f8e8ebf1ea607cca6615214aa451d5e58d3d6b848a7112601d9abde64e9cece79c1fed8603bfe470cb457aaef8e3ce2e50bd1e894c744df93f1446dbaaab911d4be54190e5b997595df74f3c66be8ba2b8972de4df739d323bf17129ce1aa6cb364f2c44a781c0a5b621f4d291184d4ee811be144c3164150c9ecb5a2ed8c4644453e4323f2d91e25d0db4f448031bc719ac143a66db58b0a8ab4165c023d6c0974d7cc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_ctinfo={0x54, 0x1d, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x2, 0x0, 0xffffff8d, 0x4}}]}, {0xf, 0x6, "f38fbac3e105b78aa801e8"}, {0xc, 0x7, {0xb4b3ca1c617e29d5}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x13c, 0x19, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9c}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x3, 0x20000000, 0x3358, 0xa}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x31}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3d}]}, {0xbe, 0x6, "3d0d83255a394c2c95a6af06ab59d5165f9d89870e31c3772a365283a800edc120553d87546e153a28a4206ea095442367a86f0112d150fa706b6a19a486b9d6637e47078f44c3e6b18e70928943b34b0dde9c13c71968a454e5e350d7086883b91ab761edd2427dc5699eb2ad4c695fcca5c64b1c9b21cd6c6ce0d76278a2e2b7baa6b10de07513c442075a935d5eecd2f08d1618842502ec5bc13b9fa68b038ca02d87267cb3ff7d4395fd76cb7f1567505783da12da6b1c83"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x130, 0x4, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc876, 0x0, 0x20000000, 0x9, 0x6a}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x5, 0x4, 0x3, 0x80}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8, 0xffffffffffffffff, 0x8, 0xb}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xe, 0x4, 0x9, 0x2}, 0x0, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0x0, 0x1b3, 0x1}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x1, 0x20000000, 0x7, 0x1}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0xffffffffffffffff, 0xc, 0x10001}, 0x3, r5}}]}, {0x21, 0x6, "ab7312df803f8d0916c3f358bb6483f813cee4547369a7628053fa8600"}, {0xc}, {0xc, 0x8, {0x7, 0x2}}}}, @m_nat={0x1d0, 0x20, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x6, 0x6, 0x8000, 0x3}, @broadcast, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0x0, 0x7c0, 0x3}, @multicast2, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8001, 0x10000000, 0x2, 0x10001}, @local, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1e, 0x7, 0x4, 0x10001}, @private=0xa010101, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x0, 0x7, 0x7, 0x9}, @multicast2, @multicast1, 0xff000000, 0x4}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2, 0xffffffffffffffff, 0x401, 0x5}, @local, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x6, 0x0, 0x3, 0x4}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x74, 0x2, 0x4, 0x9, 0x80000000}, @empty, @multicast2, 0xffffff00}}]}, {0x68, 0x6, "f88bd59c9b9925073d35bd5e7b5470ae26258cc7181a2afa4ce1c228b548242418c7d31dda33bb2b87bde4527257c5cf77aa2a5150b37db770923fef003601603349e06f5310ce99d03213984953bc464c6c5e1bf58ca5277195efd5c6ba7c36c6045f21"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xe4, 0x10, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x4, 0x5, 0x2, 0x2}, {0x7, 0x5, 0xff, 0x100}, {0x8, 0x0, 0x5, 0x9}, {0x8, 0x7, 0xcd, 0x800}, {0x32a7, 0xf6, 0x3, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffb, 0x2, 0xffffffffffffffff, 0x1, 0x7f}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8000, 0x2, 0x2, 0xe, 0xffff7fff}}]}, {0x56, 0x6, "7dba9f2621744d72b38d59e67040e025cc32086b1dc542f03f11c91f6f91181d58bd0ea1df0d5ca3b932bb03300cc8e953714ea817ab6848bb955f16d6fe0ecf757f0f6e503c6280323d3e94ee34b6b0d7c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x150, 0xd, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'devlink\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7, 0x20000000, 0xffff, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1df50000, 0x1, 0x20000001, 0x4, 0x7}}]}, {0xe8, 0x6, "eda68ab0cbcf2c9f3b3324f3d185ee52cc97711f857e15020ba69b983e907e35f495d29c0d37b16a3f62f6820a65e76302f066e67236f116649e913889bc126a397f3756273280bb8105d8dd64c8f3711156a11b6f7138c065bfb066897bc53f08bfff6e873ec3b37c1dade7ff03508109d69ce27e712d41ef22a7ac04125432179a6da6d7448e735fa3b057e45990b5f833f693c5a1667dbed4c470b8312179fa513c693756d324451e4ea13aa268c0126c87c1ae6086186ffb8b5285dae3f964ddd0aee12e09c1094223bfed70200664cecb85ad77da11d6a7c6672f07dd30755989f3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9b}}, @TCA_RATE={0x6, 0x5, {0x13, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x7de3}]}, 0xd94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newtaction={0xf18, 0x30, 0x51b, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_pedit={0xf00, 0x9, 0x0, 0x0, {{0xa}, {0xe80, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x7fffffff, 0x2, 0x4, 0x80000001, 0x6}, 0x8, 0x2, [{0x5, 0x5, 0xff29, 0x9, 0x7b8, 0x1}, {0xf, 0x8, 0x3, 0x9, 0xfffffff7, 0x2cc1}, {0x6f1, 0x3ff, 0x5, 0x6, 0x8000, 0x8}]}, [{0x5, 0x5c920bf5, 0x37, 0x0, 0x1}, {0x4, 0x4, 0x1, 0x6, 0x4, 0x7}, {0x8fd, 0x5, 0x8000, 0x401, 0xb12e, 0x3}, {0x1, 0x2, 0x5, 0xba3d, 0x3122, 0xe47}, {0x4, 0x6, 0xf3c, 0x80000000, 0x1, 0x5}, {0x0, 0x2, 0x0, 0xfffffffe, 0x8, 0x8}, {0xf84f, 0x6, 0x4, 0x0, 0xb83, 0x1}, {0x8, 0x5f, 0xfffffffa, 0x4, 0x245302f8, 0xfff}, {0x7, 0x3d1, 0x7, 0x10000009, 0xfffffff7, 0x2}, {0x6, 0x6, 0xffffffff, 0x9d, 0xfffffffb, 0x3}, {0x6, 0x10000, 0xf7, 0x7fffffff, 0x1, 0x10000}, {0x9, 0xb7f1, 0x6, 0x0, 0x4380, 0x6d}, {0x64, 0x0, 0x1, 0x8, 0x1, 0xd35c}, {0x7, 0x3, 0x8, 0x10, 0xbaf, 0x5}, {0xfffffff9, 0x2, 0x401, 0x80000000, 0x4, 0x10001}, {0xb, 0x43, 0x7, 0x2, 0x5, 0x37d}, {0x5b48, 0x4, 0xffffff80, 0xd, 0x8, 0xfff}, {0xfffffffc, 0x101, 0x2, 0x401, 0xc0ad, 0x10}, {0x3, 0x1, 0xffffff00, 0x800, 0x4, 0xa3}, {0x6, 0x0, 0x1, 0x1, 0x40, 0xe}, {0x3, 0x5, 0xc, 0x0, 0x0, 0x7}, {0xd8, 0x1, 0x6, 0x7, 0x1532, 0x10}, {0x6, 0xd, 0x512, 0x4, 0x3fc7, 0x82e}, {0x468e3300, 0x1000, 0x4, 0x4, 0x40, 0x5}, {0x3, 0x6, 0xe30, 0x7f, 0x1dc00, 0x1}, {0x1, 0x8, 0x7fffffff, 0x6, 0xc7, 0x1000}, {0x3, 0xfed5, 0x0, 0x1, 0x3ff, 0x8}, {0x7ff, 0x9, 0x8, 0xbf, 0x10000, 0x9}, {0x1, 0x200, 0x3, 0x79e, 0x4, 0x1}, {0x9, 0x5, 0x71, 0x1, 0x9, 0x1}, {0x6, 0x7ff, 0x10001, 0x0, 0x80000000, 0x7}, {0x3a4, 0x0, 0x2, 0x2, 0xc, 0x8}, {0x6, 0x69a, 0x8, 0x2, 0x7, 0x6}, {0x99, 0x4, 0xff, 0x1000, 0x2, 0xffffffff}, {0x358, 0x2, 0x10000, 0x7, 0x100, 0x9c5a}, {0x22, 0x4, 0x400, 0x8000, 0x9f4, 0x2}, {0x1, 0x2, 0x2, 0x8001, 0x4, 0xe}, {0x0, 0x10001, 0x6b, 0x10000, 0x1ff, 0x8}, {0x3, 0x401, 0xb32, 0x0, 0x6, 0x8}, {0x1a, 0x2, 0xb1f6, 0x9, 0x1, 0xfffffff7}, {0x97cb, 0xb7, 0xe4, 0x0, 0xab6, 0x4}, {0x2, 0x4, 0x5, 0x2, 0x8000, 0x1}, {0xfffffffe, 0x800, 0xfffffff7, 0x4, 0x3, 0xb}, {0x80000000, 0x0, 0x51, 0x4, 0x8, 0x9}, {0x1, 0xffff3334, 0x7fff, 0x6656, 0x81, 0xaa2}, {0x8, 0x5, 0x1, 0x40, 0xffffffff, 0xfffffff7}, {0x0, 0xc, 0x7fff, 0xcf, 0x7fff, 0xfffffff7}, {0xfffffffe, 0x72d3, 0x36c, 0x46, 0x4}, {0x1, 0xfffffff9, 0x85e, 0x0, 0x8, 0x3d7a795a}, {0x8, 0x7, 0x7, 0x0, 0x0, 0x3}, {0x1, 0x2, 0x28db44be, 0xebf8, 0x0, 0xf3a9}, {0x800, 0x6, 0x200, 0x3, 0x2, 0x6}, {0x1, 0x1, 0xf, 0x6192, 0x8}, {0xff, 0xfffffffd, 0x7, 0x5, 0x61d, 0x1}, {0x800, 0x0, 0x4, 0x2, 0xfb41, 0xc9d4}, {0x6, 0x7, 0x8, 0x14bf, 0xfffffffd, 0xe}, {0x7fffffff, 0xff, 0x401, 0x6, 0x9, 0x1}, {0x7ff, 0x9, 0x6, 0x7, 0x6, 0x3}, {0x0, 0x4be6, 0xfffffff7, 0x101, 0x9, 0x5}, {0x8, 0x4, 0x100, 0x0, 0x2, 0x69}, {0x7, 0x1210158e, 0x60000, 0x1, 0x80000001, 0x5}, {0x1, 0x1, 0x3, 0x9, 0xffffffff, 0x3}, {0xa, 0xa8d5, 0xd, 0x7, 0x2, 0x7}, {0x9, 0x9, 0x67, 0x8, 0x2, 0x373}, {0x8, 0xfffeffff, 0x9, 0x3, 0xfffffff7, 0x5}, {0x2, 0x7, 0x2, 0x1, 0x8, 0x68d}, {0x1ff, 0xd, 0x0, 0x1, 0x6f69, 0x6}, {0xb2, 0xe2, 0x7, 0xfff, 0x6, 0xfffeffff}, {0xe, 0x9de, 0x4, 0xb, 0x8, 0xea}, {0xa, 0x8, 0x3ff, 0x1, 0x3, 0x7}, {0xf80, 0x343, 0x2, 0x1, 0xeb, 0x8}, {0x9, 0xc, 0x59, 0x1, 0x8, 0xbc9e}, {0x6, 0x6, 0x2, 0x1543, 0x7, 0x9}, {0xce73, 0x0, 0x101, 0x0, 0x9, 0x5}, {0x0, 0x8, 0x1ff, 0x10001, 0x8, 0x1}, {0xfff, 0x0, 0x3, 0xe, 0x1}, {0x9, 0x4000000, 0x8, 0x10000, 0x6, 0x7f}, {0x6, 0x30, 0xfffffffe, 0xa58, 0xfffff4d1, 0xd}, {0xfffffff8, 0x6, 0x9, 0x3, 0x10}, {0x1, 0x1ff, 0x38, 0x9, 0x5, 0x8}, {0x7, 0x5, 0x4, 0x4, 0xb, 0x8}, {0x5, 0x9, 0x0, 0x9, 0xb, 0x2}, {0x4, 0x953, 0x9, 0x7b5b, 0x1, 0x1331}, {0x3ff, 0x5d, 0x7, 0x5, 0x9, 0x9}, {0x3ff, 0x3, 0x0, 0x5, 0x401, 0x5}, {0xd7d6, 0xf, 0x4, 0x4, 0x1, 0x7}, {0x1, 0x0, 0x4, 0x7, 0x8, 0x2}, {0x4, 0x41, 0x4, 0x8, 0x95b, 0x1}, {0x9, 0x0, 0x6, 0x2, 0x5}, {0x8, 0x2, 0xe58, 0x0, 0x10001, 0x6}, {0x8, 0xfffffff3, 0x3, 0x8000, 0x3, 0x4}, {0x1, 0x1, 0x7, 0xf515, 0x0, 0x401}, {0x91, 0x7, 0x7ff, 0xfff, 0x7fff}, {0x63dcf0ed, 0x9, 0xe, 0x4, 0x7, 0x9}, {0x285, 0x21, 0x8, 0x1, 0x6, 0x200}, {0xfffffffc, 0x3, 0x7f, 0x3a2, 0x1, 0x8bf6}, {0x8, 0x15e00000, 0x0, 0xffff, 0x7, 0x4}, {0x800, 0x47, 0x0, 0x7, 0x1, 0xbb12}, {0xd, 0x300, 0x2, 0x1, 0x28, 0x2}, {0x7, 0x8, 0x7, 0x8, 0x6, 0xfffffffe}, {0xfffffffe, 0x1, 0xf7d, 0x101, 0xfffffffc, 0x7ff}, {0x1, 0xa, 0x1, 0x5, 0x1, 0x8}, {0x200, 0x2, 0xff, 0x7, 0xf, 0x2}, {0xb, 0x0, 0x40, 0x9, 0x2, 0x800}, {0x8, 0x5, 0x8, 0x0, 0xce, 0x7}, {0x81, 0x6, 0x3, 0x200, 0x100}, {0x10001, 0xc66, 0x5, 0x401, 0x9, 0x1}, {0x7, 0x8, 0x840a, 0x7, 0x697, 0x6}, {0x8, 0x1000, 0x7, 0x2, 0x4}, {0x2dd2, 0x7, 0x5, 0x1000, 0x10, 0x401}, {0x3, 0x4, 0x2, 0x10, 0x0, 0xfffffffc}, {0xe, 0x7fff, 0xcf59, 0x0, 0x2, 0x7}, {0x729, 0x1, 0x0, 0x3, 0x8, 0x40}, {0x9, 0x10, 0x4, 0x0, 0x0, 0x80}, {0x40, 0xb, 0x5ba2aa3a, 0x7}, {0x1, 0x7, 0x8, 0x1, 0x5, 0xb6a9}, {0x7, 0x200, 0x3, 0x9, 0x9b3, 0x4}, {0x0, 0x7, 0x0, 0x3, 0x7, 0xc7}, {0x5, 0x5, 0x0, 0x8, 0x101, 0x8}, {0x2, 0xf3, 0x8, 0x0, 0x9}, {0x0, 0x5, 0x3, 0x3, 0x9, 0x5}, {0x2, 0x0, 0x0, 0x9, 0x64, 0x6}, {0xfffffff7, 0x1, 0xce, 0x0, 0x101, 0xffffed9f}, {0x7, 0x6, 0x9, 0xae, 0xe53, 0x80}, {0x4, 0x235, 0x2, 0x9, 0xef, 0x7}, {0x6, 0xf81, 0x4, 0x6, 0x2, 0x81}, {0x2, 0x7, 0x400, 0x7fff, 0x2, 0x6}, {0x7, 0x218cbb01, 0x75, 0x5e, 0x9, 0xe1}], [{0x3}, {0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5}, {}, {0x4}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3}, {}, {0x3}, {0x3, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4}, {0x6, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x2}, {0x4}, {0x5}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x2}, {0x3}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}]}, {0x4}]}]}, {0x56, 0x6, "094810ba054a088fd40f7c06d744509a96ba1c3224c6199de95dfd552f23db4484580d2cabfee3f4690647a512b61b790f7b106e2e99ca4640d3ff129cad8e7f035f9e2ed7aa25a698295e8e60692954c1b6"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf18}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000010000000e0f28b6fcb1e20ca8d00000000000000ac1e010100000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r10, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r11, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000ba38", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf2501000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x2000c080}, 0x805) accept4$bt_l2cap(r10, 0x0, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f00000003c0)={{[0xfff, 0x101, 0xa84, 0x80000001]}, 0x0, 0x1, 0x2, 0x0, &(0x7f0000000340)=[{{@align=0x7, {0x5, 0xd, 0x80000001, 0x6}}, 0x7d, 0x0, 'pci\x00'}, {{@_ha_fsid={[0x0, 0x9]}, {0x8, 0xf, 0x10001, 0x100}}, 0x4, 0x0, '\x00'}]}) 1m6.245970602s ago: executing program 2 (id=13032): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x1, 0x0, 0x0, @remote}, 0x10) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000d5}, 0x20084084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGIFHWADDR(r7, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="01000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x7, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x2004c014) r14 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r14, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r14, &(0x7f0000000440)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x1, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m5.968653051s ago: executing program 5 (id=13033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)=ANY=[@ANYBLOB="140000002700010000f5d72b1e3c5a7409d4c39f"], 0x14}], 0x1}, 0x0) 1m5.788261884s ago: executing program 4 (id=13034): socket$inet6(0xa, 0x3, 0x8000000003c) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0xffff3834, 0x1, {{0x12, 0x4, 0x2, 0x8, 0x48, 0x68, 0x0, 0x0, 0x4, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x1, [{@rand_addr=0x64010101}, {@multicast1, 0xeda}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp={0x44, 0x10, 0x15, 0x0, 0x2, [0x200, 0x7, 0x81]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @private}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x84, r2, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_RINGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x84}}, 0x0) 1m5.473861559s ago: executing program 5 (id=13035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, '\x00'/10}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m5.20127479s ago: executing program 4 (id=13036): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x40000a0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="61a000fe000000006921eb487afdcd251f8ba7b6471085000000000095000000000000004597956e852c03966ef91b84ac9e65b78c1829b22cab2777ad99ecc95e4b3cdcfbefddc9dfe24e1ebc30662d7ecf5932bcc62ad3f3823e2d"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1m5.143710767s ago: executing program 4 (id=13037): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_DEVICE(r0, 0x0, 0x2000800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x4000020) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, 0x0, 0x8880) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000021c0)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xe}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 1m5.030267043s ago: executing program 5 (id=13038): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) close(0x3) (async) close(0x3) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3b, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40), 0x0, 0x8014) (async) sendmmsg$inet(r1, &(0x7f0000000c40), 0x0, 0x8014) listen(r1, 0x200) (async) listen(r1, 0x200) accept4$llc(r1, 0x0, 0x0, 0x0) (async) accept4$llc(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) (async) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b0500030000000000090001"], 0x80}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="11020000000000000000010000002800018014000400000000000000000000000000000000010800060001000000060001000a0000"], 0x3c}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="11020000000000000000010000002800018014000400000000000000000000000000000000010800060001000000060001000a0000"], 0x3c}}, 0x0) close(r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x30}}, 0x0) 1m4.815003436s ago: executing program 3 (id=13039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x4, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xaf}]}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x639f0}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x40}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x2, 0x0, 0xc}}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x56) close(0x3) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r8) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="812a0000000000000000090000000800217f43be3a00050013000000820e"], 0x24}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) 1m4.670875312s ago: executing program 4 (id=13040): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), 0x4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000240)={0x3, 0x4d, "82ae856bee748af072706af04d72e28f9b58d0922f92448d447829ab37178af0f4e2cdee1072e9364b383b6ddc8f095911206f5b8f5d4ca800a4befe690b994d31c3ee9e29c6ed36d7261de0d5"}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) socket(0x1f, 0x2, 0xea) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000000}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) recvfrom(r3, &(0x7f0000002080)=""/4054, 0xfd6, 0x10132, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1m4.595556436s ago: executing program 0 (id=13041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x3, 0x1}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4, 0x405}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x240cc080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 32.947698027s ago: executing program 2 (id=13042): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000900)={{r3}, r4, 0x10, @inherit={0x88, &(0x7f0000000840)={0x1, 0x8, 0x3ff, 0x8, {0x1d, 0x3ff, 0x850, 0x2}, [0x9, 0x3, 0xfffffffffffffcf5, 0xef0, 0x4, 0x2, 0x6, 0x9]}}, @subvolid=0x2}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000b000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000040)='E', 0x1}], 0x1) write$cgroup_subtree(r5, &(0x7f00000002c0)={[{0x2d, 'rlimit'}, {0x2b, 'freezer'}]}, 0x11) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x5, 0x3, 0x2}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x840) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="85200000b4b8d73e02000000"], &(0x7f0000000280)='syzkaller\x00', 0xfffffff9, 0xdf, &(0x7f0000000580)=""/223, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xa, r5, 0x8, &(0x7f0000000680)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x3, 0x9, 0x7ff}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000000700)=[r5, r5, r5, r5, r5, r0, r5], 0x0, 0x10, 0x30}, 0x94) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f0000000800)=0x2) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f00000003c0)={r11, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r11, 0x7, 0x20}, 0xc) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 33 (id=13041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x3, 0x1}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4, 0x405}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x240cc080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): speed/duplex [ 1672.468374][T20035] __nla_validate_parse: 2 callbacks suppressed [ 1672.468395][T20035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12104'. [ 1673.269461][T16804] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1673.407354][T19747] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.480457][T19747] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.652266][T12270] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1673.747475][T19747] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.783004][T19747] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.042032][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1674.232764][T30658] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1674.393817][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1674.532359][T16804] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1675.258493][T16819] veth0_macvtap: left promiscuous mode [ 1675.290192][T16819] veth1_vlan: left promiscuous mode [ 1675.328089][T20111] netlink: 112 bytes leftover after parsing attributes in process `syz.4.12121'. [ 1675.372993][T16819] ve: left promiscuous mode [ 1675.768776][T20116] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12122'. [ 1675.809636][T20135] xt_TCPMSS: Only works on TCP SYN packets [ 1675.827107][T20134] xt_TCPMSS: Only works on TCP SYN packets [ 1676.805985][T30658] smbdirect: ib_dev[syú2] removed [ 1676.839167][T20105] bond0: (slave bond_slave_1): Releasing backup interface [ 1676.886598][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1677.151748][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1677.362757][T30658] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1677.534099][T16804] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1677.674019][T19747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1677.773161][T19747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1677.785717][T20189] netlink: 'syz.4.12130': attribute type 21 has an invalid length. [ 1677.820444][T19747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1677.892646][T20174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12128'. [ 1677.960293][T19747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1678.133763][ T9998] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1678.148011][T19747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1678.228947][T19747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1678.264709][T19747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1678.331483][T19747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1678.407389][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1678.605156][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1678.803270][T16804] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1678.898714][T20225] syzkaller1: entered promiscuous mode [ 1678.906109][T20233] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12138'. [ 1678.915992][T20225] syzkaller1: entered allmulticast mode [ 1679.025521][T19747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.132626][ C0] bridge0: port 3(team0) entered forwarding state [ 1679.139287][ C0] bridge0: topology change detected, propagating [ 1679.145953][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.153238][ C1] bridge0: topology change detected, propagating [ 1679.159892][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.168091][ C1] bridge0: topology change detected, propagating [ 1679.197260][T19747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.256283][T20238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12139'. [ 1679.345021][T16804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.352287][T16804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.418842][T30657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.426124][T30657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.594734][T20251] netlink: 13 bytes leftover after parsing attributes in process `syz.0.12143'. [ 1679.694648][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1679.791472][T20251] xt_CT: No such helper "pptp" [ 1679.872392][T30658] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1680.032365][T16819] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1680.112155][T20268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12146'. [ 1680.166178][T30658] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1680.228535][T20264] netlink: 'syz.5.12146': attribute type 11 has an invalid length. [ 1680.476695][T20285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12150'. [ 1680.604283][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12150'. [ 1680.768251][T20285] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1680.848399][T20302] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12154'. [ 1680.990087][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12155'. [ 1681.499064][T20324] sctp: [Deprecated]: syz.5.12159 (pid 20324) Use of int in max_burst socket option. [ 1681.499064][T20324] Use struct sctp_assoc_value instead [ 1681.809011][T20338] netlink: 220 bytes leftover after parsing attributes in process `syz.5.12163'. [ 1682.058107][T20353] netlink: 'syz.5.12163': attribute type 11 has an invalid length. [ 1682.080162][T20343] bond2: Invalid ad_actor_system MAC address. [ 1682.116327][T20343] bond2: option ad_actor_system: invalid value (1) [ 1682.149019][T20343] bond2 (unregistering): Released all slaves [ 1682.330044][T19747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1682.376671][ T9998] net_ratelimit: 10 callbacks suppressed [ 1682.376696][ T9998] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1682.569177][T19747] veth0_vlan: entered promiscuous mode [ 1682.609883][T19747] veth1_vlan: entered promiscuous mode [ 1682.693079][T16819] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1682.763145][T19747] veth0_macvtap: entered promiscuous mode [ 1682.804581][T19747] veth1_macvtap: entered promiscuous mode [ 1682.912625][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1682.940672][T19747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.037239][T19747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.080563][ T1345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.104417][ T1345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.149730][ T1345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.182340][ T1345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.264633][T16819] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1683.425231][T30658] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1683.663119][T16819] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1683.710252][T20396] __nla_validate_parse: 4 callbacks suppressed [ 1683.710275][T20396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12170'. [ 1683.752480][T16806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.791713][T16806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.808996][T20398] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1683.885754][T16811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.896124][T16811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.903221][ T9998] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1684.031717][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1684.163247][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1684.285836][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12174'. [ 1684.429172][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12174'. [ 1684.455551][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12174'. [ 1684.969280][T20429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12176'. [ 1684.985117][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12178'. [ 1685.038427][T20429] netlink: 'syz.3.12176': attribute type 7 has an invalid length. [ 1685.092831][T20429] netlink: 'syz.3.12176': attribute type 8 has an invalid length. [ 1685.150286][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12176'. [ 1685.193910][T29516] IPVS: starting estimator thread 0... [ 1685.293233][T20443] IPVS: using max 25 ests per chain, 60000 per kthread [ 1685.546556][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12183'. [ 1685.594036][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12183'. [ 1685.982587][T20469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12188'. [ 1686.251046][T20483] xt_hashlimit: invalid interval [ 1686.315665][T20485] sctp: [Deprecated]: syz.2.12192 (pid 20485) Use of int in max_burst socket option deprecated. [ 1686.315665][T20485] Use struct sctp_assoc_value instead [ 1686.633555][T20494] netlink: 'syz.5.12195': attribute type 1 has an invalid length. [ 1687.423255][T12270] net_ratelimit: 19 callbacks suppressed [ 1687.423279][T12270] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1687.609616][ T9986] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1687.762544][ T9986] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1687.837765][T20557] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1687.901894][ T9986] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1688.021899][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1688.214555][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1688.352874][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1688.737872][T20587] mac80211_hwsim hwsim119 syzkaller0: left promiscuous mode [ 1688.780426][T20587] mac80211_hwsim hwsim119 syzkaller0: left allmulticast mode [ 1688.902984][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1689.056146][T20604] __nla_validate_parse: 2 callbacks suppressed [ 1689.056166][T20604] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12220'. [ 1689.102303][ T9986] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1690.185724][T20631] syzkaller0: entered promiscuous mode [ 1690.236304][T20631] syzkaller0: entered allmulticast mode [ 1690.336695][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12234'. [ 1690.466633][T20674] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12236'. [ 1690.523064][T20674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12236'. [ 1690.602832][T20674] netlink: 31 bytes leftover after parsing attributes in process `syz.4.12236'. [ 1690.650015][T20674] netlink: 'syz.4.12236': attribute type 2 has an invalid length. [ 1690.685475][T20674] netlink: 31 bytes leftover after parsing attributes in process `syz.4.12236'. [ 1690.815968][T20688] netlink: 'syz.3.12240': attribute type 1 has an invalid length. [ 1691.636446][ T4949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1691.658786][ T4949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1691.669219][ T4949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1691.691264][ T4949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1691.700711][ T4949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1691.906580][T20710] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12243'. [ 1693.779783][T12009] Bluetooth: hci5: command tx timeout [ 1695.863305][T12009] Bluetooth: hci5: command tx timeout [ 1697.291471][T20709] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12243'. [ 1697.303207][T16807] net_ratelimit: 5 callbacks suppressed [ 1697.303230][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1697.441814][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1697.554036][T20720] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12244'. [ 1697.606046][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1697.608237][T20722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12245'. [ 1697.688419][T20728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12247'. [ 1697.700747][T20722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12245'. [ 1697.744024][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1697.863152][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1697.934346][T12009] Bluetooth: hci5: command tx timeout [ 1697.992472][T16811] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1698.065672][T20742] openvswitch: netlink: Flow key attr not present in new flow. [ 1698.132543][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1698.237147][T20705] lo speed is unknown, defaulting to 1000 [ 1698.252342][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1698.383348][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1700.013693][T12009] Bluetooth: hci5: command tx timeout [ 1700.346182][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12274'. [ 1700.383384][T20835] netlink: 'syz.3.12278': attribute type 15 has an invalid length. [ 1700.455390][T20828] tipc: Enabled bearer , priority 0 [ 1700.911479][T20851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12282'. [ 1700.965159][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12282'. [ 1701.109619][T20851] xfrm1: entered promiscuous mode [ 1701.140155][T20851] xfrm1: entered allmulticast mode [ 1701.238982][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12285'. [ 1701.346951][T20870] ipt_ECN: cannot use operation on non-tcp rule [ 1701.399942][T20872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12289'. [ 1701.400339][T20705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.444086][T20705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.465203][T20705] bridge_slave_0: entered allmulticast mode [ 1701.495414][T20705] bridge_slave_0: entered promiscuous mode [ 1701.639472][T20872] hsr_slave_1 (unregistering): left promiscuous mode [ 1701.784423][T20705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.806012][T20705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.832763][T20705] bridge_slave_1: entered allmulticast mode [ 1701.845121][T20705] bridge_slave_1: entered promiscuous mode [ 1701.860281][T20887] batadv_slave_0: entered promiscuous mode [ 1701.918417][T20886] batadv_slave_0: left promiscuous mode [ 1702.008750][T20705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.067926][T20705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.297194][T20705] team0: Port device team_slave_0 added [ 1702.357346][T20705] team0: Port device team_slave_1 added [ 1702.383919][T20909] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12298'. [ 1702.485298][T20916] net_ratelimit: 17 callbacks suppressed [ 1702.485322][T20916] openvswitch: netlink: Message has 8 unknown bytes. [ 1702.523183][T20916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1702.600596][T20705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.608525][T20705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.642783][T20705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.716879][T20705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.727893][T20705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.774620][T20705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.082678][T20705] hsr_slave_0: entered promiscuous mode [ 1703.103451][T20705] hsr_slave_1: entered promiscuous mode [ 1703.128621][T20705] debugfs: 'hsr0' already exists in 'hsr' [ 1703.164239][T20705] Cannot create hsr debugfs directory [ 1703.450640][T20936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12305'. [ 1703.670485][T20941] netlink: 'syz.3.12306': attribute type 28 has an invalid length. [ 1703.700887][T20941] netlink: 'syz.3.12306': attribute type 3 has an invalid length. [ 1703.712227][T20941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12306'. [ 1703.804846][T20945] IPv6: sit2: Disabled Multicast RS [ 1703.811473][T20945] sit2: entered allmulticast mode [ 1703.947969][T20951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12311'. [ 1704.115734][T12270] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1704.233660][T28416] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1704.587350][T20705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1704.624171][T20705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.647307][T20705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1704.747631][T20968] bridge3: entered promiscuous mode [ 1704.753790][T20968] bridge3: entered allmulticast mode [ 1704.803467][T16811] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1705.108555][T20705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1705.126821][T20986] netlink: 'syz.3.12320': attribute type 11 has an invalid length. [ 1705.134521][T20705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.143752][T20986] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12320'. [ 1705.162220][T20705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1705.223562][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12320'. [ 1705.233953][ T9992] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1705.274405][T20986] netlink: 'syz.3.12320': attribute type 11 has an invalid length. [ 1705.335350][T20986] netlink: 'syz.3.12320': attribute type 4 has an invalid length. [ 1705.377917][T20986] netlink: 'syz.3.12320': attribute type 6 has an invalid length. [ 1705.434567][T20986] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.12320'. [ 1705.524256][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12322'. [ 1705.682869][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1705.765344][T20705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1705.786509][T20705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.805193][T20705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1705.870218][T21012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12324'. [ 1705.907549][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12324'. [ 1705.923906][T12270] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1705.942558][T21007] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1706.044814][T20705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1706.073461][T20705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.130259][T20705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1706.183281][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1706.302085][T16811] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1706.735576][T16825] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.910193][T16825] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.970826][T21049] gretap1: entered promiscuous mode [ 1707.002939][T21049] batman_adv: batadv0: Adding interface: gretap1 [ 1707.009555][T21049] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.038760][T21049] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1707.093784][T16825] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.146580][T16825] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.459081][T21066] __nla_validate_parse: 8 callbacks suppressed [ 1707.459102][T21066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12343'. [ 1707.674493][ T9992] net_ratelimit: 2 callbacks suppressed [ 1707.674516][ T9992] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1707.705465][T20705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1707.757905][T20705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1707.792553][T20705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1707.819739][T20705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1707.875515][T20705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1707.961430][T20705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1707.992568][T20705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1708.004638][T20705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1708.254984][T16811] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1708.356970][T21101] netlink: 'syz.0.12350': attribute type 178 has an invalid length. [ 1708.420181][T20705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.452341][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1708.505739][T20705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1708.551023][T12270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.558392][T12270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.679063][T21119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1708.724523][T12270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.731774][T12270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1708.998799][T21126] sctp: [Deprecated]: syz.3.12357 (pid 21126) Use of int in maxseg socket option. [ 1708.998799][T21126] Use struct sctp_assoc_value instead [ 1709.033149][T28416] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1709.053635][T21126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12357'. [ 1709.154446][ T9992] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1709.303786][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1709.483000][T28416] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1709.624179][T28416] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1709.825131][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1710.213069][T21177] netlink: 'syz.5.12368': attribute type 4 has an invalid length. [ 1710.710911][T20705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.233042][T21217] Cannot find add_set index 0 as target [ 1711.453850][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12375'. [ 1711.694260][T21235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12380'. [ 1711.716618][T21224] syzkaller0: entered promiscuous mode [ 1711.720742][T21235] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12380'. [ 1711.746527][T21224] syzkaller0: entered allmulticast mode [ 1712.280608][T21254] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12384'. [ 1714.992321][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1717.907261][T21252] netlink: 240 bytes leftover after parsing attributes in process `syz.2.12384'. [ 1717.938136][T21258] batadv1: left promiscuous mode [ 1717.965775][T21258] geneve1: left promiscuous mode [ 1717.994043][T21258] team0: entered promiscuous mode [ 1718.000990][T21258] batadv1: entered promiscuous mode [ 1718.008264][T21258] geneve1: entered promiscuous mode [ 1718.062652][ T9992] net_ratelimit: 14 callbacks suppressed [ 1718.062672][ T9992] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1718.083984][T21262] netlink: 'syz.5.12385': attribute type 5 has an invalid length. [ 1718.228297][T20705] veth0_vlan: entered promiscuous mode [ 1718.272408][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1718.298918][T20705] veth1_vlan: entered promiscuous mode [ 1718.452290][T16805] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1718.483533][T20705] veth0_macvtap: entered promiscuous mode [ 1718.501379][T20705] veth1_macvtap: entered promiscuous mode [ 1718.540754][T21279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12390'. [ 1718.555143][T20705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.639631][T21283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12391'. [ 1718.662520][T21283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12391'. [ 1718.683081][T28416] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1718.717726][T20705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.738947][T21279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12390'. [ 1718.788808][T16807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.894542][T12270] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1718.908621][T16807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.944859][T16807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.990622][T16807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.031684][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1719.181828][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1719.433892][T16805] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1719.527076][T16806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.562852][T16806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.672948][T16805] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1719.726486][T21319] netlink: 67 bytes leftover after parsing attributes in process `syz.2.12402'. [ 1719.748946][T16805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.764471][T16805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.787694][T21319] bridge0: port 1(team0) entered blocking state [ 1719.794334][T21319] bridge0: port 1(team0) entered listening state [ 1719.805965][T21319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.996374][T29529] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1720.063606][T21319] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1720.085802][T21319] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1720.186181][T21330] batadv1: entered allmulticast mode [ 1720.288853][T21335] sctp: [Deprecated]: syz.2.12406 (pid 21335) Use of int in maxseg socket option. [ 1720.288853][T21335] Use struct sctp_assoc_value instead [ 1720.415204][T12278] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1720.493924][T21323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1720.540367][T21342] netlink: 'syz.4.12242': attribute type 21 has an invalid length. [ 1720.573661][T21342] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12242'. [ 1720.607225][T21342] veth0: entered promiscuous mode [ 1720.623540][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12242'. [ 1720.668852][T21342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12242'. [ 1720.722092][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12242'. [ 1720.764683][T21341] veth0: left promiscuous mode [ 1721.069654][T21358] veth1_to_team: entered promiscuous mode [ 1721.111395][T21361] xt_TCPMSS: Only works on TCP SYN packets [ 1721.114207][T21358] veth1_to_team: left promiscuous mode [ 1721.468889][ T4949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1721.495902][ T4949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1721.510550][ T4949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1721.574150][ T4949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1721.594507][ T4949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1722.300690][T21401] netlink: 'syz.4.12421': attribute type 7 has an invalid length. [ 1722.637522][T21416] netlink: 'syz.4.12424': attribute type 8 has an invalid length. [ 1722.883696][T21395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.919907][T21395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.274063][T21395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1723.286921][T21395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.448869][T21367] lo speed is unknown, defaulting to 1000 [ 1723.464757][T16805] net_ratelimit: 14 callbacks suppressed [ 1723.464781][T16805] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1723.658474][T21451] netlink: 'syz.5.12434': attribute type 1 has an invalid length. [ 1723.692591][ T4949] Bluetooth: hci4: command tx timeout [ 1723.708564][T21452] netlink: 'syz.5.12434': attribute type 1 has an invalid length. [ 1723.874777][T21395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1723.911390][T21395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.050725][T21451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1724.085081][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1724.330040][T21472] netlink: 'syz.4.12439': attribute type 7 has an invalid length. [ 1724.345736][T21395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1724.355104][T21472] __nla_validate_parse: 7 callbacks suppressed [ 1724.355165][T21472] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12439'. [ 1724.358168][T21395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.420559][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1724.609889][T21474] netlink: 212 bytes leftover after parsing attributes in process `syz.4.12440'. [ 1724.635771][T16825] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1724.645166][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12440'. [ 1724.656372][T16825] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.674632][T21474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12440'. [ 1724.710094][T21474] netlink: 116 bytes leftover after parsing attributes in process `syz.4.12440'. [ 1724.722627][T16805] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1724.741325][T16805] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.907567][T30657] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1724.921050][T30657] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.017941][T30657] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1725.062613][T30657] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.179712][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1725.485976][T21495] veth0_to_bond: entered allmulticast mode [ 1725.513037][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1725.775847][ T4949] Bluetooth: hci4: command tx timeout [ 1725.782387][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1726.125338][T21517] netlink: 83 bytes leftover after parsing attributes in process `syz.4.12451'. [ 1726.161930][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1726.448336][T21527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12454'. [ 1726.470537][T21367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.482476][T21367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.491084][T21367] bridge_slave_0: entered allmulticast mode [ 1726.513457][T21367] bridge_slave_0: entered promiscuous mode [ 1726.528545][T21367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.536897][T21367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.546106][T21367] bridge_slave_1: entered allmulticast mode [ 1726.555729][T21367] bridge_slave_1: entered promiscuous mode [ 1726.584640][ T9992] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1726.691719][T21535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12455'. [ 1726.737219][T21367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.149036][T21537] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1727.223995][T21367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1727.460035][T21367] team0: Port device team_slave_0 added [ 1727.483826][T21367] team0: Port device team_slave_1 added [ 1727.529911][T21367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.543753][T21367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.648980][T21367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.687967][T21555] netlink: 'syz.5.12462': attribute type 21 has an invalid length. [ 1727.728132][T21367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.740196][T21367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.768334][T21367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.809982][T21555] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12462'. [ 1727.823154][ T9992] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1727.848277][T21560] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12463'. [ 1727.858881][ T4949] Bluetooth: hci4: command tx timeout [ 1727.878501][T21560] netlink: 'syz.4.12463': attribute type 11 has an invalid length. [ 1727.893696][T21560] netlink: 'syz.4.12463': attribute type 4 has an invalid length. [ 1728.066998][T21367] hsr_slave_0: entered promiscuous mode [ 1728.084577][T21367] hsr_slave_1: entered promiscuous mode [ 1728.099382][T21367] debugfs: 'hsr0' already exists in 'hsr' [ 1728.112598][T21367] Cannot create hsr debugfs directory [ 1728.162299][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1728.632599][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1728.736412][T21593] netlink: 'syz.4.12472': attribute type 1 has an invalid length. [ 1728.807659][T21595] netlink: 'syz.5.12473': attribute type 1 has an invalid length. [ 1728.950200][T21367] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1729.014478][T21367] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.054723][T21367] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1729.259813][T21600] bond2: (slave bridge1): making interface the new active one [ 1729.274128][T21600] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1729.408377][T21367] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1729.430094][T21612] __nla_validate_parse: 3 callbacks suppressed [ 1729.430115][T21612] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.12476'. [ 1729.432321][T21367] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.505854][T21367] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1729.600775][T21610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1729.632153][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1729.734352][T21367] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1729.777424][T21367] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.800416][T21367] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1729.832223][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1729.846479][T21620] netlink: 'syz.5.12479': attribute type 1 has an invalid length. [ 1729.929372][T21620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1729.936644][ T4949] Bluetooth: hci4: command tx timeout [ 1729.963527][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1729.988874][T21367] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1730.004287][T21367] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.018312][T21367] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1730.099495][T21620] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1730.105834][T21639] netlink: 'syz.3.12483': attribute type 1 has an invalid length. [ 1730.119595][T21637] veth0_to_bond: left allmulticast mode [ 1730.130295][T21620] netlink: 'syz.5.12479': attribute type 1 has an invalid length. [ 1730.138476][T21620] netlink: 'syz.5.12479': attribute type 2 has an invalid length. [ 1730.154632][T21637] bond3: (slave veth0_to_bond): making interface the new active one [ 1730.166486][T21637] veth0_to_bond: entered promiscuous mode [ 1730.185109][T21637] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1730.212997][T21643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12484'. [ 1730.243167][T21639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1730.421879][T21643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12484'. [ 1730.584364][ T9992] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1730.743200][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1730.798296][T21651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12487'. [ 1730.839570][T21657] nbd: must specify at least one socket [ 1730.851915][T21651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12487'. [ 1731.272971][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1731.319076][T21676] netlink: 'syz.0.12495': attribute type 8 has an invalid length. [ 1731.337432][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12495'. [ 1731.402261][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1731.459945][T21367] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1731.474426][T21367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1731.490205][T21681] netlink: 7 bytes leftover after parsing attributes in process `syz.3.12497'. [ 1731.500668][T21679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12495'. [ 1731.509936][T21367] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1731.526716][T21367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1731.548381][T21367] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1731.585045][T21367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1731.621928][T21367] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1731.663339][T21367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1731.693960][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1731.957097][T21697] netlink: 'syz.4.12499': attribute type 3 has an invalid length. [ 1732.224938][T21260] udevd[21260]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1732.637989][T21367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.753544][T21367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.868426][T16805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.875763][T16805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1732.932885][T21724] netlink: 'syz.3.12507': attribute type 49 has an invalid length. [ 1732.946976][T30657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.954269][T30657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.394813][T21740] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1733.407988][T21740] bond4 (unregistering): Released all slaves [ 1733.505091][T21750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12512'. [ 1733.529718][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12512'. [ 1733.773685][T30657] net_ratelimit: 9 callbacks suppressed [ 1733.773708][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1733.925769][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1734.075089][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1734.212412][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1734.354780][T16805] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1734.393296][T21780] netlink: 'syz.4.12518': attribute type 1 has an invalid length. [ 1734.549636][T21780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1734.575224][T21798] __nla_validate_parse: 1 callbacks suppressed [ 1734.575244][T21798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12521'. [ 1734.760984][T16811] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1734.789143][T21367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.844236][T21803] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1734.926738][T21803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12523'. [ 1734.963530][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1735.015255][T21805] netlink: 'syz.5.12524': attribute type 39 has an invalid length. [ 1735.077699][T21367] veth0_vlan: entered promiscuous mode [ 1735.120195][T21805] netlink: 104 bytes leftover after parsing attributes in process `syz.5.12524'. [ 1735.163550][T21367] veth1_vlan: entered promiscuous mode [ 1735.382411][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1735.427148][T21367] veth0_macvtap: entered promiscuous mode [ 1735.464018][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1735.498725][T21367] veth1_macvtap: entered promiscuous mode [ 1735.561424][T12270] team0: left allmulticast mode [ 1735.569378][T12270] batadv1: left allmulticast mode [ 1735.584837][T12270] geneve1: left allmulticast mode [ 1735.605263][T12270] bridge0: port 1(team0) entered disabled state [ 1735.634542][T12270] dvmrp0: left allmulticast mode [ 1735.641147][T12270] tipc: Resetting bearer [ 1736.039277][T12270] tipc: Disabling bearer [ 1736.163387][T12270] bond9 (unregistering): (slave gretap1): Releasing active interface [ 1736.257664][T12270] bond10 (unregistering): (slave geneve3): Releasing active interface [ 1736.278710][T12270] team0: Port device geneve1 removed [ 1736.463456][T12270]  (unregistering): Released all slaves [ 1736.486802][T12270] bond0 (unregistering): Released all slaves [ 1736.525961][T12270] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1736.541111][T12270] bond1 (unregistering): Released all slaves [ 1736.564642][T12270] bond2 (unregistering): Released all slaves [ 1736.601398][T12270] bond3 (unregistering): (slave lo): Releasing backup interface [ 1736.610228][T12270] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1736.629163][T12270] bond3 (unregistering): Released all slaves [ 1736.651982][T12270] bond4 (unregistering): Released all slaves [ 1736.672847][T12270] bond5 (unregistering): Released all slaves [ 1736.699458][T12270] bond6 (unregistering): Released all slaves [ 1736.723691][T12270] bond7 (unregistering): Released all slaves [ 1736.756157][T12270] bond8 (unregistering): Released all slaves [ 1736.777302][T12270] bond9 (unregistering): Released all slaves [ 1736.797543][T12270] bond10 (unregistering): Released all slaves [ 1736.815218][T12270] bond11 (unregistering): Released all slaves [ 1736.841204][T12270] bond12 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1736.857882][T12270] bond12 (unregistering): Released all slaves [ 1736.878345][T12270] bond13 (unregistering): Released all slaves [ 1736.897804][T12270] bond14 (unregistering): Released all slaves [ 1736.924429][T21826] netem: change failed [ 1737.012376][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1737.107317][T21367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1737.203536][T21367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.274970][T28416] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.298733][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1737.330507][T28416] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.423761][T28416] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.476774][T21861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12536'. [ 1737.514055][T30657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.592979][T12270] : left promiscuous mode [ 1737.904253][T12270] tipc: Left network mode [ 1738.125535][T21873] mac80211_hwsim hwsim146 wlan0: entered promiscuous mode [ 1738.608080][T28416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.628892][T28416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.863725][T21895] netlink: 'syz.3.12545': attribute type 1 has an invalid length. [ 1739.014128][T16816] net_ratelimit: 4 callbacks suppressed [ 1739.014150][T16816] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1739.244352][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1739.268527][T16806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.328635][T16806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.506546][T21905] netlink: 'syz.0.12548': attribute type 2 has an invalid length. [ 1739.520280][T21910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12550'. [ 1739.542830][T16816] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1739.743337][T21912] netlink: 'syz.3.12550': attribute type 2 has an invalid length. [ 1739.812859][T21916] netlink: 'syz.5.12551': attribute type 1 has an invalid length. [ 1739.826924][T21916] netlink: 476 bytes leftover after parsing attributes in process `syz.5.12551'. [ 1739.837357][T21916] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.12551'. [ 1740.000650][T21922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12552'. [ 1740.546819][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1741.195775][T21949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12561'. [ 1741.327103][ T9986] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1741.461874][ T9986] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1741.497023][T21959] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1741.602962][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1741.742355][T16825] veth0_to_bond: left promiscuous mode [ 1741.826360][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12567'. [ 1741.893107][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1742.025446][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1742.192272][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1742.352851][T21983] Cannot find del_set index 4 as target [ 1742.914999][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12580'. [ 1742.999462][T22005] erspan0: entered promiscuous mode [ 1743.117288][T12270] batadv0: left promiscuous mode [ 1743.162626][T12270] hsr_slave_0: left promiscuous mode [ 1743.274659][T12270] veth1_macvtap: left promiscuous mode [ 1743.300835][T12270] veth0_macvtap: left promiscuous mode [ 1743.320602][T12270] veth1_vlan: left promiscuous mode [ 1743.339617][T12270] ve: left promiscuous mode [ 1743.500035][T12270] pim6reg (unregistering): left allmulticast mode [ 1743.580685][T12270] batadv1 (unregistering): left promiscuous mode [ 1743.597430][T12270] team0 (unregistering): Port device batadv1 removed [ 1744.198464][T22018] syzkaller0: entered promiscuous mode [ 1744.224151][T22018] syzkaller0: entered allmulticast mode [ 1744.239987][T22019] tipc: Started in network mode [ 1744.247445][T22019] tipc: Node identity ac14140f, cluster identity 4711 [ 1744.266050][T22019] tipc: Enabled bearer , priority 9 [ 1744.442909][T30657] net_ratelimit: 5 callbacks suppressed [ 1744.442933][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1744.593114][ T9986] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1744.741718][ T9986] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1744.756889][T22049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1744.861723][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1744.992287][T28416] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1745.123176][T28416] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1745.254110][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1745.293441][T29516] tipc: Node number set to 2886997007 [ 1745.327384][T12270] IPVS: stop unused estimator thread 0... [ 1745.392594][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1745.493174][T22076] x_tables: duplicate underflow at hook 1 [ 1745.505771][T22079] x_tables: duplicate underflow at hook 1 [ 1745.545319][T16825] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1745.796920][T12270] bridge_slave_1: left allmulticast mode [ 1745.824573][T12270] bridge_slave_1: left promiscuous mode [ 1745.856105][T12270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.930204][T12270] bridge_slave_0: left promiscuous mode [ 1745.977171][T12270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.410786][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12606'. [ 1746.477557][T22105] netlink: 'syz.4.12606': attribute type 12 has an invalid length. [ 1747.597069][T12270] ip6gretap0 (unregistering): left promiscuous mode [ 1747.777316][T12009] Bluetooth: hci1: command 0x0406 tx timeout [ 1751.004911][T12270] bond9 (unregistering): (slave geneve2): Releasing active interface [ 1751.306445][T12270] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1751.547407][T12270] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 1751.555689][T12270] bridge6 (unregistering): left promiscuous mode [ 1751.562373][T12270] bridge6 (unregistering): left allmulticast mode [ 1751.588556][T12270] bond1 (unregistering): Released all slaves [ 1751.606058][T12270] bond0 (unregistering): Released all slaves [ 1751.636351][T12270] bond2 (unregistering): Released all slaves [ 1751.657511][T12270] bond3 (unregistering): Released all slaves [ 1751.675183][T12270] bond4 (unregistering): Released all slaves [ 1751.693700][T12270] bond5 (unregistering): Released all slaves [ 1751.723974][T12270] bond6 (unregistering): Released all slaves [ 1751.746059][T12270] bond7 (unregistering): Released all slaves [ 1751.763262][T12270] bond8 (unregistering): Released all slaves [ 1751.806666][T12270] bond9 (unregistering): Released all slaves [ 1751.822764][T12270] bond10 (unregistering): Released all slaves [ 1751.963637][T22103] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1751.994008][T22103] netlink: 184 bytes leftover after parsing attributes in process `syz.4.12606'. [ 1752.017795][T22141] netlink: 'syz.2.12610': attribute type 1 has an invalid length. [ 1752.042852][T22106] bond0: Error: CAN devices cannot be enslaved [ 1752.054673][T22137] bridge0: port 3(gretap0) entered blocking state [ 1752.109016][T22137] bridge0: port 3(gretap0) entered disabled state [ 1752.130796][T22137] gretap0: entered allmulticast mode [ 1752.182579][T22137] gretap0: entered promiscuous mode [ 1752.240382][T16807] net_ratelimit: 1 callbacks suppressed [ 1752.240408][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1752.292798][T12270] tipc: Disabling bearer [ 1752.318845][T12270] tipc: Left network mode [ 1752.415157][T16806] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1752.563703][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1752.712987][T16805] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1752.891242][T22162] netlink: 'syz.4.12616': attribute type 1 has an invalid length. [ 1753.342058][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1753.710259][T22170] syzkaller0: entered promiscuous mode [ 1753.716917][T22170] syzkaller0: entered allmulticast mode [ 1753.766811][T22204] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12627'. [ 1753.848053][T22205] netlink: 'syz.2.12627': attribute type 2 has an invalid length. [ 1754.085621][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1754.129402][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12630'. [ 1754.260521][T22207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12628'. [ 1754.437665][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1754.570677][T22237] netlink: 'syz.4.12634': attribute type 1 has an invalid length. [ 1754.717095][T22237] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1754.727306][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1755.112245][T16811] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1755.245077][T16811] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1755.771157][T22271] netlink: 'syz.4.12642': attribute type 12 has an invalid length. [ 1755.793392][T22272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12643'. [ 1755.810413][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12644'. [ 1755.831449][T22271] netlink: 'syz.4.12642': attribute type 29 has an invalid length. [ 1755.869862][T22278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12642'. [ 1755.906472][T22271] netlink: 148 bytes leftover after parsing attributes in process `syz.4.12642'. [ 1755.956848][T22271] netlink: 'syz.4.12642': attribute type 1 has an invalid length. [ 1755.985278][T22271] netlink: 'syz.4.12642': attribute type 1 has an invalid length. [ 1756.016919][T22271] netlink: 'syz.4.12642': attribute type 2 has an invalid length. [ 1756.374331][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12650'. [ 1756.435980][T22293] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1756.477149][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12650'. [ 1756.905226][T22310] netlink: 'syz.5.12656': attribute type 1 has an invalid length. [ 1757.009982][T22310] __nla_validate_parse: 1 callbacks suppressed [ 1757.010000][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12656'. [ 1757.273795][T12270] hsr_slave_0: left promiscuous mode [ 1757.474132][T12270] hsr_slave_1: left promiscuous mode [ 1757.654803][T12270] dummy0: left allmulticast mode [ 1757.678744][T12270] veth1_macvtap: left promiscuous mode [ 1757.691243][T12270] veth0_macvtap: left promiscuous mode [ 1757.707857][T12270] veth1_vlan: left promiscuous mode [ 1757.714920][T12270] veth0_vlan: left promiscuous mode [ 1757.875812][T12270] pim6reg (unregistering): left allmulticast mode [ 1758.264085][T12270] team0 (unregistering): Port device team_slave_1 removed [ 1758.287060][T12270] team0 (unregistering): Port device team_slave_0 removed [ 1758.436147][T12270] smc: removing net device team0 with user defined pnetid SYZ2 [ 1758.480624][T22310] validate_nla: 1 callbacks suppressed [ 1758.480646][T22310] netlink: 'syz.5.12656': attribute type 1 has an invalid length. [ 1758.497816][T22310] netlink: 'syz.5.12656': attribute type 2 has an invalid length. [ 1758.509058][T22327] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12658'. [ 1758.533667][T22327] tipc: Started in network mode [ 1758.545950][T22327] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1758.558411][T22327] tipc: Enabling of bearer rejected, failed to enable media [ 1758.578165][T30657] net_ratelimit: 14 callbacks suppressed [ 1758.578188][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1758.771797][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1758.902249][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1759.067347][T16817] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1759.271705][T16809] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1759.285987][T12270] IPVS: stop unused estimator thread 0... [ 1759.415409][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1759.543172][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1759.661955][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1759.793634][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1759.905011][T22387] bond1: option fail_over_mac: invalid value (16) [ 1759.914074][T22387] bond1 (unregistering): Released all slaves [ 1759.995819][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1760.095849][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12681'. [ 1760.560192][T22429] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12691'. [ 1760.598345][T22425] set match dimension is over the limit! [ 1761.325475][T22454] netlink: 'syz.0.12697': attribute type 1 has an invalid length. [ 1761.453893][T22462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12699'. [ 1761.479239][T22463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12700'. [ 1761.879696][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12706'. [ 1761.970688][T22482] netlink: 300 bytes leftover after parsing attributes in process `syz.5.12707'. [ 1762.220517][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12709'. [ 1762.825256][T22512] batadv_slave_1: entered promiscuous mode [ 1762.846338][T22512] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12715'. [ 1762.877172][T22511] batadv_slave_1: left promiscuous mode [ 1763.583231][T30657] net_ratelimit: 30 callbacks suppressed [ 1763.583249][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1763.701805][T16816] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1763.813425][T16816] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1763.934708][T16817] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1764.053411][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1764.173779][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1764.281779][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1764.392852][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1764.512177][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1764.621771][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1766.150138][T22526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1766.501154][T22571] bond0: Error: Cannot enslave bond to itself. [ 1767.407175][T22621] unsupported nlmsg_type 40 [ 1767.417236][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12746'. [ 1767.487246][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12736'. [ 1767.607611][T22632] syz_tun: entered allmulticast mode [ 1767.864551][T22638] xt_TCPMSS: Only works on TCP SYN packets [ 1768.113647][T22631] syz_tun: left allmulticast mode [ 1768.479992][T22659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12753'. [ 1768.514486][T22664] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12754'. [ 1768.530032][T22659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12753'. [ 1768.555057][T22659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12753'. [ 1768.609558][T22668] veth0: entered promiscuous mode [ 1768.634122][T30657] net_ratelimit: 34 callbacks suppressed [ 1768.634144][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1768.731073][T22668] veth0: left promiscuous mode [ 1768.783622][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1768.952867][T22679] netlink: 232 bytes leftover after parsing attributes in process `syz.4.12759'. [ 1768.962545][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1769.003746][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12759'. [ 1769.016035][T22692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1769.101795][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1769.257451][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1769.394194][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1769.641990][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1769.763013][T22719] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1769.785460][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1769.869305][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12771'. [ 1769.926279][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1769.967385][T22721] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.12771'. [ 1770.264575][T22740] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1770.324342][T22741] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1770.463692][T22753] netlink: 'syz.3.12780': attribute type 1 has an invalid length. [ 1770.640802][T22753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1770.708790][T22756] bond2: (slave veth0_to_bond): making interface the new active one [ 1770.747973][T22756] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1770.783436][T22757] netlink: 'syz.4.12782': attribute type 3 has an invalid length. [ 1770.857971][T22775] sctp: [Deprecated]: syz.5.12783 (pid 22775) Use of int in max_burst socket option. [ 1770.857971][T22775] Use struct sctp_assoc_value instead [ 1771.077875][T22771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1771.088322][T22771] bond2: (slave bond3): Enslaving as an active interface with a down link [ 1772.459195][ T29] audit: type=1804 audit(1781339027.753:26): pid=22845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12802" name="/newroot/97/cgroup.controllers" dev="tmpfs" ino=508 res=1 errno=0 [ 1772.536931][ T29] audit: type=1800 audit(1781339027.753:27): pid=22845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12802" name="cgroup.controllers" dev="tmpfs" ino=508 res=0 errno=0 [ 1772.977601][T22876] netlink: 'syz.5.12811': attribute type 1 has an invalid length. [ 1773.075690][T22876] bond4: entered promiscuous mode [ 1773.119272][T22876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1773.230136][T22884] bond4: (slave bridge3): making interface the new active one [ 1773.239556][T22884] bridge3: entered promiscuous mode [ 1773.248170][T22884] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1773.412829][T22890] __nla_validate_parse: 9 callbacks suppressed [ 1773.412851][T22890] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12815'. [ 1773.645739][T30657] net_ratelimit: 20 callbacks suppressed [ 1773.645763][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1773.781810][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1773.794155][T22907] netlink: 'syz.0.12820': attribute type 11 has an invalid length. [ 1773.802428][T22907] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12820'. [ 1773.951664][T16817] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1774.021060][T22913] netlink: 'syz.4.12821': attribute type 2 has an invalid length. [ 1774.124310][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1774.186853][T22918] netlink: 'syz.0.12823': attribute type 8 has an invalid length. [ 1774.321582][T22927] veth1_macvtap: left promiscuous mode [ 1774.401934][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1774.526125][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1774.563026][T22940] openvswitch: netlink: IP tunnel dst address not specified [ 1774.599808][T22943] openvswitch: netlink: IP tunnel dst address not specified [ 1774.622939][T22942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1774.662021][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1774.679719][T22942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1774.927214][T22925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1775.215042][T22962] netlink: 'syz.0.12832': attribute type 16 has an invalid length. [ 1775.224875][T22962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12832'. [ 1780.821956][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1780.913872][T22965] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1780.932747][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1781.121646][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1781.225343][T22977] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12835'. [ 1781.276547][T22982] netlink: 'syz.0.12837': attribute type 21 has an invalid length. [ 1781.295513][T16817] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1781.315749][T22977] nbd: illegal input index -8454144 [ 1781.323047][T22982] netlink: 'syz.0.12837': attribute type 1 has an invalid length. [ 1781.404086][T22990] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12839'. [ 1781.523044][T16817] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1781.654947][T22996] netlink: 412 bytes leftover after parsing attributes in process `syz.4.12841'. [ 1781.674116][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1781.729073][T23000] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12843'. [ 1781.780969][T23000] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1781.789662][T23003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12840'. [ 1781.804035][T28413] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1781.822142][T23003] openvswitch: netlink: Flow key attr not present in new flow. [ 1781.867307][T23007] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1781.933319][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1782.018577][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12845'. [ 1782.038550][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12845'. [ 1782.055376][T23016] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1782.100711][T23016] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1782.128023][T23016] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1782.157424][T23016] veth1_to_bridge: entered allmulticast mode [ 1782.187678][T23016] veth1_to_bridge: entered promiscuous mode [ 1782.194630][T23016] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1782.208550][T23016] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1782.215933][T23016] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1782.305533][T23021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12847'. [ 1782.448660][T23027] pimreg: entered allmulticast mode [ 1783.358931][T23074] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1783.617522][ T4949] Bluetooth: hci3: command 0x0406 tx timeout [ 1784.068233][T23104] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12871'. [ 1784.109466][T23104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12871'. [ 1784.169798][T23107] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1784.667100][T23124] hsr0: entered promiscuous mode [ 1784.813365][T23137] xt_bpf: check failed: parse error [ 1785.130107][T23152] atomic_op ffff88803a4c6198 conn xmit_atomic 0000000000000000 [ 1785.222262][T23155] Cannot find del_set index 0 as target [ 1785.916766][T16809] net_ratelimit: 30 callbacks suppressed [ 1785.916788][T16809] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1785.981377][T23187] Cannot find del_set index 3 as target [ 1786.082621][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1786.201927][T23194] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1786.224607][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1786.352206][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1786.481766][T30657] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1786.579888][T23211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1786.595015][T23211] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1786.636891][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1786.786362][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1786.811127][T23217] netlink: 'syz.3.12905': attribute type 1 has an invalid length. [ 1786.905238][T23217] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1787.002930][T16809] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1787.273429][ T1345] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1787.479357][T23247] lo: entered allmulticast mode [ 1787.585325][T23247] lo: left allmulticast mode [ 1789.670510][T23332] __nla_validate_parse: 7 callbacks suppressed [ 1789.670530][T23332] netlink: 272 bytes leftover after parsing attributes in process `syz.2.12940'. [ 1789.715873][T23335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1789.723269][T23335] IPv6: NLM_F_CREATE should be set when creating new route [ 1789.728648][T23338] FAULT_INJECTION: forcing a failure. [ 1789.728648][T23338] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1789.730631][T23335] IPv6: NLM_F_CREATE should be set when creating new route [ 1789.758383][T23338] CPU: 1 UID: 0 PID: 23338 Comm: syz.0.12943 Not tainted syzkaller #0 PREEMPT(full) [ 1789.758431][T23338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1789.758453][T23338] Call Trace: [ 1789.758463][T23338] [ 1789.758474][T23338] dump_stack_lvl+0xe8/0x150 [ 1789.758511][T23338] should_fail_ex+0x40c/0x560 [ 1789.758637][T23338] _copy_from_user+0x2d/0xb0 [ 1789.758692][T23338] ___sys_sendmsg+0x1c6/0x360 [ 1789.758730][T23338] ? __lock_acquire+0x683/0x2cd0 [ 1789.758760][T23338] ? __pfx____sys_sendmsg+0x10/0x10 [ 1789.758836][T23338] ? __fget_files+0x2a/0x420 [ 1789.758865][T23338] ? __fget_files+0x3a2/0x420 [ 1789.758905][T23338] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1789.758943][T23338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1789.758988][T23338] ? __pfx_ksys_write+0x10/0x10 [ 1789.759030][T23338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.759056][T23338] do_syscall_64+0x174/0x580 [ 1789.759080][T23338] ? trace_irq_disable+0x3b/0x140 [ 1789.759112][T23338] ? clear_bhb_loop+0x40/0x90 [ 1789.759141][T23338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.759163][T23338] RIP: 0033:0x7fd49d39ce59 [ 1789.759186][T23338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.759205][T23338] RSP: 002b:00007fd49e1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1789.759229][T23338] RAX: ffffffffffffffda RBX: 00007fd49d615fa0 RCX: 00007fd49d39ce59 [ 1789.759246][T23338] RDX: 0000000000044000 RSI: 0000200000002280 RDI: 0000000000000004 [ 1789.759261][T23338] RBP: 00007fd49e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.759275][T23338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.759289][T23338] R13: 00007fd49d616038 R14: 00007fd49d615fa0 R15: 00007ffdc1c1b488 [ 1789.759326][T23338] [ 1789.963014][T23333] bridge0: port 4(ipvlan2) entered blocking state [ 1789.990846][T23333] bridge0: port 4(ipvlan2) entered disabled state [ 1790.003528][T23333] ipvlan2: entered allmulticast mode [ 1790.022485][T23333] bridge0: entered allmulticast mode [ 1790.062841][T23333] ipvlan2: left allmulticast mode [ 1790.098237][T23333] bridge0: left allmulticast mode [ 1790.570050][T23367] syzkaller0: entered promiscuous mode [ 1790.578619][T23367] syzkaller0: entered allmulticast mode [ 1790.609071][T23367] tipc: Started in network mode [ 1790.625736][T23367] tipc: Node identity 521788bf2fbc, cluster identity 4711 [ 1790.657449][T23367] tipc: Enabled bearer , priority 0 [ 1790.822691][T23365] tipc: Resetting bearer [ 1790.895809][T23365] tipc: Disabling bearer [ 1790.983196][T16816] net_ratelimit: 18 callbacks suppressed [ 1790.983223][T16816] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1791.049476][T23390] FAULT_INJECTION: forcing a failure. [ 1791.049476][T23390] name failslab, interval 1, probability 0, space 0, times 0 [ 1791.116978][T23390] CPU: 0 UID: 0 PID: 23390 Comm: syz.0.12957 Not tainted syzkaller #0 PREEMPT(full) [ 1791.117009][T23390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1791.117023][T23390] Call Trace: [ 1791.117032][T23390] [ 1791.117043][T23390] dump_stack_lvl+0xe8/0x150 [ 1791.117073][T23390] should_fail_ex+0x40c/0x560 [ 1791.117103][T23390] should_failslab+0xa8/0x100 [ 1791.117146][T23390] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1791.117178][T23390] ? __alloc_skb+0x189/0x7a0 [ 1791.117291][T23390] ? __alloc_skb+0x1d7/0x7a0 [ 1791.117320][T23390] ? __local_bh_enable_ip+0xd0/0x130 [ 1791.117370][T23390] __alloc_skb+0x1d7/0x7a0 [ 1791.117407][T23390] netlink_sendmsg+0x5d4/0xb40 [ 1791.117522][T23390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1791.117561][T23390] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1791.117598][T23390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1791.117627][T23390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1791.117663][T23390] ____sys_sendmsg+0x9b9/0xa20 [ 1791.117697][T23390] ? __might_fault+0xaf/0x130 [ 1791.117731][T23390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1791.117774][T23390] ? import_iovec+0x73/0xa0 [ 1791.117813][T23390] ___sys_sendmsg+0x2a5/0x360 [ 1791.117845][T23390] ? __lock_acquire+0x683/0x2cd0 [ 1791.117873][T23390] ? __pfx____sys_sendmsg+0x10/0x10 [ 1791.117949][T23390] ? __fget_files+0x2a/0x420 [ 1791.117976][T23390] ? __fget_files+0x3a2/0x420 [ 1791.118016][T23390] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1791.118054][T23390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1791.118099][T23390] ? __pfx_ksys_write+0x10/0x10 [ 1791.118142][T23390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.118167][T23390] do_syscall_64+0x174/0x580 [ 1791.118189][T23390] ? trace_irq_disable+0x3b/0x140 [ 1791.118230][T23390] ? clear_bhb_loop+0x40/0x90 [ 1791.118258][T23390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.118281][T23390] RIP: 0033:0x7fd49d39ce59 [ 1791.118302][T23390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.118320][T23390] RSP: 002b:00007fd49e1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1791.118343][T23390] RAX: ffffffffffffffda RBX: 00007fd49d615fa0 RCX: 00007fd49d39ce59 [ 1791.118359][T23390] RDX: 0000000000044000 RSI: 0000200000002280 RDI: 0000000000000004 [ 1791.118373][T23390] RBP: 00007fd49e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1791.118387][T23390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.118400][T23390] R13: 00007fd49d616038 R14: 00007fd49d615fa0 R15: 00007ffdc1c1b488 [ 1791.118437][T23390] [ 1791.378488][T16817] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1791.523543][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1791.714461][T16809] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1791.854999][T16809] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1791.981792][T16817] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1791.994631][T23414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12963'. [ 1792.006862][T23412] netlink: 'syz.5.12964': attribute type 24 has an invalid length. [ 1792.092434][T15787] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1792.223846][T16807] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1792.240402][T23420] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1792.372126][T16809] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1792.391191][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12967'. [ 1792.566355][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1792.659837][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1792.670846][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1792.680515][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1792.690403][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1792.700091][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1792.711665][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1792.805945][T23434] bond1 (unregistering): Released all slaves [ 1793.076445][T23454] netlink: 'syz.0.12974': attribute type 1 has an invalid length. [ 1793.270008][T23460] netlink: 'syz.2.12978': attribute type 29 has an invalid length. [ 1793.426320][T23463] team0: Port device team_slave_0 removed [ 1793.475123][T23473] FAULT_INJECTION: forcing a failure. [ 1793.475123][T23473] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.508647][T23473] CPU: 1 UID: 0 PID: 23473 Comm: syz.2.12981 Not tainted syzkaller #0 PREEMPT(full) [ 1793.508675][T23473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1793.508687][T23473] Call Trace: [ 1793.508696][T23473] [ 1793.508714][T23473] dump_stack_lvl+0xe8/0x150 [ 1793.508745][T23473] should_fail_ex+0x40c/0x560 [ 1793.508773][T23473] should_failslab+0xa8/0x100 [ 1793.508810][T23473] __kmalloc_noprof+0xe8/0x750 [ 1793.508839][T23473] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1793.508868][T23473] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1793.508985][T23473] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1793.509022][T23473] genl_family_rcv_msg_doit+0xda/0x340 [ 1793.509055][T23473] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1793.509090][T23473] ? apparmor_capable+0x126/0x170 [ 1793.509119][T23473] ? bpf_lsm_capable+0x9/0x20 [ 1793.509139][T23473] ? security_capable+0x7e/0x2c0 [ 1793.509255][T23473] genl_rcv_msg+0x614/0x7a0 [ 1793.509289][T23473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1793.509314][T23473] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 1793.509404][T23473] netlink_rcv_skb+0x226/0x4a0 [ 1793.509437][T23473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1793.509464][T23473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1793.509516][T23473] ? down_read+0x270/0x2e0 [ 1793.509546][T23473] ? genl_rcv+0xd/0x40 [ 1793.509572][T23473] genl_rcv+0x28/0x40 [ 1793.509595][T23473] netlink_unicast+0x7bb/0x940 [ 1793.509638][T23473] netlink_sendmsg+0x813/0xb40 [ 1793.509683][T23473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.509728][T23473] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1793.509762][T23473] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1793.509791][T23473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.509828][T23473] ____sys_sendmsg+0x9b9/0xa20 [ 1793.509863][T23473] ? __might_fault+0xaf/0x130 [ 1793.509901][T23473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1793.509946][T23473] ? import_iovec+0x73/0xa0 [ 1793.509980][T23473] ___sys_sendmsg+0x2a5/0x360 [ 1793.510013][T23473] ? __lock_acquire+0x683/0x2cd0 [ 1793.510042][T23473] ? __pfx____sys_sendmsg+0x10/0x10 [ 1793.510121][T23473] ? __fget_files+0x2a/0x420 [ 1793.510149][T23473] ? __fget_files+0x3a2/0x420 [ 1793.510188][T23473] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1793.510227][T23473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1793.510273][T23473] ? __pfx_ksys_write+0x10/0x10 [ 1793.510317][T23473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.510343][T23473] do_syscall_64+0x174/0x580 [ 1793.510364][T23473] ? trace_irq_disable+0x3b/0x140 [ 1793.510397][T23473] ? clear_bhb_loop+0x40/0x90 [ 1793.510426][T23473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.510449][T23473] RIP: 0033:0x7f93db79ce59 [ 1793.510470][T23473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.510490][T23473] RSP: 002b:00007f93dc72f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1793.510515][T23473] RAX: ffffffffffffffda RBX: 00007f93dba15fa0 RCX: 00007f93db79ce59 [ 1793.510532][T23473] RDX: 0000000000044000 RSI: 0000200000002280 RDI: 0000000000000004 [ 1793.510546][T23473] RBP: 00007f93dc72f090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.510560][T23473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.510573][T23473] R13: 00007f93dba16038 R14: 00007f93dba15fa0 R15: 00007ffcc1645ef8 [ 1793.510609][T23473] [ 1794.066598][T23481] netlink: 'syz.2.12983': attribute type 7 has an invalid length. [ 1794.327860][T23493] syzkaller0: entered promiscuous mode [ 1794.335243][T23493] syzkaller0: entered allmulticast mode [ 1794.378713][T16807] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.427359][T16807] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.675819][T16814] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.698305][T16814] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.930812][T23521] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1794.985683][T23523] __nla_validate_parse: 65 callbacks suppressed [ 1794.985706][T23523] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12991'. [ 1795.140086][T23532] FAULT_INJECTION: forcing a failure. [ 1795.140086][T23532] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.203511][T23532] CPU: 0 UID: 0 PID: 23532 Comm: syz.0.12994 Not tainted syzkaller #0 PREEMPT(full) [ 1795.203542][T23532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1795.203556][T23532] Call Trace: [ 1795.203566][T23532] [ 1795.203576][T23532] dump_stack_lvl+0xe8/0x150 [ 1795.203612][T23532] should_fail_ex+0x40c/0x560 [ 1795.203643][T23532] should_failslab+0xa8/0x100 [ 1795.203681][T23532] __kmalloc_noprof+0xe8/0x750 [ 1795.203711][T23532] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1795.203743][T23532] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1795.203779][T23532] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1795.203816][T23532] genl_family_rcv_msg_doit+0xda/0x340 [ 1795.203849][T23532] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1795.203885][T23532] ? apparmor_capable+0x126/0x170 [ 1795.203919][T23532] ? bpf_lsm_capable+0x9/0x20 [ 1795.203940][T23532] ? security_capable+0x7e/0x2c0 [ 1795.203978][T23532] genl_rcv_msg+0x614/0x7a0 [ 1795.204019][T23532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1795.204044][T23532] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 1795.204088][T23532] netlink_rcv_skb+0x226/0x4a0 [ 1795.204121][T23532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1795.204149][T23532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1795.204201][T23532] ? down_read+0x270/0x2e0 [ 1795.204224][T23532] ? genl_rcv+0xd/0x40 [ 1795.204250][T23532] genl_rcv+0x28/0x40 [ 1795.204273][T23532] netlink_unicast+0x7bb/0x940 [ 1795.204315][T23532] netlink_sendmsg+0x813/0xb40 [ 1795.204375][T23532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1795.204412][T23532] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1795.204447][T23532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1795.204475][T23532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1795.204511][T23532] ____sys_sendmsg+0x9b9/0xa20 [ 1795.204545][T23532] ? __might_fault+0xaf/0x130 [ 1795.204588][T23532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1795.204634][T23532] ? import_iovec+0x73/0xa0 [ 1795.204666][T23532] ___sys_sendmsg+0x2a5/0x360 [ 1795.204699][T23532] ? __lock_acquire+0x683/0x2cd0 [ 1795.204728][T23532] ? __pfx____sys_sendmsg+0x10/0x10 [ 1795.204806][T23532] ? __fget_files+0x2a/0x420 [ 1795.204833][T23532] ? __fget_files+0x3a2/0x420 [ 1795.204873][T23532] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1795.204907][T23532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1795.204947][T23532] ? __pfx_ksys_write+0x10/0x10 [ 1795.204985][T23532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.205015][T23532] do_syscall_64+0x174/0x580 [ 1795.205033][T23532] ? trace_irq_disable+0x3b/0x140 [ 1795.205063][T23532] ? clear_bhb_loop+0x40/0x90 [ 1795.205087][T23532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.205107][T23532] RIP: 0033:0x7fd49d39ce59 [ 1795.205126][T23532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.205143][T23532] RSP: 002b:00007fd49e1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1795.205164][T23532] RAX: ffffffffffffffda RBX: 00007fd49d615fa0 RCX: 00007fd49d39ce59 [ 1795.205178][T23532] RDX: 0000000000044000 RSI: 0000200000002280 RDI: 0000000000000004 [ 1795.205191][T23532] RBP: 00007fd49e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.205204][T23532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1795.205216][T23532] R13: 00007fd49d616038 R14: 00007fd49d615fa0 R15: 00007ffdc1c1b488 [ 1795.205248][T23532] [ 1795.788668][T23541] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.12997'. [ 1795.852648][T23541] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12997'. [ 1796.262745][T16816] net_ratelimit: 11 callbacks suppressed [ 1796.262768][T16816] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1796.464334][T16811] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1796.770235][T23577] FAULT_INJECTION: forcing a failure. [ 1796.770235][T23577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1796.791012][T16811] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 1796.799169][T23577] CPU: 1 UID: 0 PID: 23577 Comm: syz.5.13007 Not tainted syzkaller #0 PREEMPT(full) [ 1796.799199][T23577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1796.799213][T23577] Call Trace: [ 1796.799221][T23577] [ 1796.799231][T23577] dump_stack_lvl+0xe8/0x150 [ 1796.799262][T23577] should_fail_ex+0x40c/0x560 [ 1796.799290][T23577] _copy_to_user+0x31/0xb0 [ 1796.799321][T23577] simple_read_from_buffer+0xe1/0x170 [ 1796.799354][T23577] proc_fail_nth_read+0x1bb/0x230 [ 1796.799440][T23577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1796.799472][T23577] ? rw_verify_area+0x24a/0x4c0 [ 1796.799506][T23577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1796.799534][T23577] vfs_read+0x213/0xa80 [ 1796.799570][T23577] ? __pfx___mutex_lock+0x10/0x10 [ 1796.799596][T23577] ? __pfx_vfs_read+0x10/0x10 [ 1796.799629][T23577] ? __fget_files+0x2a/0x420 [ 1796.799663][T23577] ? __fget_files+0x3a2/0x420 [ 1796.799688][T23577] ? __fget_files+0x2a/0x420 [ 1796.799726][T23577] ksys_read+0x150/0x270 [ 1796.799760][T23577] ? __pfx_ksys_read+0x10/0x10 [ 1796.799809][T23577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.799834][T23577] do_syscall_64+0x174/0x580 [ 1796.799856][T23577] ? trace_irq_disable+0x3b/0x140 [ 1796.799887][T23577] ? clear_bhb_loop+0x40/0x90 [ 1796.799915][T23577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.799937][T23577] RIP: 0033:0x7f3ace15d68e [ 1796.799959][T23577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1796.799979][T23577] RSP: 002b:00007f3acf07ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1796.800002][T23577] RAX: ffffffffffffffda RBX: 00007f3acf0806c0 RCX: 00007f3ace15d68e [ 1796.800019][T23577] RDX: 000000000000000f RSI: 00007f3acf0800a0 RDI: 0000000000000003 [ 1796.800034][T23577] RBP: 00007f3acf080090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.800048][T23577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1796.800060][T23577] R13: 00007f3ace416038 R14: 00007f3ace415fa0 R15: 00007ffd7cca6ca8 [ 1796.800097][T23577] [ 1797.016287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1797.030961][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1797.043596][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1797.056304][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1797.069122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1797.083835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1797.096525][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1797.947966][T23595] xt_hashlimit: size too large, truncated to 1048576 [ 1798.068542][T23598] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13012'. [ 1798.194973][T23601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13013'. [ 1798.285080][T23604] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001 [ 1798.507035][T23596] xt_hashlimit: size too large, truncated to 1048576 [ 1798.998762][T23620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13015'. [ 1800.288608][T23587] mac80211_hwsim hwsim150 wlan0: entered promiscuous mode [ 1800.991188][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13017'. [ 1801.271608][ C1] net_ratelimit: 8322 callbacks suppressed [ 1801.271628][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.290100][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.302685][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.315269][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.327895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.340516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.353094][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.365723][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.378282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.390888][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1801.596314][T23639] netlink: 'syz.5.13018': attribute type 2 has an invalid length. [ 1801.698329][T23639] netlink: 'syz.5.13018': attribute type 2 has an invalid length. [ 1801.894814][T23638] mac80211_hwsim hwsim152 wlan0: entered promiscuous mode [ 1804.094013][ T4949] Bluetooth: hci2: command 0x0405 tx timeout [ 1804.506378][T23673] tipc: Started in network mode [ 1804.528104][T23673] tipc: Node identity 824ac842a604, cluster identity 4711 [ 1804.587366][T23673] tipc: Enabled bearer , priority 11 [ 1805.065113][T23689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13031'. [ 1805.329930][T23697] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1805.948369][T29529] tipc: Node number set to 609142850 [ 1805.980420][T23707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13038'. [ 1806.282091][ C1] net_ratelimit: 3656 callbacks suppressed [ 1806.282123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1806.301761][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1806.315456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1806.329164][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1806.345509][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1806.359437][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1806.373807][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1806.387540][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1806.401251][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1806.414939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1811.291754][ C0] net_ratelimit: 12214 callbacks suppressed [ 1811.291776][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1811.293149][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1811.299064][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1811.314109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1811.323350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1811.338033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1811.347326][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1811.362587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1811.371400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1811.387950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1816.301637][ C0] net_ratelimit: 13718 callbacks suppressed [ 1816.301660][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1816.305179][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1816.308985][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1816.322699][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1816.333001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1816.346318][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1816.356908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1816.370284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1816.380803][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1816.394411][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1816.806020][ T4949] Bluetooth: hci5: command 0x0406 tx timeout [ 1817.874157][ C0] sched: DL replenish lagged too much [ 1821.311744][ C0] net_ratelimit: 13741 callbacks suppressed [ 1821.311767][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1821.313893][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1821.319026][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1821.332584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1821.343053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1821.356591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1821.367131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1821.382639][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1821.391395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1821.404990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1826.321665][ C0] net_ratelimit: 14491 callbacks suppressed [ 1826.321687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1826.322460][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1826.328998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1826.342541][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1826.352969][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1826.366488][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1826.377103][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1826.392454][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1826.401083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1826.414617][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1831.331754][ C0] net_ratelimit: 13941 callbacks suppressed [ 1831.331779][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1831.331808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1831.339090][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1831.354929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1831.363472][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1831.376926][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1831.387225][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1831.400557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1831.411138][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1831.432306][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1836.341941][ C0] net_ratelimit: 13848 callbacks suppressed [ 1836.341964][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1836.343874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1836.351085][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1836.362988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1836.373163][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1836.386794][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1836.399115][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1836.410604][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1836.421422][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1836.434528][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1841.351628][ C1] net_ratelimit: 13933 callbacks suppressed [ 1841.351652][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1841.351658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1841.352938][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1841.360225][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1841.371039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1841.384371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1841.395158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1841.408585][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1841.419507][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1841.433024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1846.361634][ C1] net_ratelimit: 13856 callbacks suppressed [ 1846.361656][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1846.361934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1846.370400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1846.381336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1846.394466][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1846.404987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1846.418451][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1846.429273][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1846.442803][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1846.453135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1851.371815][ C1] net_ratelimit: 13719 callbacks suppressed [ 1851.371839][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1851.371878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1851.380906][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1851.393152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1851.404592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1851.415409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1851.428597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1851.439123][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1851.454480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1851.463248][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1856.382149][ C0] net_ratelimit: 13977 callbacks suppressed [ 1856.382172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1856.384281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1856.389861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1856.403609][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1856.413782][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1856.427099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1856.437742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1856.451197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1856.461748][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1856.475576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1858.344851][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1861.391751][ C0] net_ratelimit: 13780 callbacks suppressed [ 1861.391774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1861.392737][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1861.399151][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1861.412623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1861.423082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1861.436711][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1861.446963][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1861.460355][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1861.470947][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1861.484672][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1865.791706][T23716] Bluetooth: hci4: command 0x0405 tx timeout [ 1866.401800][ C0] net_ratelimit: 13615 callbacks suppressed [ 1866.401823][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1866.403348][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1866.409682][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1866.427747][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1866.433257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1866.446827][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1866.457335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1866.470678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1866.481247][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1866.496498][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1871.411675][ C0] net_ratelimit: 13799 callbacks suppressed [ 1871.411699][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1871.413458][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1871.419015][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1871.433256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1871.442986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1871.456962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1871.467098][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1871.480806][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1871.491115][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1871.504946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1876.421879][ C1] net_ratelimit: 13650 callbacks suppressed [ 1876.421879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1876.421902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1876.429550][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1876.442944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1876.453264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1876.466739][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1876.477237][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1876.490828][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1876.501412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1876.514729][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1881.431747][ C0] net_ratelimit: 13906 callbacks suppressed [ 1881.431771][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1881.435152][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1881.438979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1881.452908][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1881.463164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1881.485148][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1881.487272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1881.500637][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1881.511320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1881.525536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1886.441530][ C0] net_ratelimit: 14045 callbacks suppressed [ 1886.441553][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1886.442417][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1886.448768][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1886.462502][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1886.472865][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1886.486175][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1886.496883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1886.510346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1886.520618][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1886.534149][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1891.451528][ C0] net_ratelimit: 13755 callbacks suppressed [ 1891.451553][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1891.456186][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1891.461840][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1891.473113][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1891.485144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1891.496737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1891.507257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1891.520831][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1891.531136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1891.544818][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1896.461893][ C0] net_ratelimit: 13725 callbacks suppressed [ 1896.461915][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1896.464179][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1896.469741][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1896.483063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1896.493267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1896.506729][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1896.517389][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1896.530922][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1896.543317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1896.554888][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1901.472323][ C0] net_ratelimit: 13568 callbacks suppressed [ 1901.472347][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1901.473878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1901.480028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1901.493706][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1901.503986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1901.517444][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1901.527824][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1901.541754][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1901.552016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1901.565363][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1906.481539][ C0] net_ratelimit: 13828 callbacks suppressed [ 1906.481563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1906.485024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1906.488913][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1906.502568][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1906.512921][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1906.526503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1906.536959][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1906.550316][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1906.560847][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1906.576103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1911.491544][ C0] net_ratelimit: 13863 callbacks suppressed [ 1911.491569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1911.493904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1911.498965][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1911.512319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1911.523190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1911.536250][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1911.546943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1911.560401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1911.573259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1911.584687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1916.501632][ C1] net_ratelimit: 14027 callbacks suppressed [ 1916.501655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1916.502874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1916.510634][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1916.521300][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1916.539460][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1916.545209][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1916.558445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1916.569284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1916.584781][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1916.593265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1918.521439][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1918.528453][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23707/1:b..l P23711/1:b..l [ 1918.538425][ C1] rcu: (detected by 1, t=10503 jiffies, g=368645, q=2239 ncpus=2) [ 1918.546414][ C1] task:syz.3.13039 state:R running task stack:25224 pid:23711 tgid:23710 ppid:19747 task_flags:0x400140 flags:0x00080002 [ 1918.561810][ C1] Call Trace: [ 1918.565147][ C1] [ 1918.568222][ C1] __schedule+0x1840/0x57a0 [ 1918.572793][ C1] ? __lock_acquire+0x683/0x2cd0 [ 1918.577997][ C1] ? __pfx___schedule+0x10/0x10 [ 1918.582926][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1918.588363][ C1] preempt_schedule_common+0x82/0xd0 [ 1918.593707][ C1] ? nl80211_netlink_notify+0x6f4/0x840 [ 1918.599437][ C1] preempt_schedule_thunk+0x16/0x30 [ 1918.604707][ C1] __local_bh_enable_ip+0xe1/0x130 [ 1918.609891][ C1] nl80211_netlink_notify+0x6f4/0x840 [ 1918.615353][ C1] ? nl80211_netlink_notify+0x74/0x840 [ 1918.620903][ C1] notifier_call_chain+0x1a5/0x3d0 [ 1918.626101][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 1918.631988][ C1] netlink_release+0x11f8/0x1aa0 [ 1918.637005][ C1] ? netlink_release+0x106/0x1aa0 [ 1918.642091][ C1] ? __pfx_netlink_release+0x10/0x10 [ 1918.647439][ C1] ? down_write+0x16d/0x200 [ 1918.651994][ C1] ? __pfx_down_write+0x10/0x10 [ 1918.656907][ C1] sock_close+0xad/0x220 [ 1918.661205][ C1] ? __pfx_sock_close+0x10/0x10 [ 1918.666108][ C1] __fput+0x418/0xa50 [ 1918.670164][ C1] task_work_run+0x1d9/0x270 [ 1918.674809][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1918.679988][ C1] exit_to_user_mode_loop+0x193/0x6b0 [ 1918.685405][ C1] ? rcu_is_watching+0x15/0xb0 [ 1918.690265][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.696557][ C1] do_syscall_64+0x353/0x580 [ 1918.701189][ C1] ? trace_irq_disable+0x3b/0x140 [ 1918.706271][ C1] ? clear_bhb_loop+0x40/0x90 [ 1918.710980][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.716945][ C1] RIP: 0033:0x7f00ac95d68e [ 1918.721369][ C1] RSP: 002b:00007f00ad8d9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1918.729795][ C1] RAX: 0000000000000028 RBX: 00007f00ad8db6c0 RCX: 00007f00ac95d68e [ 1918.737785][ C1] RDX: 0000000000000028 RSI: 00007f00ad8da000 RDI: 0000000000000009 [ 1918.745771][ C1] RBP: 0000000000000000 R08: 00007f00ad8d9f04 R09: 000000000000000c [ 1918.753758][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1918.761740][ C1] R13: 00007f00ad8d9f58 R14: 00007f00ad8da000 R15: 0000000000000000 [ 1918.769738][ C1] [ 1918.772764][ C1] task:syz.5.13038 state:R running task stack:26280 pid:23707 tgid:23706 ppid:18562 task_flags:0x40054c flags:0x00080001 [ 1918.786268][ C1] Call Trace: [ 1918.789600][ C1] [ 1918.792584][ C1] __schedule+0x1840/0x57a0 [ 1918.797136][ C1] ? __lock_acquire+0x683/0x2cd0 [ 1918.802111][ C1] ? __pfx___schedule+0x10/0x10 [ 1918.806991][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1918.812385][ C1] preempt_schedule_common+0x82/0xd0 [ 1918.817689][ C1] ? nl80211_netlink_notify+0x6f4/0x840 [ 1918.823260][ C1] preempt_schedule_thunk+0x16/0x30 [ 1918.828550][ C1] __local_bh_enable_ip+0xe1/0x130 [ 1918.833705][ C1] nl80211_netlink_notify+0x6f4/0x840 [ 1918.839135][ C1] ? nl80211_netlink_notify+0x74/0x840 [ 1918.844629][ C1] notifier_call_chain+0x1a5/0x3d0 [ 1918.849762][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 1918.855494][ C1] netlink_release+0x11f8/0x1aa0 [ 1918.860486][ C1] ? netlink_release+0x106/0x1aa0 [ 1918.865539][ C1] ? __pfx_netlink_release+0x10/0x10 [ 1918.870835][ C1] ? down_write+0x16d/0x200 [ 1918.875347][ C1] ? __pfx_down_write+0x10/0x10 [ 1918.880212][ C1] sock_close+0xad/0x220 [ 1918.884468][ C1] ? __pfx_sock_close+0x10/0x10 [ 1918.889328][ C1] __fput+0x418/0xa50 [ 1918.893335][ C1] task_work_run+0x1d9/0x270 [ 1918.897943][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1918.903064][ C1] ? do_exit+0x735/0x2360 [ 1918.907412][ C1] ? kmem_cache_free+0x182/0x650 [ 1918.912387][ C1] ? put_net+0x191/0x260 [ 1918.916662][ C1] do_exit+0x73a/0x2360 [ 1918.920880][ C1] ? __pfx_do_exit+0x10/0x10 [ 1918.925502][ C1] ? cgroup1_freezing+0x20/0x350 [ 1918.930464][ C1] ? cgroup1_freezing+0x20/0x350 [ 1918.935423][ C1] do_group_exit+0x22d/0x2f0 [ 1918.940108][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1918.945362][ C1] get_signal+0x121b/0x12c0 [ 1918.949929][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1918.955548][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1918.961740][ C1] ? __fget_files+0x2a/0x420 [ 1918.966408][ C1] exit_to_user_mode_loop+0xa9/0x6b0 [ 1918.971718][ C1] ? rcu_is_watching+0x15/0xb0 [ 1918.976499][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.982600][ C1] do_syscall_64+0x353/0x580 [ 1918.987731][ C1] ? trace_irq_disable+0x3b/0x140 [ 1918.992799][ C1] ? clear_bhb_loop+0x40/0x90 [ 1918.997493][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.003403][ C1] RIP: 0033:0x7f3ace19ce59 [ 1919.007838][ C1] RSP: 002b:00007f3acf080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1919.016272][ C1] RAX: 0000000000000000 RBX: 00007f3ace415fa0 RCX: 00007f3ace19ce59 [ 1919.024259][ C1] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000009 [ 1919.032275][ C1] RBP: 00007f3ace232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1919.040297][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1919.048281][ C1] R13: 00007f3ace416038 R14: 00007f3ace415fa0 R15: 00007ffd7cca6ca8 [ 1919.056285][ C1] [ 1919.059396][ C1] rcu: rcu_preempt kthread starved for 747 jiffies! g368645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1919.070596][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1919.080612][ C1] rcu: RCU grace-period kthread stack dump: [ 1919.086547][ C1] task:rcu_preempt state:R running task stack:26912 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1919.100231][ C1] Call Trace: [ 1919.103558][ C1] [ 1919.106534][ C1] __schedule+0x1840/0x57a0 [ 1919.111091][ C1] ? __lock_acquire+0x683/0x2cd0 [ 1919.116208][ C1] ? __pfx___schedule+0x10/0x10 [ 1919.121138][ C1] ? schedule+0x90/0x360 [ 1919.125452][ C1] schedule+0x164/0x360 [ 1919.129669][ C1] schedule_timeout+0x152/0x2c0 [ 1919.134580][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1919.140017][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1919.145370][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1919.151244][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1919.156864][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1919.161785][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1919.167128][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1919.173001][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1919.179208][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1919.184540][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1919.189804][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1919.195677][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1919.200327][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1919.205620][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1919.210609][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1919.215692][ C1] kthread+0x389/0x470 [ 1919.219824][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1919.225065][ C1] ? __pfx_kthread+0x10/0x10 [ 1919.229711][ C1] ret_from_fork+0x514/0xb70 [ 1919.234390][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1919.239550][ C1] ? __switch_to+0xc89/0x1420 [ 1919.244291][ C1] ? __pfx_kthread+0x10/0x10 [ 1919.248944][ C1] ret_from_fork_asm+0x1a/0x30 [ 1919.253787][ C1] [ 1919.256848][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1919.263393][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1919.268641][ C0] NMI backtrace for cpu 0 [ 1919.268661][ C0] CPU: 0 UID: 0 PID: 4999 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1919.268682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1919.268694][ C0] RIP: 0010:rcu_is_watching+0x35/0xb0 [ 1919.268722][ C0] Code: 05 10 0c 8c 11 e8 bb 0d f8 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 f7 25 8e 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 8c 19 86 00 48 c7 c3 d8 a9 37 93 [ 1919.268738][ C0] RSP: 0018:ffffc90000007990 EFLAGS: 00000a02 [ 1919.268755][ C0] RAX: 1ffffffff1c4bef2 RBX: 0000000000000000 RCX: 0000000000000101 [ 1919.268769][ C0] RDX: ffff8880121ebe00 RSI: ffffffff8c289980 RDI: ffffffff8c289940 [ 1919.268783][ C0] RBP: ffffc90000007c00 R08: ffff8880121ebe00 R09: 0000000000000002 [ 1919.268802][ C0] R10: 000000000000a888 R11: 0000000000000100 R12: 0000000000000000 [ 1919.268814][ C0] R13: ffff88805c29aa00 R14: ffffffff8e25f790 R15: dffffc0000000000 [ 1919.268829][ C0] FS: 00007f2ef6e5d880(0000) GS:ffff8881252b9000(0000) knlGS:0000000000000000 [ 1919.268844][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1919.268857][ C0] CR2: 000055556540a4e8 CR3: 000000007e766000 CR4: 00000000003526f0 [ 1919.268873][ C0] Call Trace: [ 1919.268880][ C0] [ 1919.268888][ C0] rcu_read_lock_bh_held+0x1a/0x50 [ 1919.268914][ C0] __netif_receive_skb_core+0xf9d/0x30b0 [ 1919.269036][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1919.269104][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1919.269127][ C0] ? ip6_rcv_finish+0x265/0x280 [ 1919.269145][ C0] ? NF_HOOK+0x336/0x3c0 [ 1919.269166][ C0] ? process_backlog+0x3c3/0x1860 [ 1919.269211][ C0] ? lock_acquire+0x106/0x350 [ 1919.269229][ C0] ? process_backlog+0x3c3/0x1860 [ 1919.269257][ C0] ? process_backlog+0x3c3/0x1860 [ 1919.269280][ C0] ? process_backlog+0x3c3/0x1860 [ 1919.269307][ C0] process_backlog+0x706/0x1860 [ 1919.269334][ C0] ? process_backlog+0x3c3/0x1860 [ 1919.269365][ C0] __napi_poll+0xaa/0x330 [ 1919.269389][ C0] net_rx_action+0x61d/0xf50 [ 1919.269420][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1919.269455][ C0] ? lapic_next_event+0x11/0x20 [ 1919.269490][ C0] handle_softirqs+0x225/0x840 [ 1919.269510][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1919.269533][ C0] __irq_exit_rcu+0xca/0x220 [ 1919.269550][ C0] irq_exit_rcu+0x9/0x30 [ 1919.269567][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1919.269595][ C0] [ 1919.269601][ C0] [ 1919.269609][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1919.269629][ C0] RIP: 0010:unwind_next_frame+0x1bb6/0x2550 [ 1919.269658][ C0] Code: 03 00 00 48 c7 c2 e0 a3 c9 8b e8 05 d2 2a 00 48 c7 c7 80 c7 95 8e 4c 89 ee e8 86 b8 2a 00 e8 71 5e 34 00 89 e8 48 83 c4 70 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc c6 05 10 de a2 0e 01 [ 1919.269674][ C0] RSP: 0018:ffffc90004c373d8 EFLAGS: 00000282 [ 1919.269690][ C0] RAX: 00000000f21a5b01 RBX: ffffc90004c374c0 RCX: 0000000000000046 [ 1919.269703][ C0] RDX: 0000000000000002 RSI: ffffffff8e213d22 RDI: ffff8880121ebe00 [ 1919.269717][ C0] RBP: 1ffffffff21a5b01 R08: ffffc90004c37d30 R09: 0000000000000000 [ 1919.269730][ C0] R10: ffffc90004c37458 R11: fffff52000986e8d R12: ffffc90004c30000 [ 1919.269744][ C0] R13: ffffffff81769f7f R14: ffffc90004c37408 R15: ffffc90004c37d40 [ 1919.269759][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1919.269797][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1919.269825][ C0] arch_stack_walk+0x11b/0x150 [ 1919.269852][ C0] ? __x64_sys_newfstatat+0x151/0x200 [ 1919.269877][ C0] stack_trace_save+0xa9/0x100 [ 1919.269903][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1919.269936][ C0] save_stack+0x122/0x230 [ 1919.269969][ C0] ? __pfx_save_stack+0x10/0x10 [ 1919.269992][ C0] ? __free_frozen_pages+0xc0d/0xd20 [ 1919.270017][ C0] ? __slab_free+0x274/0x2c0 [ 1919.270041][ C0] ? qlist_free_all+0x99/0x100 [ 1919.270065][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1919.270088][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1919.270114][ C0] ? __kmalloc_noprof+0x312/0x750 [ 1919.270137][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 1919.270220][ C0] ? tomoyo_path_perm+0x283/0x560 [ 1919.270243][ C0] ? security_inode_getattr+0x12b/0x310 [ 1919.270261][ C0] ? vfs_getattr+0x23/0x70 [ 1919.270278][ C0] ? vfs_statx_path+0x2b/0x230 [ 1919.270300][ C0] ? vfs_statx+0x12e/0x200 [ 1919.270318][ C0] ? vfs_fstatat+0x11b/0x170 [ 1919.270340][ C0] ? page_ext_put+0x97/0xc0 [ 1919.270368][ C0] __reset_page_owner+0x71/0x1f0 [ 1919.270395][ C0] __free_frozen_pages+0xc0d/0xd20 [ 1919.270421][ C0] ? __free_slab+0x172/0x280 [ 1919.270442][ C0] __slab_free+0x274/0x2c0 [ 1919.270476][ C0] qlist_free_all+0x99/0x100 [ 1919.270502][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1919.270528][ C0] __kasan_slab_alloc+0x22/0x80 [ 1919.270555][ C0] __kmalloc_noprof+0x312/0x750 [ 1919.270581][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 1919.270608][ C0] ? __kmalloc_noprof+0x1b4/0x750 [ 1919.270635][ C0] tomoyo_realpath_from_path+0xef/0x640 [ 1919.270672][ C0] tomoyo_path_perm+0x283/0x560 [ 1919.270695][ C0] ? tomoyo_path_perm+0x251/0x560 [ 1919.270717][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1919.270770][ C0] security_inode_getattr+0x12b/0x310 [ 1919.270796][ C0] vfs_getattr+0x23/0x70 [ 1919.270817][ C0] vfs_statx_path+0x2b/0x230 [ 1919.270838][ C0] ? vfs_statx+0x107/0x200 [ 1919.270858][ C0] vfs_statx+0x12e/0x200 [ 1919.270878][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 1919.270896][ C0] ? strncpy_from_user+0x150/0x2c0 [ 1919.270961][ C0] ? do_getname+0x151/0x250 [ 1919.270983][ C0] vfs_fstatat+0x11b/0x170 [ 1919.271004][ C0] __x64_sys_newfstatat+0x151/0x200 [ 1919.271027][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1919.271048][ C0] ? kill_proc_info+0x21/0x180 [ 1919.271085][ C0] ? rcu_is_watching+0x15/0xb0 [ 1919.271112][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.271131][ C0] do_syscall_64+0x174/0x580 [ 1919.271149][ C0] ? clear_bhb_loop+0x40/0x90 [ 1919.271170][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.271188][ C0] RIP: 0033:0x7f2ef6711b0a [ 1919.271205][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1919.271220][ C0] RSP: 002b:00007ffcf372b958 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1919.271238][ C0] RAX: ffffffffffffffda RBX: 000055a689e52fa0 RCX: 00007f2ef6711b0a [ 1919.271251][ C0] RDX: 00007ffcf372b960 RSI: 000055a689e52fa0 RDI: 00000000ffffff9c [ 1919.271264][ C0] RBP: 000055a689e41bf0 R08: 00063478c1c69200 R09: 3fffffffffffffff [ 1919.271278][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf372b960 [ 1919.271291][ C0] R13: 000055a655651100 R14: 0000000000000000 R15: 0000000000000000 [ 1919.271314][ C0] [ 1921.511695][ C0] net_ratelimit: 11147 callbacks suppressed [ 1921.511717][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1921.512202][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1921.518936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1921.530805][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1921.543027][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1921.556176][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1921.567095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1921.580188][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1921.590956][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1921.602887][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1926.521634][ C0] net_ratelimit: 15464 callbacks suppressed [ 1926.521658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1926.521927][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1926.529401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1926.542937][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1926.553450][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1926.565426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1926.577574][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1926.590977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0) [ 1926.601974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1926.615163][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:85:ea:0b:29:e4, vlan:0)