last executing test programs: 41.981033423s ago: executing program 0 (id=6978): r0 = socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x9, 0x6}, 0x8}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32=r1, @ANYBLOB="140003000000000000000000000000000000003414000200fe88"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008010) 41.839142522s ago: executing program 0 (id=6981): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000e3ec00000000000001000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000040)=@srh={0x2b, 0x0, 0x4, 0x0, 0x1, 0x40, 0xb055}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) close(0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x5f, 0x30, 0x0, 0x2e, 0x61]}}, &(0x7f0000000f40)=""/4089, 0x2c, 0xff9, 0x4}, 0x28) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x6a, &(0x7f0000000800)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r8], &(0x7f0000000180), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r0, &(0x7f0000000000)="4c00000011000f140011000200001a0002000000201100", 0x17) 41.534782823s ago: executing program 3 (id=6986): socket(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000005780)=""/4097, 0x1001}, {&(0x7f0000000580)=""/151, 0x97}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xeffffffd}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003580)=""/4088, 0xff8}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000180)=""/166, 0xa6}], 0x3}, 0x7}], 0x7, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="207f00000000010029bd7000ffdbdf2500000f6b143e633b6539c5aa0c000000"], 0x20}], 0x1, 0x0, 0x0, 0xd069d254564c1698}, 0xc000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 41.382211456s ago: executing program 3 (id=6988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0xffffffff, 0x2}}, 0x2e) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 41.22481813s ago: executing program 3 (id=6990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) (async) unshare(0x2a060400) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) 41.127705843s ago: executing program 3 (id=6991): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'pimreg1\x00', {0x2, 0x0, @empty}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x60}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48}, 0x20000851) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000019c0)={{r2, &(0x7f0000000280)='pimreg1\x00', 0xa0000, &(0x7f00000002c0)={@_ha_fsid={[0x4, 0x5]}, {0x9, 0x340d, 0x9, 0xf4f}}, 0x81, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x8}, 0x7, &(0x7f00000018c0)=[{0xe7c04dba2aeb6b5b, 0x5, &(0x7f0000000380)='pimreg1\x00', &(0x7f00000003c0)="a7131ff8b148acce32044fe4789b37debbc45a7f1349edc37b88ed59fd5f6f4b894a2ca21f39e28db5fd52cf657c3fa36e7f41e277b0f9c5a6ef42ed197419d93761e4957b925841484365362a5b2cca3a4599657e307c149598b18e1219d7c2256a69c8dc3c0214790fcfc741546dae5fae02cb6ec9ffab82345049ec11e87dec99a63a0a16248bfbfbc984d45fd134192ec435817a06cd80fce5eeda6658da39ed511fcc859f65454e0de07b91d2135124e10dbc469a3357c50004523b3c2b34bb94d0af669152d6222b3fbdcefeb418ab608bff58b4358f89f35962fd56e6aa04de2e8be6224ee71ab44b6a0e089823b952", 0xf3, 0x2}, {0x1, 0x24, &(0x7f00000004c0)='#$&-,/)%[:)[.!(\'&\x00', &(0x7f0000000500)="6c365357920886e0667c10d7353139cf2d1eeec8f5415f3f7901d244ceb8a85c60798e67fcfdf27670eaac4dec7323ff63bc8214eb45729abb9a33b2311f2fcaf95ef660cdaf87712a732823e196c6c4f879e10b58176e2e4fbc29a38595fa467169ba95b47ff85a9ac5050be475599681a42a0188a9c8f5ebd5365764d579585519edc2a832ce96bcdbd53d07f125143c0dac008837969c412b1527e34c", 0x9e, 0x2b}, {0x1, 0x6, &(0x7f00000005c0)='*-\x1d,\x00', &(0x7f0000000600)="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", 0x1000, 0x30}, {0x3, 0x5, &(0x7f0000001600)='\xd7{#(\x00', &(0x7f0000001640)="3558f496249c5f93448f7f988011d01cdad88cde6b92d753ffb5719964db71bc5db607dd23a0806dddc88b43a06d15ffa6ee963ef43b9fb3f94d72cf5bfff92d52f8ff97879b8a6e3cdae2ac5961a1613aa41a8e3a36035b9931f042fcad9abd4a7cd6c6e0cc5827f1e56a4d1b906975807c6e89071ade16ea", 0x79, 0x32}, {0x2, 0x375, &(0x7f00000016c0)=':/\x00', &(0x7f0000001700), 0x0, 0x2}, {0x2, 0x10, &(0x7f0000001740)='pimreg1\x00', &(0x7f0000001780)="36e55076e1f31b9f68c6a9d952", 0xd, 0x22}, {0x2, 0x0, &(0x7f00000017c0)='#&)#\x00', &(0x7f0000001800)="cb0f73ab03a9f08bc5887777f480cc3cde96aabeac15a97640c190671114838825d3f67b69f483f15aa253945815afdccb7a06814789db70d0e5c56cb74150c9993eae559e41357a692db1f73459638a4cd74983970316e73980ebf530261fe22b34602212176c3595383133a31c969cb7ed60936af6f9fb516f46503d511a17aee7b25911c5072bf5537f99a3cd70376608", 0x92, 0x3a}]}) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x3, 0x5, 0x5}, 0x50) ppoll(&(0x7f0000001b40)=[{r3, 0x200}, {0xffffffffffffffff, 0x5308}, {r0}, {r0, 0x9028}, {r4}, {r2, 0x200}], 0x6, &(0x7f0000001b80)={0x0, 0x989680}, &(0x7f0000001bc0)={[0x95]}, 0x8) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c40), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x50, r5, 0x820, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6e}]}, 0x50}}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r6, &(0x7f0000001e80)={&(0x7f0000001d80)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001dc0)="40f6d207bf08b5", 0x7}], 0x1, &(0x7f0000001e40)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xcc, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x47}}}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7f}]}, @NL80211_ATTR_NAN_FUNC={0x70, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3c, 0xd, 0x0, 0x1, [{0x2d, 0x0, "178d3bd24aa0e9a380e4cd3c7b4133e0d36e633df65e17c41ae89cd21ec17d69f2d3708e1489c7f992"}, {0x5, 0x0, 'U'}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7a50efac32ef"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x48, r7, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x38}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x5f4, 0x0, 0x400, 0xfffb, 0x8, 0x10]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x7, 0x7, 0x3, 0xf]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48804}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002240), r2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r2) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2208040}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, r11, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000023c0)=0x3aa, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x50, r10, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002540)={'wg2\x00'}) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x24, 0xd, 0x6, 0x900, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x24}}, 0x240008c1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x34, r11, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xded}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), r3) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x50, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x73}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x7}, @broadcast, @device_a, @from_mac=@device_b, {0x1, 0xe6c}}, 0x9, @void}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) 40.688315933s ago: executing program 3 (id=6994): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x28}], 0x1}, 0x0) 40.635028035s ago: executing program 0 (id=6995): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010002ba99979f4474eec0000000e0000c045775f6fdbc5ee6f3f14a6a40a7fc5803974b5263829356b93225c9665d067ec4c0df36f4f8c139966810fa9404439efa536c3a3c84800"/86, @ANYRES32, @ANYBLOB="1100030000000000180012800b00010069703667726500000800028004"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newqdisc={0x280, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x250, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x5}, @TCA_GRED_PARMS={0x38, 0x1, {0x5, 0x9, 0xfff, 0x2, 0x4, 0x81, 0x81, 0x8000, 0x5, 0xf, 0x2, 0x18, 0x1, 0x84, 0x0, 0xcb0}}, @TCA_GRED_DPS={0x10, 0x3, {0xb, 0x5, 0x0, 0x5}}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x6, 0xfffffffa, 0x0, 0x4, 0x91, 0xfd, 0x6, 0x8b, 0x0, 0x7, 0x3, 0x5, 0x6, 0x7, 0x2}}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x400, 0x5, 0x8, 0x7fff, 0xffffff10, 0xfffff3f5, 0x0, 0x5, 0xb, 0x14, 0x9, 0x19, 0x3, 0x2, 0x1000}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x67, 0x15, 0x3, 0xfffffffd, 0x6, 0x8a00, 0x7fffffff, 0x1, 0xc09, 0x13, 0x1b, 0x1f, 0x2, 0x7, 0xffffff80}}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0xe, 0x0, 0x2}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x1ff}, @TCA_GRED_PARMS={0x2, 0x1, {0xd7, 0x3, 0x1, 0x0, 0x5, 0x4, 0x8001, 0x93a, 0x5, 0x2, 0x11, 0x1e, 0x2, 0x1, 0xb, 0x6}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002700020001000800a0"], 0x34}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 40.478531984s ago: executing program 1 (id=6997): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xe9, 0xfffff024}, {0x2d, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x4}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0) 40.110742206s ago: executing program 1 (id=6998): r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r0, 0x0, &(0x7f00000003c0), 0x80000) shutdown(r0, 0x1) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) listen(r0, 0x89) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0xa002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0xff}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}]}}}]}, 0x44}}, 0x0) 40.032568475s ago: executing program 4 (id=6999): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='$[++$,+#V.&\x00', 0x4000, &(0x7f0000000040)={@align=0x80, {0x8, 0x6, 0x5, 0x4}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xffff0000}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000140)) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000540)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000680)={r1, &(0x7f0000000580)='$[++$,+#V.&\x00', 0x80880, &(0x7f00000005c0)={@align=0x8, {0x7, 0xfffb, 0x8, 0x7}}, 0x8001, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x4}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x1000, "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"}, &(0x7f0000001700)=0x1008) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001740)={r3, 0x100, 0x5, [0x8, 0x9, 0x80, 0x65, 0xdfe]}, 0x12) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000001780)={0x4, 0xb81de9ed, 0x8, 0x7}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x58, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x27}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x20004800) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000001980)={{0x8000, 0x6, 0x0, 0x66a8, 0x1}, [{0x7, 0x0, 0x1}, {0x0, 0x1, 0x93, 0x9}, {0x9, 0x6, 0x4}, {0x5, 0xd47, 0x6, 0x4}]}) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000001a40)={@local, @loopback, @multicast1}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ac0), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2001200}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x2c, r4, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) syz_emit_ethernet(0xa7, &(0x7f0000001cc0)={@empty, @empty, @void, {@generic={0x10, "746b48644726edb3a473b4836d93bb371b1f7100e4e501114b7688ce0ab75ef87239326ac278a7aea27e4c29aefbfda403fe1e27b0faf9b417f22411066e2143f2341336f566aedb89e94aa656b07fd52f0df2ada956ae6fb5e0834b85dd98c3d67c6fbf6a8d178ce22eb4f1161b7c2f4a41463ae0d9749a5fe311fc9f86e20ec951d51ac4d6acee3dfbb95cfda38853dfd887396f08e9461a"}}}, &(0x7f0000001d80)={0x1, 0x3, [0x4c1, 0x642, 0x91, 0x3f8]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x50, r11, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044084}, 0x200000c1) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000002040)={r8, &(0x7f0000001f40)='\x00', 0x2000, &(0x7f0000001f80)={@_ha_fsid={[0x2, 0x2]}, {0x4, 0x401, 0x4944, 0x8000000000000001}}, 0x2, &(0x7f0000001fc0), &(0x7f0000002000)=0x7}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r12, 0x84, 0x5, &(0x7f0000002080)={r3, @in6={{0xa, 0x4e20, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x84) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x80) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r9) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000002440)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002400)={&(0x7f00000022c0)={0x108, r13, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9fb0299c2d99"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0x21, 0x34, @random="76f57648d1283e2aa1c4313c9412cc5f00ec6c1bb2a17b7aeacff599f4"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3fdcba9bf3"}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_SEQ={0x7, 0x4, "559431"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4040001) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000002680)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002640)={&(0x7f00000024c0)={0x148, r13, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x38}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3c2}, @NL80211_ATTR_VENDOR_DATA={0xc9, 0xc5, "210615360b23b82f37ab21a327e473d20f02babc2e94b8caef550f8fbbe7cc3274d703e70161d311346fe6faac3bd04a928a602a59d37b565731db4f32564abac76faa2f1616d666107570a6963018d74873b6b59e56333bcc747d7757a239aa760217776b950e597905f0820cedb88ccff0ee22bdd0202939dbe4beb1daf6e9572107ec703b2b1eaaf8f4b2abf8b11877a83d14a908b0470b1bf50f8d4bb3911eba5db25f6edeb9d99465e48fbbf3729455e39d6a4a71af76511c084fc283adca1431ca65"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x2a, 0xc5, "13977548ab19f9a852d31bb5503311724066afd9e95cbbf3d5b9fc32d5ded94090e79035471d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x148}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 40.026398158s ago: executing program 1 (id=7000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x201, 0x0, 0x0) (async) shutdown(r0, 0x0) (async, rerun: 64) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (rerun: 64) 39.90312655s ago: executing program 3 (id=7001): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000100000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000004000000f8ffffffb702000008000000b7030000652b0000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084020004003000000412"], 0x30}, 0x800) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20048804}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x2c}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x48, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x50) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r4) 39.855966741s ago: executing program 1 (id=7003): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xa}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xa}, {0xa, 0xe}, {0x10, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x3c}}, 0x20004015) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x18090) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}, 0x48) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000497d68960f365ae70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x0) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={r11}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000380)={r11, @in={{0x2, 0x4e21, @empty}}}, 0x84) 39.819445937s ago: executing program 4 (id=7004): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000b000000000000000000000d0a0000000600000001000013080000000900000008"], 0x0, 0x47, 0x0, 0x8}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) unshare(0x20000400) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (rerun: 32) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r2}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000200050006"], 0x2c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x72, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x25, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 39.729386482s ago: executing program 0 (id=7005): bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0700000004000000000900000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async, rerun: 64) r0 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async, rerun: 32) r3 = socket(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES64=r1, @ANYBLOB="010000000281d21e782ee58980ec2d16c96b10ab62008b2c7167a3dca409b2da37d54413715745fd83500429e1cf"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0xdc, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x18, r6, 0x301, 0xf0bd29, 0x25dfdafc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) (async) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000035000000080003"], 0x44}}, 0x0) (async) close(0xffffffffffffffff) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200"}) (async) recvmsg$unix(r0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000004c0), 0x4) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf25020000000800090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x20008080) (async) close(0x4) 39.667010188s ago: executing program 4 (id=7007): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @remote, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080012400000000305001500090000000500010006000000050005000a00000005000400000000000900020073798530000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20015051}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaabb018014b6a4c1d83cc200000108004a5d0038006800000c21907864010100ac1414aa89135d640002000000000000000002e0000001004e214e2204b1907840740e234b310000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) 39.350770303s ago: executing program 2 (id=7009): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="202000005200010000000000fddbdf25ffffff"], 0x20}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000140)=0x10) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="202000005200010000000000fddbdf25ffffff"], 0x20}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000140)=0x10) (async) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) 39.292126036s ago: executing program 2 (id=7010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e26, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}}}}}, 0x2e) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bdb5e60d042fb3ccabd7000ffdbdf254b0000000f00a8007365636f6e646e616d6500000e00013b6e657464657773696d0000000f0002006e657464"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) 39.04598856s ago: executing program 2 (id=7011): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r2, 0x2) recvmsg(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/43, 0x2b}], 0x1}, 0x40000002) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r6, 0x201, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000002000010327bd7000ffdbdf2502000000000000051e0000000800170071204e20050016"], 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r4], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027840000000000000080000008000100", @ANYRES32=r7, @ANYBLOB="0c0003000300000000000000080002000000000006000600000000000500"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 38.685704546s ago: executing program 1 (id=7012): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@random="a7f1e6ee3ce9", @local, @private=0xa010102, 0xd}}}, {{@arp={@multicast1, @rand_addr=0x64010102, 0x0, 0xff, 0x2, 0x8, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="999ec99802e2", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfff1, 0x84, 0x35, 0x1fc7, 0x7ff, 0x7, 'wg0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x0, 0x220}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x10, 0x2}}}, {{@arp={@empty, @multicast2, 0x0, 0xff, 0x3, 0x5, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x7e, 0x1, 0x800, 0xdf7f, 0x53, 0xfff, 'wg1\x00', 'batadv0\x00', {}, {}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x6, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={@broadcast, 0x0, 0x0, 0x40, 0x0, [{@multicast2}, {@multicast2}, {@multicast2}, {@broadcast}]}}) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) unshare(0x10000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000580), 0x4) unshare(0x8000000) unshare(0x800) getsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0), &(0x7f0000000600)=0x4) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000640), &(0x7f0000000680)=0x40) unshare(0x300) socket$unix(0x1, 0x2, 0x0) unshare(0x20100) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000006c0)={@private=0xa010101, @private=0xa010100}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000b80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000740)={0x3c4, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xed85f726ec662f6d}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1dc, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf17f1ded6af376fc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r5 = socket(0x2a, 0x4, 0x3) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000bc0)={'ip6tnl0\x00', 0x0}) r6 = accept4(r0, &(0x7f0000000c00)=@can, &(0x7f0000000c80)=0x80, 0xc0800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d00)={'gre0\x00', 0x0, 0x80, 0x8000, 0x2, 0xa, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x66, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xac, 0x0, 0x5, [0x9, 0x8, 0x96f, 0xfffffffb, 0x7, 0x5, 0x9]}, @cipso={0x86, 0x3d, 0x1, [{0x6, 0x9, "258df828b04d6b"}, {0x2, 0xf, "0b5c013397853b2c12c54524af"}, {0x5, 0xe, "367a29a0a6a098801dd1da28"}, {0x6, 0x9, "67cd89e7108eca"}, {0x2, 0x8, "6de78018f247"}]}, @rr={0x7, 0x7, 0xef, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xf8, [@private=0xa010100]}, @ssrr={0x89, 0xb, 0xf8, [@multicast2, @private=0xa010101]}]}}}}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x9, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, [@exit, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x5d}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}]}, &(0x7f0000000e80)='syzkaller\x00', 0x800, 0x78, &(0x7f0000000ec0)=""/120, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000f80)=[0x1, 0xffffffffffffffff], &(0x7f0000000fc0)=[{0x3, 0x1, 0x4}, {0x5, 0x1, 0x3, 0x4}, {0x4, 0x4, 0xb, 0xa}, {0x1, 0x3, 0x1, 0x6}], 0x10, 0x5}, 0x94) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001100)=@generic={&(0x7f00000010c0)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x26, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001280)='GPL\x00', 0x88a400, 0x4c, &(0x7f00000012c0)=""/76, 0x41100, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x3, 0x6, 0x3ef9, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000013c0)=[0xffffffffffffffff], &(0x7f0000001400)=[{0x3, 0x4, 0x0, 0x619c5a916698e3d1}, {0x0, 0x5, 0xb, 0xb}, {0x0, 0x5, 0x4, 0xa}, {0x2, 0x2, 0x5, 0x3}, {0x3, 0x2, 0xa, 0x7}], 0x10, 0xce}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x4, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40f, 0x0, 0x0, 0x0, 0x5924}, [@func]}, &(0x7f0000001580)='GPL\x00', 0x10001, 0xf, &(0x7f00000015c0)=""/15, 0x41000, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001640)=[{0x3, 0x1, 0x6, 0xc}, {0x5, 0x4, 0x6, 0x6}, {0x3, 0x4, 0x2, 0xa}, {0x2, 0x4, 0x7, 0x638a464e782c1a5d}, {0x5, 0x3, 0x6, 0x8}, {0x5, 0x1, 0x6, 0x3}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r6, &(0x7f0000001840)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)=@setlink={0x6c, 0x13, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x4060, 0x1410}, [@IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8, 0x1, r10}, @IFLA_XDP_FD={0x8, 0x1, r11}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x26e2e}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x810) 38.662678626s ago: executing program 2 (id=7013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0xfffffffffffffdeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000080000000000000008000000911125000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0xfffffffffffffdeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000080000000000000008000000911125000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 38.588950958s ago: executing program 4 (id=7014): socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000005780)=""/4097, 0x1001}, {&(0x7f0000000580)=""/151, 0x97}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xeffffffd}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003580)=""/4088, 0xff8}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000180)=""/166, 0xa6}], 0x3}, 0x7}], 0x7, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 38.506185919s ago: executing program 1 (id=7015): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010002ba99979f4474eec0000000e0000c045775f6fdbc5ee6f3f14a6a40a7fc5803974b5263829356b93225c9665d067ec4c0df36f4f8c139966810fa9404439efa536c3a3c84800"/86, @ANYRES32, @ANYBLOB="1100030000000000180012800b00010069703667726500000800028004"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newqdisc={0x280, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x250, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x5}, @TCA_GRED_PARMS={0x38, 0x1, {0x5, 0x9, 0xfff, 0x2, 0x4, 0x81, 0x81, 0x8000, 0x5, 0xf, 0x2, 0x18, 0x1, 0x84, 0x0, 0xcb0}}, @TCA_GRED_DPS={0x10, 0x3, {0xb, 0x5, 0x0, 0x5}}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x6, 0xfffffffa, 0x0, 0x4, 0x91, 0xfd, 0x6, 0x8b, 0x0, 0x7, 0x3, 0x5, 0x6, 0x7, 0x2}}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x400, 0x5, 0x8, 0x7fff, 0xffffff10, 0xfffff3f5, 0x0, 0x5, 0xb, 0x14, 0x9, 0x19, 0x3, 0x2, 0x1000}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x67, 0x15, 0x3, 0xfffffffd, 0x6, 0x8a00, 0x7fffffff, 0x1, 0xc09, 0x13, 0x1b, 0x1f, 0x2, 0x7, 0xffffff80}}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0xe, 0x0, 0x2}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x1ff}, @TCA_GRED_PARMS={0x2, 0x1, {0xd7, 0x3, 0x1, 0x0, 0x5, 0x4, 0x8001, 0x93a, 0x5, 0x2, 0x11, 0x1e, 0x2, 0x1, 0xb, 0x6}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002700020001000800a0"], 0x34}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 38.379461686s ago: executing program 2 (id=7016): getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="980000000201030000000000000000000a00000a080015400000000374000d8008000100ac14143014000500fe80000000007c4c00000000000000aa080002007f0000010c000380060001004e2100002c000380060001004e220000060002004e210000060001004e2400bda2bbb3004e220000060001004e22000014000400ff01000000000000000000000000000108000340"], 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x80) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000002c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x30, 0x0, &(0x7f0000000300)=0x90) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="027032811ba8a63ea884845405c25f30fee0002cbd7000fedbdf25"], 0x10}}, 0x8040) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0xfffffff7, 0x5, 0x9, 0xe317, 0x1, 0x6, 0x3}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/24, 0x18) close(r7) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0xffffd000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r8) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c000000973cb7100000", @ANYRES16=r9, @ANYBLOB="040028bd7000fcdbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000c008f0008000000000000000c0090000200000000000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000c008f0003000000000000000c0090000600000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x84ef984661b6869c}, 0x800) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="270000000203013d000000000000000002000000080001000108000340000000036b665188925f1898885776fef8597e4df8c681c6f6a8"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000000)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 38.294849348s ago: executing program 4 (id=7017): r0 = socket$rds(0x15, 0x5, 0x0) accept4(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000003c0)=0x80, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xcc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x0, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x7fffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r9, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r7, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000840)={{r1, &(0x7f0000000640)='(-\x00', 0x80000, &(0x7f0000000680)={@_ha_fsid={[0x4, 0x9]}, {0x3da1, 0x400, 0x4, 0x89f8}}, 0x8, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x6}, {[0x3, 0x3ff, 0xa676, 0x3]}, 0x3, 0xf5, &(0x7f0000000740)=""/245}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xb, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @generic={0x5, 0x0, 0x8, 0x6, 0x2f6e}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @generic={0x0, 0x9, 0x2, 0xff, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000600)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x35, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000008c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0xa, 0x9, 0x7b}, 0x10, 0x5add, r6, 0x7, &(0x7f0000000940)=[r5, r2, r5, r5, r5, r5, 0xffffffffffffffff, r5, r5], &(0x7f0000000a40)=[{0x5, 0x2, 0x4, 0x5}, {0x2, 0x2, 0x5, 0x9}, {0x0, 0x1, 0x8, 0x9}, {0x3, 0x1, 0xe, 0x1}, {0x2, 0x3, 0xd, 0x4}, {0x4, 0x2, 0x1, 0x6}, {0x1, 0x4, 0x1, 0x7}], 0x10, 0x4e}, 0x94) 38.135051031s ago: executing program 0 (id=7018): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[], 0x200}}, 0x4004000) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[], 0x200}}, 0x4004000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400090000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400090000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000023000002000000000900000018110000", @ANYRES32, @ANYBLOB="000000000000000064bb3061e4ec43c8fa7b3000fa03e0f4b702000014000000b7030000000700008500000086000000bf09000000000000a4090100410000009500000000000000bd00020000000000bf90ffffffdd"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 38.104547052s ago: executing program 2 (id=7019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) close(r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 37.976376821s ago: executing program 4 (id=7020): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async, rerun: 64) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x6) write(r4, 0x0, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x4040010) 37.927172058s ago: executing program 0 (id=7021): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xc74, &(0x7f0000000040)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2602, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 32 (id=7021): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xc74, &(0x7f0000000040)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2602, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): dge_slave_0) entered forwarding state [ 719.599260][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.599364][T10073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.738775][T29952] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6081'. [ 719.748316][T29952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6081'. [ 720.009170][T29954] tipc: Enabling of bearer rejected, failed to enable media [ 720.010185][T29952] netlink: 'syz.0.6081': attribute type 3 has an invalid length. [ 720.472500][T29967] netlink: zone id is out of range [ 720.472517][T29967] netlink: zone id is out of range [ 720.472527][T29967] netlink: zone id is out of range [ 720.472535][T29967] netlink: zone id is out of range [ 720.472544][T29967] netlink: zone id is out of range [ 720.472553][T29967] netlink: zone id is out of range [ 720.472566][T29967] netlink: zone id is out of range [ 720.472575][T29967] netlink: zone id is out of range [ 720.822529][T29995] tipc: Resetting bearer [ 720.850046][T29710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.884379][T29990] tipc: Resetting bearer [ 721.080220][T29710] veth0_vlan: entered promiscuous mode [ 721.139389][T29710] veth1_vlan: entered promiscuous mode [ 721.201555][ T4935] Bluetooth: hci1: command tx timeout [ 721.457879][T30003] tipc: Resetting bearer [ 721.483373][ T8762] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 721.524695][ T8962] tipc: Resetting bearer [ 721.602914][T29710] veth0_macvtap: entered promiscuous mode [ 721.635784][T29710] veth1_macvtap: entered promiscuous mode [ 721.715704][T29710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.758002][T29710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.796463][T10085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.797459][T10085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.797496][T10085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.797529][T10085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.869183][T30012] __nla_validate_parse: 5 callbacks suppressed [ 721.869205][T30012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6095'. [ 721.987563][T30016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6098'. [ 722.186337][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.186360][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.269182][ T8762] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 722.344005][T13197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.344028][T13197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.459224][T30030] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 722.718094][T30040] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6104'. [ 722.859697][T30046] netlink: 'syz.4.6103': attribute type 16 has an invalid length. [ 722.859720][T30046] netlink: 'syz.4.6103': attribute type 17 has an invalid length. [ 722.889999][T30028] tipc: Resetting bearer [ 722.897413][T30028] tipc: Resetting bearer [ 722.911064][T14758] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 722.996507][T30039] ªªªªªª€: renamed from vlan0 (while UP) [ 723.128028][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 723.142532][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 723.150528][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 723.162723][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 723.181957][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 723.267489][T14755] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 723.399839][T30046] net_ratelimit: 6 callbacks suppressed [ 723.399860][T30046] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 723.557146][T30068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6107'. [ 723.614702][T30069] tipc: Enabling of bearer rejected, already enabled [ 723.768818][T30067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6111'. [ 724.838605][T30115] netlink: 'syz.4.6116': attribute type 1 has an invalid length. [ 724.838629][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6116'. [ 725.233646][T30126] netlink: 'syz.1.6120': attribute type 13 has an invalid length. [ 725.233669][T30126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6120'. [ 725.273323][ T4935] Bluetooth: hci3: command tx timeout [ 725.336749][T30126] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 725.523392][T30051] ip6gretap0 speed is unknown, defaulting to 1000 [ 725.669115][T30138] netlink: 'syz.0.6122': attribute type 10 has an invalid length. [ 725.779855][T30138] team0 (unregistering): Port device team_slave_0 removed [ 725.803852][T30138] team0 (unregistering): Port device team_slave_1 removed [ 725.808156][T30151] netlink: 'syz.1.6125': attribute type 1 has an invalid length. [ 725.808281][T30152] netlink: 'syz.1.6125': attribute type 1 has an invalid length. [ 725.844431][T30148] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6123'. [ 725.981526][T30151] bond2: entered promiscuous mode [ 725.981584][T30151] bond2: entered allmulticast mode [ 725.981943][T30151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 726.029487][T30152] bond3: entered promiscuous mode [ 726.029511][T30152] bond3: entered allmulticast mode [ 726.030312][T30152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 726.358635][T30153] syzkaller0: entered promiscuous mode [ 726.358659][T30153] syzkaller0: entered allmulticast mode [ 726.653446][T30185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6133'. [ 726.653479][T30185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6133'. [ 727.361134][ T4935] Bluetooth: hci3: command tx timeout [ 727.486139][T30201] netlink: 'syz.4.6136': attribute type 1 has an invalid length. [ 727.486412][T30200] netlink: 'syz.4.6136': attribute type 1 has an invalid length. [ 727.623582][T30204] netlink: 'syz.4.6136': attribute type 1 has an invalid length. [ 727.678405][T30203] __nla_validate_parse: 1 callbacks suppressed [ 727.678426][T30203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6136'. [ 729.431144][ T4935] Bluetooth: hci3: command tx timeout [ 730.694221][T30185] gretap1: entered allmulticast mode [ 730.697412][T30201] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 730.698757][T30200] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 730.740040][T30202] gretap2: entered allmulticast mode [ 730.787685][T30216] tipc: Enabling of bearer rejected, failed to enable media [ 730.844343][T30234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6138'. [ 731.511163][ T4935] Bluetooth: hci3: command tx timeout [ 731.558006][T10085] bond6 (unregistering): (slave geneve3): Releasing active interface [ 731.663283][T10085] bond17 (unregistering): (slave bridge3): Releasing backup interface [ 731.663313][T10085] bridge3 (unregistering): left promiscuous mode [ 731.663332][T10085] bridge3 (unregistering): left allmulticast mode [ 731.732254][T10085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.736275][T10085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.737203][T10085] bond0 (unregistering): Released all slaves [ 731.764596][T10085] bond1 (unregistering): Released all slaves [ 731.780643][T10085] bond2 (unregistering): Released all slaves [ 731.801454][T10085] bond3 (unregistering): Released all slaves [ 731.821985][T10085] bond5 (unregistering): Released all slaves [ 731.829414][T10085] bond6 (unregistering): Released all slaves [ 731.871444][T10085] bond7 (unregistering): Released all slaves [ 731.890406][T10085] bond8 (unregistering): Released all slaves [ 731.905333][T10085] bond9 (unregistering): Released all slaves [ 731.920351][T10085] bond4 (unregistering): Released all slaves [ 731.942522][T10085] bond10 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 731.943224][T10085] bond10 (unregistering): Released all slaves [ 731.950516][T10085] bond11 (unregistering): Released all slaves [ 731.980950][T10085] bond12 (unregistering): Released all slaves [ 732.001303][T10085] bond13 (unregistering): Released all slaves [ 732.028607][T10085] bond14 (unregistering): Released all slaves [ 732.040257][T10085] bond15 (unregistering): Released all slaves [ 732.050523][T10085] bond16 (unregistering): Released all slaves [ 732.062826][T10085] bond17 (unregistering): Released all slaves [ 732.086038][T10085] bond18 (unregistering): Released all slaves [ 732.094914][T10085] bond19 (unregistering): Released all slaves [ 732.113070][T10085] bond20 (unregistering): Released all slaves [ 732.120302][T10085] bond21 (unregistering): Released all slaves [ 732.145068][T10085] bond22 (unregistering): (slave veth5): Releasing active interface [ 732.146241][T10085] bond22 (unregistering): Released all slaves [ 732.156815][T10085] bond23 (unregistering): Released all slaves [ 732.217606][T30249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6140'. [ 732.220414][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6142'. [ 732.249630][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 732.491622][T10085] : left promiscuous mode [ 732.631478][T30270] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 732.641523][T30280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6146'. [ 732.829284][T30291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6146'. [ 733.136274][T30301] netlink: 'syz.0.6148': attribute type 21 has an invalid length. [ 733.239613][T10085] tipc: Disabling bearer [ 733.254179][T10085] tipc: Disabling bearer [ 733.254304][T10085] tipc: Disabling bearer [ 733.256391][T10085] tipc: Left network mode [ 733.663726][T30313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6150'. [ 733.695429][T30315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6150'. [ 733.793585][T30301] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6148'. [ 733.793637][T30301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6148'. [ 733.899906][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 733.900361][T30327] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6151'. [ 733.900381][T30327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6151'. [ 733.900396][T30327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6151'. [ 733.901236][T30312] tipc: Resetting bearer [ 734.103352][T30324] tipc: Resetting bearer [ 734.340160][T30051] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.340334][T30051] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.340476][T30051] bridge_slave_0: entered allmulticast mode [ 734.343038][T30051] bridge_slave_0: entered promiscuous mode [ 734.345693][T30051] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.345920][T30051] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.346044][T30051] bridge_slave_1: entered allmulticast mode [ 734.348731][T30051] bridge_slave_1: entered promiscuous mode [ 734.356502][T30334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6152'. [ 734.646718][T30051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.678825][T30051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.726544][T30353] IPv6: Can't replace route, no match found [ 734.726865][T30353] IPv6: Can't replace route, no match found [ 734.751994][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561a5400: rx timeout, send abort [ 735.045187][ T87] tipc: Resetting bearer [ 735.089901][T30051] team0: Port device team_slave_0 added [ 735.182367][T30051] team0: Port device team_slave_1 added [ 735.252037][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561a6800: rx timeout, send abort [ 735.252077][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561a5400: abort rx timeout. Force session deactivation [ 735.550696][T30051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.550713][T30051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.550739][T30051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.555740][T30051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.555756][T30051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.555783][T30051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.752365][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561a6800: abort rx timeout. Force session deactivation [ 735.848713][T10085] batman_adv: batadv0: Removing interface: macvtap1 [ 736.250091][T30379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6161'. [ 736.363884][T30051] hsr_slave_0: entered promiscuous mode [ 736.364891][T30051] hsr_slave_1: entered promiscuous mode [ 736.365634][T30051] debugfs: 'hsr0' already exists in 'hsr' [ 736.365652][T30051] Cannot create hsr debugfs directory [ 736.752406][T30396] netlink: 'syz.4.6166': attribute type 1 has an invalid length. [ 736.826426][T30396] bond12: entered promiscuous mode [ 736.826797][T30396] 8021q: adding VLAN 0 to HW filter on device bond12 [ 736.865802][T30398] 8021q: adding VLAN 0 to HW filter on device bond12 [ 736.866168][T30398] bond12: (slave gre4): The slave device specified does not support setting the MAC address [ 736.866188][T30398] bond12: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 736.907412][T30398] bond12: (slave gre4): making interface the new active one [ 736.907434][T30398] gre4: entered promiscuous mode [ 736.935328][T30398] bond12: (slave gre4): Enslaving as an active interface with an up link [ 736.966514][T30397] bond12 (unregistering): (slave gre4): Releasing backup interface [ 736.966540][T30397] gre4: left promiscuous mode [ 736.981821][T30409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.996204][T30397] bond12 (unregistering): Released all slaves [ 737.055106][T30405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.335094][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 737.845185][T30417] syzkaller0: entered promiscuous mode [ 737.845211][T30417] syzkaller0: entered allmulticast mode [ 737.854571][T10085] hsr_slave_0: left promiscuous mode [ 737.855896][T10085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.892439][T10085] veth0_to_bridge: left allmulticast mode [ 738.726090][T30427] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 739.058171][T30475] __nla_validate_parse: 7 callbacks suppressed [ 739.058190][T30475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6173'. [ 742.177229][T10085] IPVS: stop unused estimator thread 0... [ 742.194932][T30498] ovs-s!!: entered promiscuous mode [ 742.227816][T30501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6179'. [ 742.227838][T30501] netlink: 356 bytes leftover after parsing attributes in process `syz.2.6179'. [ 742.227853][T30501] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6179'. [ 742.227870][T30501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6179'. [ 742.310795][T30514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6180'. [ 742.327066][T30514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6180'. [ 742.562869][T30522] syzkaller0: entered promiscuous mode [ 742.562893][T30522] syzkaller0: entered allmulticast mode [ 742.750459][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6183'. [ 742.885987][T30546] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6185'. [ 743.136926][T30554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6188'. [ 743.215578][T30558] tipc: Resetting bearer [ 743.381356][T13191] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.381412][T13191] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.381447][T13191] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.381479][T13191] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.390681][T30557] tipc: Resetting bearer [ 743.644656][T30567] netlink: 'syz.2.6190': attribute type 39 has an invalid length. [ 743.886782][T30051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 743.914398][T30051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.933879][T30051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 743.967644][T30051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.981154][T30051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 744.015827][T30051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.020440][T30051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 744.044184][T30051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.088195][ T87] tipc: Resetting bearer [ 744.199753][T30051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.259715][T30051] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.298429][T10083] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.298543][T10083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.337911][T30611] __nla_validate_parse: 5 callbacks suppressed [ 744.337932][T30611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6197'. [ 744.342131][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.342240][T10073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.555306][T30611] netlink: 'syz.1.6197': attribute type 210 has an invalid length. [ 744.572017][T30620] netlink: 'syz.0.6198': attribute type 33 has an invalid length. [ 744.717787][T30627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.886870][T30633] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6201'. [ 744.888833][T30636] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6201'. [ 744.889118][T30633] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6201'. [ 745.096494][T30641] syzkaller1: entered promiscuous mode [ 745.096518][T30641] syzkaller1: entered allmulticast mode [ 745.584808][T30666] bond0: entered promiscuous mode [ 745.584829][T30666] bond_slave_0: entered promiscuous mode [ 745.585044][T30666] bond_slave_1: entered promiscuous mode [ 745.628202][T30666] batadv0: entered promiscuous mode [ 745.635025][T30666] debugfs: 'hsr1' already exists in 'hsr' [ 745.635049][T30666] Cannot create hsr debugfs directory [ 745.667050][T30666] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 745.714364][T30666] bond0: left promiscuous mode [ 745.714381][T30666] bond_slave_0: left promiscuous mode [ 745.714527][T30666] bond_slave_1: left promiscuous mode [ 745.717125][T30666] batadv0: left promiscuous mode [ 745.819275][T30663] bond0: entered promiscuous mode [ 745.819299][T30663] bond_slave_0: entered promiscuous mode [ 745.819496][T30663] bond_slave_1: entered promiscuous mode [ 745.829242][T30663] batadv0: entered promiscuous mode [ 745.836568][T30663] debugfs: 'hsr1' already exists in 'hsr' [ 745.836628][T30663] Cannot create hsr debugfs directory [ 745.837154][T30663] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 745.847910][T30663] bond0: left promiscuous mode [ 745.847939][T30663] bond_slave_0: left promiscuous mode [ 745.848145][T30663] bond_slave_1: left promiscuous mode [ 745.859122][T30663] batadv0: left promiscuous mode [ 745.957830][ T30] audit: type=1800 audit(1791046042.461:11): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6208" name=680B20 dev="tmpfs" ino=157 res=0 errno=0 [ 746.404079][T30699] netlink: 'syz.2.6213': attribute type 23 has an invalid length. [ 746.918533][T30724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6215'. [ 747.700399][T30051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.793020][T30755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6219'. [ 747.857246][T30051] veth0_vlan: entered promiscuous mode [ 747.887612][T30051] veth1_vlan: entered promiscuous mode [ 748.080815][T30051] veth0_macvtap: entered promiscuous mode [ 748.099116][T30051] veth1_macvtap: entered promiscuous mode [ 748.130138][T30051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.149037][T30051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.437826][T30771] vxcan2: entered allmulticast mode [ 748.556778][T30784] netlink: 'syz.4.6224': attribute type 1 has an invalid length. [ 748.680392][T30784] 8021q: adding VLAN 0 to HW filter on device bond12 [ 748.724782][ T8961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.724803][ T8961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.783822][T30790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6225'. [ 748.852653][ T87] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.855357][T10073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.855398][T10073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.855433][T10073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.904564][T10073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.904586][T10073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.914302][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6226'. [ 749.158631][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6230'. [ 749.714630][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.724486][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.731660][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.749963][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.750626][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 750.307636][T30855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6242'. [ 750.333770][T30858] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6243'. [ 750.480044][T30863] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 750.747300][T30867] tc_dump_action: action bad kind [ 750.804776][T30837] ip6gretap0 speed is unknown, defaulting to 1000 [ 750.913082][T30877] bond_slave_0: entered promiscuous mode [ 750.913109][T30877] bond_slave_0: entered allmulticast mode [ 750.929710][T30877] bond0: (slave bond_slave_0): Releasing backup interface [ 750.958539][T30877] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 751.286552][T30885] ip_tables: iptables: counters copy to user failed while replacing table [ 751.483001][T30889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6248'. [ 751.524612][T30889] team0: entered promiscuous mode [ 751.524634][T30889] team_slave_0: entered promiscuous mode [ 751.524832][T30889] team_slave_1: entered promiscuous mode [ 751.548569][T30889] macvlan0: entered promiscuous mode [ 751.550034][T30889] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 751.564494][T30889] team0: left promiscuous mode [ 751.564516][T30889] team_slave_0: left promiscuous mode [ 751.564744][T30889] team_slave_1: left promiscuous mode [ 751.831538][ T4935] Bluetooth: hci4: command tx timeout [ 752.055974][T30910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6251'. [ 752.149104][T30907] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 752.153980][T30903] xt_TCPMSS: Only works on TCP SYN packets [ 752.432243][T30927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6252'. [ 752.432268][T30927] nbd: must specify at least one socket [ 752.740275][T30937] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6255'. [ 752.872989][T30942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6256'. [ 752.878931][T30943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6256'. [ 752.967581][T30946] netlink: 'syz.0.6257': attribute type 29 has an invalid length. [ 753.005703][T30941] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 753.134105][T30837] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.134273][T30837] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.134408][T30837] bridge_slave_0: entered allmulticast mode [ 753.136226][T30837] bridge_slave_0: entered promiscuous mode [ 753.165948][T30949] syzkaller0: entered promiscuous mode [ 753.165967][T30949] syzkaller0: entered allmulticast mode [ 753.167193][T30837] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.167285][T30837] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.167402][T30837] bridge_slave_1: entered allmulticast mode [ 753.168988][T30837] bridge_slave_1: entered promiscuous mode [ 753.187627][T30949] tipc: Started in network mode [ 753.187644][T30949] tipc: Node identity , cluster identity 4711 [ 753.187658][T30949] tipc: Failed to obtain node identity [ 753.187684][T30949] tipc: Enabling of bearer rejected, failed to enable media [ 753.266241][T30837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.269392][T30837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.319116][T30837] team0: Port device team_slave_0 added [ 753.328183][T30837] team0: Port device team_slave_1 added [ 753.363799][T30837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.363817][T30837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.363843][T30837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.365978][T30837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.365992][T30837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.366015][T30837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.669832][T30971] IPv6: addrconf: prefix option has invalid lifetime [ 753.669850][T30971] IPv6: addrconf: prefix option has invalid lifetime [ 753.685956][T30837] hsr_slave_0: entered promiscuous mode [ 753.691603][T30837] hsr_slave_1: entered promiscuous mode [ 753.692372][T30837] debugfs: 'hsr0' already exists in 'hsr' [ 753.692392][T30837] Cannot create hsr debugfs directory [ 753.911098][ T4935] Bluetooth: hci4: command tx timeout [ 754.137826][T30978] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.138451][T30978] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.179088][T30991] netlink: 'syz.0.6269': attribute type 6 has an invalid length. [ 754.643969][T10083] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.644588][T10073] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.644621][T10073] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.644649][T10073] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.715930][T31000] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6270'. [ 754.737582][T31000] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6270'. [ 755.046961][T30837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.046999][T30837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.047026][T30837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50491 - 0 [ 755.047052][T30837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 755.257499][T30837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.257536][T30837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.257563][T30837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50491 - 0 [ 755.257589][T30837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 755.556528][T30837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.556564][T30837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.556591][T30837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50491 - 0 [ 755.556618][T30837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 755.687746][T31035] __nla_validate_parse: 33 callbacks suppressed [ 755.687768][T31035] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.6280'. [ 755.688770][T31035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6280'. [ 755.689288][T31035] netlink: 'syz.3.6280': attribute type 1 has an invalid length. [ 755.689304][T31035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6280'. [ 755.764344][T31036] netlink: 'syz.0.6278': attribute type 1 has an invalid length. [ 755.791445][T30837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.791479][T30837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.791505][T30837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50491 - 0 [ 755.791530][T30837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 755.873475][T31036] bond1: option mode: invalid value (7) [ 755.876014][T31036] bond1 (unregistering): Released all slaves [ 755.991490][ T4935] Bluetooth: hci4: command tx timeout [ 756.415380][T30837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 756.439191][T30837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.440442][T30837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 756.459941][T30837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 756.556195][T30837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 756.578776][T30837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 756.579781][T30837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 756.599925][T30837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.819313][T31058] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.821872][T31058] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.218343][T31058] bond_slave_0: left promiscuous mode [ 757.218368][T31058] bond_slave_0: left allmulticast mode [ 757.273001][T31058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.295526][T31058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.604279][T31058] gretap1: left allmulticast mode [ 757.680785][T31073] ipvlan2: entered promiscuous mode [ 757.689852][T31073] bridge0: port 3(ipvlan2) entered blocking state [ 757.691346][T31073] bridge0: port 3(ipvlan2) entered disabled state [ 757.691499][T31073] ipvlan2: entered allmulticast mode [ 757.691517][T31073] bridge0: entered allmulticast mode [ 757.694423][T31073] ipvlan2: left allmulticast mode [ 757.694443][T31073] bridge0: left allmulticast mode [ 757.832544][T13186] wlan0: Trigger new scan to find an IBSS to join [ 757.848262][T31078] veth4: entered allmulticast mode [ 757.885896][T31086] tipc: Started in network mode [ 757.885922][T31086] tipc: Node identity 4e79ae599d8e, cluster identity 4711 [ 757.886068][T31086] tipc: Enabled bearer , priority 0 [ 757.887281][T31091] syzkaller0: entered promiscuous mode [ 757.887298][T31091] syzkaller0: entered allmulticast mode [ 757.922170][T10085] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.922205][T10085] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.935062][T31085] tipc: Resetting bearer [ 758.040698][T31085] tipc: Disabling bearer [ 758.073498][ T4935] Bluetooth: hci4: command tx timeout [ 758.081095][T13186] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.081127][T13186] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.081165][T13186] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.081190][T13186] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.081225][T13186] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.081249][T13186] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.447731][T30837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.493818][T30837] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.513524][T31112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6292'. [ 758.513548][T31112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6292'. [ 758.516323][T13191] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.516425][T13191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.580870][T13197] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.580969][T13197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.931403][T31134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6297'. [ 758.945168][ T4935] Bluetooth: hci1: SCO packet too small [ 758.949909][T31130] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6297'. [ 759.227203][T31145] bond1: option updelay: invalid value (18446744073709518847) [ 759.227230][T31145] bond1: option updelay: allowed values 0 - 2147483647 [ 759.256044][T31145] bond1 (unregistering): Released all slaves [ 759.557235][T31165] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 759.557274][T31165] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 759.557387][T31165] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 759.642874][T31157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6301'. [ 759.713539][T30837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.021949][T31178] bond4 (unregistering): Released all slaves [ 760.257280][T31192] ip_tables: iptables: counters copy to user failed while replacing table [ 760.493622][T30837] veth0_vlan: entered promiscuous mode [ 760.499850][T31204] netlink: 480 bytes leftover after parsing attributes in process `syz.3.6312'. [ 760.547916][T30837] veth1_vlan: entered promiscuous mode [ 760.742383][T30837] veth0_macvtap: entered promiscuous mode [ 760.767150][T30837] veth1_macvtap: entered promiscuous mode [ 760.792995][T13191] wlan0: Trigger new scan to find an IBSS to join [ 760.845679][T30837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.874429][T30837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.943545][T13191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.944440][T13191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.944480][T13191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.944512][T13191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.268772][T13191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.268796][T13191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.450095][T10085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.450117][T10085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.662908][T31229] batman_adv: batadv0: Adding interface: dummy0 [ 761.662926][T31229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.662957][T31229] batman_adv: batadv0: Interface activated: dummy0 [ 761.668233][T13197] IPVS: starting estimator thread 0... [ 761.714066][T31229] batadv0: mtu less than device minimum [ 761.716840][T31229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.719048][T31229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.720386][T31229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.721735][T31229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.723101][T31229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.724514][T31229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.725951][T31229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.727300][T31229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.809840][T31232] IPVS: using max 29 ests per chain, 69600 per kthread [ 762.051038][T31242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6323'. [ 762.337763][T31255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6329'. [ 762.337788][T31255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6329'. [ 762.377532][T31257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6328'. [ 762.576922][T31264] xt_recent: Unsupported userspace flags (000000c5) [ 762.582974][T31264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6331'. [ 762.607665][T31264] veth0_to_bridge: entered promiscuous mode [ 762.609035][T31264] macvlan3: entered promiscuous mode [ 762.623263][T31264] veth0_to_bridge: left promiscuous mode [ 762.708296][T31268] netlink: 'syz.0.6333': attribute type 1 has an invalid length. [ 762.746854][T31269] netlink: 'syz.0.6333': attribute type 1 has an invalid length. [ 762.978336][T31285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6336'. [ 763.850721][ T8961] wlan0: Trigger new scan to find an IBSS to join [ 764.224549][T31329] netlink: 'syz.3.6348': attribute type 29 has an invalid length. [ 765.946900][T31401] netlink: 'syz.4.6358': attribute type 1 has an invalid length. [ 765.946924][T31401] netlink: 'syz.4.6358': attribute type 1 has an invalid length. [ 766.175394][T31410] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6360'. [ 766.177670][T31410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6360'. [ 766.666748][T13191] wlan0: Creating new IBSS network, BSSID aa:35:6e:c9:65:64 [ 767.146890][T31429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6362'. [ 767.160115][T31424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 767.211781][T31424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6362'. [ 767.211806][T31424] tipc: Invalid UDP bearer configuration [ 767.211847][T31424] tipc: Enabling of bearer rejected, failed to enable media [ 767.967145][T31476] netlink: 'syz.0.6371': attribute type 2 has an invalid length. [ 768.079161][T31476] ´: entered promiscuous mode [ 768.626481][T31477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6370'. [ 768.804724][T31469] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 769.160182][ T8961] IPVS: starting estimator thread 0... [ 769.184201][T31515] netlink: 'syz.0.6378': attribute type 10 has an invalid length. [ 769.224278][T31515] netlink: 'syz.0.6378': attribute type 10 has an invalid length. [ 769.229102][T31515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 769.248328][T31516] IPVS: using max 31 ests per chain, 74400 per kthread [ 769.321206][T31515] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 769.494460][T31523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6379'. [ 770.411999][T31585] netlink: 'syz.1.6389': attribute type 1 has an invalid length. [ 770.669280][T31606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6394'. [ 771.049460][T31620] netlink: 'syz.4.6393': attribute type 15 has an invalid length. [ 771.244820][T31627] IPv6: sit1: Disabled Multicast RS [ 771.356621][T31629] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 771.685276][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6400'. [ 771.739371][T31635] syzkaller1: entered promiscuous mode [ 771.739406][T31635] syzkaller1: entered allmulticast mode [ 772.005675][T31639] ip6tnl1: entered promiscuous mode [ 772.791499][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 772.791796][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 772.825953][T31676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6413'. [ 772.836048][T31675] netlink: 'syz.0.6414': attribute type 1 has an invalid length. [ 772.963596][T31672] net_ratelimit: 12 callbacks suppressed [ 772.963617][T31672] netlink: Failed to add â—k\ helper -22 [ 772.963664][T31672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.043096][T31685] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 773.186381][T31704] netlink: 'syz.2.6421': attribute type 2 has an invalid length. [ 773.208619][T31704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6421'. [ 773.255986][T31712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6423'. [ 773.264802][T31706] netlink: 'syz.3.6423': attribute type 23 has an invalid length. [ 773.265119][T31706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6423'. [ 773.310043][T31715] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6424'. [ 773.312935][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6424'. [ 773.967908][T31747] syzkaller1: entered promiscuous mode [ 773.967935][T31747] syzkaller1: entered allmulticast mode [ 774.013235][T31746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6431'. [ 774.139385][T10083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.139408][T10083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.152807][T31759] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6436'. [ 774.213294][T31764] ip_tables: iptables: counters copy to user failed while replacing table [ 774.213679][T31764] ip_tables: iptables: counters copy to user failed while replacing table [ 774.214010][T31764] ip_tables: iptables: counters copy to user failed while replacing table [ 774.214387][T31764] ip_tables: iptables: counters copy to user failed while replacing table [ 774.220271][T31764] ip_tables: iptables: counters copy to user failed while replacing table [ 774.220668][T31764] ip_tables: iptables: counters copy to user failed while replacing table [ 774.278506][T31764] ip_tables: iptables: counters copy to user failed while replacing table [ 774.280417][T31764] ip_tables: iptables: counters copy to user failed while replacing table [ 774.477744][T31782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6442'. [ 774.521742][T31784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6443'. [ 774.549243][T31776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 774.577804][T31776] bond1: (slave macvlan2): making interface the new active one [ 774.590702][T31776] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 774.838567][T31790] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.839223][T31790] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.860285][T31803] netlink: 'syz.3.6445': attribute type 11 has an invalid length. [ 774.879152][T31790] batman_adv: batadv0: Interface deactivated: dummy0 [ 775.009299][T31790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.027019][T31790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.275577][ T8961] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.285661][ T8961] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.287405][ T8961] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.287445][ T8961] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.406767][T31814] netlink: 'syz.4.6451': attribute type 3 has an invalid length. [ 775.639092][T31829] pim6reg1: entered promiscuous mode [ 775.639116][T31829] pim6reg1: entered allmulticast mode [ 775.837932][T31824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 775.882470][T31824] bond3 (unregistering): Released all slaves [ 775.931739][T31840] veth4: entered allmulticast mode [ 776.064357][T31843] veth6: entered allmulticast mode [ 777.145227][T31899] netlink: 'syz.2.6466': attribute type 27 has an invalid length. [ 777.584210][T31930] syzkaller0: entered promiscuous mode [ 777.584233][T31930] syzkaller0: entered allmulticast mode [ 778.134992][T31954] __nla_validate_parse: 24 callbacks suppressed [ 778.135013][T31954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6478'. [ 778.586025][T31978] block nbd0: reconnected socket [ 778.614955][T10073] veth1_to_bond: left allmulticast mode [ 778.614982][T10073] veth1_to_bond: left promiscuous mode [ 778.615202][T10073] bridge0: port 3(veth1_to_bond) entered disabled state [ 778.646329][T10073] bridge_slave_1: left allmulticast mode [ 778.646357][T10073] bridge_slave_1: left promiscuous mode [ 778.646566][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.675822][T10073] bridge_slave_0: left allmulticast mode [ 778.675856][T10073] bridge_slave_0: left promiscuous mode [ 778.676051][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.402314][ T4935] block nbd0: Receive control failed (result -32) [ 779.516318][T10073] bond12 (unregistering): (slave gretap2): Releasing active interface [ 779.548940][T10073] bond10 (unregistering): (slave gretap1): Releasing active interface [ 779.829812][T10073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.841496][T10073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.846357][T10073] bond0 (unregistering): Released all slaves [ 779.873179][T10073] bond1 (unregistering): Released all slaves [ 779.880376][T10073] bond2 (unregistering): Released all slaves [ 779.900156][T10073] bond3 (unregistering): Released all slaves [ 779.925024][T10073] bond4 (unregistering): Released all slaves [ 779.939619][T10073] bond5 (unregistering): Released all slaves [ 779.957061][T10073] bond6 (unregistering): Released all slaves [ 779.977089][T10073] bond7 (unregistering): Released all slaves [ 779.991487][T10073] bond8 (unregistering): Released all slaves [ 779.998947][T10073] bond9 (unregistering): Released all slaves [ 780.020175][T10073] bond10 (unregistering): Released all slaves [ 780.039538][T10073] bond11 (unregistering): Released all slaves [ 780.053822][T10073] bond12 (unregistering): Released all slaves [ 780.068064][T10073] bond13 (unregistering): (slave veth13): Releasing backup interface [ 780.069400][T10073] bond13 (unregistering): Released all slaves [ 780.150610][T16909] batman_adv: batadv0: Interface deactivated: vlan2 [ 780.305870][T10073] ovs-s!!: left promiscuous mode [ 780.472239][T10073] : left promiscuous mode [ 780.586059][T10073] ovs-dp0: left promiscuous mode [ 780.745992][T10073] tipc: Left network mode [ 780.765740][T32012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 780.766061][T32012] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 780.966099][T32054] net_ratelimit: 25 callbacks suppressed [ 780.966119][T32054] ip_tables: iptables: counters copy to user failed while replacing table [ 781.113049][T32012] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 781.113071][T32012] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 781.218397][T32012] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 781.218420][T32012] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 781.255031][T32012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 781.255053][T32012] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 781.314090][T32012] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 781.314117][T32012] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 781.699895][T32077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6502'. [ 781.754623][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 781.797733][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 782.400569][T32111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6513'. [ 782.452396][T32118] Bluetooth: MGMT ver 1.23 [ 782.554856][T32122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6513'. [ 782.769992][T10073] batman_adv: batadv0: Removing interface: vlan2 [ 782.928077][T32132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6520'. [ 783.120510][T32134] xt_bpf: check failed: parse error [ 783.194408][T32148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.219946][T32151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6519'. [ 783.750161][T32127] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 783.812714][T32143] netlink: 'syz.2.6520': attribute type 5 has an invalid length. [ 783.812738][T32143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6520'. [ 783.862189][T32156] netlink: 'syz.4.6524': attribute type 1 has an invalid length. [ 783.864172][T32157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6524'. [ 783.953084][T32159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6524'. [ 783.957604][T32156] bond2: entered promiscuous mode [ 783.959314][T32156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 784.007413][T32159] bond2 (unregistering): Released all slaves [ 784.064777][T32163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6526'. [ 784.064804][T32163] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 784.065348][T32163] x_tables: duplicate underflow at hook 1 [ 784.226691][T32164] x_tables: ip_tables: osf match: only valid for protocol 6 [ 784.252308][T32173] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6530'. [ 784.256275][T32173] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6530'. [ 784.346367][T10073] IPVS: stop unused estimator thread 0... [ 784.628699][T32189] netlink: set zone limit has 4 unknown bytes [ 784.859378][T32201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6539'. [ 784.865106][T32205] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6539'. [ 784.869657][T32203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6540'. [ 784.979806][T32214] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 785.176843][T32222] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 785.176961][T32222] syzkaller1: linktype set to 776 [ 785.299871][T32226] netlink: 'syz.3.6547': attribute type 1 has an invalid length. [ 785.299899][T32226] NCSI netlink: No device for ifindex 0 [ 785.442421][T32226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 785.470665][T32238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.483949][T32238] bond3: (slave bond0): making interface the new active one [ 785.485351][T32238] bond3: (slave bond0): Enslaving as an active interface with an up link [ 785.485471][T32239] bond_slave_0: entered promiscuous mode [ 785.485488][T32239] bond_slave_0: entered allmulticast mode [ 785.485659][T32239] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 785.856011][T32266] syzkaller0: entered promiscuous mode [ 785.856036][T32266] syzkaller0: entered allmulticast mode [ 785.876810][T32265] syzkaller1: entered promiscuous mode [ 785.876833][T32265] syzkaller1: entered allmulticast mode [ 786.008230][T32277] netlink: 'syz.3.6561': attribute type 4 has an invalid length. [ 786.149015][T32285] syzkaller0: entered promiscuous mode [ 786.151984][T32285] syzkaller0: entered allmulticast mode [ 786.722206][T32309] ip_tables: iptables: counters copy to user failed while replacing table [ 786.840785][T32314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 786.846710][T32314] bond2: (slave macvlan2): making interface the new active one [ 786.872636][T32314] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 786.872777][T14757] bond_slave_0: entered promiscuous mode [ 786.872809][T14757] bond_slave_1: entered promiscuous mode [ 786.886333][T32306] bond2: option mode: unable to set because the bond device has slaves [ 787.019611][T32323] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 787.340346][T32329] ip6gretap0 speed is unknown, defaulting to 1000 [ 787.375108][T32321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.708445][T32347] syzkaller1: entered promiscuous mode [ 787.708468][T32347] syzkaller1: entered allmulticast mode [ 787.928812][T32355] ip_tables: iptables: counters copy to user failed while replacing table [ 788.018751][T32361] sctp: [Deprecated]: syz.1.6575 (pid 32361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.018751][T32361] Use struct sctp_sack_info instead [ 788.365139][T32372] ip6tnl2: entered promiscuous mode [ 789.235898][T32399] netlink: 'syz.4.6582': attribute type 1 has an invalid length. [ 789.235920][T32399] __nla_validate_parse: 13 callbacks suppressed [ 789.235932][T32399] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6582'. [ 789.259896][T32409] netlink: 'syz.4.6582': attribute type 1 has an invalid length. [ 789.259919][T32409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6582'. [ 789.554049][T32420] xt_l2tp: invalid flags combination: 8 [ 789.748714][T32432] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6587'. [ 789.766602][T10073] IPVS: starting estimator thread 0... [ 789.872456][T32434] IPVS: using max 32 ests per chain, 76800 per kthread [ 789.967587][T32444] bridge1: entered promiscuous mode [ 789.967602][T32444] bridge1: entered allmulticast mode [ 790.215102][T32454] gretap1: entered allmulticast mode [ 790.527058][T32469] syzkaller0: entered promiscuous mode [ 790.527080][T32469] syzkaller0: entered allmulticast mode [ 790.551878][T32469] tipc: Started in network mode [ 790.551910][T32469] tipc: Node identity 8a98954c8736, cluster identity 4711 [ 790.553016][T32472] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 790.553047][T32472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.564172][T32469] tipc: Enabled bearer , priority 0 [ 790.885725][T32483] netlink: 'syz.0.6598': attribute type 1 has an invalid length. [ 791.157461][T32472] batman_adv: batadv0: Removing interface: dummy0 [ 791.160674][T32463] rdma_rxe: rxe_newlink: failed to add netdevsim0 [ 791.290170][T32479] tipc: Resetting bearer [ 791.417703][T32483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 791.443264][T32490] netlink: 'syz.3.6599': attribute type 1 has an invalid length. [ 791.460258][T32484] bond2: entered allmulticast mode [ 791.460706][T32484] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6598'. [ 791.475721][T32485] bond2: (slave ip6gretap1): making interface the new active one [ 791.475745][T32485] ip6gretap1: entered allmulticast mode [ 791.484075][T32485] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 791.484528][T32462] tipc: Resetting bearer [ 791.559509][T32462] tipc: Disabling bearer [ 791.603525][T32489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6599'. [ 791.604825][T32495] nbd: socks must be embedded in a SOCK_ITEM attr [ 791.659012][T32495] openvswitch: netlink: Unknown key attributes 2 [ 791.668503][T32495] netlink: 'syz.2.6600': attribute type 1 has an invalid length. [ 791.668526][T32495] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6600'. [ 791.668970][T32498] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 791.929936][T32518] netlink: zone id is out of range [ 791.929963][T32518] netlink: zone id is out of range [ 791.929972][T32518] netlink: zone id is out of range [ 791.929980][T32518] netlink: zone id is out of range [ 791.929989][T32518] netlink: zone id is out of range [ 791.929997][T32518] netlink: zone id is out of range [ 791.930005][T32518] netlink: zone id is out of range [ 791.930013][T32518] netlink: zone id is out of range [ 791.930022][T32518] netlink: zone id is out of range [ 791.930030][T32518] netlink: zone id is out of range [ 792.240766][T32522] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.241462][T32522] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.250096][T32522] bond_slave_0: left promiscuous mode [ 792.250125][T32522] bond_slave_1: left promiscuous mode [ 792.331694][T32522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.337952][T32522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.451660][ T8961] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.452025][T10073] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.452063][T10073] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.452096][T10073] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.069893][T32563] netlink: 'syz.0.6619': attribute type 1 has an invalid length. [ 793.069919][T32563] netlink: 'syz.0.6619': attribute type 4 has an invalid length. [ 793.069933][T32563] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6619'. [ 793.073454][T32563] netlink: 'syz.0.6619': attribute type 1 has an invalid length. [ 793.073474][T32563] netlink: 'syz.0.6619': attribute type 4 has an invalid length. [ 793.073486][T32563] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6619'. [ 793.408644][T32578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6623'. [ 793.419642][T32578] syzkaller1: entered promiscuous mode [ 793.419665][T32578] syzkaller1: entered allmulticast mode [ 793.674654][T32596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6626'. [ 794.749186][T32641] __nla_validate_parse: 5 callbacks suppressed [ 794.749206][T32641] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6639'. [ 794.762779][T32639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6638'. [ 794.770335][T32639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6638'. [ 795.002074][T32657] batadv_slave_0: entered promiscuous mode [ 795.019848][T32659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6643'. [ 795.039924][T32656] batadv_slave_0: left promiscuous mode [ 796.451839][T32721] netlink: 524 bytes leftover after parsing attributes in process `syz.3.6656'. [ 796.505556][T32722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6656'. [ 796.796155][T32727] debugfs: '!' already exists in 'ieee80211' [ 797.083453][T32750] xt_TCPMSS: Only works on TCP SYN packets [ 797.123166][T32753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6665'. [ 797.173256][T32753] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6665'. [ 797.190113][T32751] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 797.410552][T32758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6668'. [ 797.650021][ T303] syzkaller0: entered promiscuous mode [ 797.650048][ T303] syzkaller0: entered allmulticast mode [ 797.676281][ T303] tc action pedit 'at' offset 5 out of bounds [ 798.227796][ T328] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6679'. [ 798.290737][ T327] syzkaller0: entered promiscuous mode [ 798.290761][ T327] syzkaller0: entered allmulticast mode [ 798.336222][ T327] tipc: Started in network mode [ 798.336256][ T327] tipc: Node identity 3a7e703179b, cluster identity 4711 [ 798.336568][ T327] tipc: Enabled bearer , priority 0 [ 798.361476][ T324] tipc: Resetting bearer [ 798.581596][ T347] net_ratelimit: 337 callbacks suppressed [ 798.581617][ T347] ip_tables: iptables: counters copy to user failed while replacing table [ 798.737907][ T324] tipc: Disabling bearer [ 799.023715][ T361] ip6gretap0 speed is unknown, defaulting to 1000 [ 799.362273][ T360] ip6gretap0 speed is unknown, defaulting to 1000 [ 799.529289][ T374] bond5: entered promiscuous mode [ 799.529886][ T374] 8021q: adding VLAN 0 to HW filter on device bond5 [ 799.696680][ T377] bond1: ARP target 9.0.0.0 is already present [ 799.696706][ T377] bond1: option arp_ip_target: invalid value (9) [ 799.698242][ T377] bond1 (unregistering): Released all slaves [ 800.372808][ T411] __nla_validate_parse: 2 callbacks suppressed [ 800.372827][ T411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6704'. [ 800.372841][ T411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6704'. [ 800.451298][T10083] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.462176][T10083] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.462217][T10083] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.462249][T10083] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.778121][ T433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6709'. [ 800.855040][ T440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 801.249561][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6714'. [ 801.280969][ T451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6714'. [ 801.327197][ T451] ip_tables: iptables: counters copy to user failed while replacing table [ 801.399698][ T457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6714'. [ 801.629894][ T462] hsr0: entered promiscuous mode [ 801.953301][ T461] hsr0: left promiscuous mode [ 801.954909][ T473] bond0: Device is already in use. [ 801.957976][ T473] bond0: Device is already in use. [ 801.965369][ T475] bond0: Device is already in use. [ 801.967056][ T476] bond0: Device is already in use. [ 802.143251][ T479] netlink: 'syz.0.6722': attribute type 16 has an invalid length. [ 802.143274][ T479] netlink: 'syz.0.6722': attribute type 17 has an invalid length. [ 802.245605][ T479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.260038][ T479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.324203][ T479] bond_slave_0: left promiscuous mode [ 802.324229][ T479] bond_slave_0: left allmulticast mode [ 802.332751][ T479] bond_slave_1: entered promiscuous mode [ 802.358306][ T479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.368505][ T479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.387126][ T479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 802.387152][ T479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 802.399621][ T479] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 802.584033][ T483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6723'. [ 802.584423][ T3110] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 802.616780][T13186] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.616884][T13186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.620451][T13186] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.620558][T13186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.373033][ T530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6732'. [ 805.578040][ T531] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6731'. [ 805.807532][ T543] ip6gretap0 speed is unknown, defaulting to 1000 [ 806.111085][ T564] openvswitch: netlink: Flow actions attr not present in new flow. [ 806.140080][ T564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 806.862273][ T575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6742'. [ 806.985321][ T586] ip_tables: iptables: counters copy to user failed while replacing table [ 807.036276][ T575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6742'. [ 807.036306][ T575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6742'. [ 807.112512][ T574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6742'. [ 807.337212][ T600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6748'. [ 807.505898][ T604] tipc: Cannot configure node identity twice [ 807.509831][ T604] tipc: Enabling of bearer rejected, failed to enable media [ 807.528450][ T604] tipc: Enabling of bearer rejected, failed to enable media [ 807.753910][ T614] openvswitch: netlink: Message has -2 unknown bytes. [ 807.753944][ T614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.140336][ T621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6754'. [ 808.197639][ T625] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.6755'. [ 808.219357][ T608] ip_tables: iptables: counters copy to user failed while replacing table [ 808.299078][ T628] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 808.457348][ T628] bond3 (unregistering): Released all slaves [ 808.540651][ T639] ip_tables: iptables: counters copy to user failed while replacing table [ 808.762989][ T654] syzkaller0: entered promiscuous mode [ 808.763011][ T654] syzkaller0: entered allmulticast mode [ 809.216130][ T676] netlink: 'syz.1.6767': attribute type 1 has an invalid length. [ 809.254663][ T677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6768'. [ 809.623176][ T693] pim6reg1: entered promiscuous mode [ 809.623199][ T693] pim6reg1: entered allmulticast mode [ 809.867902][ T702] netlink: 'syz.2.6777': attribute type 16 has an invalid length. [ 809.867924][ T702] netlink: 'syz.2.6777': attribute type 17 has an invalid length. [ 809.934485][ T702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.936153][ T702] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.940377][ T702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.053965][ T702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.059354][ T702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.090121][ T702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 810.090148][ T702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.118367][ T702] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 810.160690][T13194] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.160872][T13194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.184170][T13194] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.184298][T13194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.575570][ T733] bond3: (slave bond0): Releasing active interface [ 810.631391][ T733] bridge_slave_0: left allmulticast mode [ 810.631416][ T733] bridge_slave_0: left promiscuous mode [ 810.631911][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.663837][ T733] bridge_slave_1: left allmulticast mode [ 810.663864][ T733] bridge_slave_1: left promiscuous mode [ 810.665242][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.699910][ T733] bond0: (slave bond_slave_0): Releasing backup interface [ 810.719033][ T733] bond0: (slave bond_slave_1): Releasing backup interface [ 810.749227][ T733] team0: Port device team_slave_0 removed [ 810.773107][ T733] team0: Port device team_slave_1 removed [ 810.775149][ T733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.775171][ T733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.779007][ T733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.779026][ T733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.782880][ T733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 810.814595][ T732] team0: Mode changed to "broadcast" [ 810.856922][ T739] bridge1: entered promiscuous mode [ 810.856985][ T739] bridge1: entered allmulticast mode [ 810.867653][ T745] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 810.914726][ T747] syzkaller0: entered promiscuous mode [ 810.914750][ T747] syzkaller0: entered allmulticast mode [ 811.044143][ T761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6789'. [ 811.261485][ T772] netlink: 'syz.1.6791': attribute type 7 has an invalid length. [ 811.261507][ T772] netlink: 'syz.1.6791': attribute type 3 has an invalid length. [ 811.261521][ T772] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6791'. [ 811.767738][ T791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.783857][ T792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.838780][ T797] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6796'. [ 812.064353][ T819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6799'. [ 812.112660][ T819] macvtap1: entered allmulticast mode [ 812.112686][ T819] veth0_to_bridge: entered allmulticast mode [ 812.566196][ T841] IPv6: NLM_F_CREATE should be specified when creating new route [ 813.026950][ T865] xt_nfacct: accounting object `' does not exist [ 813.035980][ T864] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6810'. [ 813.055569][ T865] syzkaller0: entered promiscuous mode [ 813.055594][ T865] syzkaller0: entered allmulticast mode [ 813.158971][ T877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.186256][ T877] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 814.109845][ T888] syzkaller1: entered promiscuous mode [ 814.109868][ T888] syzkaller1: entered allmulticast mode [ 814.685255][ T932] syzkaller0: entered promiscuous mode [ 814.685280][ T932] syzkaller0: entered allmulticast mode [ 814.752416][ T932] simple: /dev/video#_3 [ 814.752436][ T932] simple: /dev/video#_6 [ 814.752446][ T932] simple: /dev/video#_9 [ 814.752457][ T932] simple: /dev/video#_12 [ 814.752467][ T932] simple: /dev/video#_15 [ 814.752477][ T932] simple: /dev/video#_18 [ 814.752487][ T932] simple: /dev/video#_21 [ 814.752496][ T932] simple: /dev/video#_24 [ 814.752506][ T932] simple: /dev/video#_27 [ 814.752516][ T932] simple: /dev/video#_30 [ 814.752527][ T932] simple: /dev/video#_33 [ 814.752537][ T932] simple: /dev/video#_36 [ 814.752547][ T932] simple: /dev/video#_39 [ 814.752556][ T932] simple: /dev/video#_42 [ 814.752565][ T932] simple: /dev/video#_45 [ 814.752574][ T932] simple: /dev/video#_48 [ 814.752584][ T932] simple: /dev/video#_51 [ 814.752593][ T932] simple: /dev/video#_54 [ 814.752602][ T932] simple: /dev/video#_57 [ 814.752612][ T932] simple: /dev/video#_60 [ 814.752621][ T932] simple: /dev/video#_63 [ 814.752629][ T932] simple: /dev/video#_66 [ 814.752639][ T932] simple: /dev/video#_69 [ 814.752648][ T932] simple: /dev/video#_72 [ 814.752658][ T932] simple: /dev/video#_75 [ 814.752668][ T932] simple: /dev/video#_78 [ 814.752677][ T932] simple: /dev/video#_81 [ 814.752686][ T932] simple: /dev/video#_84 [ 814.752695][ T932] simple: /dev/video#_87 [ 814.752704][ T932] simple: /dev/video#_90 [ 814.752714][ T932] simple: /dev/video#_93 [ 814.752724][ T932] simple: /dev/video#_96 [ 814.752735][ T932] TC_ACT_REPEAT abuse ? [ 815.012127][ T949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6824'. [ 815.047914][ T952] netlink: 'syz.3.6826': attribute type 1 has an invalid length. [ 815.176177][ T952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6826'. [ 815.891397][ T988] nbd: must specify a size in bytes for the device [ 815.928740][ T988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6835'. [ 815.951164][ T988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6835'. [ 815.951187][ T988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6835'. [ 816.193971][ T962] xt_policy: output policy not valid in PREROUTING and INPUT [ 816.436779][ T1014] tc_dump_action: action bad kind [ 816.853365][ T1033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6845'. [ 817.006436][ T1049] netlink: 'syz.2.6841': attribute type 4 has an invalid length. [ 817.006461][ T1049] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6841'. [ 817.217325][ T1049] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 817.217638][ T1027] syzkaller1: entered promiscuous mode [ 817.217658][ T1027] syzkaller1: entered allmulticast mode [ 817.391165][ T1057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6848'. [ 817.980361][ T1101] syzkaller1: entered promiscuous mode [ 817.980383][ T1101] syzkaller1: entered allmulticast mode [ 817.993750][ T1080] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6851'. [ 818.002224][ T1080] nbd: must specify at least one socket [ 818.045775][ T1080] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 818.047272][ T1080] bond3 (unregistering): Released all slaves [ 818.173447][ T1109] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6861'. [ 818.177144][ T1109] 0·: renamed from hsr0 [ 818.187385][ T1109] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 818.187411][ T1109] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 818.190573][ T1109] 0·: entered allmulticast mode [ 818.190592][ T1109] hsr_slave_0: entered allmulticast mode [ 818.190609][ T1109] hsr_slave_1: entered allmulticast mode [ 818.195734][ T1109] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 818.275769][ T1111] syzkaller1: entered promiscuous mode [ 818.275791][ T1111] syzkaller1: entered allmulticast mode [ 818.348272][ T1112] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6862'. [ 818.355251][ T1112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6862'. [ 818.450479][ T1116] netlink: 'syz.4.6864': attribute type 1 has an invalid length. [ 818.467409][ T1116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 818.486872][ T1118] netlink: zone id is out of range [ 818.486885][ T1118] netlink: zone id is out of range [ 818.486892][ T1118] netlink: zone id is out of range [ 818.486899][ T1118] netlink: zone id is out of range [ 818.486906][ T1118] netlink: zone id is out of range [ 818.486913][ T1118] netlink: zone id is out of range [ 818.486923][ T1118] netlink: zone id is out of range [ 818.486930][ T1118] netlink: zone id is out of range [ 818.486938][ T1118] netlink: zone id is out of range [ 818.580059][ T1116] bond3: (slave veth5): Enslaving as an active interface with a down link [ 818.595871][ T1123] bond3: (slave macvlan0): Enslaving as an active interface with a down link [ 818.744515][ T1130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6870'. [ 818.749250][ T1133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6871'. [ 818.865957][ T1138] veth0_macvtap: left promiscuous mode [ 819.111572][ T1149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6874'. [ 819.550189][ T1163] ovs-s: entered promiscuous mode [ 819.743928][ T1166] syzkaller1: entered promiscuous mode [ 819.743955][ T1166] syzkaller1: entered allmulticast mode [ 819.884533][ T1181] netlink: 'syz.4.6880': attribute type 2 has an invalid length. [ 820.080866][T14744] page_pool_release_retry() stalled pool shutdown: id 323, 1 inflight 60 sec [ 820.497398][ T5280] veth0_macvtap: entered promiscuous mode [ 820.733831][ T1239] syz.1.6893: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 820.733905][ T1239] CPU: 1 UID: 0 PID: 1239 Comm: syz.1.6893 Not tainted syzkaller #0 PREEMPT(full) [ 820.733954][ T1239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 820.733966][ T1239] Call Trace: [ 820.733974][ T1239] [ 820.733984][ T1239] dump_stack_lvl+0xe8/0x150 [ 820.734019][ T1239] warn_alloc+0x24d/0x270 [ 820.734051][ T1239] ? kasan_save_track+0x4f/0x80 [ 820.734073][ T1239] ? kasan_save_track+0x3e/0x80 [ 820.734098][ T1239] ? __pfx_warn_alloc+0x10/0x10 [ 820.734118][ T1239] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 820.734146][ T1239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.734186][ T1239] __vmalloc_node_range_noprof+0x127/0x1540 [ 820.734241][ T1239] ? rcu_is_watching+0x16/0xb0 [ 820.734273][ T1239] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 820.734304][ T1239] ? __kmalloc_cache_noprof+0x321/0x600 [ 820.734326][ T1239] ? __kmalloc_cache_noprof+0x14d/0x600 [ 820.734347][ T1239] ? xskq_create+0x56/0x220 [ 820.734378][ T1239] xskq_create+0x148/0x220 [ 820.734406][ T1239] ? xsk_init_queue+0x8a/0xe0 [ 820.734435][ T1239] xsk_init_queue+0x8a/0xe0 [ 820.734463][ T1239] xsk_setsockopt+0x5e0/0x960 [ 820.734492][ T1239] ? __pfx_xsk_setsockopt+0x10/0x10 [ 820.734518][ T1239] ? __pfx_aa_sk_perm+0x10/0x10 [ 820.734546][ T1239] ? aa_sock_opt_perm+0x142/0x1e0 [ 820.734579][ T1239] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 820.734608][ T1239] ? __pfx_xsk_setsockopt+0x10/0x10 [ 820.734636][ T1239] do_sock_setsockopt+0x17c/0x1b0 [ 820.734669][ T1239] __x64_sys_setsockopt+0x13d/0x1b0 [ 820.734702][ T1239] do_syscall_64+0x166/0x520 [ 820.734732][ T1239] ? trace_irq_disable+0x3b/0x140 [ 820.734754][ T1239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.734776][ T1239] ? clear_bhb_loop+0x70/0xc0 [ 820.734803][ T1239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.734824][ T1239] RIP: 0033:0x7fe1fc39e159 [ 820.734844][ T1239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.734863][ T1239] RSP: 002b:00007fe1fd260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 820.734885][ T1239] RAX: ffffffffffffffda RBX: 00007fe1fc625fa0 RCX: 00007fe1fc39e159 [ 820.734902][ T1239] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009 [ 820.734916][ T1239] RBP: 00007fe1fc43506b R08: 0000000000000004 R09: 0000000000000000 [ 820.734930][ T1239] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.734944][ T1239] R13: 00007fe1fc626038 R14: 00007fe1fc625fa0 R15: 00007ffdf041c1d8 [ 820.734983][ T1239] [ 820.781296][ T1239] Mem-Info: [ 820.781312][ T1239] active_anon:5931 inactive_anon:0 isolated_anon:0 [ 820.781312][ T1239] active_file:16 inactive_file:44092 isolated_file:0 [ 820.781312][ T1239] unevictable:0 dirty:181 writeback:0 [ 820.781312][ T1239] slab_reclaimable:13593 slab_unreclaimable:130388 [ 820.781312][ T1239] mapped:29859 shmem:654 pagetables:1527 [ 820.781312][ T1239] sec_pagetables:0 bounce:0 [ 820.781312][ T1239] kernel_misc_reclaimable:0 [ 820.781312][ T1239] free:1287456 free_pcp:9055 free_cma:0 [ 820.781370][ T1239] Node 0 active_anon:23724kB inactive_anon:0kB active_file:64kB inactive_file:176160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119436kB dirty:724kB writeback:0kB shmem:2616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17456kB pagetables:5956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 820.781428][ T1239] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 820.781493][ T1239] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.781710][ T1239] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 820.781748][ T1239] Node 0 DMA32 free:1199028kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23724kB inactive_anon:0kB active_file:64kB inactive_file:176160kB unevictable:0kB writepending:724kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:36220kB local_pcp:15440kB free_cma:0kB [ 820.781812][ T1239] lowmem_reserve[]: 0 0 0 0 0 [ 820.781846][ T1239] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.781911][ T1239] lowmem_reserve[]: 0 0 0 0 0 [ 820.781944][ T1239] Node 1 Normal free:3935436kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.782004][ T1239] lowmem_reserve[]: 0 0 0 0 0 [ 820.782039][ T1239] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 820.782160][ T1239] Node 0 DMA32: 2415*4kB (UME) 1569*8kB (UME) 617*16kB (UME) 1143*32kB (UME) 714*64kB (UME) 434*128kB (UME) 300*256kB (UME) 232*512kB (UME) 130*1024kB (UM) 28*2048kB (UM) 157*4096kB (UME) = 1199028kB [ 820.782322][ T1239] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 820.782420][ T1239] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 3*16kB (UM) 4*32kB (UM) 6*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935436kB [ 820.782611][ T1239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 820.782628][ T1239] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 820.782645][ T1239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 820.782663][ T1239] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 820.782680][ T1239] 44758 total pagecache pages [ 820.782689][ T1239] 0 pages in swap cache [ 820.782697][ T1239] Free swap = 124996kB [ 820.782706][ T1239] Total swap = 124996kB [ 820.782714][ T1239] 2097051 pages RAM [ 820.782722][ T1239] 0 pages HighMem/MovableOnly [ 820.782730][ T1239] 428661 pages reserved [ 820.782738][ T1239] 0 pages cma reserved [ 821.857980][ T1280] sock: sock_timestamping_bind_phc: sock not bind to device [ 821.859836][ T1279] syzkaller1: entered promiscuous mode [ 821.859857][ T1279] syzkaller1: entered allmulticast mode [ 822.039928][ T1286] __nla_validate_parse: 12 callbacks suppressed [ 822.039952][ T1286] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6898'. [ 822.084134][ T1286] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6898'. [ 822.084671][ T1286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6898'. [ 822.162373][ T1291] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 822.353877][ T1291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6901'. [ 822.656568][ T1315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6905'. [ 822.879688][ T1324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6908'. [ 822.879713][ T1324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6908'. [ 822.923749][ T1321] netlink: 'syz.4.6907': attribute type 2 has an invalid length. [ 822.923773][ T1321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6907'. [ 822.943427][ T1324] macvtap2: entered allmulticast mode [ 822.943449][ T1324] gretap0: entered allmulticast mode [ 822.985481][ T1319] ip6gretap0 speed is unknown, defaulting to 1000 [ 823.242758][ T1336] netlink: 'syz.1.6911': attribute type 34 has an invalid length. [ 823.242779][ T1336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 823.324523][ T1336] bond4: option lacp_strict: invalid value (16) [ 823.328130][ T1336] bond4 (unregistering): Released all slaves [ 823.369388][ T1348] netlink: 'syz.3.6909': attribute type 1 has an invalid length. [ 823.370427][ T1344] netlink: 'syz.3.6909': attribute type 1 has an invalid length. [ 823.425798][ T1333] bond4: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 823.427936][ T1333] bond4 (unregistering): Released all slaves [ 823.475541][ T1334] bridge_slave_0: entered promiscuous mode [ 823.636485][ T1361] x_tables: duplicate underflow at hook 1 [ 824.042554][ T1380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6922'. [ 824.459905][ T1395] syzkaller0: entered promiscuous mode [ 824.459929][ T1395] syzkaller0: entered allmulticast mode [ 824.639818][ T1402] netlink: 'syz.0.6930': attribute type 1 has an invalid length. [ 824.639868][ T1402] net_ratelimit: 148 callbacks suppressed [ 824.639881][ T1402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.670159][ T1402] xt_cluster_mt_checkentry: 23 callbacks suppressed [ 824.670181][ T1402] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 824.900246][ T1408] netlink: 'syz.2.6932': attribute type 1 has an invalid length. [ 824.906587][ T1407] bridge0: port 3(bond0) entered blocking state [ 824.906820][ T1407] bridge0: port 3(bond0) entered disabled state [ 824.906977][ T1407] bond0: entered allmulticast mode [ 824.907490][ T1407] bond_slave_1: entered allmulticast mode [ 824.907514][ T1407] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 824.938770][ T1407] bond0: left allmulticast mode [ 824.938792][ T1407] bond_slave_1: left allmulticast mode [ 824.938817][ T1407] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 825.290442][ T1426] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 825.486407][ T1445] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 825.770028][ T1452] ip6t_rt: unknown flags 1F [ 826.096967][ T1483] netlink: 'syz.2.6949': attribute type 1 has an invalid length. [ 826.215280][ T1483] bond1: entered promiscuous mode [ 826.219851][ T1483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.281897][ T1483] syzkaller1: entered promiscuous mode [ 826.281921][ T1483] syzkaller1: entered allmulticast mode [ 826.362878][ T1483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.363302][ T1483] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 826.363324][ T1483] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 826.404172][ T1483] bond1: (slave ip6gre1): making interface the new active one [ 826.404197][ T1483] ip6gre1: entered promiscuous mode [ 826.407056][ T1483] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 826.529016][ T1491] bridge0: port 3(veth1_to_bridge) entered blocking state [ 826.529103][ T1491] bridge0: port 3(veth1_to_bridge) entered disabled state [ 826.529257][ T1491] veth1_to_bridge: entered allmulticast mode [ 826.537726][ T1491] veth1_to_bridge: entered promiscuous mode [ 826.537867][ T1491] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 826.540404][ T1491] bridge0: port 3(veth1_to_bridge) entered blocking state [ 826.540499][ T1491] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 826.708645][ T1498] x_tables: ip_tables: osf match: only valid for protocol 6 [ 827.083054][ T1509] xt_CT: No such helper "netbios-ns" [ 827.158118][ T1517] __nla_validate_parse: 8 callbacks suppressed [ 827.158138][ T1517] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6958'. [ 827.158154][ T1517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6958'. [ 827.262030][ T1521] tipc: Enabling of bearer rejected, failed to enable media [ 827.298531][ T1521] tipc: Enabling of bearer rejected, failed to enable media [ 828.173773][ T1571] netlink: 'syz.2.6976': attribute type 1 has an invalid length. [ 828.183336][ T1571] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 828.308556][ T1582] ip6tnl1: entered allmulticast mode [ 828.356941][T13194] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 828.357249][T13194] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 828.360391][ T1571] ip6gretap0 speed is unknown, defaulting to 1000 [ 828.384875][T14757] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 828.442024][T14757] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 828.561527][ T1595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6982'. [ 828.895601][ T1610] netlink: NAT attribute has 1 unknown bytes [ 828.895635][ T1610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.115577][T14744] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 829.175964][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176001][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176026][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176051][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176083][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176109][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176133][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176158][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176183][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176208][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176232][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176363][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176390][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176414][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176438][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176459][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176484][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176508][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176531][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176554][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176577][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176601][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176624][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176647][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176670][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176692][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176716][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176739][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176763][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176786][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176810][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176834][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.176858][ T1628] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20003 [ 829.783555][ T1638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6994'. [ 829.809091][ T1644] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6996'. [ 829.809121][ T1644] netlink: 239 bytes leftover after parsing attributes in process `syz.4.6996'. [ 830.703610][ T1679] lo: entered allmulticast mode [ 831.427463][ T1702] netlink: 'syz.2.7011': attribute type 7 has an invalid length. [ 831.486762][ T1678] lo: left allmulticast mode [ 831.571604][ T1704] x_tables: duplicate underflow at hook 1 [ 831.656654][ T1706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7013'. [ 831.656683][ T1706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7013'. [ 831.701523][ T1707] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7013'. [ 832.151237][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 832.313168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.313780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.314123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.314459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.314818][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.315166][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.315507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.315849][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.316177][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.316565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.236858][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 835.821333][ C1] sched: DL replenish lagged too much [ 837.321009][ C1] net_ratelimit: 18011 callbacks suppressed [ 837.321031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.321124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 837.321502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 837.321922][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 837.322296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 837.322381][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.322668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 837.323048][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 837.323477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 837.323642][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.357352][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 842.330861][ C0] net_ratelimit: 20808 callbacks suppressed [ 842.330884][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 842.331304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 842.331602][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.331682][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 842.331971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.332062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 842.332347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 842.332475][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 842.332847][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 842.333227][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 847.340870][ C0] net_ratelimit: 20155 callbacks suppressed [ 847.340893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 847.340924][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.341294][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 847.341299][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.341681][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 847.341686][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 847.342097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 847.342489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 847.342870][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 847.343017][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.350913][ C0] net_ratelimit: 20709 callbacks suppressed [ 852.350922][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.350935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 852.351305][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 852.351304][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.351683][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 852.351683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 852.352091][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 852.352462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 852.352838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 852.352968][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.077268][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 857.360971][ C0] net_ratelimit: 20613 callbacks suppressed [ 857.360995][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 857.361394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 857.361636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.361780][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 857.362189][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 857.362383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.362575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 857.362771][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 857.362958][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 857.363348][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 862.371054][ C0] net_ratelimit: 20394 callbacks suppressed [ 862.371075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 862.371470][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 862.371489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 862.371842][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 862.371873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 862.372214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 862.372250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 862.372658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 862.373087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 862.373460][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 867.381009][ C0] net_ratelimit: 20381 callbacks suppressed [ 867.381031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 867.381407][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 867.381780][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 867.382107][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 867.382164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 867.382532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 867.382891][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 867.382949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 867.383263][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 867.383324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 872.390836][ C0] net_ratelimit: 19263 callbacks suppressed [ 872.390859][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 872.391109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 872.391457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 872.391600][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 872.391966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 872.392344][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 872.392713][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 872.393106][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 872.393161][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 872.393597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 877.400934][ C0] net_ratelimit: 20944 callbacks suppressed [ 877.400955][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 877.401328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 877.401628][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 877.401718][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 877.402087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 877.402480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.402504][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 877.402844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.402881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 877.403218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 882.411120][ C0] net_ratelimit: 20881 callbacks suppressed [ 882.411143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 882.411566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 882.411882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 882.411964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 882.412349][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 882.412595][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.412733][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 882.412951][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.413124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 882.413307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.156290][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 887.420829][ C0] net_ratelimit: 21008 callbacks suppressed [ 887.420853][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 887.420986][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 887.421245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 887.421617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 887.421744][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.422002][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 887.422115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.422376][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 887.422494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 887.422786][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 892.431107][ C0] net_ratelimit: 21052 callbacks suppressed [ 892.431127][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 892.431509][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 892.431882][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 892.431933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 892.432296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 892.432675][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 892.432721][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.433049][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 892.433112][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.433437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 895.675702][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 897.440813][ C1] net_ratelimit: 20964 callbacks suppressed [ 897.440835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.440960][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 897.441208][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 897.441359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 897.441740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 897.442053][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.442134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 897.442441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.442515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 897.442936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 902.451016][ C0] net_ratelimit: 21010 callbacks suppressed [ 902.451039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 902.451067][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.451424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 902.451508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 902.451792][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 902.452164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 902.452494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.452566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 902.452934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.452940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 905.916529][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 907.461119][ C1] net_ratelimit: 20945 callbacks suppressed [ 907.461136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 907.461141][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 907.461568][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 907.461837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.461981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 907.462190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.462368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 907.462552][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 907.462793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 907.463187][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 912.471030][ C0] net_ratelimit: 21470 callbacks suppressed [ 912.471051][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 912.471475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 912.471479][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 912.471863][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 912.472237][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 912.472625][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 912.472695][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.473001][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 912.473087][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.473378][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 917.481015][ C0] net_ratelimit: 21168 callbacks suppressed [ 917.481039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 917.481450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 917.481498][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.481833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 917.481884][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.482204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 917.482585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 917.482994][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 917.483105][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 917.483365][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 922.490951][ C0] net_ratelimit: 20925 callbacks suppressed [ 922.490975][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 922.491252][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 922.491368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 922.491752][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 922.491990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.492145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 922.492363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.492529][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 922.492745][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 922.492952][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 927.500920][ C1] net_ratelimit: 20824 callbacks suppressed [ 927.500944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 927.501117][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 927.501494][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 927.501768][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.501875][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 927.502140][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.502254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 927.502626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 927.503022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 927.503349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 932.510854][ C1] net_ratelimit: 21423 callbacks suppressed [ 932.510884][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.510940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 932.511272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.511314][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 932.511663][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 932.511735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 932.512113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 932.512493][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.512557][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 932.512888][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.520773][ C0] net_ratelimit: 20458 callbacks suppressed [ 937.520794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 937.521144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 937.521257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.521542][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 937.521611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.521912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 937.522372][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 937.522733][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 937.522813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 937.523153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 938.720769][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 938.823341][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1714/1:b..l [ 938.831273][ C0] rcu: (detected by 0, t=10513 jiffies, g=169785, q=3062 ncpus=2) [ 938.839189][ C0] task:syz.1.7015 state:R running task stack:25896 pid:1714 tgid:1711 ppid:28349 task_flags:0x400140 flags:0x00080002 [ 938.852690][ C0] Call Trace: [ 938.855977][ C0] [ 938.858921][ C0] __schedule+0x17db/0x58f0 [ 938.863456][ C0] ? __lock_acquire+0x747/0x2de0 [ 938.868431][ C0] ? __lock_acquire+0x747/0x2de0 [ 938.873383][ C0] ? __pfx___schedule+0x10/0x10 [ 938.878267][ C0] ? __lock_acquire+0x747/0x2de0 [ 938.883233][ C0] preempt_schedule_irq+0x4b/0x90 [ 938.888278][ C0] irqentry_exit+0x14f/0x910 [ 938.892888][ C0] ? trace_irq_disable+0x3b/0x140 [ 938.897930][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 938.903922][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 938.909219][ C0] Code: ff ff ff e8 b0 9d 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 18 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 92 d9 [ 938.928834][ C0] RSP: 0018:ffffc90004fcf4e0 EFLAGS: 00000292 [ 938.934918][ C0] RAX: 65b767810b402f00 RBX: 0000000000000000 RCX: 0000000000000046 [ 938.942902][ C0] RDX: 00000000105209fd RSI: ffffffff8e688e6a RDI: ffffffff8c6dad80 [ 938.950897][ C0] RBP: ffff88804d41ddc0 R08: ffffffff8177f1df R09: 0000000000000000 [ 938.958877][ C0] R10: ffffc90004fcf618 R11: ffffffff81b2a310 R12: ffffffff8ed5c8a0 [ 938.966856][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 938.974843][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 938.981010][ C0] ? unwind_next_frame+0x8f/0x2550 [ 938.986228][ C0] ? do_arpt_set_ctl+0x81a/0xb50 [ 938.991190][ C0] ? unwind_next_frame+0x8f/0x2550 [ 938.996313][ C0] unwind_next_frame+0xac/0x2550 [ 939.001264][ C0] ? unwind_next_frame+0x8f/0x2550 [ 939.006396][ C0] ? translate_table+0x1747/0x2010 [ 939.011527][ C0] ? unwind_next_frame+0x8f/0x2550 [ 939.016652][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 939.022815][ C0] arch_stack_walk+0x11b/0x150 [ 939.027598][ C0] ? do_arpt_set_ctl+0x81a/0xb50 [ 939.032560][ C0] stack_trace_save+0xa9/0x100 [ 939.037332][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 939.042723][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 939.048208][ C0] save_stack+0x122/0x230 [ 939.052561][ C0] ? __pfx_save_stack+0x10/0x10 [ 939.057426][ C0] ? free_pages_prepare+0x9eb/0xaf0 [ 939.062643][ C0] ? __free_contig_range_common+0x174/0x340 [ 939.068551][ C0] ? free_pages_bulk+0x48/0x120 [ 939.073413][ C0] ? vfree+0x231/0x490 [ 939.077501][ C0] ? translate_table+0x1747/0x2010 [ 939.082631][ C0] ? do_arpt_set_ctl+0x81a/0xb50 [ 939.087598][ C0] ? page_ext_put+0x97/0xc0 [ 939.092121][ C0] __reset_page_owner+0x71/0x1f0 [ 939.097073][ C0] free_pages_prepare+0x9eb/0xaf0 [ 939.102111][ C0] ? free_one_page+0x8e/0x2a0 [ 939.106803][ C0] __free_contig_range_common+0x174/0x340 [ 939.112548][ C0] free_pages_bulk+0x48/0x120 [ 939.117242][ C0] vfree+0x231/0x490 [ 939.121161][ C0] translate_table+0x1747/0x2010 [ 939.126138][ C0] ? __pfx_translate_table+0x10/0x10 [ 939.131455][ C0] ? _copy_from_user+0x94/0xb0 [ 939.136249][ C0] do_arpt_set_ctl+0x81a/0xb50 [ 939.141034][ C0] ? trace_contention_end+0x3d/0x140 [ 939.146350][ C0] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 939.151655][ C0] ? nf_setsockopt+0x221/0x290 [ 939.156441][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 939.162116][ C0] nf_setsockopt+0x26f/0x290 [ 939.166725][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 939.172632][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 939.177676][ C0] __x64_sys_setsockopt+0x13d/0x1b0 [ 939.182921][ C0] do_syscall_64+0x166/0x520 [ 939.187527][ C0] ? trace_irq_disable+0x3b/0x140 [ 939.192558][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.198635][ C0] ? clear_bhb_loop+0x70/0xc0 [ 939.203329][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.209229][ C0] RIP: 0033:0x7fe1fc39e159 [ 939.213653][ C0] RSP: 002b:00007fe1fd23f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 939.222074][ C0] RAX: ffffffffffffffda RBX: 00007fe1fc626090 RCX: 00007fe1fc39e159 [ 939.230053][ C0] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 939.238052][ C0] RBP: 00007fe1fc43506b R08: 0000000000000a50 R09: 0000000000000000 [ 939.246032][ C0] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 939.254006][ C0] R13: 00007fe1fc626128 R14: 00007fe1fc626090 R15: 00007ffdf041c1d8 [ 939.262006][ C0] [ 939.265029][ C0] rcu: rcu_preempt kthread starved for 1882 jiffies! g169785 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 939.276052][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 939.286021][ C0] rcu: RCU grace-period kthread stack dump: [ 939.291911][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 939.305441][ C0] Call Trace: [ 939.308724][ C0] [ 939.311669][ C0] __schedule+0x17db/0x58f0 [ 939.316191][ C0] ? __lock_acquire+0x747/0x2de0 [ 939.321153][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 939.326380][ C0] ? __pfx___schedule+0x10/0x10 [ 939.331241][ C0] ? lock_acquire+0x115/0x350 [ 939.336059][ C0] ? schedule+0x90/0x2b0 [ 939.340333][ C0] schedule+0x164/0x2b0 [ 939.344515][ C0] schedule_timeout+0x152/0x2c0 [ 939.349381][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 939.354771][ C0] ? __pfx_process_timeout+0x10/0x10 [ 939.360105][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 939.365931][ C0] ? prepare_to_swait_event+0x322/0x350 [ 939.371501][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 939.376380][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 939.382543][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 939.387834][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 939.393050][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 939.398872][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 939.403477][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 939.408773][ C0] ? __kthread_parkme+0x71/0x1f0 [ 939.413727][ C0] ? __kthread_parkme+0x199/0x1f0 [ 939.418770][ C0] kthread+0x38b/0x480 [ 939.422851][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 939.428054][ C0] ? __pfx_kthread+0x10/0x10 [ 939.432659][ C0] ret_from_fork+0x514/0xb70 [ 939.437266][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 939.442392][ C0] ? __switch_to+0xc89/0x1420 [ 939.447088][ C0] ? __pfx_kthread+0x10/0x10 [ 939.451690][ C0] ret_from_fork_asm+0x1a/0x30 [ 939.456488][ C0] [ 939.459508][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 939.465843][ C0] Sending NMI from CPU 0 to CPUs 1: [ 939.471116][ C1] NMI backtrace for cpu 1 [ 939.471135][ C1] CPU: 1 UID: 0 PID: 10073 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(full) [ 939.471183][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 939.471210][ C1] Workqueue: krds_cp_wq#13/1 rds_connect_worker [ 939.471263][ C1] RIP: 0010:unwind_next_frame+0xf8/0x2550 [ 939.471305][ C1] Code: 0d eb 0e 00 75 1f c6 05 cc 0d eb 0e 01 48 c7 c7 c0 c3 09 8c be 53 03 00 00 48 c7 c2 00 c4 09 8c e8 bd a0 2b 00 48 89 6c 24 38 <48> 89 5c 24 40 49 8d 5e 50 48 89 d8 48 c1 e8 03 48 89 44 24 28 42 [ 939.471321][ C1] RSP: 0018:ffffc90000a17ea0 EFLAGS: 00000202 [ 939.471337][ C1] RAX: 0000000000000001 RBX: ffffffff8a889256 RCX: 8000000000000102 [ 939.471352][ C1] RDX: 00000000e61b7dd1 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 939.471366][ C1] RBP: 1ffff92000142ff0 R08: ffffffff8177f1df R09: 0000000000000000 [ 939.471380][ C1] R10: ffffc90000a17f98 R11: ffffffff81b2a310 R12: dffffc0000000000 [ 939.471395][ C1] R13: ffffffff8177f1df R14: ffffc90000a17f48 R15: 1ffff92000142fe9 [ 939.471410][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 939.471426][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.471440][ C1] CR2: 00007f31a47b7a10 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 939.471457][ C1] Call Trace: [ 939.471464][ C1] [ 939.471476][ C1] ? __local_bh_enable_ip+0x100/0x140 [ 939.471500][ C1] ? unwind_next_frame+0x8f/0x2550 [ 939.471521][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 939.471548][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 939.471567][ C1] arch_stack_walk+0x11b/0x150 [ 939.471590][ C1] ? __inet6_bind+0x386/0xf30 [ 939.471609][ C1] ? skb_clone+0x212/0x3a0 [ 939.471634][ C1] stack_trace_save+0xa9/0x100 [ 939.471651][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 939.471668][ C1] ? NF_HOOK+0xa2/0x6e0 [ 939.471685][ C1] ? NF_HOOK+0x64e/0x6e0 [ 939.471705][ C1] kasan_save_track+0x3e/0x80 [ 939.471725][ C1] ? kasan_save_track+0x3e/0x80 [ 939.471743][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 939.471763][ C1] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 939.471789][ C1] ? skb_clone+0x212/0x3a0 [ 939.471812][ C1] ? br_flood_finish+0xbd/0x140 [ 939.471837][ C1] ? br_flood+0x402/0x650 [ 939.471866][ C1] ? br_handle_frame_finish+0x11fc/0x1ae0 [ 939.471894][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 939.471911][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 939.471931][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 939.471950][ C1] ? br_handle_frame+0x1329/0x1600 [ 939.471967][ C1] ? __netif_receive_skb_core+0x989/0x30c0 [ 939.471987][ C1] ? process_backlog+0x727/0x18b0 [ 939.472007][ C1] ? __napi_poll+0xaa/0x330 [ 939.472024][ C1] ? net_rx_action+0x61d/0xf50 [ 939.472044][ C1] ? handle_softirqs+0x226/0x860 [ 939.472065][ C1] ? do_softirq+0x77/0xd0 [ 939.472086][ C1] ? __local_bh_enable_ip+0x100/0x140 [ 939.472107][ C1] ? __inet6_bind+0x386/0xf30 [ 939.472144][ C1] __kasan_slab_alloc+0x6c/0x80 [ 939.472165][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 939.472196][ C1] ? __pfx_br_multicast_count+0x10/0x10 [ 939.472223][ C1] ? skb_clone+0x212/0x3a0 [ 939.472246][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 939.472273][ C1] ? skb_clone+0x212/0x3a0 [ 939.472300][ C1] skb_clone+0x212/0x3a0 [ 939.472326][ C1] br_flood_finish+0xbd/0x140 [ 939.472353][ C1] br_flood+0x402/0x650 [ 939.472380][ C1] br_handle_frame_finish+0x11fc/0x1ae0 [ 939.472415][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 939.472444][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 939.472467][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 939.472488][ C1] ? nf_hook_slow+0x176/0x220 [ 939.472511][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 939.472539][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 939.472557][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 939.472580][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 939.472599][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 939.472628][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 939.472646][ C1] ? lock_acquire+0x115/0x350 [ 939.472668][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 939.472688][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 939.472719][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 939.472740][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 939.472760][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 939.472781][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 939.472801][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 939.472823][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 939.472840][ C1] br_handle_frame+0x1329/0x1600 [ 939.472870][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 939.472890][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 939.472917][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 939.472936][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 939.472964][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 939.472982][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 939.473012][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 939.473032][ C1] ? ip6_rcv_finish+0x265/0x280 [ 939.473058][ C1] ? NF_HOOK+0x336/0x3c0 [ 939.473092][ C1] ? process_backlog+0x3de/0x18b0 [ 939.473113][ C1] ? process_backlog+0x3de/0x18b0 [ 939.473136][ C1] process_backlog+0x727/0x18b0 [ 939.473159][ C1] ? process_backlog+0x3de/0x18b0 [ 939.473187][ C1] __napi_poll+0xaa/0x330 [ 939.473208][ C1] net_rx_action+0x61d/0xf50 [ 939.473235][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 939.473270][ C1] handle_softirqs+0x226/0x860 [ 939.473295][ C1] ? do_softirq+0x77/0xd0 [ 939.473318][ C1] ? __inet6_bind+0x386/0xf30 [ 939.473335][ C1] do_softirq+0x77/0xd0 [ 939.473356][ C1] [ 939.473363][ C1] [ 939.473370][ C1] __local_bh_enable_ip+0x100/0x140 [ 939.473393][ C1] __inet6_bind+0x386/0xf30 [ 939.473416][ C1] kernel_bind+0x13e/0x1c0 [ 939.473443][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 939.473476][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 939.473507][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 939.473540][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 939.473571][ C1] ? lock_acquire+0x115/0x350 [ 939.473594][ C1] rds_connect_worker+0x1d8/0x290 [ 939.473617][ C1] ? process_scheduled_works+0x97a/0x1630 [ 939.473640][ C1] process_scheduled_works+0xc3d/0x1630 [ 939.473678][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 939.473704][ C1] ? assign_work+0x3cf/0x5d0 [ 939.473729][ C1] worker_thread+0xa47/0xfb0 [ 939.473765][ C1] kthread+0x38b/0x480 [ 939.473782][ C1] ? __pfx_worker_thread+0x10/0x10 [ 939.473804][ C1] ? __pfx_kthread+0x10/0x10 [ 939.473821][ C1] ret_from_fork+0x514/0xb70 [ 939.473849][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 939.473881][ C1] ? __switch_to+0xc89/0x1420 [ 939.473905][ C1] ? __pfx_kthread+0x10/0x10 [ 939.473923][ C1] ret_from_fork_asm+0x1a/0x30 [ 939.473957][ C1] [ 942.530826][ C0] net_ratelimit: 17136 callbacks suppressed [ 942.530849][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0) [ 942.531181][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:d4:6a:72:24:6d, vlan:0)