last executing test programs: 15.780715838s ago: executing program 4 (id=7793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r4, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x24, 0x66, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xa}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000848}, 0xae01f73ff2de7e39) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getnetconf={0x3c, 0x52, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0xa}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x20c}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8008) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x40, 0x0, 0x7, 0x500, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5ea5}, @NFACCT_PKTS={0xc}]}, 0x40}}, 0x40800) (async) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r14 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r14, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x46080) (async) socket$packet(0x11, 0x3, 0x300) 14.656478513s ago: executing program 3 (id=7795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002"], 0x80}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x6, 0xe7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x28044042) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@rand_addr, @loopback, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r3, @ANYBLOB="00042dbd7000fddbdf250500000008000300030000000c00068008000000140001800800070000000000", @ANYRES32=r4, @ANYBLOB="060001000a0000000800020000000000050005000000000005000500080000001800068014000400ff0100000000000000000000000000010800040001040001400006801400040000000000000000000000ffff7f000001060001000a000000080006000100000005000200e3000000060001000a00000008000600a0f262d10800030007000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 13.098477379s ago: executing program 3 (id=7798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa100000000000007010000faffffffb702000008000000b70300000280007f720000000000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) 12.858280897s ago: executing program 4 (id=7800): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000010900010073797a310000000058000480340001800c0001007061"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x0, &(0x7f0000000080)={@align=0x8, {0x91, 0x5, 0x6, 0x5}}, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x828949ab3fe143d7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x14, r5, 0x309, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x24000890) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xcd93}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x34054438}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r9, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) 12.301101877s ago: executing program 1 (id=7801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x29, 0x0, &(0x7f0000000100)) close(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x2c, &(0x7f0000000840)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x4}]}, &(0x7f00000008c0)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000480)={r1, &(0x7f0000000140)='/dev/net/tun\x00', 0xa0002, &(0x7f0000000340)={@_ha_fsid={[0x8, 0xff]}, {0x3, 0x1a, 0x0, 0x2}}, 0x8, &(0x7f00000003c0), &(0x7f0000000440)=0x3}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f0000000240)={0x3, 0x2, 0x100, 0x0, 0x4, 0x5, 0x0, &(0x7f00000001c0)=[{0x11, 0x101, 0x7}, {0x0, 0x1ff, 0xf}, {0x13, 0xfe, 0x8000}, {0x12, 0x101, 0x2}, {0xffffffeb, 0xfe, 0x1}]}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000100000000000208004500003a0000000040117cb17f0000017f00000112341388002600000400000114"], 0x48) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x4, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400d8}, 0x0) 11.88534542s ago: executing program 3 (id=7802): unshare(0x2000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r0, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="621d02000000000014000700000061801800018014000a0001feffff0800"/40], 0x50}}, 0x20084084) 11.370128567s ago: executing program 4 (id=7803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) sendto$unix(r2, &(0x7f00000004c0)="ebb567fa9b", 0x5, 0x4c010, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 11.3691342s ago: executing program 0 (id=7804): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000004c0)={0x969c, {{0xa, 0x4e21, 0x5, @loopback, 0x2}}, {{0xa, 0x4e21, 0x3, @private1, 0xa9e}}}, 0x108) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 10.651856373s ago: executing program 2 (id=7805): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r2 = gettid() (async) r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in=@loopback, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) (async) sendto$inet6(r7, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) 10.500432387s ago: executing program 0 (id=7806): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="baccbc8d220f86c5525f5709e195e57ff5f0", 0x12}], 0x1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r4], 0x50}}, 0x0) 10.433943285s ago: executing program 4 (id=7807): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x9) (async) r3 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) epoll_create(0x3ff) (async) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000008}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000008}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000280)={0x20000000}) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff}, 0xc) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=ANY=[@ANYRES8=r5, @ANYRES32=r0, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000010c0)=ANY=[@ANYBLOB="400000001084ba626056c696968cbe09159b6db83e7ffbfd", @ANYRES32=r6, @ANYBLOB="0300000061100700200012800800010073697400140002800800140009000000080003000a010102"], 0x40}}, 0x24008044) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000010c0)=ANY=[@ANYBLOB="400000001084ba626056c696968cbe09159b6db83e7ffbfd", @ANYRES32=r6, @ANYBLOB="0300000061100700200012800800010073697400140002800800140009000000080003000a010102"], 0x40}}, 0x24008044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x6, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) 9.190069044s ago: executing program 3 (id=7808): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000080)={0x10, 0xc0, 0x3fc2, 0x8, 0x9017}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@multicast1, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x400, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400801, 0x9, 0x2}, {0x1cb00000, 0x301, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@sa_dir={0x5, 0x21, 0x1}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x144}}, 0x44050) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newsa={0x16c, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, '\x00'/20}}, @encap={0x1c, 0x4, {0x7, 0x1f90, 0x1f90, @in=@loopback}}]}, 0x16c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) connect$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2, 0xff, 0x2}, 0x1}, 0x18) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e23, 0x800, @mcast2, 0xcb}, {0xa, 0x4e22, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc736}, 0x0, {[0xa66e, 0x8000, 0x81, 0xffffff34, 0x101, 0xf06, 0x7197, 0x1]}}, 0x5c) 6.811091245s ago: executing program 2 (id=7809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000a00000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) listen(r1, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x2, 0x1}, 0x1}, 0x18) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000040)={0x4, 0xfffffffffffffff9, 0x40, 0x4, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61319"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000002c0)={'veth0_virt_wifi\x00', {0x2, 0x4e24, @remote}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) 6.514664139s ago: executing program 1 (id=7810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2b, 'pids'}, {0x2d, 'net_cls'}, {0x2b, 'pids'}, {0x2d, 'memory'}]}, 0x23) 6.205957219s ago: executing program 0 (id=7811): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 5.890649363s ago: executing program 4 (id=7812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="25790952e11c000000", 0x9}], 0x1}, 0x4004) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000440)=""/74, 0x4a}], 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="88010000", @ANYRES16=r3, @ANYBLOB="000429bd7000fddbff250700000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4004080}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) 5.786606382s ago: executing program 3 (id=7813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x57, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002580)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '\x00@\x00', 0x3ff, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [@routing={0x3c, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @mcast2, @private1={0xfc, 0x1, '\x00', 0x4}]}, @hopopts={0x3a, 0x1d5, '\x00', [@generic={0x12, 0xea7, "c9ac4a70ba84646eba50f5859f31f4d9286aaa1792ed14ee4547c4956d4a971cbb5943ff64def2e0d1ded05bd5360357e2296fe1969dda8dda4c22b408f36fa9304a55e25c397d7549ced7ea2a33d05664862232e0c905d4787a86f07900b5e46bafb81c0172b1a37f80d45da7d7db810f0ce8cf826a145c82e35954006a0983dc7ea81e60c7fc155f021fd73f84c23b5a2fffed1a8a6557200050872970c9c98557b169f6da6be0c8e68640cc68607cf8aae3cd6769f0d553e7b5637b912f421157bc5e0a561ec9afe882b9555df4e2fb81b44925179b6021ad454c87a8fcd5e995696ff452611f000126d09297b3b8ed118dd6aa049f386fa0805cdbd997e6dd1622e5c9715458b79e11a9117a786b86a332ad123bbbe1854d4b4a4f1894a52b045516d73880e6be6f2ab043d75f145ebf5ea5ce7fc48fc6fef5d3668b5e68b394e596f44e08b70f966da035f95ad9fce927f6cf9431ab0e918622cb409a58effbbbd81760159a00010765b80e651d81d3850f1ea176347f1672f8d0c9f995c300c97563eeb8dd8bc9d39d40040ed36c0beb6d760f975944a7991739fa296c23c80a2f50c55d69c3741aeeac2e2ff5ba1331adee3590ffa1da2eda6406d8bfa19bc633582baa5f4e85383c6dcee60e47558f43dd6ec67522084c07b6739b391a9728cee6e86ad90c6ec699a5ff20511625e0fc207c405efd1993535116766cc2d29e427dac73da1338211d075cbc352321530b6b98346ade12f626c0be812d2eb571b0bd3c4b335d797bb37bd3826db203e3c89ded2a6d6f95f1744410a0da344329d3bd0cabbfa8e22ec43a8ae8ce43ed8facf77c4f0709e84c8f31d0612485475ae27a3302ecfc04172553c019c3c29a134ec62b4f5ae1c49674af502b2076c4d2e9ed108147135072472fd321dbbe32e15f123d7c9229ad7edc90b0ad3e1dc2ee48a7f384e0271c91c44a0a508df345fbebf9559ad6e3496593ef62139aa5723033209fd80f807638d5b24088e8cb896b499d6d872d42a8d938a77651c28cef73f00ada83257742e08c8c79aef569198542584b408ada5df6f0096ec9a6a8c78fd6d78c5c0944845a5fbcb1936e16a59f05ac6d82c6c2c99c9cae379ece8ddf805e618a61e35361cc4c83b5a07dafe2fe96c7599d6de1a3c5035c77a86b021b72d81bff0c2b6f9665840bf8c98debc219d3d75d451b60293f099ed171c5e566d2591e4bd507a51b925d09aa3ce8c7b8f56d1e35158839484e663de76545c818b0ea8646120eca0b75da4c0e648ae0d56aa168b19f48460923d8d38d3cd570a4c9d6ae1af48b28964db4d5eb89aa2845b8bdddd89f9272ad3e5d04e5624089ae1d124b0eef9ad7ebae1ea2557f946e2a824ed497d45826f26f089fabd54be895fece37564a13f716451a3cb549bece785de9ffa233c8cd10591986b5e5d2bd7349d508b6b504fff44ca31f386383b9da747d0c688bfde3725ebe669571340addd8f83157cdd04bfa060a6b9446e6231d235ecc28ff84ec9f6882bf1eefba15d7b1e47f3233a9dba73c6a027dc9be90e21892545b5d0a4402e9b69b82658b5f8a05977f4b385854814747655b0795e738723ef152b6b3199c41521c8bd86a9d3868b2a969697301b5fbca39bf541849ace04ed8b1b481a3bc80baeaece999cd09a828ae1471482a74cd5e63bb5c80c20050c053fe22fe7375267f84370f0ef1832732f1e0c49b9689d2911d1ea925db9cfce33e9b69d05f6d605e6fce75f65940136f5f55dfe7a8983a9edbc086937ec9f4100bb3e874c075f3d6caeaf46780bcc104dd83825ae45fd5a423d743d817b95e432ba28d994d65883c0532d208f6e90d951de4780b741b4810feee7d3dbd75267666b98510792533ad80bc57d3d6970d2e38504e76c6cc2cf4fb6e1358d49a1a0a30c0bc0d07d29845d9cb2371861fb9f01eb064a18f9e61a5682ef07c31ff8fb1050211fa22f01ef57f042a95756796d4c853360915e5e9c408bc09874d9bcf300c47d74a16c7b85842e22b5734bb84fb4de5dc241708408cb2b379d55be7dc8085f32fd1726a7e6c2fd58041e695596e0c2806c81906d33029c120d7c7e7f145680668fee3e5f010798364713d8c87832a51a934dcd448ac6cd35856ccc3e27c21ff9e25f1cb710d2b1796f637479fa32b003f110b0e2ac9c153941dad387a9edc7c16f50823bcd98a8618cc8735cbaa521a3d6484fc842b9185c740337838e12cf13c9efde323e8bbd33965d2bc435dcdb0cc7c26bf407063ca7a254c33800dd06b191b871fe6b2aae140d1cc1d6f22c1e5c4bc025375b77d3c4edc4cfb9dc558a9ae4814ed5dc83ad963fb590af7c109d2d35df528fa898ac5ea4db299c563fcc7d722a97d68a8e3f7771e5fff804f623ff0b2f25231bbd50ba1bc3a4d4ed857aaef212601bfdb0e183fd85f607e5cccbd4c8452b9b1e4c8376a687a59d34ac1c2dc20645a59efbc022bbd0f30999aafd2796ab3deaf29d0ce9bad1d1eda5f34dfd24cf05c8f3298566d255f75ec91919248c99abe29d5c9879758f68808f2a24dfeb386328dae00d06286a0d46b6b7ea117ad7fdbb5d9f833abf36984190a45bbeb9cd2e45af3f9077b208147e798370bd9e5373881ffa94267b82fc7cc4f11b5258cf219950a5a5732fbe10d385e9053c6fd7b5cc3098aedba588a2b619bc54e7f12228b907aea4f4544c65990baaad1b522635dfe5bb6b71721707f815d7a8ee24c8328d67b46e199c0e5c0c7fdb44b3e9defd5726317f74f4cb87909b00f1f4df8858a980a86f87d27dcf33d6d89bc4c7ec088a7270aff9470d7ef12835eddb86f7471af31e8f2cde0cf102d9c9df7cbf1064d1f61acc5897959df60a6e2861c90316c36f20cfb25d069a21a28441003ea5530e842e6112bc90d3cf67184c063bb33182b59aa49c97eee50f6141ba81518b95963b66f20a7296e911ad472e79ffa926feb2e5c5da5e97ff007445beff0c8711a90c7c7525d48e463c30997d530cab0a845ac173f399effcf6af84f50c6319a1ce3565eef74df335cab14daa748ce2037364d90a2ba428d56d5b3b602b2030ea6b721ffb19078bcfe3bbcace66fb3058745b92ff01de9ddb4dd4e0e460b090bc3983946c007e5f465cd9869cd67c5bcd5881c4557c81c69289bca96d4dc4f4cfa421547d5d5c92279b996173704616c1d50e2016efaee7acfb01c56323bad976ffb39f7d3407f7995742a63751a746e6ef6035923e4e879d92ec3e5d2390fe363270cfdadb75f1db87a71d2343229ec140cf75a25e98a298c98c22fd144b675e5fcf39115b243d8c29ab8d6f7c87a7313481fb99bdeb759072cc9a6ec5153d94298bbfdf80bc3075a503c232e3be025004d281d3478bcbdd0f5549be09fca89da7d0e34af97302607c20c464e034c6428cbe326c07615b39fc72ab6f254c7aad6102f813b9623c6a7601b6ea29f84e86999b1287bd111bfa49672c886cca6eb8786eefc96a84cb0aa04ee0334d3fe23a0cef39078bce8f22cc35eeb2fcbe22280df1209ffb05347cbc3611915e7fedbdc752c658c199b23b3346367cc5a68be6a79069a188f6a6efb2d2aaa387ebed66eeb411b9094254041932876a1120a4ae1d20dfaa8709c62828a3ee332cbbe997b6eae047bd493535a25042e1fb3f2b2933c17f6ef96c1793c0ff79fe740b9282416e5e65ef58254055e38afa2e8cec89274f4e542153896baae0e50c37c83bf1034a5b722c874652182954d271991110e43333a48fd85f9b3427915ff9bd2e3b5342858fd2d86801d1cddb55b66bda6c7df3b04ceeae4a7ce74391255ede63695046d8c27241514ceebbc0a5e6a119f7830600385c3b67583ad2e48f8517c4f31349d2d3535a71b1ba2543fca666e1a06f62ce20557ef459e419e0534feec1958cd6fb5c4413eaa1c7e7a64cb19f6a592fd74def605d69a5e6fe14ad77f60ef0424a8f6b7026c1f4b493c71b6428a826fa731022276888b0dd9fcf6dd67cfdfd2fd1765c3c5d9c5fe4d2012bf8217b9dc91b583d945f70d0df13d3b3380200f02753e86f0de109129586629db95d829235e0db826de6e17c830c1aeca17573cbf95cd18c92b8e12c57e93e189d25fe6e71c32526f82e52de09355ca7f5105a61e059d5924d227119175714b5ab610b8dfa9c53d0b4105481bd5f3d47dd6d9d0eee798d7e38644ecd4971b2663a8c628cf51016597eb2c70640a0fea463f9012eca14e957b4280866ad8490fe7c3db57cd40684dc5655bafdd28e8a24217ca96e6ea1ded591b0b8f0cc9f79059fca8c22a884fab4be708e50a38ed1c0350015f3e4326f0af07c57b31d13868167e6ae776f3203f9f03b316233a4d7045b4652b506238a9be0b68b54e6bc52cc1c0894fbfe5071616170ca4895f6636f9be5df32e09f7429c7569aa42715809969b3f8a88080f57155b4c0cbe54039fa8996c4614657a9e4c4b1eafaaf0a663c0d461380ecd907688668d119c0361c6ac486cda549521ad2702d54053e4c2747e710399e235fc8defe54c64218915598c14de35cec58f24328d950ba6548595bc4b9e6c45e3ccdaed1b1dfe9ae3e7dfa2e768d75d7408242d0c504ef2fa583703d8509e5520db9692003b34c9e4ed48aabaa6908cf599667a4ce679ccbadd440900bd917522eeecd73dc2d90446db4d7d40323ec7971477d061fbd6d1c6434c8614ef7a909f46acb4657c4828601a30b993cd9c1b14215674471fceb9777917d6b3cf6c217d453d01ae5007f7ed70f92aaddae11d2f9bcb5854c1292303c3324fef63eff0a3e7ed487310c81a23bb2f89f68a44af31ffc759827b9855fbc6b9e1321bdbed45679c14d5d72b89a7e684ca8fb434352632533b622c8b5ebd162148c301496c0a18fbf31f10e2319020f5f59e81050f21bbed6b007775bc87b3f0ef643d0294dc7db502a0a45d3c68024fad13885d0212fc96067b2de27c2ec471b201cd50f38fc777a6123931e148c4d888097e6ea4f379ff69ba12cda93b2f48ffbb7286395232a4a78094014fbf8f5b1ae3d0ac780efad2721b2996711f6c3ff54468028fc8fcab62fdd160e1e0b18a8b1726dc1bdf34c2ee35ece720716f01f495eb9adc8361e6bcd0f7fdf7a21abb2ea14ab6563f6a9e580c3e5dd0ee7dcaf5d36f04696ddae6b36039cc611020c783504fa233179397f40dee4199528bd2adf4dd0037d0709fcb0c989ed2a26b0b6d475d6c3e25ef26a87d8b25974ed4a84453df731a3d3d496a4807b5ebc5f310dfa6b72f52634cb5705cca5253899ab69035"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r3, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) 5.499016703s ago: executing program 1 (id=7814): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x16, 0x0, &(0x7f00000001c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, '\x00', 0xf4e, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 5.09827504s ago: executing program 2 (id=7815): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r9) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r9) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x134, r11, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8800}, 0x800) close(r6) pipe(0x0) 4.577937743s ago: executing program 1 (id=7816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000001340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000000280)={0x1050, r1, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "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"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x5}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xbc}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8000}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1050}, 0x1, 0x0, 0x0, 0x20000025}, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, r8, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r7) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xc4, r9, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) (async) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000018c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001700)={0x14c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_LABELS_MASK={0x24, 0x17, [0x1, 0x4, 0x1, 0x8, 0xc9, 0x5, 0x7ff, 0x80000000]}, @CTA_LABELS_MASK={0x20, 0x17, [0x8, 0x1, 0xbcc8, 0x6, 0x2, 0x0, 0x3]}, @CTA_ID={0x8}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x104}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x45}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x401}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x695e}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_NAT_DST={0xc0, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001940), r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x2c, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000001a40), r6) (async) r12 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001a80)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000001ac0)=0x4, 0x12) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001bc0)={'gre0\x00', &(0x7f0000001b40)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x1, 0x5fd7, {{0x17, 0x4, 0x0, 0x2, 0x5c, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1f}, {[@rr={0x7, 0x23, 0x4a, [@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010100, @multicast1, @rand_addr=0x64010100]}, @rr={0x7, 0x13, 0xe8, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}]}, @generic={0x83, 0xf, "da34c9067672b2da39d2af6982"}]}}}}}) sendmsg$nl_route(r13, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)=@delneigh={0x34, 0x1d, 0x200, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r14, 0x80, 0x3, 0x5}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008800}, 0x400) (async) bind$can_j1939(r13, &(0x7f0000001cc0)={0x1d, r14, 0x1, {0x1, 0xff, 0x4}, 0xfe}, 0x18) r15 = accept4$inet(0xffffffffffffffff, &(0x7f0000001d00)={0x2, 0x0, @dev}, &(0x7f0000001d40)=0x10, 0x80000) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001d80)={0x0, 0x1, 0xc}, &(0x7f0000001dc0)=0x10) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001e00)={0xe6f, 0x200, 0x43, 0x7, 0x0}, &(0x7f0000001e40)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r15, 0x84, 0xe, &(0x7f0000001e80)={r16, 0xc, 0x70, 0x1, 0x6, 0xde10, 0xfffc, 0x400, {r17, @in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x6}}, 0xa2e, 0x1000, 0x1, 0xc8, 0x10000}}, &(0x7f0000001f40)=0xb0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0xf, 0x6, &(0x7f00000020c0)=@raw=[@ldst={0x2, 0x3, 0x3, 0x8, 0xb, 0xfffffffffffffffe, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x8f}, @map_val={0x18, 0xf, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2c}], &(0x7f0000002100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', r14, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002140)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3.908527812s ago: executing program 2 (id=7817): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r9) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0x20004000) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x12000010}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r10, 0x311, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) writev(r0, &(0x7f0000001400), 0x0) 3.826860359s ago: executing program 0 (id=7818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="09488219f8d5f682d0cd3d56c5d465c428c7a6f25fef6b6a", @ANYRES16=r2, @ANYBLOB="0103000000000000000067000000080001005300000008000300", @ANYRES32=0x0, @ANYBLOB="00009900040000000b0000004300c300749300000800c40004000000"], 0x34}}, 0x8880) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000810000000f0000000900000090000000", @ANYRES32, @ANYBLOB="02000028e438ac8e24b75e424a3700"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000000000000f00"/28], 0x50) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000480)) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="000129bd7000ffdbdf252b00000004003c0027002a008c1800097223ccf53045e490f52da2c1bda9975ff3a3bc41ede61001753c0401040305000400bf001400278005000e0004000000080017000400000044002380050005000600000005001e00010000000600030057000000050011000100000005000700c600000006000a0080000000060004001e00000005000700010000000400cc0004002380"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000ee4a26f1c28b65"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000003700000828bd70df25170000000800420007000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="00050000000100000000", 0xa}, {&(0x7f0000000240)="7da501456d854f164d431f4bbe6e5a7e3f686567", 0x14}, {&(0x7f00000001c0)="dbe55d33edfa7b43de93a03f0f11b63e2c41a494be1e6edb89f997a31bd5c54cf1f83bd7383641069ee90aaffefdcfe03df4e4084082aa34338fc05482e6c6bc", 0x40}], 0x3}, 0x24000008) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44014) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0xac4, 0x2, 0x37d7, 0x9, 0x3, 0x81, 0x1, 0x10}}) sendmsg$nl_generic(r10, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x14840}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="81108200"/16], &(0x7f0000000280)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000680)={{r10}, 0x663561b1, 0x2}) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x2, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) shutdown(r9, 0x1) 3.566022311s ago: executing program 1 (id=7819): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000d0a01030000000000000000050000000900020073797a32000000000900020073797a320000000008000440000000000900010073797a3000000000f6ff034000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="2fb091fa0f000800000000000000000000ffffffffffac0000010e0200f03e197228636f", @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nw'], 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x6}, @in={0x2, 0x4e24, @rand_addr=0x64010101}], 0x68) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x55}, 0x1, 0x0, 0x0, 0x8001}, 0x24048804) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYBLOB], 0x3a) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x8) 2.592614747s ago: executing program 2 (id=7820): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x98}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x3, 0x800, 0x81, 0x800}) write$nci(r1, &(0x7f0000000000)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @a_listen={0x0, 0x1, 0x4, 0x80, 0x6, 0x10, 0x74, "", 0xa9, 0x7f, 0x2, 0xf8, 0xad, "4d8680839a89290959f321b8663d3a881e5f7979122913ccd1607838336b9944d4cd529ceb85eb72ff49575610b61e500c8fb049d19cd592d9c9af2219878dd1c76098afbeb176d82441a60c110245e4b92863d09603ec69e828093f24ecb7bba7ea18e280c7ba064e8d2dc48e8457c0f3e593f4ed0840c8cffdd99ed29486f2712c662c51fefa60ed91ef8b0ae08ea6c57944b27ad088378191d10a555e5707b59cd67865a6600c66a753c8ab"}}, 0xbc) (async) write$nci(r1, &(0x7f0000000000)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @a_listen={0x0, 0x1, 0x4, 0x80, 0x6, 0x10, 0x74, "", 0xa9, 0x7f, 0x2, 0xf8, 0xad, "4d8680839a89290959f321b8663d3a881e5f7979122913ccd1607838336b9944d4cd529ceb85eb72ff49575610b61e500c8fb049d19cd592d9c9af2219878dd1c76098afbeb176d82441a60c110245e4b92863d09603ec69e828093f24ecb7bba7ea18e280c7ba064e8d2dc48e8457c0f3e593f4ed0840c8cffdd99ed29486f2712c662c51fefa60ed91ef8b0ae08ea6c57944b27ad088378191d10a555e5707b59cd67865a6600c66a753c8ab"}}, 0xbc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x46cf5df3, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 2.008197138s ago: executing program 4 (id=7821): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c894) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000"], 0x48}}, 0x20000034) getsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, &(0x7f00000000c0)) close(r0) 1.976470234s ago: executing program 0 (id=7822): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x7342, 0x7, 0xf, 0x0, 0x2, 0x14, 0x7fffffff, 0x9}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x70e, 0x41e, 0x800]}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mtu(r4, 0x29, 0x1e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) splice(r0, 0x0, r0, 0x0, 0x4, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) 1.325857718s ago: executing program 1 (id=7823): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) (fail_nth: 4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x70e, 0x41e, 0x800]}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mtu(r4, 0x29, 0x1e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) splice(r0, 0x0, r0, 0x0, 0x4, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) 1.261835154s ago: executing program 3 (id=7824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x200005, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x7, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x44) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000000c0)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 819.007935ms ago: executing program 2 (id=7825): r0 = socket(0x2, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x800, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e2}, 0x6e) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) 0s ago: executing program 0 (id=7826): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0xa004}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)={@broadcast, @broadcast, 0x1, 0xa, [@remote, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2, @remote, @private=0xa010100, @empty, @multicast1]}, 0x38) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)={@broadcast, @broadcast, 0x1, 0xa, [@remote, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2, @remote, @private=0xa010100, @empty, @multicast1]}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) recvmmsg(r4, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) write$tun(r6, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x23, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @local, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) sendto$packet(r1, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) kernel console output (not intermixed with test programs): 4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6624" name="/newroot/18/cgroup.controllers" dev="tmpfs" ino=108 res=1 errno=0 [ 827.304982][ T30] audit: type=1800 audit(1788647705.779:47): pid=32536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6624" name="cgroup.controllers" dev="tmpfs" ino=108 res=0 errno=0 [ 827.444848][T32546] erspan0: entered promiscuous mode [ 827.450542][T32546] erspan0: entered allmulticast mode [ 827.644682][T32557] bridge0: port 3(batadv1) entered blocking state [ 827.651565][T32557] bridge0: port 3(batadv1) entered disabled state [ 827.659681][T32557] batadv1: entered allmulticast mode [ 827.668894][T32557] batadv1: entered promiscuous mode [ 828.079456][T32576] macsec1: entered promiscuous mode [ 828.147519][T18926] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 828.147560][T18926] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 828.402408][T32582] netlink: 'syz.4.6635': attribute type 3 has an invalid length. [ 828.942713][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 829.379134][T32647] syzkaller0: entered promiscuous mode [ 829.379174][T32647] syzkaller0: entered allmulticast mode [ 832.031787][T32661] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 832.284690][T32675] __nla_validate_parse: 11 callbacks suppressed [ 832.301098][T32675] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6661'. [ 832.526545][T32692] net_ratelimit: 100 callbacks suppressed [ 832.527780][T32692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 832.564385][T32694] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 832.591479][T32693] netlink: 'syz.3.6666': attribute type 1 has an invalid length. [ 832.762282][T32705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6668'. [ 832.777727][T32705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6668'. [ 832.887989][T32708] netlink: 'syz.2.6668': attribute type 8 has an invalid length. [ 832.888032][T32708] sch_fq: defrate 0 ignored. [ 832.889688][T32705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6668'. [ 832.889707][T32705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6668'. [ 832.936924][T32714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6672'. [ 832.970701][T32710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6670'. [ 833.172019][T32724] Cannot find set identified by id 0 to match [ 833.262405][T32730] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6677'. [ 833.365242][T32738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6680'. [ 833.516946][T32752] netlink: 'syz.2.6682': attribute type 1 has an invalid length. [ 833.616025][T32752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 833.649600][T32753] bond4: (slave veth0_to_bond): making interface the new active one [ 833.678478][T32753] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 833.748194][T23400] lo speed is unknown, defaulting to 1000 [ 833.949657][ T300] ip6t_srh: unknown srh match flags 4000 [ 833.955967][T32767] netlink: 'syz.4.6683': attribute type 1 has an invalid length. [ 834.019931][ T305] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6686'. [ 834.239176][ T305] Bluetooth: MGMT ver 1.23 [ 834.636247][ T318] gre1: entered promiscuous mode [ 834.636314][ T318] gre1: entered allmulticast mode [ 834.784196][ T327] netlink: Failed to add ¦â—k\ helper -22 [ 834.784265][ T327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.895314][ T335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.931096][ T334] netlink: 'syz.4.6691': attribute type 62 has an invalid length. [ 835.138955][ T370] netlink: 'syz.4.6697': attribute type 1 has an invalid length. [ 835.546268][ T385] netlink: Failed to add  helper -22 [ 835.546352][ T385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.897460][ T397] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 835.907268][ T987] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 835.955208][ T399] netlink: 'syz.1.6707': attribute type 15 has an invalid length. [ 835.967145][ T399] netlink: 'syz.1.6707': attribute type 15 has an invalid length. [ 835.975448][T18926] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 835.975500][T18926] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 835.975531][T18926] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 835.994564][T18926] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 836.256994][ T409] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 836.257032][ T409] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ [ 837.140490][ T411] netlink: 'syz.1.6711': attribute type 1 has an invalid length. [ 837.293955][ T413] ip_tables: iptables: counters copy to user failed while replacing table [ 837.921846][ T337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.949406][ T377] netlink: 'syz.4.6700': attribute type 11 has an invalid length. [ 837.949455][ T377] __nla_validate_parse: 14 callbacks suppressed [ 837.949487][ T377] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6700'. [ 838.041246][ T420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6714'. [ 838.153343][ T422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6716'. [ 838.163222][ T422] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6716'. [ 838.229019][ T424] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 838.249424][ T424] bond4 (unregistering): Released all slaves [ 838.280160][ T429] tipc: Enabling of bearer rejected, failed to enable media [ 838.419969][ T437] xt_l2tp: missing protocol rule (udp|l2tpip) [ 838.572117][ T443] netlink: 'syz.3.6722': attribute type 1 has an invalid length. [ 838.575673][ T436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.758748][ T450] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6726'. [ 839.042344][ T457] netlink: 'syz.3.6729': attribute type 1 has an invalid length. [ 839.325726][ T467] netlink: 'syz.3.6732': attribute type 1 has an invalid length. [ 839.325764][ T467] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6732'. [ 840.084622][ T487] netlink: 'syz.3.6739': attribute type 1 has an invalid length. [ 840.192161][ T493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6742'. [ 840.356936][ T499] bridge_slave_0: left allmulticast mode [ 840.356983][ T499] bridge_slave_0: left promiscuous mode [ 840.358067][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.366621][ T502] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 840.392051][ T499] bridge_slave_1: left allmulticast mode [ 840.396998][ T499] bridge_slave_1: left promiscuous mode [ 840.397223][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.438479][ T499] bond0: (slave bond_slave_0): Releasing backup interface [ 840.457086][ T499] bond_slave_0: left promiscuous mode [ 840.481086][ T499] bond0: (slave bond_slave_1): Releasing backup interface [ 840.492249][ T499] bond_slave_1: left promiscuous mode [ 840.603487][ T499] team0: Port device team_slave_0 removed [ 840.620485][ T499] team0: Port device team_slave_1 removed [ 840.633591][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.641510][ T499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.655581][ T499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.655618][ T499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.681638][ T499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 840.747789][ T500] team0: Port device xfrm0 added [ 840.749297][ T515] tipc: Started in network mode [ 840.749347][ T515] tipc: Node identity e6dfd546fbde, cluster identity 4711 [ 840.749493][ T515] tipc: Enabled bearer , priority 0 [ 840.750040][ T509] tipc: Enabling of bearer rejected, already enabled [ 840.766801][ T510] netlink: 'syz.3.6746': attribute type 1 has an invalid length. [ 840.766822][ T510] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6746'. [ 840.927398][ T536] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.6748'. [ 840.981954][ T534] netlink: 'syz.4.6749': attribute type 1 has an invalid length. [ 841.115203][ T534] bond1: entered promiscuous mode [ 841.126832][ T534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 841.138248][ T534] netlink: 'syz.4.6749': attribute type 1 has an invalid length. [ 841.142935][ T534] netlink: 'syz.4.6749': attribute type 1 has an invalid length. [ 841.146529][ T534] netlink: 'syz.4.6749': attribute type 1 has an invalid length. [ 841.146723][ T534] netlink: 'syz.4.6749': attribute type 1 has an invalid length. [ 841.496900][ T559] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.6753'. [ 841.679036][ T571] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 841.863530][T23400] tipc: Node number set to 486659398 [ 841.967862][ T578] netlink: 'syz.3.6759': attribute type 11 has an invalid length. [ 842.140249][ T586] syzkaller1: entered promiscuous mode [ 842.148672][ T586] syzkaller1: entered allmulticast mode [ 842.157098][ T580] netlink: 'syz.3.6759': attribute type 11 has an invalid length. [ 842.384265][ T595] dvmrp0: entered allmulticast mode [ 842.557081][ T598] geneve3: entered allmulticast mode [ 843.201356][ T621] __nla_validate_parse: 3 callbacks suppressed [ 843.210147][ T621] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6770'. [ 843.408009][ T636] lo speed is unknown, defaulting to 1000 [ 843.415657][ T636] lo speed is unknown, defaulting to 1000 [ 843.422413][ T636] lo speed is unknown, defaulting to 1000 [ 843.430205][ T636] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 843.447491][ T636] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 843.470208][ T636] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 843.477557][ T642] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6776'. [ 843.498531][ T636] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 843.566517][ T636] lo speed is unknown, defaulting to 1000 [ 843.576141][ T636] lo speed is unknown, defaulting to 1000 [ 843.590088][ T650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6778'. [ 843.596733][ T636] lo speed is unknown, defaulting to 1000 [ 843.608667][ T636] lo speed is unknown, defaulting to 1000 [ 843.612062][ T650] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 843.627626][ T636] lo speed is unknown, defaulting to 1000 [ 843.638319][ T636] lo speed is unknown, defaulting to 1000 [ 843.643461][ T9189] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 843.647951][ T636] lo speed is unknown, defaulting to 1000 [ 843.672033][ T636] lo speed is unknown, defaulting to 1000 [ 843.679586][ T636] lo speed is unknown, defaulting to 1000 [ 844.385587][ T987] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 844.417430][ T677] veth1_to_bond: entered allmulticast mode [ 844.440164][ T677] veth1_to_bond: left allmulticast mode [ 844.569533][ T679] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6788'. [ 844.580677][ T679] validate_nla: 31 callbacks suppressed [ 844.586794][ T679] netlink: 'syz.3.6788': attribute type 1 has an invalid length. [ 844.850674][ T681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6789'. [ 844.900022][ T683] netlink: 'syz.3.6790': attribute type 2 has an invalid length. [ 844.910407][ T683] netlink: 'syz.3.6790': attribute type 8 has an invalid length. [ 844.910429][ T683] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6790'. [ 846.394506][ T641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.741169][ T717] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6796'. [ 846.758659][ T708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6795'. [ 846.759581][ T717] tipc: Enabling of bearer rejected, failed to enable media [ 846.808815][ T719] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 846.819500][ T719] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20001 [ 846.979885][ T727] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 846.987659][ T729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6800'. [ 847.000158][ T729] netlink: 'syz.1.6800': attribute type 1 has an invalid length. [ 847.468223][ T743] tipc: Started in network mode [ 847.468274][ T743] tipc: Node identity ac141441, cluster identity 4711 [ 847.469192][ T743] tipc: Enabled bearer , priority 10 [ 847.820921][ T748] ip6t_srh: unknown srh invflags 4000 [ 847.926810][ T749] vlan3: entered promiscuous mode [ 847.926858][ T749] bridge0: entered promiscuous mode [ 847.944633][ T751] netlink: 'syz.1.6810': attribute type 1 has an invalid length. [ 847.944673][ T751] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6810'. [ 848.224829][ T758] syzkaller0: entered promiscuous mode [ 848.230563][ T758] syzkaller0: entered allmulticast mode [ 848.259733][ T769] __nla_validate_parse: 1 callbacks suppressed [ 848.266294][ T769] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6816'. [ 848.276901][ T769] netlink: 'syz.1.6816': attribute type 1 has an invalid length. [ 848.343190][ T771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6814'. [ 848.464906][ T987] tipc: Node number set to 2886997057 [ 848.725043][ T787] netlink: 'syz.0.6819': attribute type 12 has an invalid length. [ 848.725079][ T787] netlink: 'syz.0.6819': attribute type 29 has an invalid length. [ 848.725112][ T787] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6819'. [ 848.725132][ T787] netlink: 'syz.0.6819': attribute type 1 has an invalid length. [ 848.725148][ T787] netlink: 'syz.0.6819': attribute type 2 has an invalid length. [ 848.725164][ T787] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6819'. [ 848.778381][ T787] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6819'. [ 848.796666][ T787] macvlan0: entered promiscuous mode [ 849.011101][ T760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.275927][ T801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6821'. [ 849.340230][ T806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6821'. [ 849.340300][ T806] openvswitch: netlink: Flow key attr not present in new flow. [ 849.377078][ T805] tipc: Enabled bearer , priority 10 [ 849.390451][ T804] tipc: Resetting bearer [ 849.470475][ T804] tipc: Disabling bearer [ 849.837704][ T822] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6828'. [ 849.860930][ T822] validate_nla: 1 callbacks suppressed [ 849.867304][ T822] netlink: 'syz.1.6828': attribute type 1 has an invalid length. [ 850.199981][ T841] ip_tables: iptables: counters copy to user failed while replacing table [ 850.573111][ T860] netlink: 'syz.1.6838': attribute type 1 has an invalid length. [ 850.618913][ T864] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6839'. [ 850.665818][ T860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 850.737204][ T860] bond1: (slave batadv_slave_0): Enslaving as a backup interface with an up link [ 850.761113][ T866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6839'. [ 850.879562][ T30] audit: type=1804 audit(1788647729.359:48): pid=870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6840" name="/newroot/190/cgroup.controllers" dev="tmpfs" ino=985 res=1 errno=0 [ 850.879637][ T30] audit: type=1800 audit(1788647729.359:49): pid=870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6840" name="cgroup.controllers" dev="tmpfs" ino=985 res=0 errno=0 [ 851.024256][ T872] team0: Device veth1_macvtap failed to register rx_handler [ 851.053183][ T872] rdma_op ffff888029c8f238 conn xmit_rdma 0000000000000000 [ 851.296137][ T880] netlink: 'syz.4.6844': attribute type 1 has an invalid length. [ 851.789938][ T899] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.805478][ T899] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.814916][ T899] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 851.921767][ T916] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 851.949420][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 851.949994][ T916] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 851.950065][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 852.000421][ T30] audit: type=1804 audit(1788647730.479:50): pid=920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6852" name="/newroot/124/memory.events" dev="tmpfs" ino=659 res=1 errno=0 [ 852.027803][ T30] audit: type=1800 audit(1788647730.509:51): pid=920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6852" name="memory.events" dev="tmpfs" ino=659 res=0 errno=0 [ 852.042110][ T925] netlink: 'syz.2.6853': attribute type 4 has an invalid length. [ 852.353023][ T944] netlink: 'syz.4.6855': attribute type 5 has an invalid length. [ 852.396752][ T964] netlink: 'syz.4.6855': attribute type 5 has an invalid length. [ 852.757541][ T983] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 853.346139][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.359833][ T1011] syzkaller1: entered promiscuous mode [ 853.359902][ T1011] syzkaller1: entered allmulticast mode [ 853.372796][ T1018] __nla_validate_parse: 8 callbacks suppressed [ 853.372814][ T1018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6868'. [ 853.456612][ T1021] netlink: 'syz.4.6868': attribute type 4 has an invalid length. [ 853.476603][ T1018] netlink: 'syz.4.6868': attribute type 4 has an invalid length. [ 853.735704][ T1038] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6874'. [ 853.735752][ T1038] openvswitch: netlink: Message has 512 unknown bytes. [ 853.742116][ T1038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6874'. [ 853.984952][ T1050] nbd: must specify at least one socket [ 854.309070][ T1079] block nbd0: reconnected socket [ 854.387618][ T1089] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6884'. [ 854.533612][ T1098] x_tables: duplicate underflow at hook 1 [ 854.640656][ T1101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6888'. [ 854.674543][ T1103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6889'. [ 854.689098][ T1103] netlink: 'syz.0.6889': attribute type 25 has an invalid length. [ 854.883489][ T1109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6890'. [ 854.883534][ T1109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6890'. [ 854.982301][ T1113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6891'. [ 855.077112][ T1118] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6893'. [ 855.146175][ T5625] block nbd0: Receive control failed (result -32) [ 855.237944][ T1124] netlink: 'syz.3.6894': attribute type 11 has an invalid length. [ 855.249034][ T1120] vlan2: entered allmulticast mode [ 855.254449][ T1120] bond0: entered allmulticast mode [ 855.260085][ T1120] bond_slave_0: entered allmulticast mode [ 855.270424][ T1120] bond_slave_1: entered allmulticast mode [ 855.276641][ T1120] bond2: entered allmulticast mode [ 855.288715][ T1096] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 855.313651][ T1124] veth0: entered promiscuous mode [ 855.341477][ T1124] veth0: left promiscuous mode [ 855.734261][ T1163] netlink: 'syz.3.6905': attribute type 3 has an invalid length. [ 855.964008][ T1177] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 856.112231][ T1186] netlink: NAT attribute has 4 unknown bytes [ 856.118493][ T1186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.263925][ T1194] ip_tables: iptables: counters copy to user failed while replacing table [ 856.294795][ T1145] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.294863][ T1145] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.294892][ T1145] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.294918][ T1145] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.483837][ T1204] syzkaller1: entered promiscuous mode [ 856.489617][ T1204] syzkaller1: entered allmulticast mode [ 856.674199][ T1214] netlink: 'syz.2.6923': attribute type 23 has an invalid length. [ 856.801678][ T1217] netlink: 'syz.3.6920': attribute type 1 has an invalid length. [ 856.801722][ T1217] netlink: 'syz.3.6920': attribute type 1 has an invalid length. [ 856.809800][ T1225] netlink: 'syz.2.6923': attribute type 23 has an invalid length. [ 856.994757][ T1236] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 856.994850][ T1236] gretap1: entered promiscuous mode [ 856.994864][ T1236] gretap1: entered allmulticast mode [ 857.099353][ T1238] netlink: 'syz.1.6927': attribute type 1 has an invalid length. [ 857.146510][ T1247] atomic_op ffff888073ac61e0 conn xmit_atomic 0000000000000000 [ 857.220701][ T1253] netlink: 'syz.2.6931': attribute type 1 has an invalid length. [ 857.235779][ T1238] bond2: entered promiscuous mode [ 857.236215][ T1238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 857.334498][ T1253] bond5: entered promiscuous mode [ 857.340243][ T1253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 857.360257][ T1259] 8021q: adding VLAN 0 to HW filter on device bond5 [ 857.360650][ T1259] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 857.360669][ T1259] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 857.367014][ T1259] bond5: (slave ip6gre1): making interface the new active one [ 857.367034][ T1259] ip6gre1: entered promiscuous mode [ 857.379720][ T1259] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 857.900971][ T1289] syzkaller1: entered promiscuous mode [ 857.901025][ T1289] syzkaller1: entered allmulticast mode [ 858.480040][ T1327] __nla_validate_parse: 22 callbacks suppressed [ 858.480085][ T1327] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6948'. [ 858.587467][ T1329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6947'. [ 858.587669][ T1329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6947'. [ 858.587836][ T1329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6947'. [ 858.587989][ T1329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6947'. [ 858.588142][ T1329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6947'. [ 858.588319][ T1329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6947'. [ 858.590780][ T1329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6947'. [ 858.590940][ T1329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6947'. [ 858.591100][ T1329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6947'. [ 858.731445][ T1333] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 859.039826][ T1354] netlink: 'syz.2.6952': attribute type 1 has an invalid length. [ 859.049039][ T1353] netlink: 'syz.2.6952': attribute type 1 has an invalid length. [ 859.097548][ T1358] netlink: NAT attribute has 5 unknown bytes [ 859.109867][ T1358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.121311][ T1359] netlink: NAT attribute has 5 unknown bytes [ 859.121361][ T1359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.226897][ T1355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.437581][ T1378] NCSI netlink: No device for ifindex 813332851 [ 859.724941][ T1389] tc action pedit 'at' offset -2147483645 out of bounds [ 859.751892][ T1390] tc action pedit 'at' offset -2147483645 out of bounds [ 859.993595][ T1412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.041765][ T1417] xt_TCPMSS: Only works on TCP SYN packets [ 860.255567][ T1427] validate_nla: 4 callbacks suppressed [ 860.255612][ T1427] netlink: 'syz.3.6978': attribute type 2 has an invalid length. [ 860.765142][ T1454] syzkaller0: entered promiscuous mode [ 860.765187][ T1454] syzkaller0: entered allmulticast mode [ 863.597516][ T1494] tipc: Enabling of bearer rejected, already enabled [ 863.609608][ T1496] __nla_validate_parse: 28 callbacks suppressed [ 863.609663][ T1496] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6995'. [ 863.817402][ T1507] net_ratelimit: 2 callbacks suppressed [ 863.823469][ T1507] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 863.871024][ T1514] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6998'. [ 863.914842][ T1517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7001'. [ 863.972371][ T1523] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7004'. [ 864.266601][ T1539] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7005'. [ 864.405695][ T1545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7009'. [ 864.505995][ T1551] tipc: Enabling of bearer rejected, media not registered [ 864.592297][ T1554] netlink: 'syz.1.7012': attribute type 11 has an invalid length. [ 865.068826][ T1587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7022'. [ 865.074932][ T1587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7022'. [ 865.128899][ T1586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7021'. [ 865.519588][ T1605] netlink: 'syz.0.7025': attribute type 1 has an invalid length. [ 865.569737][ T1605] 8021q: adding VLAN 0 to HW filter on device bond4 [ 865.578784][ T1613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.603619][ T1613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.656944][ T1613] bond4: (slave batadv_slave_0): making interface the new active one [ 865.677709][ T1613] bond4: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 865.999193][ T1628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7032'. [ 866.009591][ T1628] openvswitch: netlink: Flow actions attr not present in new flow. [ 866.225059][ T1641] netlink: 'syz.4.7037': attribute type 1 has an invalid length. [ 866.225100][ T1641] netlink: 'syz.4.7037': attribute type 1 has an invalid length. [ 866.303814][ T1647] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.304407][ T1647] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.518709][ T1656] netlink: 'syz.2.7041': attribute type 5 has an invalid length. [ 866.609240][ T1664] netlink: 'syz.3.7044': attribute type 39 has an invalid length. [ 867.011361][ T1680] ip6gretap0: entered promiscuous mode [ 867.428851][ T1712] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 867.440094][ T1706] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 867.790612][ T1718] IPVS: length: 239 != 24 [ 867.797576][ T1718] netlink: 'syz.2.7058': attribute type 1 has an invalid length. [ 867.797619][ T1718] NCSI netlink: No device for ifindex 0 [ 867.923848][ T1734] netlink: 'syz.1.7061': attribute type 1 has an invalid length. [ 867.998066][ T1734] bond3: entered promiscuous mode [ 867.998523][ T1734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 868.484101][ T1752] SET target dimension over the limit! [ 868.575455][ T1752] netlink: 'syz.1.7065': attribute type 1 has an invalid length. [ 868.586239][ T1758] netlink: 'syz.3.7066': attribute type 33 has an invalid length. [ 868.861663][ T1767] __nla_validate_parse: 9 callbacks suppressed [ 868.861715][ T1767] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7069'. [ 868.919955][ T1773] netlink: 'syz.4.7072': attribute type 21 has an invalid length. [ 868.959064][ T1773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7072'. [ 868.962807][ T1773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7072'. [ 869.121586][ T1787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7073'. [ 869.121628][ T1787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7073'. [ 869.122063][ T1787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7073'. [ 869.170491][ T1787] syzkaller0: entered promiscuous mode [ 869.170528][ T1787] syzkaller0: entered allmulticast mode [ 869.325930][ T1798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7077'. [ 869.416838][ T1806] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7079'. [ 869.582326][ T1817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7083'. [ 869.926827][ T1838] tipc: Failed to remove unknown binding: 66,0,0/2886997057:2195618317/2195618318 [ 869.940346][ T1838] tipc: Failed to remove unknown binding: 66,0,0/2886997057:2195618317/2195618318 [ 870.177899][ T1855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7093'. [ 870.781098][ T1873] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 870.972620][ T1886] gtp0: entered promiscuous mode [ 870.972653][ T1886] gtp0: entered allmulticast mode [ 871.420978][ T1937] x_tables: duplicate underflow at hook 1 [ 871.932849][ T1150] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.933288][ T1150] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.933374][ T1150] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.933410][ T1150] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.324185][ T1986] Bluetooth: hci0: unsupported parameter 5135 [ 872.324224][ T1986] Bluetooth: hci0: unsupported parameter 8192 [ 872.324254][ T1986] Bluetooth: hci0: unsupported parameter 5135 [ 872.324269][ T1986] Bluetooth: hci0: unsupported parameter 8192 [ 872.485077][ T1985] bond5 (unregistering): Released all slaves [ 872.706551][ T2009] batadv0: entered promiscuous mode [ 872.908526][ T2023] validate_nla: 6 callbacks suppressed [ 872.908576][ T2023] netlink: 'syz.2.7131': attribute type 1 has an invalid length. [ 873.557315][ T2051] bridge0: port 3(ipvlan2) entered blocking state [ 873.564172][ T2051] bridge0: port 3(ipvlan2) entered disabled state [ 873.570965][ T2051] ipvlan2: entered allmulticast mode [ 873.570982][ T2051] bridge0: entered allmulticast mode [ 873.588550][ T2051] ipvlan2: left allmulticast mode [ 873.594721][ T2051] bridge0: left allmulticast mode [ 873.809366][ T2067] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 873.918014][ T2073] netlink: 'syz.4.7143': attribute type 1 has an invalid length. [ 873.936971][ T2073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 873.949527][ T2072] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 874.208474][ T2083] __nla_validate_parse: 20 callbacks suppressed [ 874.208728][ T2083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7144'. [ 875.106127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 875.324074][ T2125] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 876.373377][ T2044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.383332][ T2071] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7142'. [ 876.466881][ T2129] netlink: 'syz.2.7149': attribute type 3 has an invalid length. [ 876.475144][ T2129] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7149'. [ 876.647622][ T2141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7151'. [ 876.790090][ T2146] sctp: [Deprecated]: syz.1.7156 (pid 2146) Use of int in max_burst socket option deprecated. [ 876.790090][ T2146] Use struct sctp_assoc_value instead [ 877.110911][ T2167] netlink: 19 bytes leftover after parsing attributes in process `syz.4.7160'. [ 877.137436][ T2170] netlink: 'syz.3.7163': attribute type 1 has an invalid length. [ 877.137474][ T2170] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7163'. [ 877.188956][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 877.215805][ T2172] netlink: 'syz.1.7164': attribute type 1 has an invalid length. [ 877.276875][ T2172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 877.470348][ T2185] netlink: 'syz.3.7167': attribute type 24 has an invalid length. [ 877.599213][ T2200] tipc: Enabled bearer , priority 10 [ 877.752864][ T2209] netlink: Conntrack attr has 1 unknown bytes [ 877.752916][ T2209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.159365][ T2229] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 878.161071][ T2229] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7178'. [ 878.379319][ T2239] ip_tables: iptables: counters copy to user failed while replacing table [ 878.381590][ T2240] ip_tables: iptables: counters copy to user failed while replacing table [ 878.502697][ T2246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7183'. [ 878.503828][ T2243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7181'. [ 878.573880][ T2256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7181'. [ 878.583659][ T2243] bond5: Invalid ad_actor_system MAC address. [ 878.583678][ T2243] bond5: option ad_actor_system: invalid value (1) [ 878.610590][ T2243] bond5 (unregistering): Released all slaves [ 878.678157][ T2256] bond5: Invalid ad_actor_system MAC address. [ 878.684908][ T2256] bond5: option ad_actor_system: invalid value (1) [ 878.697591][ T2256] bond5 (unregistering): Released all slaves [ 878.934108][ T2270] netlink: Failed to add  helper -22 [ 878.934179][ T2270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.107549][ T50] bridge_slave_1: left allmulticast mode [ 879.107590][ T50] bridge_slave_1: left promiscuous mode [ 879.107797][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.130495][ T50] bridge_slave_0: left allmulticast mode [ 879.130534][ T50] bridge_slave_0: left promiscuous mode [ 879.130721][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.213644][ T50] dvmrp0: left allmulticast mode [ 879.214481][ T50] dvmrp8: left allmulticast mode [ 879.273172][ T2294] IPVS: length: 8 != 1152 [ 879.286953][ T2296] openvswitch: netlink: IPv6 tunnel dst address is zero [ 879.358006][ T2302] __nla_validate_parse: 1 callbacks suppressed [ 879.358059][ T2302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7196'. [ 879.423423][ T2304] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7199'. [ 879.498070][ T2306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7199'. [ 879.554835][ T2312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7199'. [ 879.590065][ T50] batman_adv: batadv0: Removing interface: gretap2 [ 879.726705][ T50] bond5 (unregistering): (slave bond0): Releasing active interface [ 879.748403][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.760290][ T50] bond_slave_0: left allmulticast mode [ 879.768921][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.778278][ T50] bond_slave_1: left allmulticast mode [ 879.780770][ T50] bond0 (unregistering): Released all slaves [ 879.787408][ T50] bond1 (unregistering): Released all slaves [ 879.799952][ T50] bond2 (unregistering): Released all slaves [ 879.813792][ T50] bond3 (unregistering): Released all slaves [ 879.827855][ T50] bond4 (unregistering): Released all slaves [ 879.844663][ T50] bond5 (unregistering): Released all slaves [ 879.855870][ T50] bond6 (unregistering): Released all slaves [ 879.866359][ T50] bond7 (unregistering): Released all slaves [ 879.882238][ T50] bond8 (unregistering): Released all slaves [ 879.906343][ T50] bond9 (unregistering): Released all slaves [ 879.918403][ T50] bond10 (unregistering): Released all slaves [ 879.928992][ T50] bond11 (unregistering): Released all slaves [ 879.940552][ T50] bond12 (unregistering): Released all slaves [ 879.966460][ T50] bond13 (unregistering): Released all slaves [ 879.978863][ T50] bond14 (unregistering): Released all slaves [ 879.999630][ T50] bond15 (unregistering): Released all slaves [ 880.009983][ T50] bond16 (unregistering): Released all slaves [ 880.020427][ T50] bond17 (unregistering): Released all slaves [ 880.037126][ T50] bond18 (unregistering): Released all slaves [ 880.047987][ T50] bond19 (unregistering): Released all slaves [ 880.137489][ T2300] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 880.163604][ T2300] bond5 (unregistering): Released all slaves [ 880.277696][ T2302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7196'. [ 880.332744][ T50] tipc: Disabling bearer [ 880.332881][ T50] tipc: Disabling bearer [ 880.363694][ T50] tipc: Left network mode [ 880.422289][ T2327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 880.433413][ T2328] netlink: 'syz.1.7202': attribute type 2 has an invalid length. [ 880.631798][ T2331] openvswitch: netlink: Missing valid actions attribute. [ 880.633664][ T2330] openvswitch: netlink: Missing valid actions attribute. [ 880.883586][ T50] IPVS: stopping master sync thread 19962 ... [ 881.271069][ T2365] lo speed is unknown, defaulting to 1000 [ 881.565137][ T2379] netlink: 'syz.3.7216': attribute type 6 has an invalid length. [ 882.018817][ T50] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 882.018994][ T50] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 882.130046][ T50] batman_adv: batadv0: Removing interface: ipvlan4 [ 882.194483][ T50] batman_adv: batadv0: Removing interface: ipvlan5 [ 882.316181][ T2394] batman_adv: batadv0: Adding interface: veth0 [ 882.316210][ T2394] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.316238][ T2394] batman_adv: batadv0: Interface activated: veth0 [ 882.348885][ T2396] batman_adv: batadv0: Interface deactivated: veth0 [ 882.444303][ T2396] batman_adv: batadv0: Removing interface: veth0 [ 882.479730][ T2365] lo speed is unknown, defaulting to 1000 [ 882.538886][ T2399] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.7220'. [ 882.549769][ T2398] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.7220'. [ 882.701775][ T2398] netlink: Failed to add batadv0 helper -22 [ 882.701840][ T2398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.759474][ T2399] netlink: Failed to add batadv0 helper -22 [ 882.759546][ T2399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.881633][ T2413] netlink: 'syz.3.7222': attribute type 32 has an invalid length. [ 883.141280][ T50] hsr_slave_0: left promiscuous mode [ 883.155330][ T50] hsr_slave_1: left promiscuous mode [ 883.156167][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.156203][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.248407][ T50] veth0_macvtap: left promiscuous mode [ 883.249898][ T50] veth1_vlan: left promiscuous mode [ 883.977200][ T50] IPVS: stop unused estimator thread 0... [ 884.191675][ T2458] netlink: 'syz.4.7232': attribute type 7 has an invalid length. [ 884.209376][ T2458] netlink: 'syz.4.7232': attribute type 7 has an invalid length. [ 884.350213][ T2465] netlink: 'syz.4.7234': attribute type 1 has an invalid length. [ 884.462170][ T2479] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 884.476562][ T2479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7234'. [ 884.854223][ T2500] netlink: 'syz.3.7241': attribute type 8 has an invalid length. [ 884.887040][ T2505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7242'. [ 884.904453][ T2505] syzkaller0: entered promiscuous mode [ 884.904495][ T2505] syzkaller0: entered allmulticast mode [ 884.910511][ T2505] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7242'. [ 885.240925][ T2516] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 885.287577][ T2516] bond5 (unregistering): Released all slaves [ 885.489130][ T2538] net_ratelimit: 2 callbacks suppressed [ 885.496141][ T2538] openvswitch: netlink: IPv4 tunnel dst address is zero [ 885.590814][ T2538] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 885.590911][ T2538] gretap2: entered promiscuous mode [ 885.590925][ T2538] gretap2: entered allmulticast mode [ 885.674141][ T2548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7254'. [ 885.948303][ T2557] veth5: entered allmulticast mode [ 886.210400][ T2573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7263'. [ 886.237140][ T2573] hsr_slave_0: left promiscuous mode [ 886.290544][ T2599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7265'. [ 886.292298][ T2598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7266'. [ 886.314737][ T2599] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 886.347937][ T2598] netlink: 'syz.3.7266': attribute type 1 has an invalid length. [ 886.347978][ T2598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7266'. [ 886.352138][ T2601] netlink: 'syz.1.7265': attribute type 16 has an invalid length. [ 886.352155][ T2601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7265'. [ 886.552231][ T2615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7268'. [ 886.706176][ T2626] sctp: [Deprecated]: syz.2.7269 (pid 2626) Use of int in max_burst socket option deprecated. [ 886.706176][ T2626] Use struct sctp_assoc_value instead [ 887.045878][ T2648] xt_CT: No such helper "pptp" [ 887.196797][ T2654] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 887.373104][ T2666] nbd: must specify an index to disconnect [ 887.754284][ T2692] xt_HMARK: proto mask must be zero with L3 mode [ 888.171161][ T2714] netlink: 'syz.4.7288': attribute type 7 has an invalid length. [ 888.171198][ T2714] netlink: 'syz.4.7288': attribute type 8 has an invalid length. [ 889.027975][ T2757] bond0: Error: CAN devices cannot be enslaved [ 889.163053][ T2760] syzkaller1: entered promiscuous mode [ 889.169100][ T2760] syzkaller1: entered allmulticast mode [ 889.703374][ T1121] IPVS: starting estimator thread 0... [ 889.704245][ T2800] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 889.705775][ T2800] __nla_validate_parse: 6 callbacks suppressed [ 889.705789][ T2800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7310'. [ 889.803643][ T2801] IPVS: using max 31 ests per chain, 74400 per kthread [ 889.816211][ T2804] netlink: 'syz.4.7311': attribute type 25 has an invalid length. [ 889.835996][ T9190] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 889.945811][ T2815] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7310'. [ 889.974288][ T2817] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7314'. [ 890.041008][ T2819] gre1: entered promiscuous mode [ 890.205767][ T2833] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20000 [ 890.312331][ T2844] team0: Device vlan0 failed to change mtu [ 890.333428][T23401] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 890.334398][ T2840] geneve2: entered promiscuous mode [ 890.345139][ T2840] netlink: 'syz.4.7319': attribute type 16 has an invalid length. [ 890.345157][ T2840] netlink: 'syz.4.7319': attribute type 17 has an invalid length. [ 890.393738][T23401] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 890.463463][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 890.481939][ T2840] bond1: left promiscuous mode [ 890.497038][ T1121] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 890.510930][ T2840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 890.521683][ T2840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 890.531569][ T2840] 8021q: adding VLAN 0 to HW filter on device bond4 [ 890.539960][ T2840] erspan0: entered promiscuous mode [ 890.549794][ T2840] gretap2: left promiscuous mode [ 890.549891][ T2840] gretap2: left allmulticast mode [ 890.552195][ T2840] veth5: left allmulticast mode [ 890.555653][ T2840] gre1: left promiscuous mode [ 890.563510][ T2840] geneve2: left promiscuous mode [ 890.565640][ T9190] lo speed is unknown, defaulting to 1000 [ 890.589120][ T2848] netlink: 25 bytes leftover after parsing attributes in process `syz.0.7321'. [ 890.610784][ T1150] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 890.610848][ T1150] bond2: (slave gretap1): link status up again after 0 ms [ 890.640169][ T1121] bond2: (slave gretap1): link status up again after 0 ms [ 890.653655][ T1144] bond2: (slave gretap1): link status up again after 0 ms [ 890.679200][ T1121] bond2: (slave gretap1): link status up again after 0 ms [ 890.693303][ T1147] bond2: (slave gretap1): link status up again after 0 ms [ 890.717609][ T1121] bond2: (slave gretap1): link status up again after 0 ms [ 890.735801][ T1121] bond2: (slave gretap1): link status up again after 0 ms [ 890.760543][T18926] bond2: (slave gretap1): link status up again after 0 ms [ 890.774478][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 890.776234][ T1121] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 890.776287][ T1121] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 890.776317][ T1121] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 890.984466][ T2890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7328'. [ 891.411456][ T2911] netlink: 'syz.1.7332': attribute type 1 has an invalid length. [ 891.472136][ T2911] 8021q: adding VLAN 0 to HW filter on device bond5 [ 891.559347][ T2911] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 891.575842][ T2911] bond5: entered promiscuous mode [ 891.575881][ T2911] bond5: entered allmulticast mode [ 891.614310][ T2911] macvlan2: entered promiscuous mode [ 891.614358][ T2911] macvlan2: entered allmulticast mode [ 891.621288][ T2911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 892.012031][ T2942] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7340'. [ 892.048827][ T2942] netlink: 'syz.3.7340': attribute type 1 has an invalid length. [ 892.129712][ T2956] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7345'. [ 892.302128][ T2966] vlan0: entered promiscuous mode [ 892.307963][ T2966] vlan0: entered allmulticast mode [ 892.315894][ T2966] veth0_vlan: entered allmulticast mode [ 892.335582][ T2966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7346'. [ 892.349485][ T2966] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7346'. [ 892.363858][ T2966] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.577325][ T2973] x_tables: duplicate underflow at hook 1 [ 892.604315][ T2957] netlink: 277 bytes leftover after parsing attributes in process `syz.0.7343'. [ 893.063955][ T2992] x_tables: duplicate underflow at hook 2 [ 893.130595][ T2995] netlink: 'syz.2.7356': attribute type 11 has an invalid length. [ 893.721697][ T3029] ip6t_REJECT: ECHOREPLY is not supported [ 893.866345][ T3033] netlink: 'syz.1.7366': attribute type 11 has an invalid length. [ 893.909729][ T3041] tipc: Started in network mode [ 893.909784][ T3041] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 893.909922][ T3041] tipc: Enabled bearer , priority 10 [ 894.011127][ T3045] tipc: Enabling of bearer rejected, already enabled [ 894.030290][ T3044] sctp: [Deprecated]: syz.2.7368 (pid 3044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 894.030290][ T3044] Use struct sctp_sack_info instead [ 894.036520][ T3044] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 894.064121][ T3043] syzkaller0: entered promiscuous mode [ 894.065823][ T3043] syzkaller0: entered allmulticast mode [ 894.410317][ T3069] netlink: 'syz.4.7375': attribute type 8 has an invalid length. [ 894.419705][ T3069] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.422975][ T3069] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.662877][ T3086] veth0: entered promiscuous mode [ 894.681576][ T3082] veth0: left promiscuous mode [ 894.881588][ T3100] __nla_validate_parse: 15 callbacks suppressed [ 894.881646][ T3100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7382'. [ 894.884934][ T3101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7382'. [ 895.023004][ T9190] tipc: Node number set to 10136234 [ 895.215680][ T3116] IPv6: E: Disabled Multicast RS [ 895.230148][ T3116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7390'. [ 895.325608][ T3123] netlink: 'syz.4.7392': attribute type 1 has an invalid length. [ 895.336594][ T3128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7393'. [ 895.353536][ T3120] netlink: 'syz.1.7391': attribute type 1 has an invalid length. [ 895.552991][ T3135] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.7395'. [ 895.575811][T18926] net_ratelimit: 38 callbacks suppressed [ 895.575855][T18926] bond2: (slave gretap1): failed to get link speed/duplex [ 895.620373][ T3139] openvswitch: netlink: Key type 170 is out of range max 32 [ 895.678213][ T3142] netlink: 'syz.1.7399': attribute type 1 has an invalid length. [ 895.729834][ T3144] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7401'. [ 895.746115][ T3147] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7401'. [ 895.812308][ T1143] bond2: (slave gretap1): failed to get link speed/duplex [ 895.904206][ T3153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7402'. [ 895.932667][ T1147] bond2: (slave gretap1): failed to get link speed/duplex [ 895.967140][ T3159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7405'. [ 896.043107][T18926] bond2: (slave gretap1): failed to get link speed/duplex [ 896.134408][ T3173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7408'. [ 896.144440][ T3173] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 896.157042][T18926] bond2: (slave gretap1): failed to get link speed/duplex [ 896.282608][T18926] bond2: (slave gretap1): failed to get link speed/duplex [ 896.301612][ T3188] netlink: 'syz.2.7413': attribute type 2 has an invalid length. [ 896.394602][ T1973] bond2: (slave gretap1): failed to get link speed/duplex [ 896.397845][ T3193] netlink: 'syz.1.7412': attribute type 1 has an invalid length. [ 896.523507][ T1973] bond2: (slave gretap1): failed to get link speed/duplex [ 896.955173][ T3172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.069842][ T3223] 8021q: adding VLAN 0 to HW filter on device bond7 [ 897.078756][ T3223] bond7: entered promiscuous mode [ 897.086137][ T3223] bond0: (slave bond7): Enslaving as an active interface with an up link [ 897.258215][ T3237] bridge_slave_0 (unregistering): left allmulticast mode [ 897.268406][ T3237] bridge_slave_0 (unregistering): left promiscuous mode [ 897.277618][ T3237] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.461570][ T3233] syzkaller0: entered promiscuous mode [ 897.461618][ T3233] syzkaller0: entered allmulticast mode [ 897.486057][ T3248] netlink: 'syz.3.7425': attribute type 21 has an invalid length. [ 897.486093][ T3248] netlink: 'syz.3.7425': attribute type 22 has an invalid length. [ 897.486105][ T3248] netlink: 'syz.3.7425': attribute type 23 has an invalid length. [ 897.486116][ T3248] netlink: 'syz.3.7425': attribute type 25 has an invalid length. [ 897.486126][ T3248] netlink: 'syz.3.7425': attribute type 26 has an invalid length. [ 897.669442][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 897.757347][ T3268] x_tables: duplicate underflow at hook 1 [ 900.017786][ T3257] __nla_validate_parse: 7 callbacks suppressed [ 900.018064][ T3257] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7427'. [ 900.036894][ T3264] netlink: 'syz.4.7427': attribute type 1 has an invalid length. [ 900.285591][ T3291] bond_slave_1: entered promiscuous mode [ 900.349773][ T3291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7433'. [ 900.349809][ T3291] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7433'. [ 900.349838][ T3291] netlink: 'syz.0.7433': attribute type 6 has an invalid length. [ 900.349853][ T3291] netlink: 'syz.0.7433': attribute type 5 has an invalid length. [ 900.349867][ T3291] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7433'. [ 900.468644][ T3308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7439'. [ 900.474683][ T3307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7438'. [ 900.626124][ T1143] net_ratelimit: 11 callbacks suppressed [ 900.626168][ T1143] bond2: (slave gretap1): failed to get link speed/duplex [ 900.656335][ T3290] bond_slave_1: left promiscuous mode [ 900.736217][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 900.781033][ T3319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7443'. [ 900.833902][ T4935] block nbd2: Receive control failed (result -32) [ 900.842970][ T1150] bond2: (slave gretap1): failed to get link speed/duplex [ 900.860940][ T3321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7444'. [ 900.953701][ T1150] bond2: (slave gretap1): failed to get link speed/duplex [ 900.970767][ T3326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7444'. [ 901.065001][ T1150] bond2: (slave gretap1): failed to get link speed/duplex [ 901.152444][ T3329] sctp: [Deprecated]: syz.1.7445 (pid 3329) Use of int in max_burst socket option deprecated. [ 901.152444][ T3329] Use struct sctp_assoc_value instead [ 901.173842][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 901.284851][T18926] bond2: (slave gretap1): failed to get link speed/duplex [ 901.320116][ T3329] netlink: 'syz.1.7445': attribute type 1 has an invalid length. [ 901.320184][ T3329] netlink: 'syz.1.7445': attribute type 2 has an invalid length. [ 901.396458][ T1143] bond2: (slave gretap1): failed to get link speed/duplex [ 901.452317][ T3341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7448'. [ 901.503457][ T1143] bond2: (slave gretap1): failed to get link speed/duplex [ 901.713105][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 901.901753][ T3368] bridge0: port 3(ipvlan2) entered blocking state [ 901.909986][ T3368] bridge0: port 3(ipvlan2) entered disabled state [ 901.917577][ T3368] ipvlan2: entered allmulticast mode [ 901.923216][ T3368] bridge0: entered allmulticast mode [ 901.931293][ T3368] ipvlan2: left allmulticast mode [ 901.933488][ T3368] bridge0: left allmulticast mode [ 902.581556][ T3357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.956112][ T3401] validate_nla: 1 callbacks suppressed [ 902.961814][ T3401] netlink: 'syz.1.7464': attribute type 9 has an invalid length. [ 903.046947][ T3417] ipt_rpfilter: unknown options [ 903.727679][ T3449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 904.007429][ T3471] netlink: 'syz.2.7482': attribute type 10 has an invalid length. [ 906.218451][ T3471] team0: Device veth0_macvtap failed to register rx_handler [ 906.267266][ T1974] net_ratelimit: 17 callbacks suppressed [ 906.267317][ T1974] bond2: (slave gretap1): failed to get link speed/duplex [ 906.375438][T18926] bond2: (slave gretap1): failed to get link speed/duplex [ 906.415194][ T3487] syzkaller1: entered promiscuous mode [ 906.420910][ T3487] syzkaller1: entered allmulticast mode [ 906.484972][ T1143] bond2: (slave gretap1): failed to get link speed/duplex [ 906.562786][ T3496] __nla_validate_parse: 4 callbacks suppressed [ 906.562827][ T3496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7486'. [ 906.594652][ T1147] bond2: (slave gretap1): failed to get link speed/duplex [ 906.743885][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 906.862736][ T1974] bond2: (slave gretap1): failed to get link speed/duplex [ 906.993114][ T1147] bond2: (slave gretap1): failed to get link speed/duplex [ 907.045394][ T3524] openvswitch: netlink: IP tunnel dst address not specified [ 907.045446][ T3524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.103675][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 907.672348][ T3555] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7495'. [ 907.703094][ T3557] bridge3: entered promiscuous mode [ 907.801467][ T3557] bridge3: entered promiscuous mode [ 908.094828][ T3592] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7506'. [ 908.120460][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7506'. [ 908.216940][ T3596] sch_fq: defrate 0 ignored. [ 908.314590][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7510'. [ 908.415806][ T3603] netlink: 'syz.3.7512': attribute type 3 has an invalid length. [ 908.424579][ T3603] netlink: 'syz.3.7512': attribute type 1 has an invalid length. [ 908.508985][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7512'. [ 908.787786][ T3618] xt_nat: multiple ranges no longer supported [ 908.788239][ T3620] netlink: 'syz.1.7513': attribute type 1 has an invalid length. [ 908.847600][ T3620] 8021q: adding VLAN 0 to HW filter on device bond8 [ 908.860009][ T3622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7517'. [ 909.113636][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7520'. [ 909.211886][ T3635] bond5: entered promiscuous mode [ 909.211967][ T3635] bond5: entered allmulticast mode [ 909.212454][ T3635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 909.394050][ T3656] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 909.437684][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7525'. [ 909.464748][ T3654] veth0_macvtap: left promiscuous mode [ 909.762329][ T3673] netlink: 504 bytes leftover after parsing attributes in process `syz.3.7531'. [ 910.055193][ T3668] bond5: entered promiscuous mode [ 910.056859][ T3668] bond5: entered allmulticast mode [ 910.057251][ T3668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 910.057835][ T3659] pimreg0: entered allmulticast mode [ 910.180340][ T3686] wireguard0: entered promiscuous mode [ 910.445741][ T3696] netlink: 'syz.3.7539': attribute type 1 has an invalid length. [ 910.583945][ T3709] netlink: 'syz.1.7541': attribute type 21 has an invalid length. [ 910.592092][ T3709] netlink: 'syz.1.7541': attribute type 1 has an invalid length. [ 910.933633][ T3730] hsr0: entered allmulticast mode [ 910.934177][ T3730] hsr_slave_0: entered allmulticast mode [ 910.934565][ T3730] hsr_slave_1: entered allmulticast mode [ 910.954053][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 911.208323][ T3742] netlink: 'syz.0.7554': attribute type 1 has an invalid length. [ 911.241589][ T3742] bond6: (slave gretap2): making interface the new active one [ 911.249241][ T3742] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 911.268743][ T3742] netlink: 'syz.0.7554': attribute type 1 has an invalid length. [ 911.303085][ T1144] net_ratelimit: 32 callbacks suppressed [ 911.303126][ T1144] bond2: (slave gretap1): failed to get link speed/duplex [ 911.412667][ T1974] bond2: (slave gretap1): failed to get link speed/duplex [ 911.525294][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 911.581727][ T3763] __nla_validate_parse: 39 callbacks suppressed [ 911.596618][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7558'. [ 911.606503][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7558'. [ 911.634326][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 911.698907][ T3770] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 911.753374][ T1974] bond2: (slave gretap1): failed to get link speed/duplex [ 911.862927][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 911.975020][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 912.083351][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 912.192909][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 912.305277][ T1974] bond2: (slave gretap1): failed to get link speed/duplex [ 912.554232][ T3798] ipt_ECN: cannot use operation on non-tcp rule [ 912.651498][ T3807] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7569'. [ 912.651540][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7569'. [ 912.710668][ T3811] netlink: 'syz.4.7574': attribute type 3 has an invalid length. [ 912.806015][ T3815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7576'. [ 912.815434][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7576'. [ 913.033162][T31284] Bluetooth: hci4: command 0x0406 tx timeout [ 913.356824][ T3843] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7582'. [ 913.363744][ T3843] netlink: 'syz.3.7582': attribute type 1 has an invalid length. [ 913.455720][ T3851] netlink: 'syz.4.7585': attribute type 1 has an invalid length. [ 913.455757][ T3851] netlink: 'syz.4.7585': attribute type 3 has an invalid length. [ 913.455785][ T3851] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7585'. [ 913.513214][ T3851] netlink: 'syz.4.7585': attribute type 3 has an invalid length. [ 913.537289][ T3858] lo speed is unknown, defaulting to 1000 [ 913.576814][ T3861] netlink: 59 bytes leftover after parsing attributes in process `syz.0.7586'. [ 913.882031][ T3876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7592'. [ 914.105603][ T3858] lo speed is unknown, defaulting to 1000 [ 914.141985][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.142081][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.288547][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.289499][ T3860] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 914.289527][ T3860] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 914.289561][ T3860] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 914.316195][ T3860] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 914.327958][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.328065][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.337387][ T3898] team0: Device vlan0 failed to change mtu [ 914.387209][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.387344][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.387428][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.387510][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.387590][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.387674][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.387755][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.391101][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.391190][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.391297][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.391371][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.391445][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.391518][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.391593][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.391665][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.391738][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.392289][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.392372][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.392444][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.395038][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.395116][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.395193][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.395295][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.397505][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.397587][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.397677][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.397750][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.397823][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.399501][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.399580][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.399654][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.399737][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.399808][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.619509][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.619641][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.619719][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.619794][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.619870][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.619948][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620022][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620096][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620172][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620278][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620354][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620428][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620502][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620579][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620653][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620727][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620803][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620880][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.620954][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.621029][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.621141][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.640169][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.646923][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.648375][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.648469][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.648553][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.648640][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.648715][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.648787][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.648859][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.648932][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.649006][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.649079][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.649151][ T3896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 914.651765][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.656222][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.662003][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.666981][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.668745][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.670377][ T3860] wlan0 speed is unknown, defaulting to 1000 [ 914.698056][ T3903] netlink: 'syz.2.7599': attribute type 1 has an invalid length. [ 915.446110][ T3927] xt_TCPMSS: Only works on TCP SYN packets [ 915.518904][ T3931] netlink: 'syz.0.7610': attribute type 12 has an invalid length. [ 915.527341][ T3931] netlink: 'syz.0.7610': attribute type 29 has an invalid length. [ 915.746827][ T3940] bond7: Unable to set up delay as MII monitoring is disabled [ 915.756942][ T3940] bond7 (unregistering): Released all slaves [ 915.839130][ T3949] ip6erspan0: entered promiscuous mode [ 915.961828][ T5625] block nbd3: Receive control failed (result -32) [ 916.109187][ T3970] netlink: 'syz.4.7620': attribute type 7 has an invalid length. [ 916.118457][ T3970] netlink: 'syz.4.7620': attribute type 7 has an invalid length. [ 916.214103][ T1144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.215221][ T1144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.215324][ T1144] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.215355][ T1144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.324210][ T1144] net_ratelimit: 30 callbacks suppressed [ 916.330855][ T1144] bond2: (slave gretap1): failed to get link speed/duplex [ 916.443043][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 916.552867][ T1144] bond2: (slave gretap1): failed to get link speed/duplex [ 916.795169][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 916.902581][ T1144] bond2: (slave gretap1): failed to get link speed/duplex [ 916.976570][ T4006] __nla_validate_parse: 15 callbacks suppressed [ 916.976604][ T4006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7630'. [ 917.012604][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 917.123216][ T1144] bond2: (slave gretap1): failed to get link speed/duplex [ 917.149863][ T4016] netlink: 'syz.2.7633': attribute type 2 has an invalid length. [ 917.243746][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 917.353416][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 917.438168][ T4027] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7636'. [ 917.462937][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 917.557851][ T4041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7639'. [ 917.568498][ T4041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7639'. [ 917.876199][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7641'. [ 917.899857][ T4059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7644'. [ 918.132756][ T4073] policy_mt_check_hooks: 35 callbacks suppressed [ 918.139771][ T4073] xt_policy: output policy not valid in PREROUTING and INPUT [ 918.229551][ T4076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7648'. [ 918.238807][ T4076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7648'. [ 918.390020][ T4089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7652'. [ 918.471093][ T4089] 8021q: adding VLAN 0 to HW filter on device bond7 [ 918.482584][ T4079] v: renamed from veth0_vlan (while UP) [ 918.531651][ T4092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7654'. [ 918.596302][ T4095] vlan3: entered promiscuous mode [ 918.596345][ T4095] bond7: entered promiscuous mode [ 918.596502][ T4095] vlan3: entered allmulticast mode [ 918.596516][ T4095] bond7: entered allmulticast mode [ 918.796687][ T4092] hsr_slave_1 (unregistering): left promiscuous mode [ 918.837911][ T4089] bond7: (slave gtp2): refused to change device type [ 918.929557][ T4109] netlink: 'syz.3.7655': attribute type 16 has an invalid length. [ 919.110587][ T4126] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 919.125890][ T4131] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 919.299360][ T4127] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 919.311000][ T4127] bond9 (unregistering): Released all slaves [ 919.569870][ T4154] C: renamed from lo (while UP) [ 919.637429][ T4154] ipvlan2: entered allmulticast mode [ 919.637475][ T4154] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode [ 919.645398][ T4154] batman_adv: batadv0: Adding interface: ipvlan2 [ 919.645414][ T4154] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.645441][ T4154] batman_adv: batadv0: Interface activated: ipvlan2 [ 920.848169][ T4217] syzkaller1: left promiscuous mode [ 920.848207][ T4217] syzkaller1: left allmulticast mode [ 921.098386][ T4225] netlink: 'syz.1.7685': attribute type 14 has an invalid length. [ 921.098623][ T4225] netlink: 'syz.1.7685': attribute type 14 has an invalid length. [ 921.362871][ T1143] net_ratelimit: 25 callbacks suppressed [ 921.362916][ T1143] bond2: (slave gretap1): failed to get link speed/duplex [ 921.473108][T18926] bond2: (slave gretap1): failed to get link speed/duplex [ 921.571720][ T4250] ip_tables: iptables: counters copy to user failed while replacing table [ 921.693066][ T1974] bond2: (slave gretap1): failed to get link speed/duplex [ 921.808828][ T1974] bond2: (slave gretap1): failed to get link speed/duplex [ 921.911774][ T4260] syzkaller1: entered promiscuous mode [ 921.911810][ T4260] syzkaller1: entered allmulticast mode [ 921.933854][ T1974] bond2: (slave gretap1): failed to get link speed/duplex [ 922.042845][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 922.153883][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 922.265530][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 922.295385][ T4268] sctp: [Deprecated]: syz.4.7698 (pid 4268) Use of int in max_burst socket option. [ 922.295385][ T4268] Use struct sctp_assoc_value instead [ 922.394421][ T1150] bond2: (slave gretap1): failed to get link speed/duplex [ 922.491850][ T4275] __nla_validate_parse: 12 callbacks suppressed [ 922.491935][ T4275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7701'. [ 922.519011][ T4275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7701'. [ 922.986462][ T4294] netlink: 71 bytes leftover after parsing attributes in process `syz.3.7707'. [ 923.113669][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7707'. [ 923.218757][ T4298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.237834][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7709'. [ 923.268803][ T4306] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7710'. [ 923.327811][ T5625] block nbd4: Receive control failed (result -32) [ 923.341987][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7707'. [ 923.927060][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7717'. [ 924.153011][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7721'. [ 924.170197][ T4344] veth0_macvtap: left promiscuous mode [ 924.199521][ T4349] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 924.206910][ T4349] sctp: [Deprecated]: syz.1.7720 (pid 4349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 924.206910][ T4349] Use struct sctp_sack_info instead [ 924.244774][ T4346] sctp: [Deprecated]: syz.1.7720 (pid 4346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 924.244774][ T4346] Use struct sctp_sack_info instead [ 924.665722][ T4364] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7724'. [ 924.796815][ T4367] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 925.094910][ T4378] IPVS: ip_vs_add_dest(): server weight less than zero [ 925.321994][ T4387] bridge0: port 1(veth1_to_bridge) entered blocking state [ 925.322104][ T4387] bridge0: port 1(veth1_to_bridge) entered disabled state [ 925.322322][ T4387] veth1_to_bridge: entered allmulticast mode [ 925.374632][ T4387] veth1_to_bridge: entered promiscuous mode [ 925.376488][ T4387] bridge0: port 1(veth1_to_bridge) entered blocking state [ 925.377507][ T4387] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 925.543293][ T4394] netlink: 'syz.4.7735': attribute type 1 has an invalid length. [ 925.695524][ T4394] bond5: entered promiscuous mode [ 925.703269][ T4394] 8021q: adding VLAN 0 to HW filter on device bond5 [ 925.733674][T31284] block nbd5: Receive control failed (result -32) [ 925.733948][ T5625] block nbd5: Receive control failed (result -32) [ 925.793717][ T4394] netlink: 'syz.4.7735': attribute type 11 has an invalid length. [ 926.396759][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022b1a000: rx timeout, send abort [ 926.413321][ T1973] net_ratelimit: 26 callbacks suppressed [ 926.413402][ T1973] bond2: (slave gretap1): failed to get link speed/duplex [ 926.546053][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 926.718162][ T4440] 8021q: adding VLAN 0 to HW filter on device bond9 [ 926.726672][ T4447] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 926.853759][ T1973] bond2: (slave gretap1): failed to get link speed/duplex [ 926.897827][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022b1a000: abort rx timeout. Force session deactivation [ 926.901962][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e685000: rx timeout, send abort [ 926.963929][ T1974] bond2: (slave gretap1): failed to get link speed/duplex [ 927.093493][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 927.113126][ T4467] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 927.135566][ T4472] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 927.206258][ T1143] bond2: (slave gretap1): failed to get link speed/duplex [ 927.313440][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 927.402044][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e685000: abort rx timeout. Force session deactivation [ 927.425011][ T1150] bond2: (slave gretap1): failed to get link speed/duplex [ 927.617126][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 930.464367][ T4496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 930.471594][ T4503] __nla_validate_parse: 5 callbacks suppressed [ 930.471639][ T4503] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7761'. [ 930.652970][ T4511] netlink: 'syz.2.7762': attribute type 11 has an invalid length. [ 930.660791][ T4519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7757'. [ 931.422580][ C0] net_ratelimit: 9029 callbacks suppressed [ 931.422626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.422849][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.423095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.423322][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.426402][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.426601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.427015][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.427263][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.427487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.427656][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.836744][ T4540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7769'. [ 935.678542][ T4578] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7783'. [ 936.082643][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7784'. [ 936.432662][ C0] net_ratelimit: 23608 callbacks suppressed [ 936.432715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.432923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.433140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.433366][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.433570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.433774][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.433978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.434189][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.434411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.434637][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.739932][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7784'. [ 938.230103][ T4612] netlink: 'syz.3.7790': attribute type 4 has an invalid length. [ 938.617071][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7790'. [ 938.904058][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7790'. [ 940.804338][ T4640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7793'. [ 941.442601][ C0] net_ratelimit: 23764 callbacks suppressed [ 941.442648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.442874][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.443095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.443334][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.443561][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.443832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.444059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.444338][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.444567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.444736][ T1121] bond2: (slave gretap1): failed to get link speed/duplex [ 942.740483][ T4662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7800'. [ 943.071973][ T4665] tipc: Enabling of bearer rejected, failed to enable media [ 943.878096][ T4679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7802'. [ 946.452585][ C0] net_ratelimit: 22755 callbacks suppressed [ 946.452631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.452895][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.453123][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.453357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.453581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.454143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.454394][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.454616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.454825][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.455038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.873149][ T4722] netlink: 'syz.3.7808': attribute type 10 has an invalid length. [ 947.160296][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7808'. [ 948.480834][ T4722] syz_tun: entered promiscuous mode [ 948.761492][ T4722] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 949.920769][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7812'. [ 950.291707][ T4735] bond9: invalid ARP target 0.0.0.0 specified for addition [ 950.291807][ T4735] bond9: option arp_ip_target: invalid value (0) [ 950.386739][ T4735] bond9 (unregistering): Released all slaves [ 951.462601][ C0] net_ratelimit: 22877 callbacks suppressed [ 951.462647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.462888][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.463171][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.463415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.463644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.463860][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.464082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.464317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.464533][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.464746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.912470][ C0] sched: DL replenish lagged too much [ 951.981771][ T4766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7818'. [ 952.595830][ T4748] ipvlan2: entered allmulticast mode [ 952.602282][ T4748] mac80211_hwsim hwsim64 wlan0: entered allmulticast mode [ 952.639864][ T4748] batman_adv: batadv0: Adding interface: ipvlan2 [ 952.651200][ T4748] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.651303][ T4748] batman_adv: batadv0: Interface activated: ipvlan2 [ 954.349722][ T4780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7821'. [ 954.568624][ T4788] FAULT_INJECTION: forcing a failure. [ 954.568624][ T4788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.568757][ T4788] CPU: 1 UID: 0 PID: 4788 Comm: syz.1.7823 Not tainted syzkaller #0 PREEMPT(full) [ 954.568779][ T4788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.568791][ T4788] Call Trace: [ 954.568800][ T4788] [ 954.568809][ T4788] dump_stack_lvl+0xe8/0x150 [ 954.568840][ T4788] should_fail_ex+0x410/0x560 [ 954.568873][ T4788] _copy_from_user+0x2d/0xb0 [ 954.568895][ T4788] dev_ethtool+0xdb/0x29c0 [ 954.568996][ T4788] ? __lock_acquire+0x6df/0x2e50 [ 954.569029][ T4788] ? __pfx_dev_ethtool+0x10/0x10 [ 954.569056][ T4788] ? kasan_quarantine_put+0xbb/0x1f0 [ 954.569088][ T4788] ? lock_acquire+0x115/0x350 [ 954.569117][ T4788] ? dev_load+0x21/0x1f0 [ 954.569176][ T4788] ? dev_load+0x21/0x1f0 [ 954.569204][ T4788] dev_ioctl+0x392/0x1150 [ 954.569234][ T4788] sock_do_ioctl+0x23e/0x320 [ 954.569262][ T4788] ? __pfx_sock_do_ioctl+0x10/0x10 [ 954.569284][ T4788] ? hook_file_ioctl+0x1f2/0x600 [ 954.569353][ T4788] sock_ioctl+0x57a/0x7e0 [ 954.569380][ T4788] ? __pfx_sock_ioctl+0x10/0x10 [ 954.569411][ T4788] ? __fget_files+0x2a/0x420 [ 954.569434][ T4788] ? __fget_files+0x3a2/0x420 [ 954.569456][ T4788] ? __fget_files+0x2a/0x420 [ 954.569483][ T4788] ? bpf_lsm_file_ioctl+0x9/0x20 [ 954.569508][ T4788] ? __pfx_sock_ioctl+0x10/0x10 [ 954.569530][ T4788] __se_sys_ioctl+0xfc/0x170 [ 954.569552][ T4788] do_syscall_64+0x166/0x520 [ 954.569580][ T4788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.569599][ T4788] ? clear_bhb_loop+0x70/0xc0 [ 954.569623][ T4788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.569641][ T4788] RIP: 0033:0x7f2826f9e159 [ 954.569673][ T4788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.569690][ T4788] RSP: 002b:00007f2827f19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.569711][ T4788] RAX: ffffffffffffffda RBX: 00007f2827225fa0 RCX: 00007f2826f9e159 [ 954.569725][ T4788] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000005 [ 954.569738][ T4788] RBP: 00007f2827f19090 R08: 0000000000000000 R09: 0000000000000000 [ 954.569750][ T4788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.569762][ T4788] R13: 00007f2827226038 R14: 00007f2827225fa0 R15: 00007ffcffb653f8 [ 954.569792][ T4788] [ 955.017453][ T4794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7824'. [ 956.472468][ C0] net_ratelimit: 24890 callbacks suppressed [ 956.472500][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.472524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.472750][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.472852][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.472974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.473203][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.473205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.473450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.473629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.473671][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.482617][ C0] net_ratelimit: 34897 callbacks suppressed [ 961.482658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.482770][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.482911][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.483130][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.483159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.483464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.483916][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.484340][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.484624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.484698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.492476][ C1] net_ratelimit: 34999 callbacks suppressed [ 966.492530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.492711][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.492952][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.492969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.493192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.493408][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.493447][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.493693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.493775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.493929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.502475][ C0] net_ratelimit: 35180 callbacks suppressed [ 971.502522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.502538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.502747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.502929][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.502966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.503185][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.503265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.503420][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.503589][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.503644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.512484][ C0] net_ratelimit: 33772 callbacks suppressed [ 976.512526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.512769][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.512784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.513008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.513156][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.513269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.513507][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.513522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.513742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.513973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.522650][ C0] net_ratelimit: 34253 callbacks suppressed [ 981.522702][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.522803][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.522987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.523209][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.523283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.523570][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.523620][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.523851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.524122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.524130][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.532462][ C1] net_ratelimit: 33321 callbacks suppressed [ 986.532527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.532558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.532791][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.533021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.533024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.533272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.533489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.533502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.533728][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.533931][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.542626][ C0] net_ratelimit: 33919 callbacks suppressed [ 991.542677][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.542841][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.542905][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.543136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.543381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.543399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.543604][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.543829][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.543893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.544054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.552627][ C0] net_ratelimit: 34283 callbacks suppressed [ 996.552652][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.552667][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.552940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.553060][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.553174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.553426][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.553440][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.553671][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.553866][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.553912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.562446][ C0] net_ratelimit: 34325 callbacks suppressed [ 1001.562486][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.562544][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.562735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.562870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.562974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1001.563227][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.563295][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.563466][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.563687][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.563713][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.572506][ C0] net_ratelimit: 36580 callbacks suppressed [ 1006.572529][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.572750][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.572793][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.572968][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.573185][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1006.573191][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.573420][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.573513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.573645][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.573843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.582547][ C0] net_ratelimit: 38084 callbacks suppressed [ 1011.582569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.582754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.582791][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1011.583015][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.583165][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.583252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.583468][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.583506][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.583719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1011.583831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.592486][ C0] net_ratelimit: 36134 callbacks suppressed [ 1016.592510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1016.592625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.592731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.592950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.593087][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.593237][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.593454][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1016.593490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.593678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.593817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.602460][ C1] net_ratelimit: 38038 callbacks suppressed [ 1021.602508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.602588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1021.602802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.602887][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.603033][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.603248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.603264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.603477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1021.603655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.603690][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.612514][ C0] net_ratelimit: 38096 callbacks suppressed [ 1026.612537][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.612723][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.612755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.612968][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.613090][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.613180][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1026.613412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.613490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.613669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.613885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.622475][ C0] net_ratelimit: 38307 callbacks suppressed [ 1031.622498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.622656][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.622955][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.623334][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1031.623725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.623817][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1031.624045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.624094][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.624277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.624491][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1035.788040][T31284] Bluetooth: hci5: command 0x0406 tx timeout [ 1036.632453][ C0] net_ratelimit: 38006 callbacks suppressed [ 1036.632474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.632707][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.632767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.632934][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1036.633088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.633169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.633414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.633419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.633640][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.633812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1041.642506][ C0] net_ratelimit: 35062 callbacks suppressed [ 1041.642528][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.642682][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.642746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1041.642959][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.643050][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.643197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.643413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.643531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1041.643625][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1041.643839][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.652487][ C0] net_ratelimit: 37643 callbacks suppressed [ 1046.652497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1046.652508][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1046.652724][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.652927][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.652952][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.653172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.653336][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.653404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1046.653622][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.653751][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.662515][ C0] net_ratelimit: 37118 callbacks suppressed [ 1051.662515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.662536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1051.662750][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.662944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.662966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.663199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.663368][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.663449][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.663670][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1051.663792][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.672474][ C1] net_ratelimit: 36329 callbacks suppressed [ 1056.672511][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.672590][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.672810][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.672863][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.673026][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.673198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.673258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1056.673483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.673695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.673911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1061.682457][ C0] net_ratelimit: 37426 callbacks suppressed [ 1061.682479][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1061.682565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.682708][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.682889][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.682926][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.683197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.683284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1061.683415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.683640][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1061.683679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.692522][ C1] net_ratelimit: 37595 callbacks suppressed [ 1066.692551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.692566][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.692771][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1066.692942][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.692996][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.693229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.693337][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.693449][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.693664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.693664][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.702435][ C0] net_ratelimit: 37917 callbacks suppressed [ 1071.702460][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1071.702664][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.702684][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.702898][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.703081][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.703113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.703343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.703467][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.703564][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1071.703774][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.712478][ C1] net_ratelimit: 37990 callbacks suppressed [ 1076.712515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.712522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.712740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:76:6d:0d:4c:2c:62, vlan:0) [ 1076.712865][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.712955][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.713186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.713260][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1076.713403][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.713624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.713633][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.102400][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1079.914595][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4786/1:b..l [ 1079.922512][ C0] rcu: (detected by 0, t=10684 jiffies, g=192109, q=1514 ncpus=2) [ 1079.930407][ C0] task:syz.3.7824 state:R running task stack:24360 pid:4786 tgid:4786 ppid:30875 task_flags:0x40044c flags:0x00080002 [ 1079.943911][ C0] Call Trace: [ 1079.947195][ C0] [ 1079.950138][ C0] __schedule+0x17db/0x58f0 [ 1079.954679][ C0] ? lock_acquire+0x115/0x350 [ 1079.959381][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1079.964343][ C0] ? __pfx___schedule+0x10/0x10 [ 1079.969304][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1079.974270][ C0] preempt_schedule_irq+0x4b/0x90 [ 1079.979311][ C0] irqentry_exit+0x14f/0x910 [ 1079.983920][ C0] ? trace_irq_disable+0x3b/0x140 [ 1079.988958][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1079.995039][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1080.000332][ C0] Code: ff ff ff e8 20 29 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 54 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 2c 44 0a cc 48 8d 3d f7 34 da [ 1080.019943][ C0] RSP: 0018:ffffc9000553f400 EFLAGS: 00000296 [ 1080.026020][ C0] RAX: f2ca5ef036becc00 RBX: 0000000000000000 RCX: 0000000000000046 [ 1080.033997][ C0] RDX: 00000000acb1bb44 RSI: ffffffff8e6fd63b RDI: ffffffff8c6d9480 [ 1080.041976][ C0] RBP: ffff888035c05dc0 R08: 4b00000000000000 R09: 0000000000000000 [ 1080.049954][ C0] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0 [ 1080.057936][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1080.065933][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1080.071593][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1080.076723][ C0] unwind_next_frame+0xac/0x2550 [ 1080.081673][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1080.086811][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1080.091845][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1080.096968][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1080.103232][ C0] arch_stack_walk+0x11b/0x150 [ 1080.108018][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1080.113677][ C0] stack_trace_save+0xa9/0x100 [ 1080.118461][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1080.123864][ C0] save_stack+0x122/0x230 [ 1080.128212][ C0] ? __pfx_save_stack+0x10/0x10 [ 1080.133074][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 1080.138377][ C0] ? __slab_free+0x274/0x2c0 [ 1080.142975][ C0] ? qlist_free_all+0x99/0x100 [ 1080.147741][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1080.153394][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1080.158428][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1080.164085][ C0] ? page_ext_put+0x97/0xc0 [ 1080.168607][ C0] __reset_page_owner+0x71/0x1f0 [ 1080.173557][ C0] __free_frozen_pages+0xc93/0xd90 [ 1080.178704][ C0] __slab_free+0x274/0x2c0 [ 1080.183144][ C0] ? qlist_free_all+0x8e/0x100 [ 1080.187919][ C0] qlist_free_all+0x99/0x100 [ 1080.192517][ C0] ? taskstats_exit+0x19e/0xe10 [ 1080.197383][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1080.203039][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1080.208522][ C0] __kasan_slab_alloc+0x22/0x80 [ 1080.213385][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1080.218863][ C0] ? taskstats_exit+0x19e/0xe10 [ 1080.223725][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1080.229345][ C0] ? taskstats_exit+0x19e/0xe10 [ 1080.234182][ C0] taskstats_exit+0x19e/0xe10 [ 1080.238848][ C0] ? acct_update_integrals+0x342/0x410 [ 1080.244402][ C0] ? acct_update_integrals+0x38a/0x410 [ 1080.249857][ C0] ? __pfx_taskstats_exit+0x10/0x10 [ 1080.255042][ C0] ? seccomp_filter_release+0x18a/0x2d0 [ 1080.260566][ C0] do_exit+0x6ad/0x2360 [ 1080.264702][ C0] ? lock_acquire+0x115/0x350 [ 1080.269359][ C0] ? __pfx_do_exit+0x10/0x10 [ 1080.273944][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1080.278971][ C0] do_group_exit+0x22d/0x2f0 [ 1080.283539][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1080.288718][ C0] get_signal+0x121b/0x12c0 [ 1080.293229][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1080.298757][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1080.304901][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1080.310252][ C0] ? rcu_is_watching+0x16/0xb0 [ 1080.314995][ C0] do_syscall_64+0x328/0x520 [ 1080.319567][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.325611][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1080.330266][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.336135][ C0] RIP: 0033:0x7f0b0d19e159 [ 1080.340530][ C0] RSP: 002b:00007ffdc7fb5568 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1080.348921][ C0] RAX: ffffffffffffff92 RBX: 00000000000e944a RCX: 00007f0b0d19e159 [ 1080.356870][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0b0d42645c [ 1080.364817][ C0] RBP: 0000000000000226 R08: 3fffffffffffffff R09: 0000000000000000 [ 1080.372765][ C0] R10: 00007ffdc7fb5670 R11: 0000000000000246 R12: 00007ffdc7fb5690 [ 1080.380729][ C0] R13: 00007f0b0d42645c R14: 00000000000e9670 R15: 00007ffdc7fb5670 [ 1080.388699][ C0] [ 1080.391733][ C0] rcu: rcu_preempt kthread starved for 6428 jiffies! g192109 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1080.402742][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1080.412708][ C0] rcu: RCU grace-period kthread stack dump: [ 1080.418596][ C0] task:rcu_preempt state:R running task stack:26848 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1080.432104][ C0] Call Trace: [ 1080.435381][ C0] [ 1080.438321][ C0] __schedule+0x17db/0x58f0 [ 1080.442841][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1080.447800][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1080.452930][ C0] ? __pfx___schedule+0x10/0x10 [ 1080.457791][ C0] ? lock_acquire+0x115/0x350 [ 1080.462484][ C0] ? schedule+0x90/0x2b0 [ 1080.466749][ C0] schedule+0x164/0x2b0 [ 1080.470929][ C0] schedule_timeout+0x152/0x2c0 [ 1080.475791][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1080.481176][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1080.486484][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1080.492303][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1080.497868][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1080.502745][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1080.508910][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1080.514198][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1080.519422][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1080.524023][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1080.529234][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1080.534189][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1080.539235][ C0] kthread+0x38b/0x480 [ 1080.543312][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1080.548514][ C0] ? __pfx_kthread+0x10/0x10 [ 1080.553113][ C0] ret_from_fork+0x514/0xb70 [ 1080.557713][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1080.562843][ C0] ? __switch_to+0xc89/0x1420 [ 1080.567541][ C0] ? __pfx_kthread+0x10/0x10 [ 1080.572144][ C0] ret_from_fork_asm+0x1a/0x30 [ 1080.576942][ C0] [ 1080.579969][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1080.586302][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1080.591562][ C1] NMI backtrace for cpu 1 [ 1080.591587][ C1] CPU: 1 UID: 0 PID: 1972 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 1080.591633][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1080.591646][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1080.591717][ C1] RIP: 0010:__lock_acquire+0x543/0x2e50 [ 1080.591740][ C1] Code: c7 48 63 8f a0 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d cf 00 00 00 49 83 ff 31 0f 83 8c 00 00 00 48 8b 03 25 ff 1f 00 00 <48> 0f a3 05 95 02 f7 12 73 10 48 69 c0 c8 00 00 00 48 8d 88 d0 24 [ 1080.591757][ C1] RSP: 0018:ffffc90000a17b70 EFLAGS: 00000002 [ 1080.591773][ C1] RAX: 0000000000000007 RBX: ffff8880a3320c70 RCX: 0000000000000006 [ 1080.591786][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff8880a3320000 [ 1080.591798][ C1] RBP: 0000000000000001 R08: 4400000000000000 R09: 0000000000000000 [ 1080.591812][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: 0000000000000003 [ 1080.591824][ C1] R13: 0000000000000000 R14: ffff8880a3320ca0 R15: 0000000000000004 [ 1080.591837][ C1] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 1080.591853][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1080.591866][ C1] CR2: 00007f0b0dfbfff8 CR3: 000000002a0ba000 CR4: 00000000003526f0 [ 1080.591884][ C1] Call Trace: [ 1080.591891][ C1] [ 1080.591902][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 1080.591927][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1080.591956][ C1] ? ebt_do_table+0x2605/0x27d0 [ 1080.592035][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 1080.592060][ C1] ? ebt_do_table+0x2605/0x27d0 [ 1080.592090][ C1] lock_acquire+0x115/0x350 [ 1080.592107][ C1] ? net_generic+0x1e/0x240 [ 1080.592131][ C1] ? net_generic+0x1e/0x240 [ 1080.592151][ C1] ? net_generic+0x1e/0x240 [ 1080.592172][ C1] net_generic+0x3a/0x240 [ 1080.592191][ C1] ? net_generic+0x1e/0x240 [ 1080.592213][ C1] br_nf_post_routing+0x47d/0xee0 [ 1080.592237][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1080.592261][ C1] nf_hook_slow+0xc5/0x220 [ 1080.592342][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1080.592388][ C1] NF_HOOK+0x23e/0x3f0 [ 1080.592408][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1080.592425][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1080.592444][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1080.592467][ C1] ? net_generic+0x1e/0x240 [ 1080.592489][ C1] br_forward_finish+0xd3/0x130 [ 1080.592507][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1080.592528][ C1] br_nf_forward_finish+0xa76/0xea0 [ 1080.592556][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1080.592591][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1080.592612][ C1] ? NF_HOOK+0xa2/0x6e0 [ 1080.592633][ C1] ? NF_HOOK+0xa2/0x6e0 [ 1080.592653][ C1] NF_HOOK+0x64e/0x6e0 [ 1080.592677][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1080.592696][ C1] ? net_generic+0x1e/0x240 [ 1080.592718][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1080.592742][ C1] ? net_generic+0x1e/0x240 [ 1080.592762][ C1] ? net_generic+0x1e/0x240 [ 1080.592785][ C1] br_nf_forward_ip+0x7eb/0xa30 [ 1080.592807][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1080.592831][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 1080.592854][ C1] nf_hook_slow+0xc5/0x220 [ 1080.592880][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1080.592900][ C1] NF_HOOK+0x23e/0x3f0 [ 1080.592919][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1080.592936][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1080.592955][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1080.592973][ C1] ? skb_clone+0x246/0x3a0 [ 1080.592996][ C1] ? br_flood+0x623/0x8d0 [ 1080.593013][ C1] ? br_handle_vlan+0x5e/0x530 [ 1080.593066][ C1] __br_forward+0x397/0x540 [ 1080.593084][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1080.593105][ C1] br_handle_frame_finish+0x1119/0x1950 [ 1080.593133][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1080.593156][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 1080.593209][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1080.593235][ C1] ? nf_hook_slow+0x176/0x220 [ 1080.593262][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1080.593284][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1080.593306][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1080.593357][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1080.593381][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1080.593403][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1080.593431][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1080.593456][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1080.593482][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1080.593507][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1080.593531][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1080.593557][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1080.593587][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 1080.593613][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1080.593635][ C1] br_handle_frame+0x127f/0x1510 [ 1080.593661][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1080.593685][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1080.593708][ C1] ? ktime_get+0x45/0x220 [ 1080.593728][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1080.593749][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 1080.593776][ C1] ? ktime_get+0x1f5/0x220 [ 1080.593801][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1080.593828][ C1] ? irqentry_exit+0x218/0x910 [ 1080.593856][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1080.593892][ C1] ? process_backlog+0x3de/0x18b0 [ 1080.593918][ C1] ? process_backlog+0x3de/0x18b0 [ 1080.593947][ C1] process_backlog+0x727/0x18b0 [ 1080.593976][ C1] ? process_backlog+0x3de/0x18b0 [ 1080.594010][ C1] __napi_poll+0xaa/0x330 [ 1080.594037][ C1] net_rx_action+0x61d/0xf50 [ 1080.594070][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1080.594095][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1080.594152][ C1] ? net_tx_action+0xbff/0xc30 [ 1080.594181][ C1] handle_softirqs+0x226/0x860 [ 1080.594207][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1080.594235][ C1] __irq_exit_rcu+0xcb/0x220 [ 1080.594259][ C1] irq_exit_rcu+0x9/0x30 [ 1080.594282][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1080.594308][ C1] [ 1080.594315][ C1] [ 1080.594323][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1080.594343][ C1] RIP: 0010:__schedule+0x1dc9/0x58f0 [ 1080.594388][ C1] Code: 31 f6 e8 6a ba b0 f5 4c 89 ff e8 32 c9 b1 f5 0f 1f 44 00 00 49 83 c7 48 4c 89 ff e8 a1 c3 01 00 e8 7c c6 ea f5 fb 4c 8b 24 24 15 fa ff ff 90 0f 0b 90 f7 c6 01 01 00 00 0f 85 ff e7 ff ff e9 [ 1080.594404][ C1] RSP: 0018:ffffc90004a7f780 EFLAGS: 00000206 [ 1080.594420][ C1] RAX: 00000000000a64db RBX: 1ffff9200094ff14 RCX: 8000000000000001 [ 1080.594435][ C1] RDX: 0000000000000006 RSI: ffffffff8e474b17 RDI: ffffffff8c6d9480 [ 1080.594448][ C1] RBP: ffffc90004a7f980 R08: ffffffff907a177f R09: 1ffffffff20f42ef [ 1080.594463][ C1] R10: dffffc0000000000 R11: fffffbfff20f42f0 R12: ffff8880a3320000 [ 1080.594478][ C1] R13: dffffc0000000000 R14: ffff8880a3320000 R15: ffff8880b873bb08 [ 1080.594502][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1080.594543][ C1] ? __pfx___schedule+0x10/0x10 [ 1080.594578][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1080.594607][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1080.594629][ C1] preempt_schedule_common+0x7f/0xd0 [ 1080.594655][ C1] preempt_schedule_thunk+0x16/0x40 [ 1080.594679][ C1] _raw_spin_unlock+0x41/0x50 [ 1080.594703][ C1] nsim_dev_trap_report_work+0xa4b/0xb40 [ 1080.594733][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1080.594759][ C1] process_scheduled_works+0xc3d/0x1630 [ 1080.594797][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1080.594825][ C1] ? assign_work+0x3cf/0x5d0 [ 1080.594851][ C1] worker_thread+0xa47/0xfb0 [ 1080.594889][ C1] kthread+0x38b/0x480 [ 1080.594906][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1080.594930][ C1] ? __pfx_kthread+0x10/0x10 [ 1080.594948][ C1] ret_from_fork+0x514/0xb70 [ 1080.594967][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1080.594996][ C1] ? __switch_to+0xc89/0x1420 [ 1080.595023][ C1] ? __pfx_kthread+0x10/0x10 [ 1080.595040][ C1] ret_from_fork_asm+0x1a/0x30 [ 1080.595076][ C1]